Quantum encryption team address book acquisition method and device, equipment and medium

Abstract

The invention provides a quantum encryption team address book obtaining method and device, equipment and a medium. The quantum encryption team address book obtaining method comprises the steps that an identity authentication request and a team address book obtaining request are received; when it is detected that the authentication result is in an authentication success state, obtaining a team address book table based on the team address book obtaining request and a user mobile phone number in the user information, and encrypting a team address book to obtain a team address book ciphertext; and sending the team address book ciphertext to the terminal, so that the terminal applies for the first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book. According to the embodiment of the invention, after legal identity authentication, the corresponding organization address book ciphertext is obtained from the server to the original address book of the terminal, and the team address book is obtained through secure decryption at the terminal side, and the terminal side does not perform local cache, so that the security risk that data is stolen in the transmission process and the information reading process is avoided.

Description

Technical Field

[0001] The present application relates to the field of quantum encryption technology, and in particular to a method, device, equipment and medium for obtaining a quantum encryption team address book. Background Art

[0002] The online address book originates from the business demand for efficient and centralized management of team contact information and rapid initiation of communication.

[0003] In related technologies, the method of manually storing address books locally on mobile terminals cannot meet the needs of large enterprises with many organizational levels and widely distributed departments. At the same time, software-based online address book products require additional installation of applications, and caches are easily generated during data transmission and use. If the mobile terminal is implanted with a Trojan horse or suffers other network attacks, there is a risk of corporate address book information leakage. Summary of the Invention

[0004] In view of this, the present application aims to propose a method, device, equipment and medium for obtaining a quantum encryption team address book, which solves the problem of the risk of corporate address book information leakage during data transmission.

[0005] According to a first aspect of the present application, a method for obtaining a quantum encryption team address book is provided, which is applied to an address book server in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and a terminal. The method includes:

[0006] Receiving an identity authentication request and a team address book acquisition request sent by the terminal;

[0007] Performing authentication processing based on the identity authentication request to obtain an authentication result;

[0008] When it is detected that the authentication result is in the authentication success state, obtaining a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext;

[0009] The team address book ciphertext is sent to the terminal, so that the terminal applies for a first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

[0010] Optionally, obtaining a team address book table based on the team address book obtaining request and the user mobile phone number in the user information includes:

[0011] Query the user information table, organization table, department table, user information and organization relationship table, and user and department relationship table by user mobile phone number;

[0012] The user information table, the organization table, the department table, the user information and organization relationship table, and the user and department relationship table are integrated to obtain a team address book table.

[0013] Optionally, the terminal includes a security shield SDK, and encrypting the team address book to obtain a ciphertext of the team address book includes:

[0014] Apply for the first working key ciphertext from the quantum key service platform through the user's mobile phone number and the server-side protection key key ID, and call the security shield SDK encryption interface to encrypt the team address book information through the first working key ciphertext to obtain the team address book ciphertext.

[0015] Optionally, performing authentication processing based on the identity authentication request to obtain an authentication result includes:

[0016] Determining whether the user information is valid based on the identity authentication request;

[0017] If so, generate a random number and send the random number to the terminal, so that the terminal generates a target byte string based on the user information and the random number, and applies to the quantum key service platform for a second working key ciphertext, decrypts the second working key ciphertext using the protection key, and calls the Security Shield SDK encryption interface to encrypt the target byte string using the second working key ciphertext to obtain an encrypted byte string;

[0018] receiving the user information and the encrypted byte string;

[0019] Applying for the second working key ciphertext from the quantum key service platform based on the user information and the preset protection key Key ID;

[0020] decrypting the encrypted byte string based on the second working key ciphertext to obtain the target byte string;

[0021] generating an authentication byte string based on the user information and the random number;

[0022] An authentication result is obtained based on the authentication byte string and the target byte string.

[0023] Optionally, obtaining an authentication result based on the authentication byte string and the target byte string includes:

[0024] performing a comparison process on the authentication byte string and the target byte string;

[0025] If the authentication byte string is identical to the target byte string, the authentication result is in an authentication success state;

[0026] If the authentication byte string is different from the target byte string, the authentication result is in an authentication failure state.

[0027] According to a second aspect of the present application, a method for obtaining a quantum encryption team address book is provided, which is applied to a terminal in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and an address book server. The method includes:

[0028] Sending an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request and obtains an authentication result;

[0029] When it is detected that the authentication result is in the authentication success state, obtaining a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext;

[0030] Receiving the team address book ciphertext sent by the address book server;

[0031] Apply for a first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

[0032] According to a third aspect of the present application, a quantum encryption team address book acquisition device is provided, which is applied to an address book server in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and a terminal. The device includes:

[0033] A receiving module, configured to receive an identity authentication request and a team address book acquisition request sent by the terminal;

[0034] An authentication module is used to perform authentication processing based on the identity authentication request and obtain an authentication result;

[0035] An encryption module is used to obtain a team address book table based on the team address book acquisition request and the user mobile phone number in the user information when detecting that the authentication result is in an authentication success state, and encrypt the team address book to obtain a team address book ciphertext;

[0036] A decryption module is used to send the team address book ciphertext to the terminal, so that the terminal applies for a first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

[0037] According to a fourth aspect of the present application, a quantum encryption team address book acquisition device is provided, which is applied to a terminal in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and an address book server. The device includes:

[0038] An authentication module is used to send an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request and obtains an authentication result;

[0039] An encryption module is used to obtain a team address book table based on the team address book acquisition request and the user mobile phone number in the user information when detecting that the authentication result is in an authentication success state, and encrypt the team address book to obtain a team address book ciphertext;

[0040] A sending module, configured to receive the team address book ciphertext sent by the address book server;

[0041] A decryption module is used to apply for a first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

[0042] According to a fifth aspect of the present application, there is provided a communication device, comprising a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor;

[0043] The processor is used to read the program in the memory to implement the steps of the method for obtaining the quantum encryption team address book as described in any one of the first aspects, or the steps of the method for obtaining the quantum encryption team address book as described in the second aspect.

[0044] According to the sixth aspect of the present application, a storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for obtaining a quantum encryption team address book as described in any one of the first aspect or the steps of the method for obtaining a quantum encryption team address book as described in the second aspect are implemented.

[0045] The embodiment of the present application provides a quantum encryption team address book acquisition method, which is applied to the address book server in the quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and a terminal. The method includes: receiving an identity authentication request and a team address book acquisition request sent by the terminal; performing authentication processing based on the identity authentication request to obtain an authentication result; when it is detected that the authentication result is in the authentication success state, obtaining the team address book based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext; sending the team address book ciphertext to the terminal so that the terminal applies for a first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book. The quantum team address book in the embodiment of the present application is based on the native address book on the terminal side combined with quantum encryption technology and identity authentication technology, so that after passing the legal identity authentication, the corresponding organization address book ciphertext is obtained from the server to the terminal native address book and securely decrypted on the terminal side to obtain the team address book, and the terminal side does not perform local caching. This avoids the security risk of data being stolen during transmission and information reading.

[0046] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the preferred embodiment below. The accompanying drawings are for illustration purposes only and are not to be considered as limiting the present application. The same reference symbols are used throughout the drawings to represent the same components. In the drawings:

[0048] Figure 1 This is a flowchart of a method for obtaining a quantum encryption team address book provided in an embodiment of the present application;

[0049] Figure 2 This is a flowchart of another method for obtaining a quantum encryption team address book provided in an embodiment of the present application;

[0050] Figure 3 This is a device block diagram of a quantum encryption team address book acquisition device provided in an embodiment of the present application;

[0051] Figure 4 This is a device block diagram of another device for obtaining a quantum encryption team address book provided in an embodiment of the present application;

[0052] Figure 5 This is a schematic diagram of an electronic device provided in an embodiment of the present application;

[0053] Figure 6 This is a schematic diagram of obtaining a quantum encryption team address book provided in an embodiment of the present application;

[0054] Figure 7 This is another schematic diagram of obtaining a quantum encryption team address book provided in an embodiment of the present application;

[0055] Figure 8 This is a schematic diagram of a quantum encryption team address book acquisition system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0056] The following describes exemplary embodiments of the present application in more detail with reference to the accompanying drawings. Although exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0057] The terms "first," "second," and the like in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of this application can be implemented in an order other than that illustrated or described herein, and that the objects distinguished by "first," "second," and the like are generally of the same type, and do not limit the number of objects; for example, the first object can be one or more. In addition, the term "and / or" in the specification and claims refers to at least one of the connected objects, and the character " / " generally indicates that the objects connected are in an "or" relationship.

[0058] Below, in conjunction with the accompanying drawings, a method, device, equipment and medium for obtaining a quantum encryption team address book provided in an embodiment of the present application are described in detail through specific embodiments and their application scenarios.

[0059] It should be noted that, referring to Figure 8 , Figure 8 This is a schematic diagram of a quantum encryption team address book acquisition system provided in an embodiment of the present application. It can be seen that the quantum encryption team address book acquisition system in the embodiment of the present application includes a quantum key service platform, a terminal and an address book server. Among them, the terminal can be exemplarily a mobile phone terminal, and the mobile phone terminal includes a security shield SDK and a native address book. In addition, the terminal is equipped with a quantum SIM card, and the address book server includes a server security shield SDK, an identity authentication module and an address book management module.

[0060] Specifically, in the embodiment of the present application, first, the terminal address book module needs to be functionally modified to be suitable for displaying team address book information in the native address book, and at the same time, the quantum security service platform application SDK, namely the Security Shield SDK, is integrated to connect to the secret service platform to apply for keys and decrypt data in the address book ciphertext. Furthermore, there is a quantum key storage medium in the embodiment of the present application, wherein the quantum key storage medium is a key injection platform that injects quantum keys into the SIM card, and the SIM card is integrated in the terminal.

[0061] Secondly, the quantum key service platform provides service support for the quantum security service platform application SDK communication and is also used for key management.

[0062] Finally, the address book server mainly includes the server security shield SDK, identity authentication module and address book management module, which provide user identity information authentication and team address book data management.

[0063] Therefore, the implementation of a method for obtaining a quantum encryption team address book in an embodiment of the present application is based on the above architecture.

[0064] Reference Figure 1 , Figure 1 This is a flow chart of a method for obtaining a quantum encryption team address book provided in an embodiment of the present application, which is applied to an address book server in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and a terminal. The method for obtaining a quantum encryption team address book includes the following steps:

[0065] Step 101: receiving an identity authentication request and a team address book acquisition request sent by the terminal;

[0066] It should be noted that the traditional encryption algorithms and communication protocols used in related technologies have certain limitations in the data distribution process and are easily affected by factors such as key management issues, eavesdropping and tampering threats. Therefore, the main technical problem to be solved by the embodiments of this application is the problem of secure transmission and data caching when the terminal obtains the online address book. The overall technical solution can include two parts, the first part is identity authentication, and the second part is the acquisition of the team address book.

[0067] Therefore, for details, please refer to Figure 6 ,First, the user clicks on the team address book entrance in the ,native address book of the mobile terminal, and sends a request to obtain ,the team address book, and at the same time calls the ,Security Shield SDK interface integrated in the mobile terminal to send an ,identity authentication request to the team address book service identity ,authentication module.

[0068] Step 102: Perform authentication processing based on the identity authentication request to obtain an authentication result;

[0069] Furthermore, performing authentication processing based on the identity authentication request to obtain an authentication result includes:

[0070] Determining whether the user information is valid based on the identity authentication request;

[0071] If so, generate a random number and send the random number to the terminal, so that the terminal generates a target byte string based on the user information and the random number, and applies to the quantum key service platform for a second working key ciphertext, decrypts the second working key ciphertext using the protection key, and calls the Security Shield SDK encryption interface to encrypt the target byte string using the second working key ciphertext to obtain an encrypted byte string;

[0072] receiving the user information and the encrypted byte string;

[0073] Applying for the second working key ciphertext from the quantum key service platform based on the user information and the preset protection key Key ID;

[0074] decrypting the encrypted byte string based on the second working key ciphertext to obtain the target byte string;

[0075] generating an authentication byte string based on the user information and the random number;

[0076] An authentication result is obtained based on the authentication byte string and the target byte string.

[0077] When the identity authentication module receives an authentication request, it checks whether the user's mobile phone number and user ID are valid. If not, it returns a corresponding error message. If valid, the server generates a challenge random number (a random number generated using a pseudo-random number generation method).

[0078] The identity authentication module sends the challenge random number to the mobile terminal.

[0079] The mobile terminal combines the user ID and the random number and uses a one-way hash function (such as the MD5 algorithm) to generate a byte string as a response.

[0080] The mobile terminal applies for the working key ciphertext from the quantum key service platform based on the user's mobile phone number and the protection key Key ID pre-set in the quantum key storage medium, decrypts the working key through the protection key, and calls the Security Shield SDK encryption interface to encrypt the byte string.

[0081] The mobile terminal carries the local user's mobile phone number and user ID and sends the encrypted byte string to the platform identity authentication module.

[0082] The identity authentication module applies for the same working key for decryption through the Security Shield server SDK vector subkey service platform based on the user's mobile phone number and the server protection key Key ID, and performs byte string data decryption operations.

[0083] Furthermore, obtaining an authentication result based on the authentication byte string and the target byte string includes:

[0084] performing a comparison process on the authentication byte string and the target byte string;

[0085] If the authentication byte string is identical to the target byte string, the authentication result is in an authentication success state;

[0086] If the authentication byte string is different from the target byte string, the authentication result is in an authentication failure state.

[0087] The identity authentication module uses the user's mobile phone number, user ID and random number to perform a one-way hash function to calculate a byte string. If the calculated byte string is the same as the decrypted byte string, the authentication is successful. Otherwise, an authentication failure message is returned.

[0088] Step 103: When it is detected that the authentication result is in the authentication success state, a team address book table is obtained based on the team address book acquisition request and the user mobile phone number in the user information, and the team address book is encrypted to obtain a team address book ciphertext;

[0089] It should be noted that after the authentication is successful, the team address book information will be obtained and displayed.

[0090] Specifically, refer to Figure 7 The address book server applies for a working key from the subkey service platform through the user's mobile phone number in the user information and the server's protection key ID, and calls the server's security shield SDK encryption interface to encrypt the team address book information.

[0091] Furthermore, the obtaining of the team address book table based on the team address book obtaining request and the user mobile phone number in the user information includes:

[0092] Query the user information table, organization table, department table, user information and organization relationship table, and user and department relationship table by user mobile phone number;

[0093] The user information table, the organization table, the department table, the user information and organization relationship table, and the user and department relationship table are integrated to obtain a team address book table.

[0094] After the user identity authentication is successful, the address book server of the team address book management platform uses the user's mobile phone number to query the user information table, organization table, department table, user information and organization relationship table, and user and department relationship table, and integrates the information tables into a team address book table.

[0095] Furthermore, the terminal includes a security shield SDK, and the encrypting of the team address book to obtain the ciphertext of the team address book includes:

[0096] Apply for the first working key ciphertext from the quantum key service platform through the user's mobile phone number and the server-side protection key key ID, and call the security shield SDK encryption interface to encrypt the team address book information through the first working key ciphertext to obtain the team address book ciphertext.

[0097] Step 104: Send the team address book ciphertext to the terminal, so that the terminal applies for the first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

[0098] It should be noted that in the embodiment of the present application, the team address book management platform sends the team address book ciphertext to the mobile phone terminal, and the mobile phone terminal calls the Security Shield SDK to apply for the first working key ciphertext from the quantum key service platform through the user's mobile phone number and the protection key Key ID pre-set in the quantum key storage medium. After the mobile phone decrypts the working key, it calls the Security Shield SDK decryption interface to decrypt the team address book ciphertext to obtain the team address book.

[0099] In addition, in an embodiment of the present application, after step 104, the team address book ciphertext is decrypted to obtain the team address book. At this time, the mobile phone terminal calls the native address book interface to display the address book in plain text on the terminal, and no caching is performed on the terminal side, and the group address book is successfully obtained.

[0100] Therefore, the team address book system based on quantum key encryption in the embodiment of the present application has strong security, immunity to quantum computing attacks, integrity and credibility protection, and real-time encryption and decryption capabilities. At the same time, based on the "protection key-working key" key protection and distribution mechanism, it provides quantum key encryption capabilities and solutions; finally, it is deeply integrated with the use scenarios of the online team address book and integrated with the native address book to build a three-dimensional protection system.

[0101] The embodiment of the present application provides a quantum encryption team address book acquisition method, which is applied to the address book server in the quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and a terminal. The method includes: receiving an identity authentication request and a team address book acquisition request sent by the terminal; performing authentication processing based on the identity authentication request to obtain an authentication result; when it is detected that the authentication result is in the authentication success state, obtaining the team address book based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext; sending the team address book ciphertext to the terminal so that the terminal applies for a first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book. The quantum team address book in the embodiment of the present application is based on the native address book on the terminal side combined with quantum encryption technology and identity authentication technology, so that after passing the legal identity authentication, the corresponding organization address book ciphertext is obtained from the server to the terminal native address book and securely decrypted on the terminal side to obtain the team address book, and the terminal side does not perform local caching. This avoids the security risk of data being stolen during transmission and information reading.

[0102] Reference Figure 2 , Figure 2 A flowchart of another method for obtaining a quantum encryption team address book provided in an embodiment of the present application, the method for obtaining a quantum encryption team address book includes the following steps:

[0103] Step 201: Send an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request and obtains an authentication result;

[0104] Step 202: When it is detected that the authentication result is in the authentication success state, a team address book table is obtained based on the team address book acquisition request and the user mobile phone number in the user information, and the team address book is encrypted to obtain a team address book ciphertext;

[0105] Step 203: receiving the team address book ciphertext sent by the address book server;

[0106] Step 204: Apply for the first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

[0107] It should be noted that the above steps 201-204 are described with reference to the previous discussion and will not be repeated here.

[0108] The quantum team address book in this embodiment is based on the native address book on the terminal side, combined with quantum encryption technology and identity authentication technology. After legal identity authentication, the corresponding organization address book ciphertext is obtained from the server and stored in the terminal native address book. The terminal then securely decrypts the address book to obtain the team address book. The terminal does not cache the address locally. This avoids the security risk of data theft during transmission and information retrieval.

[0109] Reference Figure 3 The present application also relates to a quantum encryption team address book acquisition device, which is applied to an address book server in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and a terminal. The device includes:

[0110] Receiving module 301, used to receive the identity authentication request and team address book acquisition request sent by the terminal;

[0111] An authentication module 302 is configured to perform authentication processing based on the identity authentication request and obtain an authentication result;

[0112] The encryption module 303 is configured to obtain a team address book table based on the team address book acquisition request and the user mobile phone number in the user information when detecting that the authentication result is in the authentication success state, and encrypt the team address book to obtain a team address book ciphertext;

[0113] The decryption module 304 is used to send the team address book ciphertext to the terminal, so that the terminal applies for the first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

[0114] The quantum team address book in this embodiment is based on the native address book on the terminal side, combined with quantum encryption technology and identity authentication technology. After legal identity authentication, the corresponding organization address book ciphertext is obtained from the server and stored in the terminal native address book. The terminal then securely decrypts the address book to obtain the team address book. The terminal does not cache the address locally. This avoids the security risk of data theft during transmission and information retrieval.

[0115] Reference Figure 4 The present application also relates to another quantum encryption team address book acquisition device, which is applied to a terminal in a quantum encryption address book acquisition system. The quantum encryption address book acquisition system also includes a quantum key service platform and an address book server. The device includes:

[0116] Authentication module 401 is configured to send an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request and obtains an authentication result; if the authentication result is detected to be in an authentication success state, obtain a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypt the team address book to obtain a team address book ciphertext;

[0117] The sending module 402 is used to receive the team address book ciphertext sent by the address book server;

[0118] The decryption module 403 is used to apply for the first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

[0119] The quantum team address book in this embodiment is based on the native address book on the terminal side, combined with quantum encryption technology and identity authentication technology. After legal identity authentication, the corresponding organization address book ciphertext is obtained from the server and stored in the terminal native address book. The terminal then securely decrypts the address book to obtain the team address book. The terminal does not cache the address locally. This avoids the security risk of data theft during transmission and information retrieval.

[0120] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0121] According to a fifth aspect of the present application, there is provided a communication device, comprising a transceiver, a memory, a processor, and a program stored in the memory and executable on the processor;

[0122] The processor is used to read the program in the memory to implement the steps of the method for obtaining the quantum encryption team address book as described in any one of the first aspects, or the steps of the method for obtaining the quantum encryption team address book as described in the second aspect.

[0123] According to the sixth aspect of the present application, a storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for obtaining a quantum encryption team address book as described in any one of the first aspect or the steps of the method for obtaining a quantum encryption team address book as described in the second aspect are implemented.

[0124] The present application also provides an electronic device, such as Figure 5 As shown, it includes a processor 501, a communication interface 502, a memory 503 and a communication bus 504, wherein the processor 501, the communication interface 502, and the memory 503 communicate with each other through the communication bus 504.

[0125] Memory 503, used for storing computer programs;

[0126] The processor 501 is configured to execute the program stored in the memory 503, and implement the following steps:

[0127] Receiving an identity authentication request and a team address book acquisition request sent by the terminal;

[0128] Performing authentication processing based on the identity authentication request to obtain an authentication result;

[0129] When it is detected that the authentication result is in the authentication success state, obtaining a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext;

[0130] The team address book ciphertext is sent to the terminal, so that the terminal applies for a first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

[0131] or,

[0132] Sending an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request and obtains an authentication result;

[0133] When it is detected that the authentication result is in the authentication success state, obtaining a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext;

[0134] Receiving the team address book ciphertext sent by the address book server;

[0135] Apply for a first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

[0136] In another embodiment provided in the present application, a computer-readable storage medium is further provided, in which instructions are stored. When the computer-readable storage medium is run on a computer, the computer executes the software version upgrade method described in any one of the above embodiments.

[0137] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply the existence of any such actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or device comprising the element.

[0138] Each embodiment in this specification is described in a related manner. Similar parts between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the system embodiment is generally similar to the method embodiment, so the description is relatively simple. For related parts, refer to the description of the method embodiment.

[0139] The above description is only a preferred embodiment of the present application and is not intended to limit the scope of protection of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application are included in the scope of protection of the present application.

Claims

1. A method for obtaining a quantum encryption team address book, characterized in that: The address book server used in the quantum encryption address book acquisition system further includes a quantum key service platform and a terminal. The method includes: Receiving an identity authentication request and a team address book acquisition request sent by the terminal; Performing authentication processing based on the identity authentication request to obtain an authentication result; When it is detected that the authentication result is in the authentication success state, obtaining a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext; The team address book ciphertext is sent to the terminal, so that the terminal applies for the first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

2. The method according to claim 1, characterized in that The step of obtaining a team address book table based on the team address book obtaining request and the user mobile phone number in the user information includes: Query the user information table, organization table, department table, user information and organization relationship table, and user and department relationship table by using the user's mobile phone number; The user information table, the organization table, the department table, the user information and organization relationship table, and the user and department relationship table are integrated to obtain a team address book table.

3. The method according to claim 1, characterized in that The terminal includes a security shield SDK, and the encryption of the team address book to obtain the ciphertext of the team address book includes: Apply for the first working key ciphertext from the quantum key service platform through the user's mobile phone number and the server-side protection key key ID, and call the security shield SDK encryption interface to encrypt the team address book information through the first working key ciphertext to obtain the team address book ciphertext.

4. The method according to claim 1, characterized in that The authentication process is performed based on the identity authentication request to obtain the authentication result, which includes: Determining whether the user information is in a valid state based on the identity authentication request; If so, generate a random number and send the random number to the terminal, so that the terminal generates a target byte string based on the user information and the random number, and applies for a second working key ciphertext from the quantum key service platform, decrypts the second working key ciphertext by using the protection key, and calls the Security Shield SDK encryption interface to encrypt the target byte string by using the second working key ciphertext to obtain an encrypted byte string; receiving the user information and the encrypted byte string; Applying for the second working key ciphertext from the quantum key service platform based on the user information and the preset protection key KeyID; Decrypting the encrypted byte string based on the second working key ciphertext to obtain the target byte string; Generate an authentication byte string based on the user information and the random number; An authentication result is obtained based on the authentication byte string and the target byte string.

5. The method according to claim 4, characterized in that The obtaining of the authentication result based on the authentication byte string and the target byte string comprises: Comparing the authentication byte string with the target byte string; If the authentication byte string is the same as the target byte string, the authentication result is in an authentication success state; If the authentication byte string is different from the target byte string, the authentication result is in an authentication failure state.

6. A method for obtaining a quantum encryption team address book, characterized in that: A terminal used in a quantum encrypted address book acquisition system, wherein the quantum encrypted address book acquisition system further includes a quantum key service platform and an address book server, and the method includes: Sending an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request and obtains an authentication result; When it is detected that the authentication result is in the authentication success state, a team address book table is obtained based on the team address book acquisition request and the user mobile phone number in the user information, and the team address book is encrypted to obtain a team address book ciphertext; Receiving the team address book ciphertext sent by the address book server; Apply for the first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

7. A quantum encryption team address book acquisition device, characterized in that: The address book server used in the quantum encryption address book acquisition system further includes a quantum key service platform and a terminal. The device includes: A receiving module, used to receive an identity authentication request and a team address book acquisition request sent by the terminal; An authentication module, used to perform authentication processing based on the identity authentication request and obtain an authentication result; An encryption module, for obtaining a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypting the team address book to obtain a team address book ciphertext when detecting that the authentication result is in an authentication success state; A decryption module is used to send the team address book ciphertext to the terminal, so that the terminal applies for the first working key ciphertext from the quantum key service platform, decrypts the first working key ciphertext, decrypts the team address book ciphertext, and obtains the team address book.

8. A quantum encryption team address book acquisition device, characterized in that: A terminal used in a quantum encrypted address book acquisition system, wherein the quantum encrypted address book acquisition system further includes a quantum key service platform and an address book server, and the device includes: An authentication module is used to send an identity authentication request and a team address book acquisition request to the address book server, so that the address book server performs authentication processing based on the identity authentication request to obtain an authentication result; when it is detected that the authentication result is in an authentication success state, obtain a team address book table based on the team address book acquisition request and the user mobile phone number in the user information, and encrypt the team address book to obtain a team address book ciphertext; A sending module, used for receiving the team address book ciphertext sent by the address book server; A decryption module is used to apply for a first working key ciphertext from the quantum key service platform, decrypt the first working key ciphertext, decrypt the team address book ciphertext, and obtain the team address book.

9. A communication device, characterized in that: include: A transceiver, a memory, a processor, and a program stored on the memory and executable on the processor; The processor is used to read the program in the memory to implement the method for obtaining the quantum encryption team address book as described in any one of claims 1 to 5, or the method for obtaining the quantum encryption team address book as described in claim 6.

10. A readable storage medium for storing a program, characterized in that: When the program is executed by the processor, it implements the method for obtaining the quantum encryption team address book as described in any one of claims 1 to 5, or the method for obtaining the quantum encryption team address book as described in claim 6.

Images