A method for fast access to large quantities of quantum injection keys based on SKF standard interface

Abstract

This invention discloses a method for rapidly accessing large quantities of quantum-charged keys based on the SKF standard interface. First, within a secure domain, a quantum cryptography service platform charges large quantities of quantum keys into the secure medium of a quantum cryptography module. Second, the quantum cryptography service platform encrypts quantum key ciphertext using a specified quantum charging key and distributes it to the quantum cryptography module. The quantum cryptography module rapidly accesses the specified quantum charging key in the secure medium, decrypts the quantum key ciphertext to obtain the quantum key plaintext, and then uses the quantum key to encrypt service data for secure transmission. Compared to existing technologies, this invention fully utilizes various types of secure media in the quantum cryptography module to ensure key security, utilizes a standard SKF-based interface to increase the availability of the quantum cryptography module, and employs a rapid access mechanism for large quantities of quantum-charged keys to enhance key management performance, thereby ensuring high reliability, security, and availability of quantum keys on the terminal side.

Description

Technical Field

[0001] The present invention relates to the technical field of information security encryption, and in particular to a method for rapid access to large quantities of quantum injection keys based on an SKF standard interface. Background Art

[0002] With the development of quantum secure communication technology, existing technologies have proposed improvements to the firmware, drivers, and application interfaces of smart IC cards and smart cryptographic keys to enable their use as secure media for quantum keys. However, the security media requires customized functionality, requiring a complex logical architecture. The key encryption, transmission, and storage mechanisms during the charging process are cumbersome and difficult to use. Furthermore, the interfaces used to read and write key storage media are custom interfaces with poor compatibility, and there is no fast way to access large quantities of charged keys.

[0003] To address the problem of large-scale quantum key filling for multiple secure media and meet the requirements of filling with standard interfaces and high-performance access to large-scale quantum filled keys, the present invention provides a method for fast access to large-scale quantum filled keys. Summary of the Invention

[0004] In view of the above defects in the prior art, the present invention proposes a method for rapid access to large quantities of quantum injection keys based on the SKF standard interface.

[0005] The technical solution of the present invention is achieved as follows:

[0006] A method for rapidly accessing large quantities of quantum charging keys based on an SKF standard interface comprises the following steps:

[0007] 1) Quantum key injection:

[0008] S11: The quantum encryption module carries the user ID and the charging amount M to request the quantum cryptography service platform to perform quantum key charging;

[0009] S12: The quantum cryptography service platform generates quantum charging keys. Each key contains a keyid and a key, and is securely stored in the database.

[0010] S13: The quantum cryptography service platform responds;

[0011] S14: After receiving the response, the quantum encryption module verifies the key integrity data. After verification, the large number of quantum injection keys are encrypted and stored in a secure medium in batches;

[0012] 2) Quantum Key Distribution:

[0013] S21: The quantum encryption module carries the user ID and key quantity to request the quantum key;

[0014] S22: The quantum cryptography service platform generates a quantum key, selects an unused quantum charging key for the user under the user ID from the database, and encrypts the quantum key into ciphertext;

[0015] S23: After receiving the quantum key ciphertext, the quantum encryption module reads the key ciphertext file through SKF_ReadFile to obtain the charging key ciphertext;

[0016] S24: Call the SKF_Decrypt interface to decrypt the charging key ciphertext, obtain the quantum charging key, complete the access to the quantum charging key, and then decrypt the quantum key ciphertext using the quantum charging key to obtain the quantum key.

[0017] Preferably, in step S12, the keyid length is 16 bytes, the user ID is 8 bytes, the timestamp is 4 bytes, and the key sequence number is 4 bytes, starting from 1 and ending with the charged quantity.

[0018] Preferably, in step S13, the quantum cryptography service platform replies with a response, and the response content includes the user ID, the recharge quantity M, the timestamp, the recharge key serial number range, the key information, and the key integrity information.

[0019] Preferably, the secure medium is not limited to a SIM card, a TF card, or a USB KEY.

[0020] Preferably, in step S14, the quantum charging key is stored in a secure medium by splitting a large batch of quantum charging keys into N batches, calling SKF_Encrypt to encrypt the values ​​of the N quantum charging keys, calling the SKF_CreatFile interface to create a file, specifying the file name, and calling the SKF_WriteFile interface to write the ciphertext of the quantum charging key.

[0021] Preferably, in step S22, while encrypting the quantum key, the keyid and key reply response are given to the quantum encryption module, where keyid=user ID||timestamp||key serial number.

[0022] Compared with the prior art, the present invention has the following beneficial effects:

[0023] The present invention proposes a method for rapid access to large-scale quantum-charged keys based on the SKF standard interface. The present invention fully utilizes various types of secure media in the quantum encryption module to ensure key security, adopts the SKF-based standard interface to increase the availability of the quantum encryption module, and adopts a rapid access mechanism for large-scale quantum-charged keys to achieve higher performance in key management, thereby ensuring the high reliability, high security, and high availability of quantum keys on the terminal side. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 This is a structural diagram of the quantum charging key rapid access based on the SKF standard interface of the present invention;

[0025] Figure 2 This is a flow chart of the quantum key injection based on the standard SKF standard interface of the present invention;

[0026] Figure 3 This is a flow chart of the quantum key distribution based on the standard SKF standard interface of the present invention. DETAILED DESCRIPTION

[0027] The present invention will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present invention.

[0028] like Figure 1 As shown, a method for rapidly accessing large quantities of quantum-charged keys based on the SKF standard interface includes a quantum cryptography service platform, a quantum encryption module, and a secure medium. The secure medium is not limited to SIM cards, TF cards, or USB keys. First, within a secure domain, the quantum cryptography service platform charges large quantities of quantum keys into the secure medium of the quantum encryption module. Next, the quantum cryptography service platform encrypts quantum key ciphertext using a specified quantum charging key and distributes it to the quantum encryption module. The quantum encryption module rapidly accesses the specified quantum charging key in the secure medium, decrypts the quantum key ciphertext to obtain the quantum key plaintext, and then uses the quantum key to encrypt business data for secure transmission.

[0029] Based on the above structure, the present invention provides a method for rapid access to large quantities of quantum charging keys based on the SKF standard interface, and the specific process includes the following steps:

[0030] Step 1: Quantum key injection, such as Figure 2 As shown:

[0031] S11. The quantum encryption module requests the quantum cryptography service platform to perform quantum key charging, carrying the user ID and charging quantity M;

[0032] S12. The quantum cryptography service platform generates quantum charging keys. Each key contains a keyid and a key, and is securely stored in the database. The keyid is 16 bytes long, the user ID is 8 bytes long, the timestamp is 4 bytes long, and the key sequence number is 4 bytes long, starting from 1 and ending with the number of charges.

[0033] S13. The quantum cryptography service platform responds with a response, including the user ID, the number of keys to be charged (M), a timestamp, the range of the key serial numbers to be charged, and key information and key integrity information. Multiple requests can be made to achieve the goal of charging M keys.

[0034] S14. After receiving the response, the quantum encryption module verifies the key integrity data. Once verified, it encrypts the large batch of quantum keys in batches and stores them in secure media. First, the received large batch of quantum keys is split into N batches. The SKF_Encrypt function is called to encrypt the N key values. The SKF_CreateFile interface is called to create a file. The file name uses the user ID || timestamp || starting sequence number. The starting sequence number of the nth file is (n-1) * N + 1. The SKF_WriteFile interface is then called to write the ciphertext of the key.

[0035] Step 2: Quantum Key Distribution

[0036] Secondly, the quantum cryptography service platform encrypts the quantum key ciphertext with the specified quantum charging key and distributes it to the quantum encryption module. The quantum encryption module quickly accesses the specified quantum charging key in the secure medium, decrypts the quantum key ciphertext to obtain the quantum key plaintext, and then uses the quantum key to encrypt the business data for secure transmission. The specific process is as follows Figure 3 As shown:

[0037] S21: The quantum encryption module requests a quantum key, carrying the user ID and key quantity;

[0038] S22: The quantum cryptography service platform generates a quantum key, selects an unused quantum charging key for the user under the user ID from the database, encrypts the quantum key into ciphertext, and sends the keyid and key reply response to the quantum encryption module, where keyid = user ID || timestamp || key serial number;

[0039] S23: After receiving the quantum key ciphertext, the quantum encryption module takes out the keyid and matches the corresponding file with the key ciphertext according to the keyid. The user ID, timestamp and key serial number P are obtained from the keyid. The key serial number P is first divided by N to obtain the quotient C. The starting serial number in the file name is N*C+1. The file name is further obtained according to the user ID||timestamp||starting serial number. The key ciphertext file is read through SKF_ReadFile to obtain the key ciphertext.

[0040] S24: Call the SKF_Decrypt interface to decrypt the charging key ciphertext and obtain N charging key plaintexts. C keys are offset from the N charging key plaintexts to obtain the quantum charging key corresponding to the keyid. The quantum key ciphertext is then decrypted using the charging key to obtain the quantum key. The quantum key can be used to encrypt business data and ensure secure transmission of business data.

[0041] S25: The quantum encryption module first splits the large batch of key injections into N keys, encrypts each of these N keys, and stores them in a secure medium. The keys are then concatenated and stored in sequence. When accessing a key, the corresponding storage file is first found based on the keyID, and then the sequence number is used to offset the injection key to the specified location, enabling fast access to the injection key.

[0042] A comprehensive review of the present invention demonstrates that the method for rapidly accessing large quantities of quantum-charged keys based on the SKF standard interface first defines the keyID by concatenating the user ID, timestamp, and key sequence number. This allows the quantum encryption module to perform rule-based splitting based on the keyID content. The quantum encryption module then splits the large batch of charged keys into N individual keys, encrypts each of the N keys, and stores them in secure media. The keys are then concatenated and stored in sequential order. During access, the corresponding storage file is first located based on the keyID, and then the charged key is shifted to the specified location based on the sequence number value, ensuring rapid access to the charged key. The present invention is suitable for quantum key application scenarios, such as quantum encryption mobile applications, quantum encryption terminals, quantum encryption gateways, and quantum encryption application devices. These scenarios involve the secure distribution of quantum keys and the secure and rapid access of quantum keys on secure media to ensure data confidentiality and high availability. The present invention effectively addresses the security of key distribution and the efficiency of terminal-side access to quantum keys, meeting the high availability of quantum encryption applications and safeguarding data confidentiality.

Claims

1. A method for rapid access to large quantities of quantum charging keys based on the SKF standard interface, characterized in that: The steps include: 1) Quantum key injection: S11: The quantum encryption module carries the user ID and the charging amount M to request the quantum cryptography service platform to perform quantum key charging; S12: The quantum cryptography service platform generates quantum charging keys. Each key contains a keyid and a key, and is securely stored in the database. S13: The quantum cryptography service platform responds; S14: After receiving the response, the quantum encryption module verifies the key integrity data. After verification, the large number of quantum injection keys are encrypted and stored in a secure medium in batches; 2) Quantum Key Distribution: S21: The quantum encryption module carries the user ID and key quantity to request the quantum key; S22: The quantum cryptography service platform generates a quantum key, selects an unused quantum charging key for the user under the user ID from the database, and encrypts the quantum key into ciphertext; S23: After receiving the quantum key ciphertext, the quantum encryption module reads the key ciphertext file through SKF_ReadFile to obtain the charging key ciphertext; S24: Call the SKF_Decrypt interface to decrypt the charging key ciphertext, obtain the quantum charging key, complete the access to the quantum charging key, and then decrypt the quantum key ciphertext using the quantum charging key to obtain the quantum key.

2. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S12, the keyid length is 16 bytes, the user ID is 8 bytes, the timestamp is 4 bytes, and the key sequence number is 4 bytes, starting from 1 and ending with the charged quantity.

3. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S13, the quantum cryptography service platform replies with a response, the response content including the user ID, the recharge quantity M, the timestamp, the recharge key serial number range, the key information and the key integrity information.

4. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: The secure medium is not limited to a SIM card, a TF card, or a USB KEY.

5. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S14, the quantum charging key is stored in a secure medium as follows: a large batch of quantum charging keys is split into N batches, the values ​​of the N quantum charging keys are encrypted by calling SKF_Encrypt, the SKF_CreatFile interface is called to create a file with the file name specified, and the SKF_WriteFile interface is called to write the ciphertext of the quantum charging key.

6. The method for rapid access to large quantities of quantum injection keys based on the SKF standard interface according to claim 1, characterized in that: In step S22, while encrypting the quantum key, the keyid and key reply response are given to the quantum encryption module, where keyid = user ID || timestamp || key serial number.

Images