Quantum encryption audio and video call method and device in Swan application continuing scene

Abstract

The invention provides a quantum encryption audio and video call method and device in a wide-gap application connection scene. The method comprises the following steps: a source device generates a chat room identifier and obtains a first quantum key; establishing a communication connection between the source device and the opposite-end device, encrypting the media stream by the source device by using the first quantum key, pushing the encrypted media stream to the opposite-end device, and decrypting the media stream pushed by the opposite-end device by using the first quantum key; when a connection operation instruction sent by a connection device is monitored, the source device connects a connection value and obtains a second quantum key; using the decrypted second quantum key to perform national secret encryption on the chat room identifier to obtain a continuous operation ciphertext; sending the continuing operation ciphertext and the random number to continuing equipment; and in response to the connection establishment instruction sent by the connection equipment, the opposite-end equipment establishes connection with the connection equipment, the connection equipment encrypts the media stream by using the first quantum key and then pushes the encrypted media stream to the opposite-end equipment, and the first quantum key is used for decrypting the media stream pushed by the opposite-end equipment, so that the communication security is improved.

Description

Technical Field

[0001] The present application relates to the field of quantum communication technology, and in particular to a quantum encrypted audio and video call method and device in a Hongmeng application connection scenario. Background Art

[0002] With the continuous development of communication technology, the all-scenario multi-device lifestyle has gradually deepened, and the types and numbers of devices owned by users have increased. Different devices can provide a good experience in appropriate scenarios. For example, watches can provide timely information viewing functions, and TVs can bring immersive viewing experience. However, a single device is also limited by the usage scenario. For example, the experience of inputting text on a TV is poorer than that of inputting text on a mobile device.

[0003] In the prior art, when multiple devices can sense each other through a distributed operating system and then integrate into a super terminal, the devices can complement each other and help each other to provide users with a more natural and smooth distributed experience. In the Hongmeng operating system HarmonyOS, distributed operations across multiple devices are collectively referred to as flows; depending on the usage scenarios, flows are divided into two specific scenarios: cross-end migration and multi-end collaboration. Application continuation is a typical usage scenario in cross-end migration. It means that when a user operates an application on one device, he can quickly switch to the same application on another device and seamlessly connect the application experience of the previous device. For example, during the user's use, the usage scenario has changed, the previously used device is no longer suitable for continuing the current task, or there are more suitable devices around. At this time, the user can choose to use a new device to continue the current task; after the continuation is completed, the application of the previous device can be exited or retained, and the user can focus on the device that was pulled up and continue the task.

[0004] In summary, the Hongmeng application continuation scenario involves switching from one device to another. In this way, when the audio and video call task of the source device (i.e., the connected device) is switched to the audio and video call task of the connecting device (the device that connects the source device), there is often a risk of being eavesdropped or cracked. Therefore, it is necessary to provide a solution to ensure the security of audio and video calls in the Hongmeng application continuation scenario. Summary of the invention

[0005] This application shows a quantum encrypted audio and video call method and device in the Hongmeng application connection scenario.

[0006] In the first aspect, the present application shows a quantum encrypted audio and video call method in a Hongmeng application connection scenario, the method comprising:

[0007] The source device generates a chat room identifier for the audio and video call, and obtains a first quantum key corresponding to the chat room identifier from a quantum key distribution service platform;

[0008] Establishing a communication connection between the source device and a peer device of the audio or video call based on the first quantum key, the source device encrypting a media stream using the first quantum key and pushing the media stream to the peer device, and decrypting the media stream pushed by the peer device using the first quantum key;

[0009] When a connection operation instruction is detected to be sent by a connection device, the source device generates a random number and concatenates it with a preset key value to form a connection value, and obtains a second quantum key corresponding to the connection value from the quantum key distribution service platform; uses the decrypted second quantum key to perform national secret encryption on the chat room identifier to obtain a connection operation ciphertext, and sends the connection operation ciphertext and the random number to the connection device;

[0010] In response to the connection establishment instruction sent by the connection device, the peer device establishes a connection with the connection device, and the connection device encrypts the media stream using the first quantum key and pushes it to the peer device, and decrypts the media stream pushed by the peer device using the first quantum key.

[0011] Optionally, the step of establishing a communication connection between the source device and a peer device of the audio or video call based on the first quantum key includes:

[0012] The source device sends an audio and video call instruction to an instant messaging signaling service, and the instant messaging signaling service notifies the peer device to accept the audio and video invitation;

[0013] The peer device answers the audio and video invitation, and obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier; and sends an audio and video answering instruction to the instant messaging signaling service;

[0014] The instant messaging signaling service notifies the source device that the peer device has answered the audio and video, and establishes a communication connection between the source device and the peer device.

[0015] Optionally, the step of the source device encrypting the media stream by using the first quantum key and pushing the media stream to the peer device, and decrypting the media stream pushed by the peer device by using the first quantum key includes:

[0016] The source device sets the first session description protocol information, carries the first session description protocol information through the HTTPS protocol, and sends the first streaming signaling to the audio and video media service;

[0017] The peer device sets the second session description protocol information, carries the second session description protocol information through the HTTPS protocol, and sends the second streaming signaling to the audio and video media service;

[0018] After the session description protocol negotiation is passed, the source device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the source device to push the stream;

[0019] The peer device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream;

[0020] After the session description protocol negotiation is passed, the peer device uses the decrypted first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the peer device to start pushing the stream;

[0021] The source device pulls the stream from the audio and video media service, and uses the decrypted quantum key to decrypt the media stream and then render it.

[0022] Optionally, the source device generates a random number and concatenates it with a preset key value into a continuation value, and obtains a second quantum key corresponding to the continuation value from the quantum key distribution service platform, comprising:

[0023] The source device starts the cross-end migration interface onContinue of the application component, generates a random number in the cross-end migration interface onContinue, and then generates a continuation value by combining the key value agreed on the end side;

[0024] In the cross-end migration interface onContinue, the second quantum key is obtained from the quantum key distribution service platform through the continuation value.

[0025] Optionally, the step of using the decrypted second quantum key to perform national encryption on the chat room identifier to obtain a connection operation ciphertext, and sending the connection operation ciphertext and the random number to the connection device includes:

[0026] In the cross-end migration interface onContinue, the chat room identifier is encrypted using the decrypted second quantum key to obtain a ciphertext by performing national secret SM4 encryption;

[0027] In the cross-end migration interface onContinue, the continuation operation ciphertext and the random number are assembled into the data of the information transmission carrier wantParam.

[0028] Optionally, in response to the connection establishment instruction sent by the connection device, the step of establishing a connection between the opposite device and the connection device includes:

[0029] In the cross-end migration interface onContinue, the source device sends a media interruption signaling to the instant messaging signaling service to notify the peer device to interrupt the audio and video connection; in the cross-end migration interface onContinue, the source device sends a notification of consent to continue to the Hongmeng distributed soft bus;

[0030] The soft bus transmits the data of the information transmission carrier wantParam to the connection device, and the connection device receives data in the migration data recovery interface onCreate / onNewWant of the application component; obtains the random number in the migration data recovery interface data, and generates a second quantum key with the key value agreed on the terminal side;

[0031] In the migration data recovery interface onCreate / onNewWant, the first quantum key is obtained from the quantum key distribution service platform through the continuation value; in the migration data recovery interface onCreate / onNewWant, the data ciphertext of the information transmission carrier wantParam is decrypted using the decrypted first quantum key to obtain the chat room identifier;

[0032] The opposite-end device and the connecting device establish a connecting connection based on the chat room identifier.

[0033] Optionally, the step of encrypting the media stream by the connection device using the first quantum key and pushing the media stream to the peer device, and decrypting the media stream pushed by the peer device using the first quantum key includes:

[0034] The connection device sets the third session description protocol information, carries the third session description protocol information through the HTTPS protocol, and sends the third streaming signaling to the audio and video media service;

[0035] The peer device sets fourth session description protocol information, carries the fourth session description protocol information through the HTTPS protocol, and sends the fourth streaming signaling to the audio and video media service;

[0036] After the session description protocol negotiation is passed, the connection device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service;

[0037] The peer device pulls the stream from the audio and video media service, and uses the cached first quantum key to decrypt and render the media stream;

[0038] After the session description protocol negotiation is passed, the peer device uses the cached first quantum key to encrypt the media stream and then pushes the stream to the audio and video media service;

[0039] The connection device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream.

[0040] In the second aspect, the present application shows a quantum encrypted audio and video call device in a Hongmeng application connection scenario, the device comprising:

[0041] A quantum key generation module, used for the source device to generate a chat room identifier for an audio or video call, and to obtain a first quantum key corresponding to the chat room identifier from a quantum key distribution service platform;

[0042] An audio and video call module, configured to establish a communication connection between the source device and a peer device of the audio and video call based on the first quantum key, wherein the source device encrypts a media stream using the first quantum key and pushes the media stream to the peer device, and decrypts the media stream pushed by the peer device using the first quantum key;

[0043] The application connection module is used for detecting that a connection operation instruction is sent by a connection device, the source device generates a random number and splices it with a preset key value into a connection value, and obtains a second quantum key corresponding to the connection value from the quantum key distribution service platform; uses the decrypted second quantum key to encrypt the chat room identifier to obtain a connection operation ciphertext, and sends the connection operation ciphertext and the random number to the connection device;

[0044] The audio and video call module is used to respond to the connection establishment instruction sent by the connecting device, so that the opposite device establishes a connection with the connecting device, and the connecting device encrypts the media stream using the first quantum key and pushes it to the opposite device, and decrypts the media stream pushed by the opposite device using the first quantum key.

[0045] Optionally, the audio and video call module is specifically used for:

[0046] The source device sends an audio and video call instruction to an instant messaging signaling service, and the instant messaging signaling service notifies the peer device to accept the audio and video invitation;

[0047] The peer device answers the audio and video invitation, and obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier; and sends an audio and video answering instruction to the instant messaging signaling service;

[0048] The instant messaging signaling service notifies the source device that the peer device has answered the audio and video, and establishes a communication connection between the source device and the peer device.

[0049] Optionally, the audio and video call module is specifically used for:

[0050] The source device sets the first session description protocol information, carries the first session description protocol information through the HTTPS protocol, and sends the first streaming signaling to the audio and video media service;

[0051] The peer device sets the second session description protocol information, carries the second session description protocol information through the HTTPS protocol, and sends the second streaming signaling to the audio and video media service;

[0052] After the session description protocol negotiation is passed, the source device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the source device to push the stream;

[0053] The peer device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream;

[0054] After the session description protocol negotiation is passed, the peer device uses the decrypted first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the peer device to start pushing the stream;

[0055] The source device pulls the stream from the audio and video media service, and uses the decrypted quantum key to decrypt the media stream and then render it.

[0056] Optionally, the application connection module is specifically used to:

[0057] The source device starts the cross-end migration interface onContinue of the application component, generates a random number in the cross-end migration interface onContinue, and then generates a continuation value by combining the key value agreed on the end side;

[0058] In the cross-end migration interface onContinue, the second quantum key is obtained from the quantum key distribution service platform through the continuation value.

[0059] Optionally, the application connection module is specifically used to:

[0060] In the cross-end migration interface onContinue, the chat room identifier is encrypted using the decrypted second quantum key to obtain a ciphertext by performing national secret SM4 encryption;

[0061] In the cross-end migration interface onContinue, the continuation operation ciphertext and the random number are assembled into the data of the information transmission carrier wantParam.

[0062] Optionally, the audio and video call module is specifically used for:

[0063] In the cross-end migration interface onContinue, the source device sends a media interruption signaling to the instant messaging signaling service to notify the peer device to interrupt the audio and video connection; in the cross-end migration interface onContinue, the source device sends a notification of consent to continue to the Hongmeng distributed soft bus;

[0064] The soft bus transmits the data of the information transmission carrier wantParam to the connection device, and the connection device receives data in the migration data recovery interface onCreate / onNewWant of the application component; obtains the random number in the migration data recovery interface data, and generates a second quantum key with the key value agreed on the terminal side;

[0065] In the migration data recovery interface onCreate / onNewWant, the first quantum key is obtained from the quantum key distribution service platform through the continuation value; in the migration data recovery interface onCreate / onNewWant, the data ciphertext of the information transmission carrier wantParam is decrypted using the decrypted first quantum key to obtain the chat room identifier;

[0066] The opposite-end device and the connecting device establish a connecting connection based on the chat room identifier.

[0067] Optionally, the audio and video call module is further used to:

[0068] The connection device sets the third session description protocol information, carries the third session description protocol information through the HTTPS protocol, and sends the third streaming signaling to the audio and video media service;

[0069] The peer device sets fourth session description protocol information, carries the fourth session description protocol information through the HTTPS protocol, and sends the fourth streaming signaling to the audio and video media service;

[0070] After the session description protocol negotiation is passed, the connection device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service;

[0071] The peer device pulls the stream from the audio and video media service, and uses the cached first quantum key to decrypt and render the media stream;

[0072] After the session description protocol negotiation is passed, the peer device uses the cached first quantum key to encrypt the media stream and then pushes the stream to the audio and video media service;

[0073] The connection device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream.

[0074] In a third aspect, the present application shows an electronic device, which includes: a processor; a memory for storing processor-executable instructions; wherein the processor is configured to execute the method described in any of the above aspects.

[0075] In a fourth aspect, the present application illustrates a non-temporary computer-readable storage medium, which, when instructions in the storage medium are executed by a processor of an electronic device, enables the electronic device to execute a method as described in any of the above aspects.

[0076] In a fifth aspect, the present application illustrates a computer program product. When instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the method described in any of the above aspects.

[0077] The technical solution provided by this application may have the following beneficial effects:

[0078] From the above, it can be seen that in the application continuation scenario, this application provides a quantum encrypted audio and video call solution, which uses the principles of quantum mechanics to ensure communication security and generates a one-time key through quantum key distribution. The quantum key distribution service can provide quantum key distribution and quantum key management services to encrypt audio and video data, thereby achieving confidential communications that cannot be eavesdropped or cracked. It can be seen that this application reuses the same quantum key before and after the continuation, which complies with the one-time principle. In addition, the data between application continuations uses quantum encryption to ensure the security of data transmission within the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0079] Figure 1 A flowchart of the quantum encrypted audio and video call method in the Hongmeng application connection scenario provided in this application.

[0080] Figure 2 A signaling diagram for establishing a connection between a source device and a peer device provided in this application.

[0081] Figure 3 A signaling diagram for the connection process between the connection device and the source device provided in this application.

[0082] Figure 4 A signaling diagram for establishing a connection between a connection device and a peer device provided in this application.

[0083] Figure 5 A structural diagram of a quantum encrypted audio and video call device in the Hongmeng application connection scenario provided in this application.

[0084] Figure 6 It is a block diagram of an electronic device of the present application.

[0085] Figure 7 It is a block diagram of an electronic device of the present application. DETAILED DESCRIPTION

[0086] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0087] To solve the aforementioned problems, the present application provides a method and apparatus for quantum encrypted audio and video calls in a HarmonyOS application continuation scenario. It should be noted that the present application aims to provide a design scheme for cross-device application continuation of quantum encrypted audio and video calls in the HarmonyOS NEXT version of the operating system. The scheme provided in the present application mainly provides the details of the disconnection of the quantum encrypted audio and video call of the source device and the re-establishment of the quantum encrypted audio and video call of the continuation device.

[0088] The following is a detailed description of the quantum encrypted audio and video call method and device in the Hongmeng application connection scenario provided by this application.

[0089] Embodiment 1

[0090] See also Figure 1 , which is a flow chart of a quantum encrypted audio and video call method in the Hongmeng application connection scenario provided by this application, and the method includes:

[0091] Step S101: The source device generates a chat room identifier for an audio or video call, and obtains a first quantum key corresponding to the chat room identifier from a quantum key distribution service platform.

[0092] Step S102: Establish a communication connection between the source device and the peer device of the audio and video call based on the first quantum key, the source device encrypts the media stream using the first quantum key and pushes it to the peer device, and decrypts the media stream pushed by the peer device using the first quantum key. It should be noted that the peer device is the target device of the audio and video call between the source device and the connecting device in the Hongmeng application continuation scenario.

[0093] In one scenario, a communication connection between the source device and the peer device of the audio and video call is established in the following manner: the source device sends an audio and video call instruction to an instant messaging signaling service, and the instant messaging signaling service notifies the peer device to accept the audio and video invitation; the peer device answers the audio and video invitation, and obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier; and sends an answer audio and video instruction to the instant messaging signaling service; the instant messaging signaling service notifies the source device that the peer device has answered the audio and video, and establishes a communication connection between the source device and the peer device.

[0094] Specifically, the source device sets the first session description protocol information, carries the first session description protocol information through the HTTPS protocol, and sends the first push stream signaling to the audio and video media service; the peer device sets the second session description protocol information, carries the second session description protocol information through the HTTPS protocol, and sends the second push stream signaling to the audio and video media service; after the session description protocol negotiation is passed, the source device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the source device to push the stream; the peer device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt the media stream and then render it; after the session description protocol negotiation is passed, the peer device uses the decrypted first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the peer device to start pushing the stream; the source device pulls the stream from the audio and video media service, and uses the decrypted quantum key to decrypt the media stream and then render it. It should be noted that the audio and video media service can provide audio and video media, network, protocol, configuration, push and pull stream services.

[0095] Step S103: When a connection operation instruction is detected to be sent by a connection device, the source device generates a random number and concatenates it with a preset key value into a connection value, and obtains a second quantum key corresponding to the connection value from the quantum key distribution service platform; uses the decrypted second quantum key to encrypt the chat room identifier to obtain a connection operation ciphertext, and sends the connection operation ciphertext and the random number to the connection device.

[0096] Specifically, the source device starts the cross-end migration interface onContinue of the application component. In the cross-end migration interface onContinue, a random number is generated, and then the key value agreed on the end side is concatenated to generate a continuation value; in the cross-end migration interface onContinue, the second quantum key is obtained from the quantum key distribution service platform through the continuation value.

[0097] Specifically, in the cross-end migration interface onContinue, the chat room identifier is encrypted using the decrypted second quantum key using the national secret SM4 to obtain a ciphertext; in the cross-end migration interface onContinue, the connection operation ciphertext and the random number are assembled into the data of the information transmission carrier wantParam.

[0098] Step S104: In response to the connection establishment instruction sent by the connecting device, the opposite device establishes a connection with the connecting device, and the connecting device encrypts the media stream using the first quantum key and pushes it to the opposite device, and decrypts the media stream pushed by the opposite device using the first quantum key.

[0099] In one scenario, the connection establishment instruction sent by the connection device is responded to in the following manner: the connection device initiates a connection operation instruction to the HarmonyOS distributed soft bus; the HarmonyOS distributed soft bus notifies the source device that there is a connection operation.

[0100] Specifically, the following method can be used to respond to the connection establishment instruction sent by the connecting device and establish a connection between the opposite device and the connecting device: in the cross-end migration interface onContinue, the source device sends a connection media interruption signaling to the instant messaging signaling service to notify the opposite device to interrupt the audio and video connection; in the cross-end migration interface onContinue, the source device sends a connection consent notification to the Hongmeng distributed soft bus; the soft bus transmits the data of the information transmission carrier wantParam to the connecting device, and the connecting device returns to the application component in the migration data recovery interface onCre ate / onNewWant; obtain the random number in the migration data recovery interface data, and generate a second quantum key with the key value agreed on the end side; in the migration data recovery interface onCreate / onNewWant, obtain the first quantum key from the quantum key distribution service platform through the continuation value; in the migration data recovery interface onCreate / onNewWant, use the decrypted first quantum key to decrypt the data ciphertext of the information transfer carrier wantParam to obtain the chat room identifier; the opposite device and the continuation device establish a continuation connection based on the chat room identifier.

[0101] In one scenario, the peer device and the connecting device can establish a connecting connection in the following manner: the connecting device obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier in the migration data recovery interface onCreate / onNewWant, and sends a connecting connection signaling to the instant messaging signaling service; the instant messaging signaling service notifies the peer device that the connecting device is about to start the connecting connection; the peer device sends a connecting connection ACK confirmation character signaling to the instant messaging signaling service; the instant messaging signaling service notifies the connecting device that the peer device has confirmed the connecting connection.

[0102] In one scenario, the connection device may encrypt the media stream and push it to the peer device, as well as the media stream pushed by the peer device, in the following manner: the connection device sets third session description protocol information, carries the third session description protocol information through the HTTPS protocol, and sends the third push signaling to the audio and video media service; the peer device sets fourth session description protocol information, carries the fourth session description protocol information through the HTTPS protocol, and sends the fourth push signaling to the audio and video media service; after the session description protocol negotiation is passed, the connection device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; the peer device pulls the stream from the audio and video media service, and uses the cached first quantum key to decrypt the media stream and then render it; after the session description protocol negotiation is passed, the peer device uses the cached first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; the connection device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt the media stream and then render it.

[0103] From the above, it can be seen that in the application connection scenario, this application provides a quantum encrypted audio and video call solution, which uses the principles of quantum mechanics to ensure communication security, generates a one-time key through quantum key distribution, and encrypts the audio and video data, thereby achieving confidential communication that cannot be eavesdropped or cracked. It can be seen that this application reuses the same quantum key before and after the connection, which complies with the one-time principle. In addition, the data between application connections uses quantum encryption to ensure the security of data transmission within the network.

[0104] Combine the following Figures 2 to 4 , a detailed description of the quantum encrypted audio and video call method in the Hongmeng application connection scenario provided by this application is given.

[0105] See also Figure 2 , is a signaling diagram for establishing a connection between a source device and a peer device provided by the present application. Specifically, the process of establishing a connection between the source device and the peer device is as follows:

[0106] 1.1 The source device generates a chat room ID roomID.

[0107] 1.2 Obtain the session key encrypted by the injection key, i.e., the first quantum key, from the quantum key distribution service platform according to the chat room identifier roomID.

[0108] 1.3 Send audio and video call signaling to the IM signaling service, IM signaling service (instant messaging signaling service), which is a websocket long link signaling service.

[0109] 1.4IM signaling service notifies the peer device of the audio or video invitation.

[0110] 1.5 The other device receives the audio and video.

[0111] 1.6 The peer device obtains the session key encrypted by the injection key, i.e., the first quantum key, from the quantum key distribution service platform according to the chat room identifier roomID.

[0112] 1.7 The peer device sends and receives audio and video signaling.

[0113] 1.8 The IM signaling service notifies the source device to the peer device to listen to the audio or video.

[0114] 1.9 The source device sets SDP information, SDP (Session Description Protocol).

[0115] 1.10 The source device carries SDP information through HTTPS and sends streaming signaling to the audio and video media service.

[0116] 1.11 The peer device sets the SDP information.

[0117] 1.12 The peer device carries SDP information through HTTPS and sends streaming signaling to the audio and video media service.

[0118] 1.13 After SDP negotiation, the source device uses the injection key to decrypt the session key to obtain the quantum key (i.e., the first quantum key), then uses the quantum key to encrypt the media stream and pushes the stream to the media service.

[0119] 1.14 Notify the source device to start streaming.

[0120] 1.15 The peer device starts pulling the stream from the media service, that is, pulling the quantum encrypted media stream.

[0121] 1.16 The peer device uses the decrypted quantum key (i.e., the first quantum key) to decrypt the media stream and then render it.

[0122] 1.17 After SDP negotiation, the peer device uses the decrypted quantum key (i.e., the first quantum key) to encrypt the media stream and then push the stream to the media service.

[0123] 1.18 The source device notifies the peer device to start streaming.

[0124] 1.19 The source device starts pulling the stream from the media service, that is, pulling the quantum encrypted media stream.

[0125] 1.20 The source device uses the decrypted quantum key to decrypt the media stream and then render it.

[0126] See also Figure 3 , is a signaling diagram of a connection process between a connection device and a source device provided in the present application. Specifically, the connection process between the connection device and the source device is as follows:

[0127] 2.1 The connecting device initiates the connection operation to the Hongmeng distributed soft bus.

[0128] 2.2 The Hongmeng distributed soft bus notifies the source device that there is a follow-up operation.

[0129] 2.3 The cross-end migration interface onContinue of the application component EntryAbility of the source device application will be executed, such as assembling the continued data.

[0130] 2.4 In the cross-end migration interface onContinue, a random number randomID is generated, and then the key value key agreed on the end side is concatenated to generate a continuation value continueKey.

[0131] 2.5 In the cross-end migration interface onContinue, the session key encrypted by the injection key, i.e. the second quantum key, is obtained from the quantum key distribution service platform through continueKey.

[0132] 2.6 In the cross-end migration interface onContinue, the decrypted quantum key (i.e., the second quantum key) is used to encrypt the roomID using the national secret SM4 to obtain the ciphertext.

[0133] 2.7 In the cross-end migration interface onContinue, assemble the ciphertext and random number randomID into the data of wantParam.

[0134] 2.8 In the cross-end migration interface onContinue, a media interruption signaling is sent to notify the peer device to interrupt the audio and video connection.

[0135] 2.9 In the cross-end migration interface onContinue, notify the Hongmeng distributed soft bus to agree to continue.

[0136] 2.10 The soft bus transfers the data in the information transfer carrier wantParam to the connecting device.

[0137] 2.11 The connecting device receives data in the migration data recovery interface onCreate / onNewWant of the application component EntryAbility of the application.

[0138] 2.12 In the migration data recovery interface onCreate / onNewWant, get the random number randomID from the data data and generate the continuation value continueKey with the key agreed on the client side.

[0139] 2.13 In the migration data recovery interface onCreate / onNewWant, the session key encrypted by the injection key, i.e. the second quantum key, is obtained from the quantum key distribution service platform through the continuation value continueKey.

[0140] 2.14 In the migration data recovery interface onCreate / onNewWant, use the decrypted quantum key to decrypt the ciphertext of data to obtain the chat room identifier roomID.

[0141] See also Figure 4 , is a signaling diagram for establishing a connection between a connecting device and a peer device provided by the present application. Specifically, the process of establishing a connection between the connecting device and the peer device is as follows:

[0142] 3.1 In the migration data recovery interface onCreate / onNewWant, the connecting device obtains the session key encrypted by the injection key, i.e., the first quantum key, from the quantum key distribution service platform according to the chat room identifier roomID.

[0143] 3.2 The connecting device sends a connection establishing signaling to the IM signaling service in the migration data recovery interface onCreate / onNewWant.

[0144] 3.3 The IM signaling service notifies the peer device that the connecting device is about to start establishing the connection.

[0145] 3.4 The peer device sends a signaling of a connection establishment ACK confirmation character to the IM signaling service.

[0146] 3.5 The IM signaling service notifies the connecting device that the other end device has confirmed the connection establishment.

[0147] 3.6 The connecting device sets the SDP information.

[0148] 3.7 The connecting device carries SDP information through HTTPS and sends streaming signaling to the audio and video media service.

[0149] 3.8 The peer device sets the SDP information.

[0150] 3.9 The peer device carries SDP information through HTTPS and sends streaming signaling to the audio and video media service.

[0151] 3.10 After SDP negotiation, the connecting device uses the injection key to decrypt the session key to obtain the quantum key (i.e., the first quantum key), then uses the quantum key to encrypt the media stream and pushes the stream to the media service.

[0152] 3.11 The IM signaling service notifies the source device to start streaming.

[0153] 3.12 The peer device starts pulling the stream from the media service.

[0154] 3.13 The peer device uses the cached quantum key (i.e., the first quantum key) to decrypt the media stream and then render it.

[0155] 3.14 After SDP negotiation, the peer device uses the cached quantum key (i.e., the first quantum key) to encrypt the media stream and then push the stream to the media service.

[0156] 3.15 The IM signaling service notifies the peer device to start streaming.

[0157] 3.16 The connecting device starts pulling the stream from the media service, that is, pulling the quantum encrypted media stream.

[0158] 3.17 The connecting device uses the decrypted quantum key to decrypt the media stream and then render it.

[0159] It can be seen that in the application connection scenario, a one-time key is generated through quantum key distribution to encrypt audio and video data, thereby achieving confidential communication that cannot be eavesdropped or cracked. This application reuses the same quantum key before and after the connection, which complies with the one-time key principle. In addition, the data between application connections uses quantum encryption to ensure the security of data transmission within the network.

[0160] It should be noted that, for the method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the order of the actions described, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions involved are not necessarily required by the present application.

[0161] Embodiment 2

[0162] Reference Figure 5, which is a structural diagram of a quantum encrypted audio and video call device in the Hongmeng application connection scenario provided in the application, and the device includes:

[0163] A quantum key generation module 210 is used for the source device to generate a chat room identifier for an audio or video call, and obtain a first quantum key corresponding to the chat room identifier from a quantum key distribution service platform;

[0164] An audio and video call module 220 is used to establish a communication connection between the source device and a peer device of the audio and video call based on the first quantum key, the source device encrypts the media stream using the first quantum key and pushes it to the peer device, and decrypts the media stream pushed by the peer device using the first quantum key;

[0165] The application connection module 230 is used for detecting that a connection operation instruction is sent by a connection device, the source device generates a random number and splices it with a preset key value into a connection value, and obtains a second quantum key corresponding to the connection value from the quantum key distribution service platform; uses the decrypted second quantum key to encrypt the chat room identifier to obtain a connection operation ciphertext, and sends the connection operation ciphertext and the random number to the connection device;

[0166] The audio and video call module 220 is used to respond to the connection establishment instruction sent by the connecting device, and the other device establishes a connection with the connecting device, and the connecting device encrypts the media stream using the first quantum key and pushes it to the other device, and decrypts the media stream pushed by the other device using the first quantum key.

[0167] In one scenario, the audio and video call module 220 is specifically used for the source device to send an audio and video call instruction to an instant messaging signaling service, and the instant messaging signaling service notifies the opposite device to accept the audio and video invitation; the opposite device answers the audio and video invitation, and obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier; and sends an answer audio and video instruction to the instant messaging signaling service; the instant messaging signaling service notifies the source device that the opposite device has answered the audio and video, and establishes a communication connection between the source device and the opposite device.

[0168] In one scenario, the audio and video call module 220 is specifically used for the source device to set the first session description protocol information, and carry the first session description protocol information through the HTTPS protocol, and send the first push stream signaling to the audio and video media service; the peer device sets the second session description protocol information, and carries the second session description protocol information through the HTTPS protocol, and sends the second push stream signaling to the audio and video media service; after the session description protocol negotiation is passed, the source device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the source device to push the stream; the peer device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt the media stream and then render it; after the session description protocol negotiation is passed, the peer device uses the decrypted first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the peer device to start pushing the stream; the source device pulls the stream from the audio and video media service, and uses the decrypted quantum key to decrypt the media stream and then render it.

[0169] In one scenario, the application continuation module 230 is specifically used for the source device to start the cross-end migration interface onContinue of the application component. In the cross-end migration interface onContinue, a random number is generated, and then the key value agreed on the end side is concatenated to generate a continuation value; in the cross-end migration interface onContinue, the second quantum key is obtained from the quantum key distribution service platform through the continuation value.

[0170] In one scenario, the application continuation module 230 is specifically used to use the decrypted second quantum key to perform national secret SM4 encryption on the chat room identifier to obtain a ciphertext in the cross-end migration interface onContinue; in the cross-end migration interface onContinue, assemble the continuation operation ciphertext and the random number into the data of the information transmission carrier wantParam.

[0171] In one scenario, the audio and video call module 220 is specifically used for, in the cross-end migration interface onContinue, the source device sends a media interruption signaling to the instant messaging signaling service to notify the peer device to interrupt the audio and video connection; in the cross-end migration interface onContinue, the source device sends a continuation consent notification to the Hongmeng distributed soft bus; the soft bus transmits the data of the information transmission carrier wantParam to the continuation device, and the continuation device receives the data in the migration data recovery interface onCreate / onNewWant of the application component; obtains the random number in the migration data recovery interface data, and generates a second quantum key with the key value agreed on the end side; in the migration data recovery interface onCreate / onNewWant, obtains the first quantum key from the quantum key distribution service platform through the continuation value; in the migration data recovery interface onCreate / onNewWant, uses the decrypted first quantum key to decrypt the data ciphertext of the information transmission carrier wantParam to obtain a chat room identifier; the peer device and the continuation device establish a continuation connection based on the chat room identifier.

[0172] In one scenario, the audio and video call module 220 is also used for the connection device to set the third session description protocol information, and carry the third session description protocol information through the HTTPS protocol, and send the third push signaling to the audio and video media service; the opposite device sets the fourth session description protocol information, and carries the fourth session description protocol information through the HTTPS protocol, and sends the fourth push signaling to the audio and video media service; after the session description protocol negotiation is passed, the connection device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; the opposite device pulls the stream from the audio and video media service, and uses the cached first quantum key to decrypt the media stream and then render it; after the session description protocol negotiation is passed, the opposite device uses the cached first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; the connection device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt the media stream and then render it.

[0173] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0174] Embodiment 3

[0175] Optionally, an embodiment of the present application further provides an electronic device, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be described here.

[0176] The embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it is not repeated here. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0177] Figure 6 800 is a block diagram of an electronic device 800 shown in the present application. For example, the electronic device 800 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0178] Reference Figure 6 , the electronic device 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input / output (I / O) interface 812 , a sensor component 814 , and a communication component 816 .

[0179] The processing component 802 generally controls the overall operation of the electronic device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to complete all or part of the steps of the above method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.

[0180] The memory 804 is configured to store various types of data to support operations on the device 800. Examples of such data include instructions for any application or method operating on the electronic device 800, contact data, phone book data, messages, images, videos, etc. The memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0181] The power supply component 806 provides power to the various components of the electronic device 800. The power supply component 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to the electronic device 800.

[0182] The multimedia component 808 includes a screen that provides an output interface between the electronic device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and / or a rear camera. When the device 800 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and the rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0183] The audio component 810 is configured to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC), and when the electronic device 800 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 804 or sent via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.

[0184] I / O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: a home button, a volume button, a start button, and a lock button.

[0185] The sensor assembly 814 includes one or more sensors for providing various aspects of status assessment for the electronic device 800. For example, the sensor assembly 814 can detect the open / closed state of the device 800, the relative positioning of components, such as the display and keypad of the electronic device 800, and the sensor assembly 814 can also detect the position change of the electronic device 800 or a component of the electronic device 800, the presence or absence of contact between the user and the electronic device 800, the orientation or acceleration / deceleration of the electronic device 800, and the temperature change of the electronic device 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 814 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an accelerometer, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0186] The communication component 816 is configured to facilitate wired or wireless communication between the electronic device 800 and other devices. The electronic device 800 can access a wireless network based on a communication standard, such as WiFi, a carrier network (such as 2G, 3G, 4G or 5G), or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast operation information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0187] In an exemplary embodiment, the electronic device 800 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above methods.

[0188] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, and the instructions can be executed by a processor 820 of an electronic device 800 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0189] Embodiment 4

[0190] Figure 7 1 is a block diagram of an electronic device 1900 shown in the present application. For example, the electronic device 1900 may be provided as a server.

[0191] Reference Figure 7 , the electronic device 1900 includes a processing component 1922, which further includes one or more processors, and a memory resource represented by a memory 1932 for storing instructions executable by the processing component 1922, such as an application. The application stored in the memory 1932 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 1922 is configured to execute instructions to perform the above method.

[0192] The electronic device 1900 may also include a power supply component 1926 configured to perform power management of the electronic device 1900, a wired or wireless network interface 1950 configured to connect the electronic device 1900 to a network, and an input / output (I / O) interface 1958. The electronic device 1900 may operate based on an operating system stored in the memory 1932, such as Windows Server™, Mac OS X™, Unix™, Linux™, FreeBSD™ or the like.

[0193] Embodiment 5

[0194] In a fifth aspect, the present application illustrates a computer program product. When instructions in the computer program product are executed by a processor of an electronic device, the electronic device is enabled to execute the method described in any of the above aspects.

[0195] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0196] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0197] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

[0198] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed in the present application can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0199] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0200] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0201] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0202] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0203] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard drives, ROM, RAM, magnetic disks, or optical disks.

[0204] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A quantum encrypted audio and video call method in a Hongmeng application connection scenario, characterized in that: The method comprises: The source device generates a chat room identifier for the audio and video call, and obtains a first quantum key corresponding to the chat room identifier from a quantum key distribution service platform; Establishing a communication connection between the source device and a peer device of the audio or video call based on the first quantum key, the source device encrypting a media stream using the first quantum key and pushing the media stream to the peer device, and decrypting the media stream pushed by the peer device using the first quantum key; When a connection operation instruction is detected to be sent by a connection device, the source device generates a random number and concatenates it with a preset key value to form a connection value, and obtains a second quantum key corresponding to the connection value from the quantum key distribution service platform; uses the decrypted second quantum key to perform national secret encryption on the chat room identifier to obtain a connection operation ciphertext, and sends the connection operation ciphertext and the random number to the connection device; In response to the connection establishment instruction sent by the connection device, the peer device establishes a connection with the connection device, and the connection device encrypts the media stream using the first quantum key and pushes it to the peer device, and decrypts the media stream pushed by the peer device using the first quantum key.

2. The quantum encrypted audio and video call method in the Hongmeng application connection scenario according to claim 1 is characterized in that: The step of establishing a communication connection between the source device and a peer device of the audio or video call based on the first quantum key includes: The source device sends an audio and video call instruction to an instant messaging signaling service, and the instant messaging signaling service notifies the peer device to accept the audio and video invitation; The peer device answers the audio and video invitation, and obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier; and sends an audio and video answering instruction to the instant messaging signaling service; The instant messaging signaling service notifies the source device that the peer device has answered the audio and video, and establishes a communication connection between the source device and the peer device.

3. The quantum encrypted audio and video call method in the Hongmeng application connection scenario according to claim 2 is characterized in that: The steps of the source device encrypting the media stream by using the first quantum key and pushing the media stream to the peer device, and decrypting the media stream pushed by the peer device by using the first quantum key include: The source device sets the first session description protocol information, carries the first session description protocol information through the HTTPS protocol, and sends the first streaming signaling to the audio and video media service; The peer device sets the second session description protocol information, carries the second session description protocol information through the HTTPS protocol, and sends the second streaming signaling to the audio and video media service; After the session description protocol negotiation is passed, the source device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the source device to push the stream; The peer device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream; After the session description protocol negotiation is passed, the peer device uses the decrypted first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the peer device to start pushing the stream; The source device pulls the stream from the audio and video media service, and uses the decrypted quantum key to decrypt the media stream and then render it.

4. The quantum encrypted audio and video call method in the Hongmeng application connection scenario according to claim 1 is characterized in that: The source device generates a random number and concatenates it with a preset key value to form a continuation value, and obtains a second quantum key corresponding to the continuation value from the quantum key distribution service platform, including: The source device starts the cross-end migration interface onContinue of the application component, generates a random number in the cross-end migration interface onContinue, and then generates a continuation value by combining the key value agreed on the end side; In the cross-end migration interface onContinue, the second quantum key is obtained from the quantum key distribution service platform through the continuation value.

5. The quantum encrypted audio and video call method in the Hongmeng application connection scenario according to claim 4 is characterized in that: The step of using the decrypted second quantum key to perform national encryption on the chat room identifier to obtain a connection operation ciphertext, and sending the connection operation ciphertext and the random number to the connection device includes: In the cross-end migration interface onContinue, the chat room identifier is encrypted using the decrypted second quantum key to obtain a ciphertext by performing national secret SM4 encryption; In the cross-end migration interface onContinue, the continuation operation ciphertext and the random number are assembled into the data of the information transmission carrier wantParam.

6. The quantum encrypted audio and video call method in the Hongmeng application connection scenario according to claim 4 is characterized in that: The step of establishing a connection between the opposite device and the connection device in response to the connection establishment instruction sent by the connection device comprises: In the cross-end migration interface onContinue, the source device sends a media interruption signaling to the instant messaging signaling service to notify the peer device to interrupt the audio and video connection; in the cross-end migration interface onContinue, the source device sends a notification of consent to continue to the Hongmeng distributed soft bus; The soft bus transmits the data of the information transmission carrier wantParam to the connection device, and the connection device receives data in the migration data recovery interface onCreate / onNewWant of the application component; obtains the random number in the migration data recovery interface data, and generates a second quantum key with the key value agreed on the terminal side; In the migration data recovery interface onCreate / onNewWant, the first quantum key is obtained from the quantum key distribution service platform through the continuation value; in the migration data recovery interface onCreate / onNewWant, the data ciphertext of the information transmission carrier wantParam is decrypted using the decrypted first quantum key to obtain the chat room identifier; The opposite-end device and the connecting device establish a connecting connection based on the chat room identifier.

7. The quantum encrypted audio and video call method in the Hongmeng application connection scenario according to claim 1 is characterized in that: The step of the connection device encrypting the media stream by using the first quantum key and pushing the media stream to the peer device, and decrypting the media stream pushed by the peer device by using the first quantum key includes: The connection device sets the third session description protocol information, carries the third session description protocol information through the HTTPS protocol, and sends the third streaming signaling to the audio and video media service; The opposite device sets fourth session description protocol information, carries the fourth session description protocol information through the HTTPS protocol, and sends the fourth streaming signaling to the audio and video media service; After the session description protocol negotiation is passed, the connection device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; The peer device pulls the stream from the audio and video media service, and uses the cached first quantum key to decrypt and render the media stream; After the session description protocol negotiation is passed, the peer device uses the cached first quantum key to encrypt the media stream and then pushes the stream to the audio and video media service; The connection device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream.

8. A quantum encrypted audio and video call device in a Hongmeng application connection scenario, characterized in that: The device comprises: A quantum key generation module, used for the source device to generate a chat room identifier for an audio or video call, and to obtain a first quantum key corresponding to the chat room identifier from a quantum key distribution service platform; An audio and video call module, configured to establish a communication connection between the source device and a peer device of the audio and video call based on the first quantum key, wherein the source device encrypts a media stream using the first quantum key and pushes the media stream to the peer device, and decrypts the media stream pushed by the peer device using the first quantum key; The application connection module is used for detecting that a connection operation instruction is sent by a connection device, the source device generates a random number and splices it with a preset key value into a connection value, and obtains a second quantum key corresponding to the connection value from the quantum key distribution service platform; uses the decrypted second quantum key to encrypt the chat room identifier to obtain a connection operation ciphertext, and sends the connection operation ciphertext and the random number to the connection device; The audio and video call module is used to respond to the connection establishment instruction sent by the connecting device, so that the opposite device establishes a connection with the connecting device, and the connecting device encrypts the media stream using the first quantum key and pushes it to the opposite device, and decrypts the media stream pushed by the opposite device using the first quantum key.

9. The quantum encrypted audio and video call device in the Hongmeng application connection scenario according to claim 8 is characterized in that: The audio and video call module is specifically used for: The source device sends an audio and video call instruction to an instant messaging signaling service, and the instant messaging signaling service notifies the peer device to accept the audio and video invitation; The peer device answers the audio and video invitation, and obtains the first quantum key from the quantum key distribution service platform according to the chat room identifier; And send an audio and video answering instruction to the instant messaging signaling service; The instant messaging signaling service notifies the source device that the peer device has answered the audio and video, and establishes a communication connection between the source device and the peer device.

10. The quantum encrypted audio and video call device in the Hongmeng application connection scenario according to claim 9 is characterized in that: The audio and video call module is specifically used for: The source device sets the first session description protocol information, carries the first session description protocol information through the HTTPS protocol, and sends the first streaming signaling to the audio and video media service; The peer device sets the second session description protocol information, carries the second session description protocol information through the HTTPS protocol, and sends the second streaming signaling to the audio and video media service; After the session description protocol negotiation is passed, the source device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; And the instant messaging signaling service notifies the source device to push the stream; The peer device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream; After the session description protocol negotiation is passed, the peer device uses the decrypted first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; and the instant messaging signaling service notifies the peer device to start pushing the stream; The source device pulls the stream from the audio and video media service, and uses the decrypted quantum key to decrypt the media stream and then render it.

11. The quantum encrypted audio and video call device in the Hongmeng application connection scenario according to claim 8 is characterized in that: The application connection module is specifically used for: The source device starts the cross-end migration interface onContinue of the application component, generates a random number in the cross-end migration interface onContinue, and then generates a continuation value by combining the key value agreed on the end side; In the cross-end migration interface onContinue, the second quantum key is obtained from the quantum key distribution service platform through the continuation value.

12. The quantum encrypted audio and video call device in the Hongmeng application connection scenario according to claim 11 is characterized in that: The application connection module is specifically used for: In the cross-end migration interface onContinue, the chat room identifier is encrypted using the decrypted second quantum key to obtain a ciphertext by performing national secret SM4 encryption; In the cross-end migration interface onContinue, the continuation operation ciphertext and the random number are assembled into the data of the information transmission carrier wantParam.

13. The quantum encrypted audio and video call device in the Hongmeng application connection scenario according to claim 11 is characterized in that: The audio and video call module is specifically used for: In the cross-end migration interface onContinue, the source device sends a media interruption signaling to the instant messaging signaling service to notify the peer device to interrupt the audio and video connection; In the cross-end migration interface onContinue, the source device sends a notification of consent to continue to the Hongmeng distributed soft bus; The soft bus transmits the data of the information transmission carrier wantParam to the connection device, and the connection device receives the data in the migration data recovery interface onCreate / onNewWant of the application component; Obtain the random number in the migration data recovery interface data, and generate a second quantum key with the key value agreed upon by the terminal side; In the migration data recovery interface onCreate / onNewWant, the first quantum key is obtained from the quantum key distribution service platform through the continuation value; in the migration data recovery interface onCreate / onNewWant, the data ciphertext of the information transmission carrier wantParam is decrypted using the decrypted first quantum key to obtain the chat room identifier; The opposite-end device and the connecting device establish a connecting connection based on the chat room identifier.

14. The quantum encrypted audio and video call device in the Hongmeng application connection scenario according to claim 8 is characterized in that: The audio and video call module is also used for: The connection device sets the third session description protocol information, carries the third session description protocol information through the HTTPS protocol, and sends the third streaming signaling to the audio and video media service; The opposite device sets fourth session description protocol information, carries the fourth session description protocol information through the HTTPS protocol, and sends the fourth streaming signaling to the audio and video media service; After the session description protocol negotiation is passed, the connection device uses the first quantum key to encrypt the media stream, and then pushes the stream to the audio and video media service; The peer device pulls the stream from the audio and video media service, and uses the cached first quantum key to decrypt and render the media stream; After the session description protocol negotiation is passed, the peer device uses the cached first quantum key to encrypt the media stream and then pushes the stream to the audio and video media service; The connection device pulls the stream from the audio and video media service, and uses the decrypted first quantum key to decrypt and render the media stream.

15. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program implements the method according to any one of claims 1 to 7 when executed by the processor.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

17. A computer program product, characterized in that When the instructions in the computer program product are executed by a processor of an electronic device, the electronic device performs the method as claimed in any one of claims 1 to 7.

Images