SKF standard interface-based large-batch quantum filling key rapid access method

Abstract

The invention discloses an SKF standard interface-based large-batch quantum key charging rapid access method, which comprises the following steps of: firstly, in a security domain, charging a large batch of quantum keys into a security medium of a quantum encryption module by a quantum cryptography service platform; and secondly, the quantum cryptography service platform encrypts a quantum key ciphertext through a specified quantum charging key and distributes the quantum key ciphertext to a quantum encryption module, the quantum encryption module quickly accesses the specified quantum charging key in a security medium, decrypts the quantum key ciphertext to obtain a quantum key plaintext, and encrypts service data by using the quantum key for secure transmission. Compared with the prior art, various types of security media in the quantum encryption module are fully utilized to guarantee the security of the key, the SKF-based standard interface is adopted to enable the quantum encryption module to have higher availability, and a large-batch quantum filling key rapid access mechanism is adopted to enable key management to have higher performance. Therefore, high reliability, high security and high availability of the quantum key at the terminal side are guaranteed.

Description

Technical Field

[0001] The invention relates to the technical field of information security encryption, and in particular to a method for rapid access to large quantities of quantum injection keys based on an SKF standard interface. Background Art

[0002] With the development of quantum secure communication technology, the existing technology proposes to improve the firmware, driver and application interface of smart IC cards and smart password keys so that they can be used as secure media for quantum keys. However, there is a requirement for customized functions for secure media, which requires the customization of complex logical architecture. The key encryption transmission and storage mechanism during the injection process is cumbersome and has poor usability. In addition, the interfaces used to read and write key storage media are all customized interfaces with poor compatibility. At the same time, there is no quick access method for large quantities of injected keys.

[0003] In order to address the problem of large-scale quantum key filling of multiple secure media and meet the requirements of filling in a standard interface and high-performance access to large-scale quantum filled keys, the present invention provides a method for fast access to large-scale quantum filled keys. Summary of the invention

[0004] In view of the above defects in the prior art, the present invention proposes a method for rapid access to large quantities of quantum injection keys based on the SKF standard interface.

[0005] The technical solution of the present invention is achieved in this way: A method for rapid access to a large number of quantum injection keys based on an SKF standard interface comprises the following steps: 1) Quantum key injection: S11: The quantum encryption module carries the user ID and the charging quantity M to request the quantum cryptography service platform to charge the quantum key; S12: The quantum cryptography service platform generates quantum charging keys, each of which contains keyid and key, and is securely stored in the database; S13: The quantum cryptography service platform responds; S14: After receiving the response, the quantum encryption module verifies the key integrity data. After verification, it encrypts and stores a large number of quantum injection keys in batches in a secure medium; 2) Quantum Key Distribution: S21: The quantum encryption module carries the user ID and key quantity to request the quantum key; S22: The quantum cryptography service platform generates a quantum key, selects an unused quantum charging key of the user under the user ID from the database, and encrypts the quantum key into ciphertext; S23: After receiving the quantum key ciphertext, the quantum encryption module reads the key ciphertext file through SKF_ReadFile to obtain the charging key ciphertext; S24: Call the SKF_Decrypt interface to decrypt the charging key ciphertext, obtain the quantum charging key, complete the access to the quantum charging key, and then decrypt the quantum key ciphertext through the quantum charging key to obtain the quantum key.

[0006] Preferably, in step S12, the keyid length is 16 bytes, the user ID is 8 bytes, the timestamp is 4 bytes, and the key sequence number is 4 bytes, starting from 1 and ending with the charged quantity.

[0007] Preferably, in step S13, the quantum cryptography service platform replies with a response, and the response content includes user ID, injection quantity M, timestamp, injection key serial number range, key information and key integrity information.

[0008] Preferably, the secure medium is not limited to a SIM card, a TF card, or a USBKEY.

[0009] Preferably, in step S14, the quantum charging key is stored in a secure medium by: splitting a large batch of quantum charging keys into N batches, calling SKF_Encrypt to encrypt the values ​​of the N quantum charging keys, calling the SKF_CreatFile interface to create a file, specifying the file name, and calling the SKF_WriteFile interface to write the ciphertext of the quantum charging key.

[0010] Preferably, in step S22, while encrypting the quantum key, keyid and key reply response are given to the quantum encryption module, where keyid=user ID||timestamp||key serial number.

[0011] Compared with the prior art, the present invention has the following beneficial effects: The present invention proposes a method for rapid access to large quantities of quantum-charged keys based on the SKF standard interface. The present invention fully utilizes various types of secure media in a quantum encryption module to ensure the security of the key, adopts a standard interface based on SKF to make the quantum encryption module more available, and adopts a rapid access mechanism for large quantities of quantum-charged keys to make key management have higher performance, thereby ensuring the high reliability, high security and high availability of quantum keys on the terminal side. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 This is a structural diagram of the quantum injection key rapid access based on the SKF standard interface of the present invention; Figure 2 This is a flow chart of quantum key injection based on the standard SKF standard interface of the present invention; Figure 3 This is a flow chart of quantum key distribution based on the standard SKF standard interface of the present invention. DETAILED DESCRIPTION

[0013] The present invention will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present invention.

[0014] like Figure 1 As shown, a method for rapid access to a large number of quantum charging keys based on the SKF standard interface includes a quantum cryptography service platform, a quantum encryption module, and a secure medium, wherein the secure medium is not limited to SIM cards, TF cards, USBKEY, etc. First, in the security domain, the quantum cryptography service platform charges a large number of quantum keys into the secure medium of the quantum encryption module. Secondly, the quantum cryptography service platform encrypts the quantum key ciphertext with the specified quantum charging key and distributes it to the quantum encryption module. The quantum encryption module quickly accesses the specified quantum charging key in the secure medium, decrypts the quantum key ciphertext to obtain the quantum key plaintext, and then uses the quantum key to encrypt the business data for secure transmission.

[0015] Based on the above structure, a method for rapid access to a large number of quantum charging keys based on the SKF standard interface of the present invention specifically comprises the following steps: Step 1: Quantum key injection, such as Figure 2 As shown: S11, the quantum encryption module requests the quantum cryptography service platform to perform quantum key charging, carrying the user ID and charging quantity M; S12. The quantum cryptography service platform generates quantum charging keys. Each key contains keyid and key, and is securely stored in the database. The keyid length is 16 bytes, the user ID is 8 bytes, the timestamp is 4 bytes, and the key sequence number is 4 bytes, starting from 1 and ending with the charging quantity; S13, the quantum cryptography service platform replies with a response, including the user ID, the number of charges M, the timestamp, the range of the key sequence number, and the key information and key integrity information. The purpose of charging M keys can be achieved through multiple requests; S14. After receiving the response, the quantum encryption module verifies the key integrity data. After verification, the large batch of quantum keys are encrypted and stored in a secure medium. First, the received large batch of quantum keys are split into N batches, SKF_Encrypt is called to encrypt the values ​​of N keys, and the SKF_CreatFile interface is called to create a file. The file name uses the user ID||timestamp||starting sequence number, and the starting sequence number of the nth file = (n-1)*N+1. Then the SKF_WriteFile interface is called to write the ciphertext of the key.

[0016] Step 2: Quantum Key Distribution Secondly, the quantum cryptography service platform encrypts the quantum key ciphertext with the specified quantum charging key and distributes it to the quantum encryption module. The quantum encryption module quickly accesses the specified quantum charging key in the secure medium, decrypts the quantum key ciphertext to obtain the quantum key plaintext, and then uses the quantum key to encrypt the business data for secure transmission. The specific process is as follows: Figure 3 As shown: S21: The quantum encryption module requests a quantum key, carrying the user ID and key quantity; S22: The quantum cryptography service platform generates a quantum key, selects an unused quantum charging key of the user under the user ID from the database, encrypts the quantum key into ciphertext, and sends the keyid and key reply response to the quantum encryption module, where keyid = user ID || timestamp || key serial number; S23: After receiving the quantum key ciphertext, the quantum encryption module takes out the keyid, matches the corresponding file for charging the key ciphertext according to the keyid, obtains the user ID, timestamp and key serial number P from the keyid, first divides the key serial number P by N to obtain the quotient C, and obtains the starting serial number in the file name as N*C+1, further obtains the file name according to the user ID||timestamp||starting serial number, reads the key ciphertext file through SKF_ReadFile, and obtains the charging key ciphertext; S24: Call the SKF_Decrypt interface to decrypt the charging key ciphertext, obtain N charging key plaintexts, offset C keys from the N charging key plaintexts to obtain the quantum charging key corresponding to the keyid, and then decrypt the quantum key ciphertext with the charging key to obtain the quantum key. The quantum key can be used to encrypt business data to ensure the secure transmission of business data. S25: In the quantum encryption module, a large number of injection keys are first split into N keys each, and the N keys are encrypted and stored in a secure medium. At the same time, the keys are spliced ​​and stored in sequence. When accessing, the corresponding storage file is first found according to the keyid, and then the injection key at the specified position is offset according to the serial number value to complete the fast access of the injection key.

[0017] It can be seen from the specific process of the present invention that the method for rapid access to large quantities of quantum filling keys based on the SKF standard interface of the present invention first completes the definition of keyid by splicing the keyid according to the user ID, timestamp, and key serial number, so that the quantum encryption module can be split according to the keyid content according to the rules. In the quantum encryption module, the large quantities of filling keys are first split into each N keys, and the N keys are encrypted and stored in a secure medium, and the keys are spliced ​​and stored in sequence. When accessing, the corresponding storage file is first found according to the keyid, and then the filling key is offset to the specified position according to the serial number value, ensuring the rapid access to the filling key; the present invention is suitable for scenarios of quantum key applications, such as quantum encryption mobile applications, quantum encryption terminals, quantum encryption gateways, quantum encryption application equipment, etc. These scenarios involve the secure distribution of quantum keys and the secure and rapid access of quantum keys in secure media to ensure the confidentiality and high availability of data; the present invention can effectively solve the security of key distribution and the efficiency of terminal-side access to quantum keys, meet the high availability of quantum encryption applications, and ensure the confidentiality of data.

Claims

1. A method for rapid access to large quantities of quantum injection keys based on the SKF standard interface, characterized in that: The steps include: 1) Quantum key injection: S11: The quantum encryption module carries the user ID and the charging quantity M to request the quantum cryptography service platform to charge the quantum key; S12: The quantum cryptography service platform generates quantum charging keys, each of which contains keyid and key, and is securely stored in the database; S13: The quantum cryptography service platform responds; S14: After receiving the response, the quantum encryption module verifies the key integrity data. After verification, it encrypts and stores a large number of quantum injection keys in batches in a secure medium; 2) Quantum Key Distribution: S21: The quantum encryption module carries the user ID and key quantity to request the quantum key; S22: The quantum cryptography service platform generates a quantum key, selects an unused quantum charging key of the user under the user ID from the database, and encrypts the quantum key into ciphertext; S23: After receiving the quantum key ciphertext, the quantum encryption module reads the key ciphertext file through SKF_ReadFile to obtain the charging key ciphertext; S24: Call the SKF_Decrypt interface to decrypt the charging key ciphertext, obtain the quantum charging key, complete the access to the quantum charging key, and then decrypt the quantum key ciphertext through the quantum charging key to obtain the quantum key.

2. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S12, the keyid length is 16 bytes, the user ID is 8 bytes, the timestamp is 4 bytes, and the key serial number is 4 bytes, starting from 1 and ending with the charged quantity.

3. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S13, the quantum cryptography service platform replies with a response, the response content including user ID, charging quantity M, timestamp, charging key serial number range, key information and key integrity information.

4. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: The secure medium is not limited to a SIM card, a TF card, or a USBKEY.

5. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S14, the quantum charging key is stored in a secure medium by splitting a large batch of quantum charging keys into N batches, calling SKF_Encrypt to encrypt the values ​​of the N quantum charging keys, calling the SKF_CreatFile interface to create a file, specifying the file name, and calling the SKF_WriteFile interface to write the ciphertext of the quantum charging key.

6. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S22, while encrypting the quantum key, the keyid and key reply response are given to the quantum encryption module, where keyid=user ID||timestamp||key serial number.

Images