Universal device-based global quantum security privacy device and initialization method

Abstract

The invention discloses a universal device-based global quantum security privacy device and an initialization method, the global quantum security privacy device comprises a communication area, an isolation area and a privacy area, the communication area is used for communicating with the outside and obtaining data, the isolation area is used for filtering the data and then transmitting the data, and the privacy area is used for receiving the data; the privacy area comprises an input unit, a main control chip, an encryption and decryption unit, a secret key storage unit, an authentication unit and an output unit, all the modules act together to execute encryption, decryption and authentication operation on data, and the safety of the data in the transmission process is ensured. The global quantum security privacy device is connected with the universal device and is used for storing the key and providing key support for data transmission of the universal device, and the data security involved in the universal device is improved to the quantum security level.

Description

Technical Field

[0001] The present application relates to the field of quantum security technology, and in particular to a global quantum security privacy device and initialization method based on a universal device. Background Art

[0002] The global quantum security environment is a network communication security environment with a C / S architecture, which is generally composed of two parts: the quantum key center and the quantum device terminal. Among them, the quantum key center is the provider of quantum key services, and the quantum device terminal is the demander and user of quantum keys.

[0003] In order to defend against attacks on data packets launched by unscrupulous users on the Internet, existing general-purpose equipment terminals often use traditional encryption algorithms. With the development of quantum computers, traditional encryption has been threatened unprecedentedly. Relying on its super computing power, quantum computers can solve mathematical problems that traditional computers take decades or even hundreds of years to solve in a very short time, thereby easily cracking traditional encryption algorithms such as RSA, ECC, AES, and DES. Therefore, in order to improve the security of terminal equipment, it is necessary to upgrade the terminal equipment from general-purpose equipment terminals using traditional encryption algorithms to quantum equipment terminals that support quantum cryptography.

[0004] If the general-purpose device terminal is directly replaced with a quantum device terminal, the existing general-purpose device terminal needs to be modified, which is too costly. Therefore, how can we ensure that the general-purpose device terminal can use the quantum key center without changing the existing general-purpose device terminal so that the general-purpose device terminal can reach the security level of quantum security. Summary of the invention

[0005] Purpose of the invention: This application proposes a global quantum security privacy device and initialization method based on a universal device. The global quantum security privacy device of the present invention is connected to the universal device. The device of the present invention is used to process business data that needs to be encrypted in the universal device, ensuring that the business running in the universal device terminal can reach the quantum security level with the assistance of the global quantum security privacy device of the present invention.

[0006] Technical solution: The present invention provides a global quantum security privacy device based on a general device, including a communication area, an isolation area and a privacy area; the isolation area is respectively connected to the communication area and the privacy area;

[0007] The communication area is used to communicate with the outside world and obtain data;

[0008] The isolation area is used to filter data before transmission;

[0009] The privacy zone is used to perform encryption, decryption and authentication operations on data.

[0010] As an improvement of the present invention, the communication area includes a data acquisition unit and a communication protocol unit, and the data acquisition unit is communicatively connected with the communication protocol unit; wherein:

[0011] The communication protocol unit is used to provide a communication protocol for the global quantum security privacy device to establish a communication link with the general device;

[0012] The data acquisition unit is used to acquire data packets to be processed from a universal device through a communication link.

[0013] As an improvement of the present invention, the isolation area includes a data transmission unit and a data filtering unit, the data transmission unit is communicatively connected to the data filtering unit; the data filtering unit is also communicatively connected to the data acquisition unit, and the data transmission unit is also communicatively connected to the communication protocol unit; wherein:

[0014] The data filtering unit is configured with a whitelist and / or a blacklist, which is used to filter the data packets sent by the general device sent by the data acquisition unit according to the whitelist and / or the blacklist to obtain the data content to be transmitted; it is also used to count the data received by the global quantum security privacy device and store the operation of filtering the data in the form of a log;

[0015] The data transmission unit is used to transmit data content filtered by the data filtering unit, receive a first instruction sent by a universal device forwarded by the communication protocol unit, and transmit data content from the privacy zone to the communication protocol unit.

[0016] As an improvement of the present invention, the privacy zone includes an input unit, a main control chip, an encryption and decryption unit, a key storage unit, an authentication unit, and an output unit; the main control chip is respectively connected to the input unit, the authentication unit, the encryption and decryption unit, and the key storage unit, the encryption and decryption unit is also connected to the key storage unit, the output unit is also connected to the data transmission unit and the encryption and decryption unit, and the input unit is also connected to the data transmission unit; wherein:

[0017] The input unit is used to receive data content from the data transmission unit, wherein the data content includes the service data to be processed and the instruction data in the first instruction;

[0018] The main control chip is used to receive the instruction data and business data forwarded by the input unit, and perform corresponding operations on the data content based on the received instruction data;

[0019] The encryption and decryption unit is used to perform encryption or decryption operations on the data content according to the first instruction forwarded by the main control chip;

[0020] The key storage unit is used to store the key, and provide the encryption key and the decryption key for the encryption and decryption unit according to the second instruction generated by the main control chip;

[0021] The authentication unit is used to store the identity of the global quantum security privacy device and to verify the integrity of the received data.

[0022] As an improvement of the present invention, a method for initializing a global quantum security privacy device is also provided, which is applied to the global quantum security privacy device described above. The participants of the initialization method include the global quantum security privacy device, a universal device, an identity issuance center and a quantum key center. The initialization method includes:

[0023] Step 1: When the global quantum security privacy device is started, an authentication application is initiated to the quantum key center through a universal device;

[0024] Step 2: The quantum key center responds to the authentication application in step 1, determines whether to allow the global quantum security privacy device to use the key service of the quantum key center, and feeds back the result to the general device;

[0025] Step 3: The universal device sends the result of the quantum key center authentication to the global quantum security privacy device, and the global quantum security privacy device applies to the quantum key center to download the key and obtain the key data;

[0026] Step 4: The quantum key center sends the key data to the general device, the general device forwards the key data to the global quantum security privacy device, and the global quantum security privacy device authenticates and stores the received key data.

[0027] As an improvement of the present invention, the specific process of step 1 is:

[0028] Step 1-1: The universal device establishes a communication link with the communication protocol unit in the communication area of ​​the global quantum security privacy device, and the global quantum security privacy device adds the product identity information b of the universal device to the whitelist of the data filtering unit in the isolation area based on the communication link;

[0029] Step 1-2: The general device obtains the product identity information a of the global quantum security privacy device through the communication link;

[0030] Step 1-3: Based on the product identity information a and b, the universal device obtains the corresponding identity certificates A and B representing the unique identity from the identity issuance center, where identity certificate A corresponds to the global quantum security privacy device, and identity certificate B corresponds to the universal device; at the same time, the identity issuance center synchronizes the issued identity certificates A and B to the quantum key center, so that the quantum key center can subsequently authenticate the legitimacy of the identities of the global quantum security privacy device and the universal device;

[0031] Step 1-4: The universal device receives identity certificate A and identity certificate B, and sends identity certificate B of the global quantum security privacy device to the global quantum security privacy device;

[0032] Step 1-5: The general device uses identity certificate A and identity certificate B to initiate an authentication request to the subkey center.

[0033] As an improvement of the present invention, the specific process of step 2 is:

[0034] The authentication application received by the quantum key center includes the identity certificate A of the universal device and the identity certificate B of the global quantum security privacy device. The quantum key center uses the identity certificates of the universal device and the global quantum security privacy device stored locally to authenticate the identity certificates A and B received in steps 1-5. When the identity authentication of both identity certificates A and B passes, the authentication of the quantum key center passes, and the global quantum security privacy device connected to the universal device is allowed to use the key service of the quantum key center; otherwise, as long as the identity authentication of any party fails, the authentication of the quantum key center fails, and the key service of the quantum key center is refused to be provided to the global quantum security privacy device.

[0035] As an improvement of the present invention, the specific process of step 3 is as follows:

[0036] Step 3-1: In the privacy area of ​​the global quantum security privacy device, the main control chip obtains the storage size information of the key storage unit and generates a key download application based on the storage size information;

[0037] Step 3-2: The main control chip sends the key download application in step 3-1 to the output unit via the encryption and decryption unit;

[0038] Step 3-3: The output unit forwards the key download application to the communication protocol unit via the data transmission unit in the isolation area, and then sends the key download application to the general device via the established communication link;

[0039] Step 3-4: Based on the key download application and its own identity information, the general device generates a key request application and sends it to the quantum key center. In response to the key request application, the quantum key center sends the key data to the general device to which the key request application belongs.

[0040] As an improvement of the present invention, the specific process of step 4 is as follows:

[0041] Step 4-1: The quantum key center sends the key data to the universal device, and the universal device frames the received key data to obtain framed data cont; the data format of the framed data cont includes a delimiter, a frame header, a payload, and a check code;

[0042] Step 4-2: The general device sends the framing data cont to the global quantum security privacy device. The global quantum security privacy device verifies the integrity of the payload of the framing data cont. After the verification is passed, it receives the payload content and stores the key data in the payload content.

[0043] As an improvement of the present invention, the specific process of step 4-2 is as follows:

[0044] The data acquisition unit in the communication area of ​​the global quantum security privacy device obtains the framing data cont from the communication link established by the communication protocol unit; after the data filtering unit in the isolation area filters, the data transmission unit sends the framing data cont to the input unit in the privacy area; the main control chip in the privacy area calls the authentication unit to parse the load information and check code information from the input unit, and verifies the integrity of the load of the framing data cont based on the check code. After the verification is passed, the load content is received; the main control chip instructs the key storage unit to receive and store the key data in the load content.

[0045] Beneficial effects:

[0046] 1. The global quantum security privacy device is an external hardware device that is connected to a general-purpose device. The key required for executing quantum cryptography is stored in the global quantum security privacy device, which in turn provides key support for the data transmission of the general-purpose device, thereby ensuring the security of data transmission. Without the need for hardware modification, the general-purpose device can improve the data security involved to the quantum security level by connecting to the global quantum security privacy device, effectively reducing the cost of use.

[0047] 2. Global quantum security privacy devices exist in various forms. They can be independent quantum security privacy cards or integrated into existing wearable devices such as bracelets. They are easy to carry and can meet most current application scenarios, greatly improving the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0049] Figure 1 This is a schematic diagram of the structure of the global quantum security privacy device for this application;

[0050] Figure 2 This is a schematic diagram of the connection between the global quantum security privacy device and the general device, identity issuance center, and quantum key center of this application;

[0051] Figure 3 This is a flowchart of the method for initializing the global quantum security privacy device of this application;

[0052] Figure 4 This is a schematic diagram of the data format of the framing data cont of this application. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0054] like Figure 1 As shown, the present invention provides a global quantum security privacy device that is directionally connected to universal devices, wherein the global quantum security privacy device includes a communication area, an isolation area, and a privacy area, wherein the isolation area is communicatively connected to the communication area and the privacy area respectively.

[0055] Specifically, the communication area is used to communicate with the outside world and acquire data. The communication area includes a data acquisition unit and a communication protocol unit, and the data acquisition unit is connected to the communication protocol unit. The communication protocol unit is configured with a variety of communication protocols, such as WiFi communication protocol, BT communication protocol, NFC communication protocol, and the global quantum security privacy device establishes a communication link with the general device through these communication protocols provided by the communication protocol unit. The data acquisition unit is used to obtain the data packet to be processed from the general device through the established communication link.

[0056] Specifically, the isolation zone is used to filter the data before transmission. The isolation zone includes a data transmission unit and a data filtering unit, and the data transmission unit is connected to the data filtering unit in communication; the data filtering unit is also connected to the data acquisition unit of the communication zone in communication, and the data transmission unit is also connected to the communication protocol unit of the communication zone in communication. The data filtering unit is configured with a whitelist and / or a blacklist, and the data packets sent by the general device sent by the data acquisition unit are filtered according to the whitelist and / or the blacklist to obtain the data content to be transmitted; wherein the content in the whitelist and / or the blacklist may be data format, data sensitive words and the like. The data filtering module can also be used to count the data received by the global quantum security privacy device, and store the operation of filtering the data in the form of a log for subsequent inspection. The data filtering module can also be used to audit the data, and through a large amount of diverse collection, screening, and analysis of the data, audit clues can be found, so that the data can be applied more efficiently and accurately in the future. The data transmission unit is a data transmission channel, which is used to transmit the data content that needs to be transmitted to the input unit after being filtered by the data filtering unit, receive the first instruction sent by the general device forwarded by the communication protocol unit, and transmit the data content of the output unit in the privacy zone to the communication protocol unit, more specifically, through the established communication link, to the general device. Specifically, the privacy zone is used to perform encryption and decryption and authentication operations on the data. The privacy zone includes an input unit, a main control chip, an encryption and decryption unit, a key storage unit, an authentication unit, and an output unit; the main control chip is respectively connected to the input unit, the authentication unit, the encryption and decryption unit, and the key storage unit, the encryption and decryption unit is also connected to the key storage unit, the output unit is also connected to the data transmission unit and the encryption and decryption unit, and the input unit is also connected to the data transmission unit. The input unit is used to receive data content from the data transmission unit, wherein the received data content includes business data to be processed, and instruction data in the first instruction, etc. The main control chip is a task execution unit of the global quantum security privacy device of the present invention, which receives instruction data and business data forwarded by the input unit, and based on the received instruction data, calls the corresponding execution unit to perform corresponding operations on the data content. The encryption and decryption unit is used to perform encryption or decryption operations on the data content according to the first instruction forwarded by the main control chip. Generally speaking, the decryption operation is performed on the data obtained from the input unit, and the encryption operation is performed on the data sent to the output unit. The key storage unit is used to store the key, and provide the encryption key and decryption key to the encryption and decryption unit according to the second instruction generated by the main control chip. Among them, the first instruction is an instruction to operate on the received data, and the second instruction is an instruction generated according to the first instruction.For example, the first instruction is an instruction to perform an encryption operation on data, and the second instruction is an instruction for the key storage unit to send an encryption key to the encryption and decryption unit. The authentication unit is used to store the identity of the global quantum security privacy device of the present invention, based on which the universal device and the quantum key center can recognize the legitimacy of the global quantum security privacy device in the entire network; and to perform integrity verification on the received data.

[0057] like Figure 2 As shown, the global quantum security privacy device of the present invention is connected to the identity issuance center and the quantum key center through a universal device to realize the business operation of the global quantum security privacy device of the present invention. Among them, the universal device can be various mobile phones, PCs, printers and other terminals currently on the market; the global quantum security privacy device of the present invention has various forms, which can be an independent quantum security privacy card (for example, similar to the U shield form), or it can be integrated into existing wearable devices (such as bracelets, watches, etc.), which can meet most current application scenarios.

[0058] like Figure 3 As shown, the method for initializing the global quantum security privacy device of the present invention is as follows:

[0059] Step 1: When the global quantum security privacy device is started, an authentication application is initiated to the quantum key center through a universal device.

[0060] Specifically:

[0061] Step 1-1: The universal device establishes a communication link with the communication protocol unit in the communication area of ​​the global quantum security privacy device. Based on the communication link, the global quantum security privacy device adds the product identity information of the universal device to the whitelist of the data filtering unit in the isolation area; the product identity information of the universal device can be a serial number that uniquely represents the product identity of the universal device, and the product identity information is recorded as b;

[0062] Step 1-2: The general device obtains the product identity information of the global quantum security privacy device through the communication link; the product identity information of the global quantum security privacy device can be a factory device code, or can be other serial numbers that can uniquely represent the product identity of the global quantum security privacy device, and the product identity information is recorded as a;

[0063] Step 1-3: Based on the product identity information a and its own product identity information b, the universal device obtains identity certificates A and B that can represent unique identities from the identity issuance center. Identity certificate A corresponds to the global quantum security privacy device, and identity certificate B corresponds to the universal device. At the same time, the identity issuance center synchronizes the issued identity certificates A and B to the quantum key center for the quantum key center to subsequently authenticate the legitimacy of the identities of the global quantum security privacy device and the universal device. The identity issuance center can be an independent third-party organization or a working unit deployed in the quantum key center.

[0064] The identity in this step can be, for example, the digital certificate mentioned in the patent "Digital Certificate Generation, Identity Authentication Method and Quantum CA Certification Center and System" with application number 2022101851462, and the identity issuance process is the issuance process of the digital certificate;

[0065] Step 1-4: The universal device receives identity certificate A and identity certificate B, and sends identity certificate B of the global quantum security privacy device to the global quantum security privacy device;

[0066] Step 1-5: The general device uses identity certificate A and identity certificate B to initiate an authentication request to the subkey center.

[0067] Step 2: The quantum key center responds to the authentication application in step 1, determines whether to allow the global quantum security privacy device to use the key service of the quantum key center, and feeds back the result to the general device.

[0068] Specifically, the authentication application received by the quantum key center includes the identity certificate A of the universal device and the identity certificate B of the global quantum security privacy device. The quantum key center uses the identity certificates of the universal device and the global quantum security privacy device stored locally to authenticate the identity certificates A and B received in steps 1-5. Only when the identity authentication of A and B passes, the quantum key center will pass the authentication and allow the global quantum security privacy device b connected to the universal device a to use the key service of the quantum key center; otherwise, as long as the identity authentication of any party fails, the quantum key center will fail the authentication and refuse to provide the key service of the quantum key center to the global quantum security privacy device b.

[0069] The identity authentication process in this step can adopt, for example, the identity authentication method mentioned in the patent "Digital Certificate Generation, Identity Authentication Method and Quantum CA Certification Center and System" with application number 2022101851462.

[0070] Step 3: The universal device sends the result of the quantum key center authentication to the global quantum security privacy device. The global quantum security privacy device applies to the quantum key center to download the key and obtains the key data.

[0071] Specifically:

[0072] Step 3-1: In the privacy area of ​​the global quantum security privacy device, the main control chip obtains the storage size information of the key storage unit, and generates a key download application based on the storage size information; in an embodiment of the present invention, in order to avoid the key size being too large to be stored by the key storage unit, it is necessary to obtain the storage size information of the key storage unit in advance as the maximum key threshold to reduce unnecessary repetitive work. For example, if the storage size information of the key storage unit is 1G, then the size of the key file applied for must be less than or equal to 1G, otherwise the key file will not be stored in the key storage unit.

[0073] Step 3-2: The main control chip sends the key download application in step 3-1 to the output unit via the encryption and decryption unit; since there is no key in the key storage unit at this time, this step only uses the data transmission channel of the encryption and decryption unit, and no encryption and decryption operation is performed;

[0074] Step 3-3: The output unit forwards the key download application to the communication protocol unit via the data transmission unit in the isolation area, and then sends the key download application to the general device via the established communication link;

[0075] Step 3-4: Based on the key download application and its own identity information, the universal device generates a key request application and sends it to the quantum key center. In the key request application, the identity information of the universal device is used as an index so that the quantum key center can respond to the key request application and send the key data to the universal device to which the key request application belongs.

[0076] Step 4: The quantum key center sends the key data to the general device, the general device forwards the key data to the global quantum security privacy device, and the global quantum security privacy device authenticates and stores the received key data.

[0077] Step 4-1: The quantum key center sends the key data to the universal device, and the universal device receives the key data according to Figure 4 The data format shown is framed to obtain framed data cont;

[0078] in:

[0079] Delimiter: The delimiter between two data frames, usually a specific value, such as 0xAABB;

[0080] Frame header: includes length, frame ID, ack (confirmation field), version number, where the identity information of the general device, that is, the sequence number b, is placed in the confirmation field ack to pass the whitelist verification of the data filtering unit;

[0081] Payload: data entity, including key data;

[0082] Check code: CRC or Hash value is generally used as a check code to verify data and ensure integrity.

[0083] Step 4-2: The general device sends the framing data cont to the global quantum security privacy device. The global quantum security privacy device verifies the integrity of the payload of the framing data cont. After the verification is passed, it receives the payload content and stores the key data in the payload content.

[0084] Specifically, the data acquisition unit in the communication area of ​​the global quantum security privacy device obtains the framing data cont from the communication link established by the communication protocol unit; after the data filtering unit in the isolation area filters the framing data cont, the data transmission unit sends the framing data cont to the input unit in the privacy area; the main control chip in the privacy area calls the authentication unit to parse the load information and check code information from the input unit, and verifies the integrity of the load of the framing data cont based on the check code.

[0085] More specifically, the present invention takes the use of a hash value as a verification code as an example to illustrate the specific process of step 4.

[0086] First, the verification code generation process in step 4-1 is as follows: the general device obtains a set of n-bit quantum random numbers from the local, where n can be 128 or 256, etc. The specific length of the quantum random number is determined according to the security requirements during actual use. The global quantum security privacy device generates an n-order irreducible polynomial P1(x) based on this set of random numbers, and records the string consisting of the coefficients of each term of the irreducible polynomial P1(x) except the highest term as str1. The general device negotiates the key with the global quantum security privacy device and obtains the shared keys r, t, and u respectively. The shared key here can be obtained from the quantum key center or from the local key pool of either party.

[0087] The universal device generates the first hash function h using the irreducible polynomial P1(x) and the shared key r p1,r and use the first hash function h p1,r Perform hash calculation on the key data key to obtain the first hash value h p1,r (key); then use the shared keys t and u to hash the first hash value h p1,r (key) and string str1 are encrypted to obtain the authentication file M:

[0088] M=(h p1,r (key)⊕t,str1⊕u).

[0089] The general device uses the authentication file M as a verification code and sends it together with the framing data cont to the global quantum security privacy device, so that the global quantum security privacy device can subsequently perform the authentication process based on the authentication file M.

[0090] Then, the specific process of verifying the integrity of the load of the framing data cont based on the check code in step 4-2 is as follows:

[0091] (1) Based on the received frame data cont, the authentication unit of the global quantum security privacy device parses the authentication file M as the verification code and the key data key′ in the payload.

[0092] (2) The encryption and decryption unit of the global quantum security privacy device uses the shared keys t and u to decrypt the authentication file M and obtain the decrypted hash value h p1,r ′(key), string str1′, and hash value h p1,r '(key) and the string str1' are sent to the authentication unit via the main control chip.

[0093] (3) The authentication unit of the global quantum security privacy device generates a hash function h based on the string str1′ and the shared key r. p1′,r ′, and use the hash function to perform hash calculation on the key data key′ obtained by parsing to obtain the hash value h p1′,r '(key'). The calculated hash value h p1′,r ′(key′) and the decrypted hash value h p1,r ′(key) is compared. If the two hash values ​​are consistent, the comparison is successful; if the hash values ​​are inconsistent, the comparison fails and the key data has been tampered with during transmission. Steps 3 and 4 are executed again to obtain new key data.

[0094] After the integrity verification of the payload is passed, the payload content is received; the main control chip instructs the key storage unit to receive and store the key data in the payload content.

[0095] At this point, steps 1 to 4 complete the initialization process of the global quantum security privacy device.

Claims

1. A global quantum security privacy device based on a general device, characterized in that: It includes a communication area, an isolation area and a privacy area; the isolation area is connected to the communication area and the privacy area for communication respectively; The communication area is used to communicate with the outside world and obtain data; The isolation area is used to filter data before transmission; The privacy zone is used to perform encryption, decryption and authentication operations on data.

2. The global quantum security privacy device based on a universal device according to claim 1, characterized in that: The communication area includes a data acquisition unit and a communication protocol unit, and the data acquisition unit is communicatively connected with the communication protocol unit; wherein: The communication protocol unit is used to provide a communication protocol for the global quantum security privacy device to establish a communication link with the general device; The data acquisition unit is used to acquire data packets to be processed from a universal device through a communication link.

3. The global quantum security privacy device based on a universal device according to claim 2, characterized in that: The isolation area includes a data transmission unit and a data filtering unit, wherein the data transmission unit is in communication connection with the data filtering unit; the data filtering unit is also in communication connection with the data acquisition unit, and the data transmission unit is also in communication connection with the communication protocol unit; wherein: The data filtering unit is configured with a whitelist and / or a blacklist, which is used to filter the data packets sent by the general device sent by the data acquisition unit according to the whitelist and / or the blacklist to obtain the data content to be transmitted; it is also used to count the data received by the global quantum security privacy device and store the operation of filtering the data in the form of a log; The data transmission unit is used to transmit data content filtered by the data filtering unit, receive a first instruction sent by a universal device forwarded by the communication protocol unit, and transmit data content from the privacy zone to the communication protocol unit.

4. The global quantum security privacy device based on a universal device according to claim 3, characterized in that: The privacy zone includes an input unit, a main control chip, an encryption and decryption unit, a key storage unit, an authentication unit, and an output unit; the main control chip is respectively connected to the input unit, the authentication unit, the encryption and decryption unit, and the key storage unit, the encryption and decryption unit is also connected to the key storage unit, the output unit is also connected to the data transmission unit and the encryption and decryption unit, and the input unit is also connected to the data transmission unit; wherein: The input unit is used to receive data content from the data transmission unit, wherein the data content includes the service data to be processed and the instruction data in the first instruction; The main control chip is used to receive the instruction data and business data forwarded by the input unit, and perform corresponding operations on the data content based on the received instruction data; The encryption and decryption unit is used to perform encryption or decryption operations on the data content according to the first instruction forwarded by the main control chip; The key storage unit is used to store the key, and provide the encryption key and the decryption key for the encryption and decryption unit according to the second instruction generated by the main control chip; The authentication unit is used to store the identity of the global quantum security privacy device and to verify the integrity of the received data.

5. A method for initializing a global quantum security privacy device, applied to the global quantum security privacy device according to any one of claims 1 to 4, wherein the participants of the initialization method include a global quantum security privacy device, a general device, an identity issuance center and a quantum key center, and characterized in that: The initialization method comprises: Step 1: When the global quantum security privacy device is started, an authentication application is initiated to the quantum key center through a universal device; Step 2: The quantum key center responds to the authentication application in step 1, determines whether to allow the global quantum security privacy device to use the key service of the quantum key center, and feeds back the result to the general device; Step 3: The universal device sends the result of the quantum key center authentication to the global quantum security privacy device, and the global quantum security privacy device applies to the quantum key center to download the key and obtain the key data; Step 4: The quantum key center sends the key data to the general device, and the general device forwards the key data to the global quantum security privacy device. The global quantum security privacy device authenticates and stores the received key data.

6. The method for initializing a global quantum security privacy device according to claim 5, characterized in that: The specific process of step 1 is as follows: Step 1-1: The universal device establishes a communication link with the communication protocol unit in the communication area of ​​the global quantum security privacy device, and the global quantum security privacy device adds the product identity information b of the universal device to the whitelist of the data filtering unit in the isolation area based on the communication link; Step 1-2: The general device obtains the product identity information a of the global quantum security privacy device through the communication link; Step 1-3: Based on the product identity information a and b, the universal device obtains the corresponding identity certificates A and B representing the unique identity from the identity issuance center, where identity certificate A corresponds to the global quantum security privacy device, and identity certificate B corresponds to the universal device; at the same time, the identity issuance center synchronizes the issued identity certificates A and B to the quantum key center, so that the quantum key center can subsequently authenticate the legitimacy of the identities of the global quantum security privacy device and the universal device; Step 1-4: The universal device receives identity certificate A and identity certificate B, and sends identity certificate B of the global quantum security privacy device to the global quantum security privacy device; Step 1-5: The general device uses identity certificate A and identity certificate B to initiate an authentication request to the subkey center.

7. The method for initializing a global quantum security privacy device according to claim 6, characterized in that: The specific process of step 2 is as follows: The authentication application received by the quantum key center includes the identity certificate A of the universal device and the identity certificate B of the global quantum security privacy device. The quantum key center uses the identity certificates of the universal device and the global quantum security privacy device stored locally to authenticate the identity certificates A and B received in steps 1-5. When the identity authentication of both identity certificates A and B passes, the authentication of the quantum key center passes, and the global quantum security privacy device connected to the universal device is allowed to use the key service of the quantum key center; otherwise, as long as the identity authentication of any party fails, the authentication of the quantum key center fails, and the key service of the quantum key center is refused to be provided to the global quantum security privacy device.

8. The method for initializing a global quantum security privacy device according to claim 6 or 7, characterized in that: The specific process of step 3 is as follows: Step 3-1: In the privacy area of ​​the global quantum security privacy device, the main control chip obtains the storage size information of the key storage unit and generates a key download application based on the storage size information; Step 3-2: The main control chip sends the key download application in step 3-1 to the output unit via the encryption and decryption unit; Step 3-3: The output unit forwards the key download application to the communication protocol unit via the data transmission unit in the isolation area, and then sends the key download application to the general device via the established communication link; Step 3-4: Based on the key download application and its own identity information, the general device generates a key request application and sends it to the quantum key center. In response to the key request application, the quantum key center sends the key data to the general device to which the key request application belongs.

9. The method for initializing a global quantum security privacy device according to claim 8, characterized in that: The specific process of step 4 is as follows: Step 4-1: The quantum key center sends the key data to the universal device, and the universal device frames the received key data to obtain framed data cont; the data format of the framed data cont includes a delimiter, a frame header, a payload, and a check code; Step 4-2: The general device sends the framing data cont to the global quantum security privacy device. The global quantum security privacy device verifies the integrity of the payload of the framing data cont. After the verification is passed, it receives the payload content and stores the key data in the payload content.

10. The method for initializing a global quantum security privacy device according to claim 9, characterized in that: The specific process of step 4-2 is as follows: The data acquisition unit in the communication area of ​​the global quantum security privacy device obtains the framed data cont from the communication link established by the communication protocol unit; after the data filtering unit in the isolation area filters the data, the data transmission unit sends the framed data cont to the input unit in the privacy area; the main control chip in the privacy area calls the authentication unit to parse the load information and check code information from the input unit, and performs load integrity verification on the framed data cont based on the check code. After the verification is passed, the load content is received; The main control chip instructs the key storage unit to receive and store the key data in the load content.

Images