Data transmission method and device based on post quantum cryptography

Abstract

The invention provides a data transmission method and device based on post quantum cryptography. The method at a first device side comprises the following steps: obtaining an original service data packet packaged according to a preset transmission protocol; generating first signature information according to the original service data packet; performing anti-quantum signature calculation on the first signature information to obtain second signature information; packaging the second signature information in an extended header of the original service data packet to obtain a packaged target service data packet; and transmitting the packaged target service data packet to a second device according to the preset transmission protocol. According to the scheme of the invention, flexible support of various anti-quantum signature algorithms can be realized, and the method has good expansibility.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a data transmission method and device based on post-quantum cryptography. Background Art

[0002] In terms of data security transmission, key negotiation, identity authentication, encrypted transmission and other aspects all rely on various cryptographic algorithms. At present, the security of cryptographic algorithms, especially public key cryptographic algorithms, is based on solving difficult mathematical problems, such as the RSA algorithm based on the problem of large number decomposition, the elliptic curve cryptographic algorithm ECCDSA based on the discrete logarithm decomposition of elliptic curves, and the commercial cryptographic algorithm SM2. These cryptographic algorithms are almost impossible to crack with traditional computing power.

[0003] With the rapid development of quantum computing technology, the computing performance of quantum computers has been continuously refreshed in recent years. The ability and practicality of these quantum computers to perform specific tasks by manipulating quantum bits are becoming increasingly stronger. Quantum computing attacks are seriously impacting the security of modern cryptographic systems.

[0004] In the existing anti-quantum cryptography solutions, PQC (Post-Quantum Cryptography) signatures replace the original signatures: this method can resist quantum computing attacks, but the structure is tight and may require changes to the original security data structure. If the traditional security signature is changed to a PQC signature, the existing OpenSSL-based security function or the interface of the cryptographic card based on the existing standard cannot directly parse it, and all parts involving signatures and signature verification need to be modified.

[0005] PQC signatures can resist quantum computing attacks, but the coupling between PQC signatures and original business data is high, which affects the original business processing logic. Most of the existing technical solutions are technical transformations that meet a certain technical scenario or current needs, and are not flexible enough. Summary of the invention

[0006] The technical problem to be solved by the present invention is to provide a data transmission method and device based on post-quantum cryptography, which can achieve flexible support for multiple anti-quantum signature algorithms and have good scalability.

[0007] In order to solve the above technical problems, the technical solution of the present invention is as follows: A data transmission method based on post-quantum cryptography, applied to a first device, the method comprising: Obtaining the original business data packet encapsulated according to the preset transmission protocol; Generate first signature information according to the original service data packet; Performing quantum-resistant signature calculation on the first signature information to obtain second signature information; Encapsulating the second signature information in the extended header of the original service data packet to obtain an encapsulated target service data packet; The encapsulated target service data packet is transmitted to the second device according to the preset transmission protocol.

[0008] Optionally, generating first signature information according to the original service data packet includes: Obtain summary information of the original service data packet; A hash operation is performed on the summary information to obtain first signature information.

[0009] Optionally, performing quantum-resistant signature calculation on the first signature information to obtain second signature information includes: The first signature information is calculated by using a quantum-resistant signature to obtain second signature information.

[0010] Optionally, encapsulating the second signature information in an extended header of the original service data packet to obtain an encapsulated target service data packet includes: The second signature information is encapsulated in the destination option header of the extension header of the original service data packet to obtain an encapsulated target service data packet.

[0011] Optionally, encapsulating the second signature information in a destination option header of an extended header of the original service data packet to obtain an encapsulated target service data packet includes: The signature value in the second signature information is encapsulated in the first option of the destination option header of the extended header of the original service data packet in the encoding format of the tag length value to obtain the encapsulated target service data packet.

[0012] Optionally, encapsulating the second signature information in a destination option header of an extended header of the original service data packet to obtain an encapsulated target service data packet includes: Encapsulating the signature value in the second signature information in the first option of the destination option header of the extended header of the original service data packet; The signature algorithm for calculating the signature value is encapsulated in the second option of the destination option header, and the signature public key is encapsulated in the third option of the destination option header to obtain the encapsulated target service data packet.

[0013] An embodiment of the present invention further provides a data transmission method based on post-quantum cryptography, which is applied to a second device, and the method includes: receiving, according to a preset transmission protocol, an encapsulated target service data packet sent by a first device, wherein the target service data packet is an original service data packet encapsulated by the first device according to the preset transmission protocol to generate first signature information, performing quantum-resistant signature calculation on the first signature information to obtain second signature information; and encapsulating the second signature information in an extended header of the original service data packet; Parsing the target service data packet to obtain original service data and second signature information; Decrypting the second signature information to obtain a first hash value; performing a hash operation on the original service data packet to obtain a second hash value; Obtaining a signature verification result according to the first hash value and the second hash value; The target service data packet is processed according to the signature verification result.

[0014] An embodiment of the present invention further provides a first device, comprising: An acquisition module, used to acquire the original service data packet encapsulated according to a preset transmission protocol; A processing module, configured to generate first signature information according to the original service data packet; perform quantum-resistant signature calculation on the first signature information to obtain second signature information; and encapsulate the second signature information in an extended header of the original service data packet to obtain an encapsulated target service data packet; A transmission module is used to transmit the encapsulated target service data packet to the second device according to the preset transmission protocol.

[0015] An embodiment of the present invention further provides a second device, comprising: a transmission module, configured to receive, according to a preset transmission protocol, an encapsulated target service data packet sent by a first device, wherein the target service data packet is an original service data packet encapsulated by the first device according to the preset transmission protocol to generate first signature information; perform quantum-resistant signature calculation on the first signature information to obtain second signature information; and encapsulate the second signature information in an extended header of the original service data packet; A processing module is used to parse the target business data packet to obtain the original business data and the second signature information; decrypt the second signature information to obtain the first hash value; perform a hash operation on the original business data packet to obtain the second hash value; obtain a signature verification result based on the first hash value and the second hash value, and process the target business data packet.

[0016] An embodiment of the present invention further provides a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the method described above or the method described above.

[0017] The above solution of the present invention includes at least the following beneficial effects: The above solution of the present invention obtains the original business data packet encapsulated according to the preset transmission protocol; generates the first signature information according to the original business data packet; performs anti-quantum signature calculation on the first signature information to obtain the second signature information; the entire original business data packet is used as the input of the anti-quantum signature, and there is no need to care about the data format and composition structure of the original business data; the second signature information is encapsulated in the extended header of the original business data packet to obtain the encapsulated target business data packet; the anti-quantum signature related information is stored in the extended header of the data packet, and the storage location is not associated with the original business data; the encapsulated target business data packet is transmitted to the second device according to the preset transmission protocol, thereby realizing flexible support for multiple anti-quantum signature algorithms, and having good scalability. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 is a flow chart of a data transmission method based on post-quantum cryptography on the first device side of the present invention; Figure 2 It is a schematic diagram of the protocol format of the preset transmission protocol IPv6; Figure 3 This is a schematic diagram of how the PQC signature information is stored in the options; Figure 4 It is a schematic diagram of the relative positions of the original business data and PQC signature information in the IP protocol; Figure 5 It is a schematic diagram of the relationship between the original business data and the PQC signature information; Figure 6 It is a schematic diagram of the PQC signature verification process flow of the sender's first device and the receiver's second device; Figure 7 It is a schematic diagram of a system architecture according to an embodiment of the present invention. DETAILED DESCRIPTION

[0019] The exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art.

[0020] like Figure 1 As shown, an embodiment of the present invention provides a data transmission method based on post-quantum cryptography, which is applied to a first device, and the method includes: Step 11, obtaining the original service data packet encapsulated according to the preset transmission protocol; the preset transmission protocol may be the IPv6 protocol; Step 12, generating first signature information according to the original service data packet; Step 13, performing quantum-resistant signature calculation on the first signature information to obtain second signature information; Step 14, encapsulating the second signature information in the extended header of the original service data packet to obtain an encapsulated target service data packet; Step 15: Transmit the encapsulated target service data packet to the second device according to the preset transmission protocol.

[0021] The above solution of the present invention obtains the original business data packet encapsulated according to the preset transmission protocol; generates the first signature information according to the original business data packet; performs anti-quantum signature calculation on the first signature information to obtain the second signature information; the entire original business data packet is used as the input of the anti-quantum signature, and there is no need to care about the data format and composition structure of the original business data; the second signature information is encapsulated in the extended header of the original business data packet to obtain the encapsulated target business data packet; the anti-quantum signature related information is stored in the extended header of the data packet, and the storage location is not associated with the original business data; the encapsulated target business data packet is transmitted to the second device according to the preset transmission protocol, thereby realizing flexible support for multiple anti-quantum signature algorithms, and having good scalability.

[0022] In an optional embodiment of the present invention, in step 12, generating first signature information according to the original service data packet includes: Step 121, obtaining summary information of the original service data packet; Step 122: Perform a hash operation on the summary information to obtain first signature information.

[0023] In this embodiment, the original service data packet is recorded as M, the algorithm for performing hash calculation on M is recorded as H, and the data obtained after the original service data packet is calculated by the H algorithm is M', that is, M'=H(M), and M' is the first signature information.

[0024] In an optional embodiment of the present invention, in step 13, performing quantum-resistant signature calculation on the first signature information to obtain second signature information includes: Step 131: Perform signature calculation on the first signature information through a quantum-resistant signature to obtain second signature information.

[0025] In this embodiment, the algorithm of the quantum-resistant signature algorithm is denoted as ALG, the public-private key pair is denoted as PK and SK, and the signature value is denoted as SIG. Generate a quantum-resistant signature public-private key pair, GEN (ALG, PK, SK), where GEN is a function for generating a public-private key pair, PK and SK are public-private key pairs of specified lengths, and their lengths are related to the PQC algorithm type ALG; generate a PQC signature value, SIGN (ALG, M', SK, SIG), where SIGN is a signature function, ALG is a selected signature algorithm, SK is a signature private key, and SIG is a calculation result, i.e., a signature value, which is the second signature information; further, H, ALG, PK and SIG can also be used together as the second signature information.

[0026] In an optional embodiment of the present invention, in step 14, the second signature information is encapsulated in the extended header of the original service data packet to obtain the encapsulated target service data packet, including: Step 141, encapsulate the second signature information in the destination option header of the extended header of the original service data packet to obtain an encapsulated target service data packet.

[0027] The destination option header of the extended header of the IPv6 protocol is located in the protocol as follows Figure 2 As shown in the figure. The IPv6 protocol consists of a basic header and a payload. The payload consists of an extension header and a data portion. The extension header is optional. In an actual message, there may be no extension header, one extension header, or multiple extension headers, depending on the actual needs of the message.

[0028] This embodiment encapsulates the second signature information into the destination option header of the extension header, and stores the second signature information in the extension header, and together with the service data, constitutes a payload. Therefore, when the method of this solution is used for encrypted communication, the protocol includes at least one extension header, namely, the destination option extension header. The destination option extension header can include multiple options encoded in TLV mode, and can store multiple groups of information.

[0029] Step 141 may specifically include: encapsulating the signature value in the second signature information in the first option of the destination option header of the extended header of the original service data packet in the encoding format of the tag length value to obtain an encapsulated target service data packet.

[0030] In this embodiment, the second signature information is stored in the first option of the destination option header of the extended header, where the first option is any one of the multiple options of the destination option header. The second signature information can be encapsulated in the option of the destination option header of the extended header of the original service data packet based on the encoding format of the tag length value, i.e., the storage method of TLV (Tag-Length-Value) encoding, to obtain the encapsulated target service data packet; Among them, Tag: is used to identify the type or meaning of information, usually a fixed-length byte sequence. Its specific value and meaning are pre-defined by the application or protocol. In this embodiment, the types include: signature value, signature public key, signature algorithm, hash algorithm, etc.

[0031] Length: indicates the length of the Value part following the length field. It can be a fixed length or a variable length, depending on the protocol. In this embodiment, it is a fixed length of 8 bits.

[0032] Value: The actual data content. Its format and meaning are determined by the Tag. It can be a variety of data types, such as integers, strings, byte arrays, structures, etc.

[0033] In an optional embodiment of the present invention, in step 14, encapsulating the second signature information in the extended header of the original service data packet to obtain the encapsulated target service data packet may include: Step 142, encapsulate the signature value in the second signature information in the first option of the destination option header of the extension header of the original service data packet; specifically, it can also be encapsulated in the first option of the destination option header of the extension header of the original service data packet in the encoding format of the tag length value; Step 143, encapsulate the signature algorithm for calculating the signature value in the second option of the destination option header, and encapsulate the signature public key in the third option of the destination option header, to obtain the encapsulated target service data packet.

[0034] In this embodiment, the first option, the second option, the third option and the fourth option are any of the multiple options in the destination option header, and the second signature information may include: signature value, signature algorithm, signature public key. In addition, the algorithm for hashing the original business data can also be placed in the options of the destination option header (more information items can be expanded according to needs, and the identification and purpose of the expanded information items are defined by themselves, and no detailed description is given). For example, the hash algorithm can be encapsulated in the fourth option of the destination option header. In this embodiment, the storage style of the destination option header containing 4 PQC signature information items is Figure 3 shown.

[0035] The above options are composed of TLV encoding. Therefore, when storing PQC signature information in the extended header, it is not restricted by the order and number. You can choose to store different PQC signature information according to the actual usage scenario requirements and design. At least one information needs to be stored, that is, the PQC signature value information. This situation can minimize the problem of additional data increase caused by the PQC signature. At most, the PQC signature algorithm, PQC signature public key, PQC signature value and the algorithm for hashing the business data can be stored in the extended header.

[0036] Through the storage method of PQC signature information, it can be known that the solution of the present invention can flexibly support a variety of algorithms for hashing the original business data, including but not limited to SM3, SHA256, SHAKE256, and can support a variety of PQC signature algorithms, including but not limited to HSS, Dilithium2, Dilithium3, Dilithium5, SPHINCS+. Therefore, the solution of the present invention is flexible and easy to expand, and can dynamically support a variety of quantum resistance characteristics.

[0037] Therefore, from the perspective of the overall structure of data packets, the positions of the original service data and PQC signature data in the IP protocol are as follows: Figure 4 shown.

[0038] In the above embodiments of the present invention, Figure 5 As shown, the relationship between PQC signature data and original business data is as follows: The original business data formed after signing with the traditional algorithm may include: original business data M, hash value h of M, public key / public key certificate e, signature algorithm alg and digital signature c. Depending on the selected signature mode and the processing logic during application design, the data categories included will be different. The signature information generated by the PQC algorithm is saved in the IP extension header and does not change the composition of the original business data. It uses the entire original business data data as the data to be signed by the PQC signature algorithm without having to care about the composition of the original business data. PQC signature information may include: PQC digital signature c', PQC signature public key e', PQC signature algorithm and other information. If the two-way system agrees on the PQC signature algorithm and imports the PQC public keys of both parties, the PQC signature information in the extension header can only include the PQC digital signature c'.

[0039] like Figure 6 As shown, after adding the PQC signature, the data transmission process between the first sending device and the second receiving device includes: The original business data is recorded as M, the algorithm for hashing M is recorded as H, the data bit M' obtained by calculating the original business data through the H algorithm, the PQC algorithm is recorded as ALG, the public and private key pairs are recorded as PK and SK, and the signature value is recorded as SIG. The sender's PQC signature processing flow is as follows: Get the data to be signed with PQC signature, M'=H(M); Generate a PQC public-private key pair, GEN(ALG,PK,SK), where GEN is the function for generating a public-private key pair, PK and SK are public-private key pairs of specified lengths, and their lengths are related to the PQC algorithm type ALG; Generate a PQC signature value, SIGN(ALG,M',SK,SIG), where SIGN is the signature function, ALG is the selected signature algorithm, SK is the signature private key, and SIG is the calculation result, i.e., the signature value; H, ALG, PK and SIG are processed and added to the extended header as PQC signature information.

[0040] Add the original business data to the upper layer protocol and send it to the receiver.

[0041] The receiving side processes the following: Receive data, parse the protocol, and obtain the basic header, extended header (PQC signature data) and data part (original business data M); Further analyze the extension header and data part to obtain M, H, ALG, PK and SIG; Get the data to be signed with PQC signature, M'=H(M); Verify the PQC signature and call the verification function VERIFY(ALG, M', PK, SIG) to complete the verification; The original processing flow includes using traditional security technologies to process original business data, as well as performing logical operations and data processing at the application business layer.

[0042] Through the above steps, it can be known that the verification process of the PQC signature in the present invention and the process of verifying the original business data using traditional security technology do not affect each other, nor do they affect the original business layer processing logic. When processing PQC information, there is no need to understand the specific form and structure of the business data. The original business data can be plain text or data processed by any technical means, because the PQC signature uses the entire original business data as a parameter factor. The generation of the PQC signature and the verification of the PQC signature can be performed relatively independently through component calls and interceptors, and even the relevant processing operations of the PQC signature can be implemented in the front-end system or security gateway.

[0043] like Figure 7FIG. 1 is a data transmission process of a gateway system applied in the above embodiment of the present invention, including: When using traditional signature algorithms to protect business data between business systems, application A calls signature verification server A to sign the data to form the business data to be sent, which is sent to gateway B via gateway A. Gateway B receives the data and forwards it to application server B. Application B calls signature verification server B to verify the business data and complete the business operation.

[0044] After adding the PQC signature described in the above method of the present invention, the original application A, signature verification server A, application B and signature verification server B do not involve modification, and only gateway A and gateway B need to be modified to support PQC signature verification.

[0045] Provide a PQC signature verification SDK plug-in, encapsulate the PQC signature verification algorithm, the SDK plug-in connects to the PQC signature verification server (functions can be expanded on the traditional signature verification server to support PQC signature verification), and the SDK plug-in is deployed on both gateway A and gateway B. When the business data sent by application A is sent to gateway A, gateway A calls the SDK plug-in to add PQC signature information to the IP protocol extension header and sends it to gateway B. After receiving the data, gateway B calls the SDK plug-in to verify the PQC signature. If the PQC signature verification fails, the data is intercepted and an error message is returned. If the PQC signature verification passes, the original business data is sent to application server B. Application B calls signature verification server B to verify the business data and complete the business operation.

[0046] The above method of the present invention can resist the attack of quantum computing technology on the original signature technology by adding anti-quantum signature; the anti-quantum part and the original business data are relatively separated and have low coupling, and the addition of anti-quantum signature has no impact on the original business; it is flexible and conducive to expansion, and can dynamically support multiple hash algorithms and anti-quantum technologies.

[0047] In the above embodiment of the present invention, the PQC signature information items are stored in the extended header. Based on the storage method of TLV encoding, the reading of the PQC signature information items does not depend on the storage location of each information item, and can be stored at will, and can be automatically identified when reading. The number of stored signature data information items depends on the algorithm and policy requirements, and the total length depends on the IP protocol's maximum length limit for a single data packet.

[0048] The number of PQC signature information items that need to be stored can be flexibly determined according to different usage scenarios (for example, the same algorithm can only store PQC signature value information items according to the strategy, and other information items can be shared according to the agreement between the two parties or prior negotiation, or multiple or all PQC signature information items can be stored; in different algorithm scenarios, the HSS algorithm has additional auxiliary information compared to the Dilithium algorithm, and this solution can dynamically support the two algorithms well), thereby meeting various requirements for algorithm flexibility, high transmission efficiency, etc. in different scenarios.

[0049] The above-mentioned scheme of the present invention can identify the signature algorithm through the PQC signature information item, and can flexibly change the number of stored PQC signature information items according to needs, and the reading of the information items does not depend on the storage order. Therefore, compared with the traditional PQC signature scheme, the flexibility and extensibility of the PQC signature algorithm are stronger, and can meet the current and future expansion needs of the PQC signature algorithm.

[0050] The above method of the present invention solves the strong coupling between PQC signature and traditional security technology and original business data in the existing solution, and the PQC signature information and the original business data are separated, and the coupling is low. This solution enables the original system to complete the technical transformation of PQC signature with as little change as possible, and realizes a smooth transition between the original business system and the transformed system, so that it can resist the attack of quantum computing. The solution of the present invention better eliminates potential technical risks, reduces the technical cost of transformation and the later operation and maintenance cost, and is conducive to the promotion and application of PQC signature technology.

[0051] An embodiment of the present invention further provides a data transmission method based on post-quantum cryptography, which is applied to a second device, and the method includes: Step 81, receiving an encapsulated target service data packet sent by a first device according to a preset transmission protocol, wherein the target service data packet is an original service data packet encapsulated by the first device according to the preset transmission protocol to generate first signature information; performing quantum-resistant signature calculation on the first signature information to obtain second signature information, and encapsulating the second signature information in an extended header of the original service data packet; Step 82, parsing the target service data packet to obtain original service data and second signature information; Step 83, decrypt the second signature information to obtain a first hash value; Step 83, performing a hash operation on the original service data packet to obtain a second hash value; Step 84, obtaining a signature verification result according to the first hash value and the second hash value; Step 85: Process the target service data packet according to the signature verification result.

[0052] This method is a receiving party's method corresponding to the method on the first device side. The decapsulation of the service data packet in this embodiment is the same as the algorithm used in the above method. All implementation methods of the method on the first device side are applicable to the method on the second device side and can achieve the same technical effect.

[0053] An embodiment of the present invention further provides a first device, comprising: An acquisition module, used to acquire the original service data packet encapsulated according to a preset transmission protocol; A processing module, configured to generate first signature information according to the original service data packet; perform quantum-resistant signature calculation on the first signature information to obtain second signature information; and encapsulate the second signature information in an extended header of the original service data packet to obtain an encapsulated target service data packet; A transmission module is used to transmit the encapsulated target service data packet to the second device according to the preset transmission protocol.

[0054] Optionally, generating first signature information according to the original service data packet includes: Obtain summary information of the original service data packet; A hash operation is performed on the summary information to obtain first signature information.

[0055] Optionally, performing quantum-resistant signature calculation on the first signature information to obtain second signature information includes: The first signature information is calculated by using a quantum-resistant signature to obtain second signature information.

[0056] Optionally, encapsulating the second signature information in an extended header of the original service data packet to obtain an encapsulated target service data packet includes: The second signature information is encapsulated in the destination option header of the extension header of the original service data packet to obtain an encapsulated target service data packet.

[0057] Optionally, encapsulating the second signature information in a destination option header of an extended header of the original service data packet to obtain an encapsulated target service data packet includes: The signature value in the second signature information is encapsulated in the first option of the destination option header of the extended header of the original service data packet in the encoding format of the tag length value to obtain the encapsulated target service data packet.

[0058] Optionally, encapsulating the second signature information in a destination option header of an extended header of the original service data packet to obtain an encapsulated target service data packet includes: Encapsulating the signature value in the second signature information in the first option of the destination option header of the extended header of the original service data packet; The signature algorithm for calculating the signature value is encapsulated in the second option of the destination option header, and the signature public key is encapsulated in the third option of the destination option header to obtain the encapsulated target service data packet.

[0059] It should be noted that the device corresponds to the method on the first device side, and all implementation methods in the above method embodiments are applicable to the embodiments of the device and can achieve the same technical effects.

[0060] An embodiment of the present invention further provides a second device, comprising: a transmission module, configured to receive, according to a preset transmission protocol, an encapsulated target service data packet sent by a first device, wherein the target service data packet is an original service data packet encapsulated by the first device according to the preset transmission protocol to generate first signature information; perform quantum-resistant signature calculation on the first signature information to obtain second signature information; and encapsulate the second signature information in an extended header of the original service data packet; A processing module is used to parse the target business data packet to obtain the original business data and the second signature information; decrypt the second signature information to obtain the first hash value; perform a hash operation on the original business data packet to obtain the second hash value; obtain a signature verification result based on the first hash value and the second hash value; and process the target business data packet based on the signature verification result.

[0061] It should be noted that the device corresponds to the method on the second device side, and all implementation methods in the above method embodiments are applicable to the embodiments of the device and can achieve the same technical effects.

[0062] An embodiment of the present invention further provides a computer-readable storage medium storing instructions, which, when executed on a computer, enable the computer to execute the method described above or the method described above.

[0063] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments invented herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0064] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0065] In the embodiments provided by the present invention, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0066] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0067] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0068] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of various embodiments of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, ROM, RAM, magnetic disks, or optical disks.

[0069] In addition, it should be pointed out that in the apparatus and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. Moreover, the steps of performing the above series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order, and some steps can be performed in parallel or independently of each other. For those of ordinary skill in the art, it is understandable that all or any steps or components of the method and apparatus of the present invention can be implemented in hardware, firmware, software or a combination thereof in any computing device (including processors, storage media, etc.) or a network of computing devices, which can be achieved by those of ordinary skill in the art using their basic programming skills after reading the description of the present invention.

[0070] Therefore, the purpose of the present invention can also be achieved by running a program or a group of programs on any computing device. The computing device can be a well-known general-purpose device. Therefore, the purpose of the present invention can also be achieved by simply providing a program product containing a program code for implementing a method or device. That is to say, such a program product also constitutes the present invention, and a storage medium storing such a program product also constitutes the present invention. Obviously, the storage medium can be any well-known storage medium or any storage medium developed in the future. It should also be pointed out that in the device and method of the present invention, it is obvious that each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. In addition, the steps of performing the above-mentioned series of processing can naturally be performed in chronological order according to the order of description, but it is not necessary to perform them in chronological order. Some steps can be performed in parallel or independently of each other.

[0071] The above is a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A data transmission method based on post-quantum cryptography, characterized in that: Applied to a first device, the method includes: Obtaining the original business data packet encapsulated according to the preset transmission protocol; Generate first signature information according to the original service data packet; Performing quantum-resistant signature calculation on the first signature information to obtain second signature information; Encapsulating the second signature information in the extended header of the original service data packet to obtain an encapsulated target service data packet; The encapsulated target service data packet is transmitted to the second device according to the preset transmission protocol.

2. The data transmission method based on post-quantum cryptography according to claim 1, characterized in that: Generate first signature information according to the original service data packet, including: Obtain summary information of the original service data packet; A hash operation is performed on the summary information to obtain first signature information.

3. The data transmission method based on post-quantum cryptography according to claim 1, characterized in that: Performing quantum-resistant signature calculation on the first signature information to obtain second signature information includes: The first signature information is calculated by using a quantum-resistant signature to obtain second signature information.

4. The data transmission method based on post-quantum cryptography according to claim 1, characterized in that: Encapsulating the second signature information in the extended header of the original service data packet to obtain an encapsulated target service data packet, including: The second signature information is encapsulated in the destination option header of the extension header of the original service data packet to obtain an encapsulated target service data packet.

5. The data transmission method based on post-quantum cryptography according to claim 4 is characterized in that: Encapsulating the second signature information in the destination option header of the extension header of the original service data packet to obtain an encapsulated target service data packet, including: The signature value in the second signature information is encapsulated in an option of the destination option header of the extended header of the original service data packet in an encoding format of a tag length value to obtain an encapsulated target service data packet.

6. The data transmission method based on post-quantum cryptography according to claim 4, characterized in that: Encapsulating the second signature information in the destination option header of the extension header of the original service data packet to obtain an encapsulated target service data packet, including: Encapsulating the signature value in the second signature information in the first option of the destination option header of the extended header of the original service data packet; The signature algorithm for calculating the signature value is encapsulated in the second option of the destination option header, and the signature public key is encapsulated in the third option of the destination option header to obtain the encapsulated target service data packet.

7. A data transmission method based on post-quantum cryptography, characterized in that: Applied to the second device, the method includes: receiving, according to a preset transmission protocol, an encapsulated target service data packet sent by a first device, wherein the target service data packet is an original service data packet encapsulated by the first device according to the preset transmission protocol to generate first signature information, performing quantum-resistant signature calculation on the first signature information to obtain second signature information; and encapsulating the second signature information in an extended header of the original service data packet; Parsing the target service data packet to obtain original service data and second signature information; Decrypting the second signature information to obtain a first hash value; Performing a hash operation on the original service data packet to obtain a second hash value; Obtaining a signature verification result according to the first hash value and the second hash value; The target service data packet is processed according to the signature verification result.

8. A first device, characterized in that: include: An acquisition module, used to acquire the original service data packet encapsulated according to a preset transmission protocol; A processing module, used to generate first signature information according to the original service data packet; Performing quantum-resistant signature calculation on the first signature information to obtain second signature information; Encapsulating the second signature information in the extended header of the original service data packet to obtain an encapsulated target service data packet; A transmission module is used to transmit the encapsulated target service data packet to the second device according to the preset transmission protocol.

9. A second device, characterized in that: include: A transmission module, configured to receive an encapsulated target service data packet sent by a first device according to a preset transmission protocol, wherein the target service data packet is an original service data packet encapsulated by the first device according to the preset transmission protocol to generate first signature information; Performing quantum-resistant signature calculation on the first signature information to obtain second signature information; The second signature information is encapsulated in the extended header of the original service data packet; A processing module, used for parsing the target service data packet to obtain original service data and second signature information; Decrypting the second signature information to obtain a first hash value; Performing a hash operation on the original service data packet to obtain a second hash value; A signature verification result is obtained according to the first Hash value and the second Hash value; and the target service data packet is processed according to the signature verification result.

10. A computer-readable storage medium, characterized in that: Instructions are stored, and when the instructions are executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 6 or the method according to claim 7.

Images