Group message encryption method, system and device based on quantum key distribution

Abstract

The embodiment of the invention provides a group message encryption method, system and device based on quantum key distribution, and the method comprises the steps that a target user terminal transmits a session key obtaining request to a corresponding quantum cryptographic service center after obtaining the cryptographic domain information of group members, the session key acquisition request carries password domain information of the group members; after the quantum cryptographic service center obtains a session key, the session key is sent to the target user terminal and the quantum cryptographic service center corresponding to the group member according to the cryptographic domain information of the group member; receiving a session key sent by the quantum cryptography service center, encrypting group information to be sent according to the session key, and sending the encrypted group information to user terminals of group members; and a safer and more reliable key management and distribution mechanism is provided for cross-domain group chat communication.

Description

Technical Field

[0001] The present invention relates to the field of information encryption technology, and in particular to a group message encryption method, system, device, electronic device and storage medium based on quantum key distribution. Background Art

[0002] With the rapid advancement of Internet technology, data exchange in cross-domain group chat communications has become increasingly frequent. At the same time, network attack methods have become increasingly complex and varied. In the cross-domain group chat scenario, the authentication of both the sender and receiver of data, the risk of content theft during the transmission and storage stages, and the possibility of malicious tampering of data during transmission have all put forward more stringent requirements for data privacy protection. Especially in a cross-domain environment, since group members may come from multiple different security areas, the security policies and trust systems of each area are different, and it is difficult to find an efficient key generation and distribution solution to meet the needs of all members. Therefore, to achieve secure communication of cross-domain groups in a multi-domain environment, a more efficient, flexible and secure key management and distribution mechanism is required. Summary of the invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide a group message encryption method, system, device, electronic device and storage medium based on quantum key distribution that overcome the above problems or at least partially solve the above problems.

[0004] In order to solve the above problems, an embodiment of the present invention discloses a group message encryption method based on quantum key distribution, which is applied to a user terminal. The method includes:

[0005] The target user terminal obtains the password domain information of the group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs;

[0006] Sending a session key acquisition request to a corresponding quantum cryptography service center, wherein the session key acquisition request carries the cryptographic domain information of the group member, so that after the quantum cryptography service center obtains the session key, it sends the session key to the target user terminal and the quantum cryptography service center corresponding to the group member according to the cryptographic domain information of the group member;

[0007] The session key is received, and the group information to be sent is encrypted according to the session key and then sent to the user terminal of the group member, so that the user terminal of the group member decrypts the encrypted group message by the session key obtained by sending a session key application request to the corresponding quantum cryptography service center to obtain the group message.

[0008] Optionally, the target user terminal obtains password domain information of group members, including:

[0009] The password domain information of the group members is obtained from the business center. The password domain information of the group members is obtained by the business center querying a password domain hash table. The password domain hash table includes password domain information of multiple users.

[0010] Optionally, the method further comprises:

[0011] Sending a group creation request to the business center, the group creation request including information of multiple group members participating in the group creation, so that the business center obtains password domain identifiers corresponding to the multiple group members according to the information of the multiple group members, creates a password domain hash table according to the password domain identifiers corresponding to the multiple group members, uses the password domain identifier as a key of the hash table, and uses the number of the group members corresponding to the password domain as a value of the corresponding key;

[0012] The target user terminal initiates a group member change request to the business center, and the group member change request includes information of at least one group member participating in this group member change, so that the business center determines the password domain identifier corresponding to the participating group member based on the information of the participating group member, and updates the password domain hash table based on the password domain identifier corresponding to the participating group member.

[0013] Optionally, sending a session key acquisition request to a corresponding quantum cryptography service center includes:

[0014] The target user terminal sends a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield;

[0015] The receiving the session key, encrypting the group information to be sent according to the session key and then sending the encrypted information to the user terminal of the group member includes:

[0016] The target user terminal encrypts the group message to be sent using the session key;

[0017] The encrypted group message is sent to the group members through the business center.

[0018] On the other hand, an embodiment of the present invention further provides a group message encryption method based on quantum key distribution, which is applied to a quantum cryptography service center. The method includes:

[0019] Receiving a session key acquisition request sent by a target user terminal; the session key acquisition request is generated by the user terminal according to the password domain information of the group member;

[0020] Generate a session key and send it to a target user terminal, so that the target user terminal encrypts the message to be sent according to the session key;

[0021] When the password domains to which the group members belong are the same, a session key application request sent by a user terminal corresponding to the group member is received, and the session key is sent to the user terminal corresponding to the group member, so that after receiving the encrypted message, the user terminal corresponding to the group member decrypts the encrypted message according to the session key to obtain the group message.

[0022] Optionally, the method further comprises:

[0023] When the cryptographic domains to which the group members belong are different, the session key is sent to the quantum cryptography service center corresponding to the group members through the quantum key distribution network, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the respective corresponding quantum cryptography service center to obtain the group message.

[0024] On the other hand, an embodiment of the present invention further provides a group message encryption system based on quantum key distribution, the system comprising a user terminal and a quantum cryptography service center;

[0025] The user terminal is used by the target user terminal to obtain the password domain information of the group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs;

[0026] Sending a session key acquisition request to a corresponding quantum cryptography service center, wherein the session key acquisition request carries the password domain information of the group member, so that after the quantum cryptography service center obtains the session key, it sends the session key to the target user terminal and the quantum cryptography service center corresponding to the group member according to the password domain information of the group member; receiving the session key, encrypting the group information to be sent according to the session key, and then sending it to the user terminal of the group member, so that the user terminal of the group member decrypts the encrypted group message according to the session key obtained by sending the session key application request to the corresponding quantum cryptography service center, and obtains the group message;

[0027] The quantum key service center is used to receive a session key acquisition request sent by a target user terminal; the session key is generated by the user terminal through the quantum security shield according to the password domain information of the group member; generate a session key and send it to the target user terminal, so that the target user terminal encrypts the message to be sent according to the session key; when the password domains to which the group members belong are the same, receive a session key application request sent by the user terminal corresponding to the group member, and send the session key to the user terminal corresponding to the group member, so that the user terminal corresponding to the group member decrypts the encrypted message according to the session key after receiving the encrypted message to obtain the group message.

[0028] Optionally, the system includes a business center

[0029] The business center is used to obtain password domain information of group members. The password domain information of group members is obtained by the business center querying a password domain hash table. The password domain hash table includes password domain information of multiple users.

[0030] Optionally, the user terminal is further used for the target user terminal to initiate a group creation request to the service center, the group creation request includes information of multiple group members participating in the group creation; the target user terminal initiates a group member change request to the service center, the group member change request includes information of at least one group member participating in the group member change;

[0031] The business center is also used to obtain the password domain identifiers corresponding to the multiple group members according to the information of the multiple group members, create a password domain hash table according to the password domain identifiers corresponding to the multiple group members, use the password domain identifier as the key of the hash table, and use the number of the group members corresponding to the password domain as the value of the corresponding key; determine the password domain identifiers corresponding to the group members participating in this session according to the information of the group members participating in this session, and update the password domain hash table according to the password domain identifiers corresponding to the group members participating in this session.

[0032] Optionally, it is characterized in that the user terminal is used for the target user terminal to send a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield; the target user terminal uses the session key to encrypt the group message to be sent;

[0033] The business center is used to send the encrypted group message to the group members;

[0034] The quantum cryptography service center is used to send the session key to the quantum cryptography service center corresponding to the group member through the quantum key distribution network when the cryptographic domains to which the group members belong are different, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the respective corresponding quantum cryptography service center to obtain the group message.

[0035] On the other hand, an embodiment of the present invention further provides a group message encryption device based on quantum key distribution, which is applied to a user terminal, and the device includes:

[0036] A password domain information acquisition module, used for a target user terminal to acquire password domain information of a group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs;

[0037] A session key request module, used to send a session key acquisition request to a corresponding quantum cryptography service center, wherein the session key acquisition request carries the password domain information of the group member, so that after the quantum cryptography service center obtains the session key, the session key is sent to the target user terminal and the quantum cryptography service center corresponding to the group member according to the password domain information of the group member;

[0038] The session key processing module is used to receive the session key, encrypt the group information to be sent according to the session key, and then send it to the user terminal of the group member, so that the user terminal of the group member sends a session key application request to the corresponding quantum cryptography service center, obtains the session key, decrypts the encrypted group message, and obtains the group message.

[0039] Optionally, the password domain information acquisition module includes:

[0040] The password domain message acquisition submodule is used to acquire password domain information of group members from the service center. The password domain information of group members is obtained by the service center by querying a password domain hash table. The password domain hash table includes password domain information of multiple users.

[0041] Optionally, the device further comprises:

[0042] a group creation module, configured to send a group creation request to the business center, wherein the group creation request includes information of multiple group members participating in the group creation, so that the business center obtains password domain identifiers corresponding to the multiple group members according to the information of the multiple group members, creates a password domain hash table according to the password domain identifiers corresponding to the multiple group members, uses the password domain identifier as a key of the hash table, and uses the number of group members corresponding to the password domain as a value of the corresponding key;

[0043] The group update module is used for the target user terminal to initiate a group member change request to the business center, wherein the group member change request includes information of at least one group member participating in this group member change, so that the business center determines the password domain identifier corresponding to the participating group member based on the information of the participating group member, and updates the password domain hash table based on the password domain identifier corresponding to the participating group member.

[0044] Optionally, the session key request module includes:

[0045] A session key acquisition unit, configured for the target user terminal to send a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield;

[0046] The session key processing module comprises:

[0047] A session key processing submodule, configured for the target user terminal to encrypt the group message to be sent using the session key;

[0048] The group message sending submodule is used to send the encrypted group message to the group members through the service center.

[0049] On the other hand, an embodiment of the present invention further provides a group message encryption device based on quantum key distribution, which is applied to a quantum cryptography service center, and the device includes:

[0050] A session key request processing module, used to receive a session key acquisition request sent by a target user terminal; the session key acquisition request is generated by the user terminal according to the password domain information of the group member;

[0051] A session key sending module, used to generate a session key and send it to a target user terminal, so that the target user terminal encrypts a message to be sent according to the session key;

[0052] The session key distribution module is used to receive a session key application request sent by a user terminal corresponding to the group member when the password domains to which the group members belong are the same, and send the session key to the user terminal corresponding to the group member, so that the user terminal corresponding to the group member can decrypt the encrypted message according to the session key after receiving the encrypted message to obtain the group message.

[0053] Optionally, the device further comprises:

[0054] The session key distribution submodule is used to send the session key to the quantum cryptography service center corresponding to the group member through the quantum key distribution network when the cryptographic domains to which the group members belong are different, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the corresponding quantum cryptography service center to obtain the group message.

[0055] Correspondingly, an embodiment of the present invention discloses an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various steps of the above-mentioned embodiment of a group message encryption method based on quantum key distribution are implemented.

[0056] Correspondingly, an embodiment of the present invention discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various steps of the above-mentioned embodiment of a group message encryption method based on quantum key distribution are implemented.

[0057] The embodiment of the present invention has the following advantages: when the target user terminal needs to obtain the session key to encrypt the information to be sent, the user terminal requests the key from the quantum cryptographic service center, which provides a more secure and reliable key management and distribution mechanism for cross-domain group chat communication, and helps to ensure the high confidentiality and integrity of the communication data between group members in a complex and changeable network environment; when other group members need to obtain the session key to decrypt the group message, the session key is obtained according to their respective cryptographic domain information, so that the embodiment of the present invention adapts to the needs of different security policies and trust systems in a multi-domain environment. This flexibility helps to improve the efficiency and practicality of key management. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 It is a flowchart of a group message encryption method embodiment based on quantum key distribution of the present invention;

[0059] Figure 2is a flowchart of another embodiment of a group message encryption method based on quantum key distribution of the present invention;

[0060] Figure 3 It is a flow chart of an embodiment of the present invention for obtaining a user key domain ID for the first time;

[0061] Figure 4 It is a flow chart of an embodiment of changing group chat members of the present invention;

[0062] Figure 5 is a flow chart of another embodiment of a group message encryption method based on quantum key distribution of the present invention;

[0063] Figure 6 It is a structural block diagram of an embodiment of a group message encryption device based on quantum key distribution of the present invention;

[0064] Figure 7 It is a structural block diagram of another embodiment of a group message encryption device based on quantum key distribution of the present invention. DETAILED DESCRIPTION

[0065] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0066] Cross-domain group chat communication refers to group chat communication between different network domains, security domains or trust domains. It allows users from different organizations, regions or countries to communicate and collaborate in real time. Therefore, this communication method is becoming more and more important in modern society.

[0067] One of the core concepts of the embodiments of the present invention is that by introducing a quantum cryptography service center as a node for key application and distribution, a more secure and reliable key management and distribution mechanism is provided for cross-domain group chat communications, which helps to ensure the high confidentiality and integrity of communication data between group members in a complex and changeable network environment.

[0068] Reference Figure 1 , shows a flow chart of a group message encryption method based on quantum key distribution according to an embodiment of the present invention, which may specifically include the following steps:

[0069] Step 101, the target user terminal obtains the password domain information of the group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs;

[0070] Before a user terminal needs to send a group chat message, it will first request the password domain information of the group chat members for subsequent operations.

[0071] The password domain is generally a mechanism for storing passwords in a computer system, usually in the form of an encrypted file or database. The password domain stores some data, which can be used for security scenarios such as identity authentication when a user logs in. Therefore, once the password domain is compromised, the user's personal information and account security will be seriously threatened. Common cryptographic algorithms used in the password domain include MD5, SHA-1, DES, etc. The implementation of the password domain, including the cryptographic algorithm, is not limited in the present invention.

[0072] In one embodiment, step 101 includes the following sub-steps:

[0073] Sub-step S11, obtaining password domain information of group members from the business center, the password domain information of group members is obtained by the business center querying a password domain hash table, the password domain hash table includes password domain information of multiple users; the password domain information of group members is used to indicate the password domain to which the group members belong.

[0074] The user terminal sends a password domain information acquisition request to the business center, which includes a list of group member information to be queried. After receiving the request, the business center parses the group member information to be queried, and queries the password domain hash table for relevant information based on the group member information. After the query is completed, the business center returns the queried information to the user terminal. This process ensures the security and compliance of group members in a specific password domain. The business center here can be a centralized service or system responsible for managing user information and permissions, or it can be other business-related services and systems, which are not limited in the embodiments of the present invention.

[0075] Step 102, sending a session key acquisition request to the corresponding quantum cryptography service center, wherein the session key acquisition request carries the cryptographic domain information of the group member, so that after the quantum cryptography service center obtains the session key, it sends the session key to the target user terminal and the quantum cryptography service center corresponding to the group member according to the cryptographic domain information of the group member;

[0076] After obtaining the password domain information, the target user terminal will integrate the password domain information of all group members to be sent this time into the session key acquisition request and send it to the quantum cryptography service center; after the quantum cryptography service center generates the session key through QKD (Quantum Key Distribution), it will relay the session key of the corresponding password domain to the quantum cryptography service center corresponding to the user terminal corresponding to other group members according to the password domain information to facilitate other group members to obtain the session key to decrypt the group information.

[0077] Quantum cryptography, also known as quantum key distribution, is a new cryptographic technology based on the principles of quantum mechanics. It uses the uncertainty principle and entangled state characteristics in quantum mechanics to achieve secure transmission and encryption of information. In quantum cryptography, the generation, distribution and verification of keys all rely on the preparation, measurement and entanglement of quantum states. The Quantum Cryptography Service Center is a platform that focuses on providing quantum cryptography-related services and solutions. The Quantum Cryptography Service Center usually has security functions such as quantum key distribution and quantum identity authentication.

[0078] Step 103, receiving the session key, encrypting the group information to be sent according to the session key, and then sending it to the user terminal of the group member, so that the user terminal of the group member sends a session key application request to the corresponding quantum cryptography service center, obtains the session key, decrypts the encrypted group message, and obtains the group message.

[0079] After receiving the session key sent from the quantum cryptography service center, the session key is used to encrypt the information to be sent. After encryption is completed, the group message is sent to the group members to be sent. Other group members apply for the session key of this group chat by sending the key to their corresponding quantum cryptography service center, and decrypt the message to obtain the body of the group message. This process ensures the security and integrity of the message sending process.

[0080] The algorithm for encrypting group messages using the session key may be a symmetric encryption algorithm such as AES (Advanced Encryption Standard), DES (Data Encryption Standard), and 3DES (Triple Data Encryption Standard). The encryption algorithm may also be other algorithms, which are not limited in the embodiments of the present invention.

[0081] In one embodiment, step 102 includes the following sub-steps:

[0082] Sub-step S11, the target user terminal sends a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield;

[0083] Quantum Security Shield can enhance data security and communication confidentiality by utilizing the unique properties of quantum technology, such as quantum entanglement, quantum superposition and quantum no-cloning theorem. These quantum properties give Quantum Security Shield significant advantages in defending against quantum hacker attacks, protecting sensitive information and ensuring communication integrity.

[0084] The step 103 includes the following sub-steps:

[0085] Sub-step S21, the target user terminal encrypts the group message to be sent using the session key;

[0086] Sub-step S22, sending the encrypted group message to the group members through the service center.

[0087] The embodiment of the present invention utilizes the quantum security shield in combination with the service center to ensure the security of group message transmission.

[0088] In one embodiment, the method further comprises:

[0089] Sending a group creation request to the business center, the group creation request including information of multiple group members participating in the group creation, so that the business center obtains password domain identifiers corresponding to the multiple group members according to the information of the multiple group members, creates a password domain hash table according to the password domain identifiers corresponding to the multiple group members, uses the password domain identifier as a key of the hash table, and uses the number of the group members corresponding to the password domain as a value of the corresponding key;

[0090] A hash table speeds up the search by mapping key values ​​(key, value, key-value pair) to a position in the table. This mapping function is called a hash function, and the array that stores records is called a hash table. Given a table M, generally, there is a function f(key). For any given keyword value key, if the address of the record in the table containing the keyword can be obtained after substituting it into the function, then the table M is called a hash table, and the function f(key) is a hash function. Using a hash table to store password domain information ensures the security of the password domain information. The method of establishing a hash table can be direct addressing, digital analysis, and square median method, etc., and the present invention does not limit this.

[0091] The target user terminal initiates a group member change request to the business center, and the group member change request includes information of at least one group member participating in this group member change, so that the business center determines the password domain identifier corresponding to the participating group member based on the information of the participating group member, and updates the password domain hash table based on the password domain identifier corresponding to the participating group member.

[0092] The embodiment of the present invention has the following advantages: when the target user terminal needs to obtain the session key to encrypt the information to be sent, the user terminal requests the key from the quantum cryptographic service center, which provides a more secure and reliable key management and distribution mechanism for cross-domain group chat communication, and helps to ensure the high confidentiality and integrity of the communication data between group members in a complex and changeable network environment; when other group members need to obtain the session key to decrypt the group message, the session key is obtained according to their respective cryptographic domain information, so that the embodiment of the present invention adapts to the needs of different security policies and trust systems in a multi-domain environment. This flexibility helps to improve the efficiency and practicality of key management.

[0093] Reference Figure 2 , shows a flowchart of another group message encryption method embodiment based on quantum key distribution of the present invention, which may specifically include the following steps:

[0094] Step 201, receiving a session key acquisition request sent by a target user terminal; the session key acquisition request is generated by the user terminal according to the password domain information of the group member;

[0095] Step 202: Generate a session key and send it to a target user terminal, so that the target user terminal encrypts the message to be sent according to the session key;

[0096] The target user terminal will integrate the password domain information of all group members to be sent this time into the session key acquisition request and send it to the quantum cryptography service center; after the quantum cryptography service center generates the session key through QKD (Quantum Key Distribution), it will relay the session key of the corresponding password domain to the quantum cryptography service center corresponding to the user terminal corresponding to other group members according to the password domain information to facilitate other group members to obtain the session key to decrypt the group information.

[0097] Step 203, when the password domains to which the group members belong are the same, receiving a session key application request sent by the user terminal corresponding to the group member, and sending the session key to the user terminal corresponding to the group member, so that the user terminal corresponding to the group member decrypts the encrypted message according to the session key after receiving the encrypted message to obtain the group message.

[0098] In one embodiment, the method further comprises:

[0099] When the cryptographic domains to which the group members belong are different, the session key is sent to the quantum cryptography service center corresponding to the group members through the quantum key distribution network, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the respective corresponding quantum cryptography service center to obtain the group message.

[0100] When the cryptographic domains described by the group members are different, cross-domain operations are required. The quantum cryptography service center will relay to the quantum cryptography service center corresponding to the group member through the quantum key distribution network to complete the cross-domain operation. The data security of cross-domain group chat is guaranteed by using the quantum cryptography service center combined with quantum key distribution.

[0101] The embodiment of the present invention has the following advantages: when the target user terminal needs to obtain the session key to encrypt the information to be sent, the user terminal requests the key from the quantum cryptographic service center, which provides a more secure and reliable key management and distribution mechanism for cross-domain group chat communication, and helps to ensure the high confidentiality and integrity of the communication data between group members in a complex and changeable network environment; when other group members need to obtain the session key to decrypt the group message, the session key is obtained according to their respective cryptographic domain information, so that the embodiment of the present invention adapts to the needs of different security policies and trust systems in a multi-domain environment. This flexibility helps to improve the efficiency and practicality of key management.

[0102] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0103] Reference Figure 3 , shows a flowchart of an embodiment of the present invention for initially obtaining a user key domain ID, which is specifically explained as follows:

[0104] This flow chart includes user terminals, quantum security shields, business centers and quantum cryptography service centers.

[0105] When a user logs in for the first time through a user terminal, the Quantum Security Shield will request the user's password domain ID from the Quantum Cryptography Service Center. After obtaining the user's password domain ID, the Quantum Cryptography Service Center will return the user's password domain ID to the user terminal; when the user terminal logs in to the business center, the business center will obtain and record the password domain ID of the user terminal.

[0106] Reference Figure 4 This is a flow chart of an embodiment of the present invention for changing group chat members, which is specifically explained as follows:

[0107] This flow chart includes user terminals and service centers.

[0108] Group chat member changes include creating a new group chat and initiating a group chat member change request for an existing group chat. When a new group chat is to be created, the user terminal will initiate a new group chat request to the business center. The new group chat request carries the information of the group members participating in the new group chat. After receiving the new group chat request, the business center obtains the user password domain identifier corresponding to the group member based on the group member information carried in the request; after obtaining the user password domain identifier, a new password domain hash table is created. The key of the password domain hash table is the password domain identifier, and the value is the number of user terminals belonging to the password domain identifier.

[0109] When the user terminal wants to change the group chat members, it will send a group member change request to the business center. The group member change request carries the information of the group members participating in the change. After the business center obtains the group member change request, it obtains the corresponding password domain identifier according to the information of the group members participating in the change carried in the request, and searches for the key-value pair corresponding to the password domain identifier corresponding to the group members participating in the change in the password domain hash table corresponding to the group chat, and updates the password domain hash table according to the query result and the type of the change request;

[0110] When the type of change request is to add a new member, if the key-value pair corresponding to the password domain identifier corresponding to the group member participating in the change is queried in the password domain hash table, the value of the key-value pair is increased by 1. If the relevant key-value pair is not found in the password domain hash table, a new key-value pair is created according to the password domain identifier corresponding to the group member participating in the change. The new creation logic is to use the password domain identifier corresponding to the group member participating in the change as the key, and the value is 1. If it involves adding multiple members, the processing logic is the same as adding a new member. When modifying the value, just do the corresponding processing. For example, if 3 people are added, add 3 to the corresponding value.

[0111] When the type of change request is to reduce a member, if the key-value pair corresponding to the password domain identifier of the group member participating in the change is queried in the password domain hash table, the value of the key-value pair is reduced by 1. If the value of the key-value pair is only 1, it is deleted. If it involves reducing multiple members, the processing logic is the same as reducing one member. The corresponding processing can be performed when modifying the value. For example, if 3 people are reduced, the corresponding value is reduced by 3.

[0112] Reference Figure 5: is a flow chart of another embodiment of a group message encryption method based on quantum key distribution of the present invention, which is specifically explained as follows:

[0113] This process includes user terminal 1, user terminal 2, quantum security shield 1, quantum security shield 2, business center, quantum cryptography service center 1 and quantum cryptography service center 2, among which user terminal 1 corresponds to quantum security shield 1 and quantum cryptography service center 1; user terminal 2 corresponds to quantum cryptography security shield 2 and quantum cryptography service center 2; user terminal 1 is the sender of the group chat message, and user terminal 2 is the receiver of this group chat message, and does not belong to the same cryptographic domain as user terminal 1.

[0114] When user terminal 1 is ready to send a group message, it will obtain the password domain information of multiple group members to whom this group chat message needs to be sent from the business center. The business center obtains the password domain information of the multiple group members by querying the password domain hash table and returns it to user terminal 1. After user terminal 1 receives the password domain information of the multiple group members, it integrates it into the session key application request and sends it to quantum security shield 1. After quantum security shield 1 authenticates the legitimacy of user terminal 1, it forwards the reply key application request to quantum cryptography service center 1; after receiving the request, quantum cryptography service center 1 will generate a session key for sending the group chat message this time according to QKD, and judge whether the sending of the group chat message this time is a cross-domain operation according to the password domain information of the multiple group members.

[0115] When the multiple group members correspond to multiple cryptographic domains, it is determined that the sending of the group chat information this time belongs to a cross-domain operation. At this time, the quantum cryptography service center will relay the session key to the quantum cryptography service center 2 through the QKD network. After receiving the relayed session key, the quantum cryptography service center 2 will save it; after the cryptographic service center 1 completes the relay, it will send the session key to the quantum security shield 1, and the quantum security shield 1 will forward the session key to the user terminal 1; after receiving the session key, the user terminal 1 will apply the session key to encrypt the group message this time, and then send the group chat message to the group members corresponding to this sending.

[0116] As one of the recipients of this group chat message, user terminal 2 will send a session key application request to quantum security shield 2 after receiving the group message. Similarly, after authenticating the request, quantum security shield 2 will forward the request to quantum cryptography service center 2. After quantum cryptography service center 2 authenticates the session key of user terminal 2 and determines that user terminal 2 is one of the recipients of this group chat message, the session key will be sent to user terminal 2. User terminal 2 can obtain the group chat message after applying the session key to decrypt the group chat message.

[0117] When the multiple group members correspond to a single password domain (not shown in the figure), it is determined that the sending of the group chat information this time does not belong to a cross-domain operation. The quantum cryptography service center 1 will send the session key to the quantum security shield 1, and the quantum security shield 1 will forward the session key to the user terminal 1; after receiving the session key, the user terminal 1 will use the session key to encrypt the group message this time, and then send the group chat message to the group members corresponding to this sending.

[0118] Other user terminals that are recipients of this group chat message will send a session key application request to Quantum Security Shield 2 after receiving the group message. Similarly, after authenticating the request, Quantum Security Shield 2 will forward the request to Quantum Cryptography Service Center 2. Quantum Cryptography Service Center 2 will authenticate the session key of user terminal 2, and after determining that user terminal 2 is one of the recipients of this group chat message, the session key will be sent to user terminal 2. User terminal 2 can obtain the group chat message after applying the session key to decrypt the group chat message.

[0119] Reference Figure 6 , shows a structural block diagram of an embodiment of a group message encryption device based on quantum key distribution of the present invention, which may specifically include the following modules:

[0120] The password domain information acquisition module 301 is used for the target user terminal to acquire the password domain information of the group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs;

[0121] The session key request module 302 is used to send a session key acquisition request to the corresponding quantum cryptography service center, wherein the session key acquisition request carries the cryptographic domain information of the group member, so that after the quantum cryptography service center obtains the session key, the session key is sent to the target user terminal and the quantum cryptography service center corresponding to the group member according to the cryptographic domain information of the group member;

[0122] The session key processing module 303 is used to receive the session key, encrypt the group information to be sent according to the session key, and then send it to the user terminal of the group member, so that the user terminal of the group member sends a session key application request to the corresponding quantum cryptography service center, obtains the session key, decrypts the encrypted group message, and obtains the group message.

[0123] In one embodiment, the password domain information acquisition module includes:

[0124] The password domain message acquisition submodule is used to acquire password domain information of group members from the service center. The password domain information of group members is obtained by the service center by querying a password domain hash table. The password domain hash table includes password domain information of multiple users.

[0125] In one embodiment, the device further comprises:

[0126] a group creation module, configured to send a group creation request to the business center, wherein the group creation request includes information of multiple group members participating in the group creation, so that the business center obtains password domain identifiers corresponding to the multiple group members according to the information of the multiple group members, creates a password domain hash table according to the password domain identifiers corresponding to the multiple group members, uses the password domain identifier as a key of the hash table, and uses the number of group members corresponding to the password domain as a value of the corresponding key;

[0127] The group update module is used for the target user terminal to initiate a group member change request to the business center, wherein the group member change request includes information of at least one group member participating in this group member change, so that the business center determines the password domain identifier corresponding to the participating group member based on the information of the participating group member, and updates the password domain hash table based on the password domain identifier corresponding to the participating group member.

[0128] In one embodiment, the session key request module includes:

[0129] A session key acquisition unit, configured for the target user terminal to send a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield;

[0130] The session key processing module comprises:

[0131] A session key processing submodule, configured for the target user terminal to encrypt the group message to be sent using the session key;

[0132] The group message sending submodule is used to send the encrypted group message to the group members through the service center.

[0133] The embodiment of the present invention has the following advantages: when the target user terminal needs to obtain the session key to encrypt the information to be sent, the user terminal requests the key from the quantum cryptographic service center, which provides a more secure and reliable key management and distribution mechanism for cross-domain group chat communication, and helps to ensure the high confidentiality and integrity of the communication data between group members in a complex and changeable network environment; when other group members need to obtain the session key to decrypt the group message, the session key is obtained according to their respective cryptographic domain information, so that the embodiment of the present invention adapts to the needs of different security policies and trust systems in a multi-domain environment. This flexibility helps to improve the efficiency and practicality of key management.

[0134] Reference Figure 7 , shows a structural block diagram of another embodiment of a group message encryption device based on quantum key distribution of the present invention, which may specifically include the following modules:

[0135] The session key request processing module 401 is used to receive a session key acquisition request sent by a target user terminal; the session key acquisition request is generated by the user terminal according to the password domain information of the group member;

[0136] A session key sending module 402 is used to generate a session key and send it to a target user terminal so that the target user terminal encrypts a message to be sent according to the session key;

[0137] The session key distribution module 403 is used to receive a session key application request sent by a user terminal corresponding to the group member when the password domains to which the group members belong are the same, and send the session key to the user terminal corresponding to the group member, so that the user terminal corresponding to the group member can decrypt the encrypted message according to the session key after receiving the encrypted message to obtain the group message.

[0138] In one embodiment, the device further comprises:

[0139] The session key distribution submodule is used to send the session key to the quantum cryptography service center corresponding to the group member through the quantum key distribution network when the cryptographic domains to which the group members belong are different, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the corresponding quantum cryptography service center to obtain the group message.

[0140] The embodiment of the present invention has the following advantages: when the target user terminal needs to obtain the session key to encrypt the information to be sent, the user terminal requests the key from the quantum cryptographic service center, which provides a more secure and reliable key management and distribution mechanism for cross-domain group chat communication, and helps to ensure the high confidentiality and integrity of the communication data between group members in a complex and changeable network environment; when other group members need to obtain the session key to decrypt the group message, the session key is obtained according to their respective cryptographic domain information, so that the embodiment of the present invention adapts to the needs of different security policies and trust systems in a multi-domain environment. This flexibility helps to improve the efficiency and practicality of key management.

[0141] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0142] An embodiment of the present invention further provides an electronic device, including:

[0143] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, each process of the above-mentioned group message encryption method based on quantum key distribution is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0144] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned group message encryption method based on quantum key distribution are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0145] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0146] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0147] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0148] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0149] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0150] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0151] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0152] The above is a detailed introduction to a group message encryption method, system, device, electronic device and storage medium based on quantum key distribution provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A group message encryption method based on quantum key distribution, characterized in that: Applied to a user terminal, the method comprises: The target user terminal obtains the password domain information of the group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs; Sending a session key acquisition request to a corresponding quantum cryptography service center, wherein the session key acquisition request carries the cryptographic domain information of the group member, so that after the quantum cryptography service center obtains the session key, it sends the session key to the target user terminal and the quantum cryptography service center corresponding to the group member according to the cryptographic domain information of the group member; The session key is received, and the group information to be sent is encrypted according to the session key and then sent to the user terminal of the group member, so that the user terminal of the group member decrypts the encrypted group message by the session key obtained by sending a session key application request to the corresponding quantum cryptography service center to obtain the group message.

2. The method according to claim 1, characterized in that The target user terminal obtains the password domain information of the group member, including: The password domain information of the group members is obtained from the business center. The password domain information of the group members is obtained by the business center querying a password domain hash table. The password domain hash table includes password domain information of multiple users.

3. The method according to claim 2, characterized in that The method further comprises: Sending a group creation request to the business center, the group creation request including information of multiple group members participating in the group creation, so that the business center obtains password domain identifiers corresponding to the multiple group members according to the information of the multiple group members, creates a password domain hash table according to the password domain identifiers corresponding to the multiple group members, uses the password domain identifier as a key of the hash table, and uses the number of the group members corresponding to the password domain as a value of the corresponding key; The target user terminal initiates a group member change request to the business center, and the group member change request includes information of at least one group member participating in this group member change, so that the business center determines the password domain identifier corresponding to the participating group member based on the information of the participating group member, and updates the password domain hash table based on the password domain identifier corresponding to the participating group member.

4. The method according to claim 2, characterized in that: The sending of a session key acquisition request to the corresponding quantum cryptography service center includes: The target user terminal sends a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield; The receiving the session key, encrypting the group information to be sent according to the session key and then sending the encrypted information to the user terminal of the group member includes: The target user terminal encrypts the group message to be sent using the session key; The encrypted group message is sent to the group members through the business center.

5. A group message encryption method based on quantum key distribution, characterized in that: Applied to a quantum cryptography service center, the method comprises: Receiving a session key acquisition request sent by a target user terminal; the session key acquisition request is generated by the user terminal according to the password domain information of the group member; Generate a session key and send it to a target user terminal, so that the target user terminal encrypts the message to be sent according to the session key; When the password domains to which the group members belong are the same, a session key application request sent by a user terminal corresponding to the group member is received, and the session key is sent to the user terminal corresponding to the group member, so that after receiving the encrypted message, the user terminal corresponding to the group member decrypts the encrypted message according to the session key to obtain the group message.

6. The method according to claim 5, characterized in that The method further comprises: When the cryptographic domains to which the group members belong are different, the session key is sent to the quantum cryptography service center corresponding to the group members through the quantum key distribution network, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the respective corresponding quantum cryptography service center to obtain the group message.

7. A group message encryption system based on quantum key distribution, characterized in that: The system includes a user terminal and a quantum cryptography service center; The user terminal is used by the target user terminal to obtain the password domain information of the group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs; Sending a session key acquisition request to a corresponding quantum cryptography service center, wherein the session key acquisition request carries the password domain information of the group member, so that after the quantum cryptography service center obtains the session key, it sends the session key to the target user terminal and the quantum cryptography service center corresponding to the group member according to the password domain information of the group member; receiving the session key, encrypting the group information to be sent according to the session key, and then sending it to the user terminal of the group member, so that the user terminal of the group member decrypts the encrypted group message according to the session key obtained by sending the session key application request to the corresponding quantum cryptography service center, and obtains the group message; The quantum key service center is used to receive a session key acquisition request sent by a target user terminal; the session key is generated by the user terminal through the quantum security shield according to the password domain information of the group member; Generate a session key and send it to a target user terminal so that the target user terminal encrypts the message to be sent according to the session key; when the password domains to which the group members belong are the same, receive a session key application request sent by the user terminal corresponding to the group member, and send the session key to the user terminal corresponding to the group member so that the user terminal corresponding to the group member decrypts the encrypted message according to the session key after receiving the encrypted message to obtain the group message.

8. The system according to claim 7, characterized in that The system includes a business center The business center is used to obtain password domain information of group members. The password domain information of group members is obtained by the business center querying a password domain hash table. The password domain hash table includes password domain information of multiple users.

9. The system according to claim 8, characterized in that The user terminal is also used for the target user terminal to initiate a group creation request to the service center, wherein the group creation request includes information of multiple group members participating in the group creation; The target user terminal initiates a group member change request to the service center, where the group member change request includes information of at least one group member participating in the group member change; The business center is further used to obtain password domain identifiers corresponding to the plurality of group members according to the information of the plurality of group members, create a password domain hash table according to the password domain identifiers corresponding to the plurality of group members, use the password domain identifier as a key of the hash table, and use the number of the group members corresponding to the password domain as a value of the corresponding key; According to the information of the members participating in the current group, the password domain identifiers corresponding to the members participating in the current group are determined, and according to the password domain identifiers corresponding to the members participating in the current group, the password domain hash table is updated.

10. The system according to claim 8, characterized in that The user terminal is used for the target user terminal to send a session key acquisition request to the corresponding quantum cryptography service center through the quantum security shield; the target user terminal uses the session key to encrypt the group message to be sent; The business center is used to send the encrypted group message to the group members; The quantum cryptography service center is used to send the session key to the quantum cryptography service center corresponding to the group member through the quantum key distribution network when the cryptographic domains to which the group members belong are different, so that after receiving the encrypted message, the user terminal of the group member can decrypt the encrypted message according to the reply key obtained by sending the session key application request to the respective corresponding quantum cryptography service center to obtain the group message.

11. A group message encryption device based on quantum key distribution, characterized in that: Applied to a user terminal, the device comprises: A password domain information acquisition module, used for a target user terminal to acquire password domain information of a group member; the password domain information of the group member is used to indicate the password domain to which the group member belongs; A session key request module, used to send a session key acquisition request to a corresponding quantum cryptography service center, wherein the session key acquisition request carries the password domain information of the group member, so that after the quantum cryptography service center obtains the session key, the session key is sent to the target user terminal and the quantum cryptography service center corresponding to the group member according to the password domain information of the group member; The session key processing module is used to receive the session key, encrypt the group information to be sent according to the session key, and then send it to the user terminal of the group member, so that the user terminal of the group member sends a session key application request to the corresponding quantum cryptography service center, obtains the session key, decrypts the encrypted group message, and obtains the group message.

12. A group message encryption device based on quantum key distribution, characterized in that: Applied to a quantum cryptography service center, the device comprises: A session key request processing module, used to receive a session key acquisition request sent by a target user terminal; the session key acquisition request is generated by the user terminal according to the password domain information of the group member; A session key sending module, used to generate a session key and send it to a target user terminal, so that the target user terminal encrypts a message to be sent according to the session key; The session key distribution module is used to receive a session key application request sent by a user terminal corresponding to the group member when the password domains to which the group members belong are the same, and send the session key to the user terminal corresponding to the group member, so that the user terminal corresponding to the group member can decrypt the encrypted message according to the session key after receiving the encrypted message to obtain the group message.

13. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of a group message encryption method based on quantum key distribution as described in any one of claims 1 to 6 are implemented.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of a group message encryption method based on quantum key distribution as described in any one of claims 1 to 6 are implemented.

Images