Universe quantum security unicast source broadcast network communication system

Abstract

The invention relates to the technical field of information security, in particular to a global quantum security unicast source broadcast network communication system. According to the scheme, the quantum broadcast key is distributed and supplemented in a broadcast mode, the complexity of key management is simplified, and the key distribution efficiency is improved; the supplementary quantum broadcast key is sent in an encryption mode, and only a legal receiving end with a corresponding decryption key can decrypt and use the supplementary quantum broadcast key, so that the supplementary quantum broadcast key is protected in a distribution process; when the supplementary quantum broadcast key plaintext is obtained through decryption, each receiving end independently downloads the encryption key, so that the personalized security of the key is ensured, and the leakage and abuse of the key are prevented; and the high efficiency and safety of key distribution are ensured.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a global quantum secure unicast source broadcast network communication system. Background Art

[0002] Among existing communication technologies, global quantum secure encrypted communication is a symmetric encryption method based on true random numbers and one-time pad, which provides extremely high security for communication. In this communication mode, the two ends of the communication form symmetric keys by presetting, manually distributing or distributing them online. Since these keys are generated by true random numbers, the two ends of the communication have unique symmetric keys, thus ensuring the high security of the communication process.

[0003] In unicast and multicast communications, the receiver needs to join the network and the communication message has a clear destination. Even in multicast communication, there are multiple clear destinations, that is, there are clear recipients. This communication method can work effectively in many application scenarios because it allows precise control of the flow of information.

[0004] However, in broadcast network communication, the situation is different. In a broadcast network, as long as the device is in the network, usually any device can receive the broadcast message without special conversion. This communication mode is widely used in fields such as smart transportation, reservoir management, finance and medical care because it can efficiently transmit information to all devices in the network.

[0005] Although broadcast communication has its unique application value in many fields, its communication security is challenging. Since the recipients of broadcast messages are not specific but all devices in the network, this means that traditional encryption methods based on symmetric keys are difficult to directly apply to broadcast communication. Therefore, how to ensure unconditional security of communication when communicating through broadcast in these fields has become an urgent problem to be solved. Summary of the invention

[0006] To solve the above problems, the present application discloses a global quantum secure unicast source broadcast network communication system, which includes: a broadcast device, an access base station and a key center; the broadcast device includes a broadcast terminal and a broadcast source, and the broadcast terminal and the broadcast source are connected to the corresponding access base station after authentication;

[0007] The broadcast device, access base station and key center all have an IP address of the broadcast network; the broadcast message sent by the broadcast source is broadcast to the corresponding broadcast terminal based on the broadcast address, and the broadcast message is encrypted by the quantum broadcast key;

[0008] The key center is used to distribute quantum broadcast keys to broadcast devices in a broadcasting form, and the quantum broadcast keys are distributed in ciphertext form. The key center is also used to send encryption keys used to encrypt quantum broadcast keys to access base stations upon request after authentication is passed. The quantum broadcast keys are used to encrypt and decrypt broadcast messages of broadcast sources;

[0009] The access base station is also used to request the encryption key from the corresponding key center according to the request of the broadcasting device, and after obtaining the corresponding encryption key, encrypt the encryption key using the communication key shared between it and the broadcasting device to obtain the encryption key ciphertext, and then forward the encryption key ciphertext to the corresponding broadcasting device.

[0010] The key center identifies the quantum broadcast key pool through a broadcast address, and uses the broadcast address as the management and monitoring object of the quantum broadcast key pool.

[0011] The broadcast terminal and the broadcast source access the access base station according to the initial preset key, and the access base station authenticates and verifies the terminal. When the broadcast terminal is legal and has the broadcast authority, the access base station grants the broadcast authority to the terminal or the broadcast source.

[0012] Symmetric communication keys are respectively configured between the broadcast terminal and the broadcast source and their corresponding access base stations, and the symmetric communication keys are used to encrypt communication data between the broadcast terminal and the broadcast source and their corresponding access base stations.

[0013] The process of the key center distributing the quantum broadcast key to the broadcast device in the form of broadcasting includes:

[0014] S101: Send a quantum broadcast key supplement request to its access base station through a broadcast source, carrying a broadcast address, and encrypting the quantum broadcast key supplement request with a symmetric communication key paired with the access base station;

[0015] S102: The access base station receives and decrypts the quantum broadcast key supplement request, selects a key center based on the broadcast configuration, and sends a quantum broadcast key distribution request to it;

[0016] S103: The key center receives the quantum broadcast key distribution request, establishes a quantum broadcast key pool based on the broadcast address, generates a supplementary quantum broadcast key and its corresponding encryption key for the quantum broadcast key pool; then uses the encryption key to encrypt the supplementary quantum broadcast key, and sends the supplementary quantum broadcast key ciphertext to the terminal and the broadcast source;

[0017] S104: After receiving the supplementary quantum broadcast key ciphertext, the terminal and the broadcast source decrypt it to obtain the corresponding supplementary quantum broadcast key.

[0018] The process of the terminal and the broadcast source obtaining the encryption key includes:

[0019] S111: The broadcast terminal or broadcast source requests an encryption key from its corresponding access base station, carrying the device identity, broadcast address and index of the supplementary quantum broadcast key, and sends the encryption key distribution request through symmetric communication key encryption;

[0020] S112: The access base station receives and decrypts the encryption key distribution request, and authenticates it. If the authentication is successful, it queries and matches the key center according to the broadcast address, and sends an encryption key download request to it, carrying the broadcast address and the supplementary broadcast key index;

[0021] S113: After receiving the encryption key download request, the key center matches the corresponding quantum broadcast key pool based on the broadcast address, matches the corresponding encryption key based on the supplementary broadcast key index, and carries it in the encryption key download response message and sends it to the access base station;

[0022] S114: After receiving the encryption key download response message, the access base station encrypts it using the symmetric communication key paired with the terminal and the broadcast source, and then carries the encryption key ciphertext in the distribution response message and forwards it to the corresponding broadcast terminal or broadcast source;

[0023] S115: The broadcast terminal or broadcast source receives the encryption key ciphertext, uses the symmetric communication key paired with the access base station to decrypt the encryption key ciphertext to obtain the encryption key; then uses the encryption key to decrypt the supplementary quantum broadcast key ciphertext to obtain the quantum broadcast key;

[0024] S116: When the broadcast source sends a broadcast message, it uses the acquired quantum broadcast key to encrypt the broadcast message to obtain a broadcast message ciphertext, and broadcasts the broadcast message ciphertext to the corresponding broadcast terminal according to the broadcast address, and carries the key index corresponding to the broadcast key used for encryption;

[0025] S117: The broadcast terminal determines a corresponding decryption key according to the key index to decrypt the ciphertext of the broadcast message to obtain a corresponding civilized text of the broadcast message.

[0026] The solution of the present application distributes supplementary quantum broadcast keys in a broadcast manner, simplifies the complexity of key management, and improves the efficiency of key distribution; the supplementary quantum broadcast keys are sent in an encrypted manner, and only legitimate receiving ends with corresponding decryption keys can decrypt and use them, so that the supplementary quantum broadcast keys are protected during the distribution process; when decrypting to obtain the plaintext of the supplementary quantum broadcast key, each receiving end independently downloads the encryption key, ensuring the personalized security of the key and preventing the leakage and abuse of the key; ensuring the efficiency and security of key distribution. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 This is a structural diagram of the global quantum secure unicast source broadcast network communication system in an embodiment of the present application;

[0028] Figure 2 This is a flow chart of a method in which a key center distributes quantum broadcast keys to broadcast devices in a broadcasting form in an embodiment of the present application;

[0029] Figure 3 This is a flow chart of a method for a terminal and a broadcast source to obtain encryption keys in an embodiment of the present application. DETAILED DESCRIPTION

[0030] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0031] Example: Figure 1 As shown, a global quantum secure unicast source broadcast network communication system includes: a broadcast device, an access base station and a key center; the broadcast device includes a broadcast terminal and a broadcast source, and the broadcast terminal and the broadcast source are connected to the corresponding access base station after authentication;

[0032] When broadcast terminals and broadcast sources access the network for the first time, they need to establish contact with the access base station through the initialization process; during authentication, broadcast terminals and broadcast sources need to provide identity credentials, such as certificates, passwords and other characteristic information, to the access base station; the access base station verifies these credentials to ensure that the device is a registered and authorized device in the network. The access base station confirms the access rights of the device based on its identity information, such as whether it is allowed to send or receive broadcast content;

[0033] The broadcasting device, access base station and key center all have an IP address of the broadcasting network; each broadcasting device, access base station and key center is assigned a unique IP address to facilitate identification and communication in the network;

[0034] The broadcast message sent by the broadcast source is broadcast to the corresponding broadcast terminal based on the broadcast address, and the broadcast message is encrypted by the quantum broadcast key;

[0035] Specifically, the broadcast source generates content to be broadcast, which is encapsulated into broadcast messages; broadcast messages usually contain header information (such as source address, destination address, message type, etc.) and actual data payload;

[0036] The broadcast source determines the broadcast address according to the broadcast destination. The broadcast address is configured through the network management and is used to instruct all broadcast terminals on the network to receive the message.

[0037] Before sending the broadcast message, the broadcast source uses the quantum broadcast key to encrypt the message. The encryption process can use a symmetric encryption algorithm, such as AES (Advanced Encryption Standard), using the quantum broadcast key as the encryption key. The encrypted broadcast message is sent to the network and broadcast to all broadcast terminals connected to the network based on the broadcast address;

[0038] The key center is used to distribute quantum broadcast keys to broadcast devices in the form of broadcast, and the quantum broadcast keys are distributed in ciphertext form. The key center is also used to send encryption keys used to encrypt quantum broadcast keys to access base stations upon request after authentication is passed. The quantum broadcast keys are used to encrypt and decrypt broadcast messages of broadcast sources. The quantum broadcast keys and encryption keys are both quantum true random numbers, which can be generated by a quantum true random number generator (QRNG).

[0039] The access base station is also used to request the encryption key from the corresponding key center according to the request of the broadcasting device, and after obtaining the corresponding encryption key, encrypt the encryption key using the communication key shared between it and the broadcasting device to obtain the encryption key ciphertext, and then forward the encryption key ciphertext to the corresponding broadcasting device.

[0040] The key center identifies the quantum broadcast key pool by the broadcast address, and uses the broadcast address as the management and monitoring object of the quantum broadcast key pool. The key center uses the broadcast address to identify the quantum broadcast key pool, so as to quickly locate the quantum key corresponding to a specific broadcast address.

[0041] The key center manages the quantum broadcast key pool, including key generation, distribution, update and revocation.

[0042] The monitoring object is the broadcast address. The key center tracks the use of the key by monitoring the broadcast address to ensure the security and effectiveness of the key.

[0043] The broadcast terminal and broadcast source access the access base station according to the initial preset key. The access base station authenticates and verifies the terminal. When the broadcast terminal is legal and has broadcast authority, the access base station grants broadcast authority to the terminal or broadcast source. An initial key is preset for the broadcast terminal and broadcast source when they leave the factory. This key is shared between the equipment manufacturer and the access base station and is used for preliminary identity authentication. When the broadcast terminal and broadcast source try to access the network, they use the initial preset key to send an access request to the access base station. After receiving the access request, the access base station uses the preset key to authenticate the broadcast terminal and broadcast source to confirm the legitimacy of the device.

[0044] Symmetric communication keys are respectively configured between the broadcast terminal and the broadcast source and their corresponding access base stations, and the symmetric communication keys are used to encrypt communication data between the broadcast terminal and the broadcast source and their corresponding access base stations.

[0045] like Figure 2 As shown, the process of the key center distributing the quantum broadcast key to the broadcast device in the form of broadcasting includes:

[0046] S101: Send a quantum broadcast key supplement request to its access base station through a broadcast source, carrying a broadcast address, and encrypting the quantum broadcast key supplement request with a symmetric communication key paired with the access base station;

[0047] When the broadcast source detects that the quantum broadcast key needs to be supplemented, it generates a quantum broadcast key supplement request, which contains the broadcast address, in order to identify the specific broadcast service that needs key supplementation; the broadcast source encrypts the supplement request using the symmetric communication key pre-paired with the access base station to ensure the security of the request during transmission; the encrypted quantum broadcast key supplement request is sent to the access base station;

[0048] S102: The access base station receives and decrypts the quantum broadcast key supplement request, selects a key center based on the broadcast configuration, and sends a quantum broadcast key distribution request to it;

[0049] After receiving the quantum broadcast key supplement request, the access base station uses the symmetric communication key paired with the broadcast source to decrypt the request; the access base station selects a suitable key center according to the broadcast configuration (such as broadcast type, coverage, etc.); the access base station sends a quantum broadcast key distribution request to the selected key center, and the request contains the broadcast address;

[0050] S103: The key center receives the quantum broadcast key distribution request, establishes a quantum broadcast key pool based on the broadcast address, generates a supplementary quantum broadcast key and its corresponding encryption key for the quantum broadcast key pool; then uses the encryption key to encrypt the supplementary quantum broadcast key, and sends the supplementary quantum broadcast key ciphertext to the terminal and the broadcast source;

[0051] After receiving the quantum broadcast key distribution request, the key center establishes or updates the quantum broadcast key pool according to the broadcast address; the key center generates a new supplementary quantum broadcast key for the quantum broadcast key pool and creates a corresponding encryption key for it; the encryption key is used to encrypt the supplementary quantum broadcast key to generate a quantum broadcast key ciphertext; the key center sends the supplementary quantum broadcast key ciphertext to the terminal and broadcast source through the broadcast network;

[0052] S104: After receiving the supplementary quantum broadcast key ciphertext, the terminal and the broadcast source decrypt it to obtain the corresponding supplementary quantum broadcast key.

[0053] The key center can dynamically generate and manage quantum broadcast keys according to different broadcast addresses to meet different broadcast needs. By distributing keys through broadcasting, keys can be distributed to multiple terminals and broadcast sources at the same time, improving distribution efficiency. The process of replenishing quantum broadcast keys can be completed quickly, ensuring the continuity and real-time nature of broadcast services.

[0054] like Figure 3 As shown, the process of the terminal and the broadcast source obtaining the encryption key includes:

[0055] S111: The broadcast terminal or broadcast source requests an encryption key from its corresponding access base station, carrying the device identity, broadcast address and index of the supplementary quantum broadcast key, and sends the encryption key distribution request through symmetric communication key encryption;

[0056] When a broadcast terminal or broadcast source needs to obtain an encryption key, it sends an encryption key distribution request to its corresponding access base station; the request contains device identity information, broadcast address, and index of the supplementary quantum broadcast key to ensure that the access base station can correctly process the request; the request is encrypted using the symmetric communication key that is paired with the access base station in advance to protect the request content from being leaked;

[0057] S112: The access base station receives and decrypts the encryption key distribution request, and authenticates it. If the authentication is successful, it queries and matches the key center according to the broadcast address, and sends an encryption key download request to it, carrying the broadcast address and the supplementary broadcast key index;

[0058] After receiving the encryption key distribution request, the access base station uses the symmetric communication key to decrypt the request, authenticates the request, verifies the device identity and authority, and after authentication, queries and matches the corresponding key center according to the broadcast address, and sends an encryption key download request to it, which contains the broadcast address and supplementary broadcast key index;

[0059] S113: After receiving the encryption key download request, the key center matches the corresponding quantum broadcast key pool based on the broadcast address, matches the corresponding encryption key based on the supplementary broadcast key index, and carries it in the encryption key download response message and sends it to the access base station;

[0060] S114: After receiving the encryption key download response message, the access base station encrypts it using the symmetric communication key paired with the terminal and the broadcast source, and then carries the encryption key ciphertext in the distribution response message and forwards it to the corresponding broadcast terminal or broadcast source;

[0061] S115: The broadcast terminal or broadcast source receives the encryption key ciphertext, uses the symmetric communication key paired with the access base station to decrypt the encryption key ciphertext to obtain the encryption key; then uses the encryption key to decrypt the supplementary quantum broadcast key ciphertext to obtain the quantum broadcast key;

[0062] S116: When the broadcast source sends a broadcast message, it uses the acquired quantum broadcast key to encrypt the broadcast message to obtain a broadcast message ciphertext, and broadcasts the broadcast message ciphertext to the corresponding broadcast terminal according to the broadcast address, and carries the key index corresponding to the broadcast key used for encryption;

[0063] S117: The broadcast terminal determines a corresponding decryption key according to the key index to decrypt the ciphertext of the broadcast message to obtain a corresponding civilized text of the broadcast message.

[0064] In the above process, symmetric communication keys and encryption keys are used for encryption and decryption multiple times, ensuring the security of keys and message content. The access base station authenticates the encryption key distribution request to prevent unauthorized devices from obtaining keys. The efficiency of key distribution and message encryption is improved through index matching and symmetric encryption methods. The system can flexibly handle multiple broadcast services and devices based on different broadcast addresses and key indexes. Ensure the integrity and reliability of broadcast messages during transmission.

[0065] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A global quantum secure unicast source broadcast network communication system, characterized in that: include: Broadcasting equipment, access base station and key center; the broadcasting equipment includes a broadcasting terminal and a broadcasting source, and the broadcasting terminal and the broadcasting source are connected to the corresponding access base station after being authenticated; The broadcast device, access base station and key center all have an IP address of the broadcast network; the broadcast message sent by the broadcast source is broadcast to the corresponding broadcast terminal based on the broadcast address, and the broadcast message is encrypted by the quantum broadcast key; The key center is used to distribute quantum broadcast keys to broadcast devices in a broadcasting form, and the quantum broadcast keys are distributed in ciphertext form. The key center is also used to send encryption keys used to encrypt quantum broadcast keys to access base stations upon request after authentication is passed. The quantum broadcast keys are used to encrypt and decrypt broadcast messages of broadcast sources; The access base station is also used to request the encryption key from the corresponding key center according to the request of the broadcasting device, and after obtaining the corresponding encryption key, encrypt the encryption key using the communication key shared between it and the broadcasting device to obtain the encryption key ciphertext, and then forward the encryption key ciphertext to the corresponding broadcasting device.

2. The system according to claim 1, characterized in that The key center identifies the quantum broadcast key pool through a broadcast address, and uses the broadcast address as the management and monitoring object of the quantum broadcast key pool.

3. The system according to claim 1, characterized in that The broadcast terminal and the broadcast source access the access base station according to the initial preset key, and the access base station authenticates and verifies the terminal. When the broadcast terminal is legal and has the broadcast authority, the access base station grants the broadcast authority to the terminal or the broadcast source.

4. The system according to claim 1, characterized in that Symmetric communication keys are respectively configured between the broadcast terminal and the broadcast source and their corresponding access base stations, and the symmetric communication keys are used to encrypt communication data between the broadcast terminal and the broadcast source and their corresponding access base stations.

5. The system according to claim 1, characterized in that The process of the key center distributing the quantum broadcast key to the broadcast device in the form of broadcasting includes: S101: Send a quantum broadcast key supplement request to its access base station through a broadcast source, carrying a broadcast address, and encrypting the quantum broadcast key supplement request with a symmetric communication key paired with the access base station; S102: The access base station receives and decrypts the quantum broadcast key supplement request, selects a key center based on the broadcast configuration, and sends a quantum broadcast key distribution request to it; S103: The key center receives the quantum broadcast key distribution request, establishes a quantum broadcast key pool based on the broadcast address, generates a supplementary quantum broadcast key and its corresponding encryption key for the quantum broadcast key pool; then uses the encryption key to encrypt the supplementary quantum broadcast key, and sends the supplementary quantum broadcast key ciphertext to the terminal and the broadcast source; S104: After receiving the supplementary quantum broadcast key ciphertext, the terminal and the broadcast source decrypt it to obtain the corresponding supplementary quantum broadcast key.

6. The system according to claim 5, characterized in that The process of the terminal and the broadcast source obtaining the encryption key includes: S111: The broadcast terminal or broadcast source requests an encryption key from its corresponding access base station, carrying the device identity, broadcast address and index of the supplementary quantum broadcast key, and sends the encryption key distribution request through symmetric communication key encryption; S112: The access base station receives and decrypts the encryption key distribution request, and authenticates it. If the authentication is successful, it queries and matches the key center according to the broadcast address, and sends an encryption key download request to it, carrying the broadcast address and the supplementary broadcast key index; S113: After receiving the encryption key download request, the key center matches the corresponding quantum broadcast key pool based on the broadcast address, matches the corresponding encryption key based on the supplementary broadcast key index, and carries it in the encryption key download response message and sends it to the access base station; S114: After receiving the encryption key download response message, the access base station encrypts it using the symmetric communication key paired with the terminal and the broadcast source, and then carries the encryption key ciphertext in the distribution response message and forwards it to the corresponding broadcast terminal or broadcast source; S115: The broadcast terminal or broadcast source receives the encryption key ciphertext, uses the symmetric communication key paired with the access base station to decrypt the encryption key ciphertext to obtain the encryption key; then uses the encryption key to decrypt the supplementary quantum broadcast key ciphertext to obtain the quantum broadcast key; S116: When the broadcast source sends a broadcast message, it uses the acquired quantum broadcast key to encrypt the broadcast message to obtain a broadcast message ciphertext, and broadcasts the broadcast message ciphertext to the corresponding broadcast terminal according to the broadcast address, and carries the key index corresponding to the broadcast key used for encryption; S117: The broadcast terminal determines a corresponding decryption key according to the key index to decrypt the ciphertext of the broadcast message to obtain a corresponding civilized text of the broadcast message.

Images