Quantum security key management method and system based on homomorphic encryption

Abstract

The invention discloses a homomorphic encryption-based quantum security key management method and system, and belongs to the technical field of data processing, and the method comprises the following steps: obtaining and evaluating equipment encryption feature parameters and communication environment parameters, and obtaining a quantum encryption demand analysis result; generating a quantum security key and a dynamic storage index; obtaining a performance indication parameter of the quantum security key, performing evaluation to obtain a quantum security key transmission performance demand index, synchronously obtaining a transmission quality parameter of each quantum security key transmission channel, and performing analysis to obtain a key transmission channel corresponding to the quantum security key; based on the dynamic storage index and a key transmission channel corresponding to the quantum security key, the quantum security key is stored to a central processing unit, and a quantum security key hiding risk index is evaluated, so that whether quantum security key updating management needs to be carried out or not is judged; the problem that key generation and storage strategies cannot be dynamically adjusted according to specific encryption requirements in the prior art is solved.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a quantum security key management method and system based on homomorphic encryption. Background Art

[0002] With the rapid development of information technology, quantum security key management has become the key to ensuring information security. Quantum computing uses characteristics such as quantum superposition, entanglement and quantum interference to accelerate some computing processes at an exponential level, but quantum security keys involve generation, distribution, storage, update, revocation and other aspects. In order to ensure the security, integrity and validity of the keys, effective management is required.

[0003] For example, the invention patent with publication number: CN113536362B discloses a quantum key management method and system based on a security chip carrier, including: using a quantum key management server to initialize and charge the security chip carrier; assembling the security chip carrier charged with quantum random numbers to the data device end, and using the quantum key management server to distribute a shared key between the data device end and its corresponding business device end; when the data device end and a newly added data device end need to share a key, using the quantum key management server end and the newly added data device end to perform key distribution processing; when the data device end and a newly added business device end need to share a key, using the quantum key management server end and the newly added quantum key management server end to perform key distribution processing.

[0004] For example, the invention patent with publication number: CN114817999B discloses an outsourced privacy protection method and device based on multi-key homomorphic encryption, including: an evaluator receives an encrypted kNN model and encrypted input information; the evaluator classifies and calculates the encrypted input information to obtain a number of class labels; aggregates the several class labels to obtain the number of class labels and sends them to the user; the evaluator expands the ciphertext of the several class labels to obtain the extended ciphertext, and sends it to each model owner; the extended ciphertext triggers each model owner to build a partial decryption component and return it to the evaluator; the evaluator aggregates the partial decryption components to obtain the aggregated decryption component, and sends it to the user, so that the user decrypts the aggregated decryption component.

[0005] However, in the process of implementing the technical solution of the invention in the embodiments of the present application, the present application found that the above technology has at least the following technical problems:

[0006] In the existing technology, quantum key management relies on a fixed key distribution mechanism or the analysis of universal encryption parameters, and has weak adaptability to dynamic encryption requirements. The effective management of quantum keys is constrained by the generation environment and the actual state of the equipment. The fixed key distribution mechanism currently relied on cannot adapt the actual quantum key management to the actual external constraints. Therefore, there is a problem of being unable to dynamically adjust the key generation and storage strategies according to the actual specific encryption needs. Summary of the invention

[0007] The embodiments of the present application provide a quantum secure key management method and system based on homomorphic encryption, which solves the problem in the prior art that key generation and storage strategies cannot be dynamically adjusted according to specific encryption requirements, and realizes quantum secure key generation and management that accurately adapts to encryption requirements.

[0008] The embodiment of the present application provides a quantum security key management method based on homomorphic encryption, comprising the following steps: when a homomorphic encryption module of a central processing unit receives a data encryption signal, the device encryption characteristic parameters and communication environment parameters are obtained and evaluated to obtain a quantum encryption impact index, thereby analyzing and obtaining a quantum encryption demand analysis result; quantum encryption processing is performed according to the quantum encryption demand analysis result to generate a quantum security key and a dynamic storage index; performance indicator parameters of the quantum security key are obtained, and the evaluation is performed to obtain a quantum security key transmission performance demand index, and the transmission quality parameters of each quantum security key transmission channel are simultaneously obtained and analyzed to obtain a key transmission channel corresponding to the quantum security key; based on the dynamic storage index and the key transmission channel corresponding to the quantum security key, the quantum security key is stored in the central processing unit, and the quantum security key hidden risk index is evaluated, thereby determining whether quantum security key update management is required.

[0009] Furthermore, the device encryption characteristic parameters and communication environment parameters, wherein: the device encryption characteristic parameters include the CPU utilization, memory occupancy, remaining memory capacity and number of cores of the central processing unit; the communication environment parameters include network delay, network bandwidth, network data transmission rate, network communication link utilization and network transmission error rate.

[0010] Furthermore, the device encryption feature parameters and communication environment parameters are obtained and evaluated to obtain the quantum encryption impact index, and the specific steps include: obtaining a device encryption feature reference set preset in a database, the device encryption feature reference set including a CPU utilization reference value, a memory occupancy reference value, a remaining memory capacity reference value and a core number reference value; obtaining a communication environment reference set preset in the database, the communication environment reference set including a network delay reference value, a network bandwidth reference value, a network data transmission rate reference value, a network communication link utilization reference value and a network transmission error rate reference value; analyzing the device encryption feature reference set with the device encryption feature parameters to obtain a device encryption index, analyzing the communication environment reference set with the communication environment parameters to obtain a communication environment evaluation index, and analyzing based on the device encryption index and the communication environment evaluation index to obtain a quantum encryption impact index; the device encryption index is used to characterize the encryption execution performance of the device; the communication environment evaluation index is used to characterize the encryption suitability of the communication environment; the quantum encryption impact index is used to characterize the degree of influence on homomorphic encryption of data.

[0011] Furthermore, obtaining the quantum encryption demand analysis result specifically includes: obtaining a quantum encryption impact threshold preset in a database, and comparing it with a quantum encryption impact index; if the quantum encryption impact index is above the quantum encryption impact threshold, then the quantum encryption demand analysis result is a first analysis result; if the quantum encryption impact index is less than the quantum encryption impact threshold, then the quantum encryption demand analysis result is a second analysis result.

[0012] Further, the step of obtaining the performance indicator parameters of the quantum security key and evaluating them to obtain the quantum security key transmission performance requirement indicator comprises the following specific steps: obtaining the performance indicator parameters of the quantum security key, wherein the performance indicator parameters of the quantum security key include the key length, key generation time, and key generation speed of the quantum security key, and also include the maximum noise, maximum delay, and communication bandwidth fluctuation rate of the quantum security key during transmission; obtaining a transmission performance requirement benchmark indicator set preset in a database, wherein the transmission performance requirement benchmark indicator set includes a transmission performance requirement factor corresponding to a unit key length, a transmission performance requirement factor corresponding to a unit key generation time, a key generation speed benchmark value, a noise benchmark value, a delay benchmark value, and a communication bandwidth fluctuation rate benchmark value; analyzing the transmission performance requirement benchmark indicator set and the performance indicator parameters of the quantum security key to obtain the quantum security key transmission performance requirement indicator; the quantum security key transmission performance requirement indicator is used to characterize the transmission characteristics and self-characteristics of the quantum security key, and is used as a basis for numerical analysis of the key transmission channel.

[0013] Furthermore, the step of obtaining the transmission quality parameters of each quantum secure key transmission channel for analysis to obtain the key transmission channel corresponding to the quantum secure key comprises the following specific steps: obtaining the transmission quality parameters of each quantum secure key transmission channel, wherein the transmission quality parameters of each quantum secure key transmission channel include the quantum bit error rate, current transmission speed, historical accumulated optical fiber loss and historical error rate of the detector of each quantum secure key transmission channel; obtaining a set of quantum secure key transmission standards preset in a database, and comparing the set with the transmission quality parameters of each quantum secure key transmission channel to obtain a transmission quality evaluation index corresponding to each quantum secure key transmission channel, thereby performing analysis to obtain the key transmission channel corresponding to the quantum secure key; the transmission quality evaluation index corresponding to each quantum secure key transmission channel is used to characterize the data transmission quality of each quantum secure key transmission channel.

[0014] Further, the analysis to obtain the key transmission channel corresponding to the quantum security key specifically includes: matching the quantum security key transmission performance requirement indicator with the transmission quality assessment control indicator corresponding to each transmission performance requirement indicator interval preset in the database, obtaining the transmission quality assessment control indicator corresponding to the interval in which the quantum security key transmission performance requirement indicator is located, recorded as the first transmission quality assessment control indicator; comparing the transmission quality assessment indicator corresponding to each quantum security key transmission channel with the first transmission quality assessment control indicator, if the transmission quality assessment indicator corresponding to a quantum security key transmission channel is higher than and closest to the first transmission quality assessment control indicator, then recording the quantum security key transmission channel as the key transmission channel corresponding to the quantum security key.

[0015] Furthermore, the transmission quality evaluation index corresponding to each quantum security key transmission channel is obtained by:

[0016]

[0017] In the formula, ZL i represents the transmission quality evaluation index corresponding to the i-th quantum secure key transmission channel, i represents the number of the quantum secure key transmission channel, i=1,2,...,i max ,i max represents the total number of quantum secure key transmission channels, WM i represents the quantum bit error rate of the ith quantum security key transmission channel, ΔWM represents the quantum bit error rate allowable value, and VC i represents the current transmission speed of the i-th quantum security key transmission channel, ΔVC represents the standard value of the transmission speed, and SH i represents the historical cumulative fiber loss of the i-th quantum security key transmission channel, ΔSH represents the standard value of the cumulative fiber loss, and LW irepresents the historical error rate of the detector of the i-th quantum security key transmission channel, ΔLW represents the allowable error rate, and e represents a natural constant.

[0018] Further, the step of evaluating the quantum security key hiding risk index and determining whether quantum security key update management is required comprises the following specific steps: setting a preset period, monitoring quantum security key access within the preset period, and obtaining a quantum security key hiding risk parameter set within the preset period; the quantum security key hiding risk parameter set comprises: the number of malicious access attempts, the average decryption speed, the cumulative number of decryption attempts, and the average decryption interval duration; performing analysis based on the quantum security key hiding risk parameter set within the preset period to obtain a quantum security key hiding risk index; obtaining a quantum security key hiding risk threshold preset in a database, and comparing the threshold with the quantum security key hiding risk index; if the quantum security key hiding risk index is above the quantum security key hiding risk threshold, performing a quantum security key update; if the quantum security key hiding risk index is less than the quantum security key hiding risk threshold, not performing a quantum security key update; the quantum security key hiding risk index is used to characterize the potential threat level of the quantum security key.

[0019] The embodiment of the present application provides a quantum security key management system based on homomorphic encryption, including: a quantum encryption requirement analysis module, a quantum encryption processing module, a key transmission channel analysis module and a key update module; wherein the quantum encryption requirement analysis module is used to obtain and evaluate device encryption characteristic parameters and communication environment parameters after the homomorphic encryption module of the central processing unit receives a data encryption signal, so as to obtain a quantum encryption impact index, thereby analyzing and obtaining a quantum encryption requirement analysis result; the quantum encryption processing module is used to perform quantum encryption processing according to the quantum encryption requirement analysis result, and generate a quantum security key and a dynamic storage index; the key transmission channel analysis module is used to obtain performance indicator parameters of the quantum security key, and evaluate and obtain a quantum security key transmission performance requirement index, and simultaneously obtain the transmission quality parameters of each quantum security key transmission channel for analysis to obtain a key transmission channel corresponding to the quantum security key; the key update module is used to store the quantum security key in the central processing unit based on the dynamic storage index and the key transmission channel corresponding to the quantum security key, and evaluate the quantum security key hiding risk index, thereby determining whether quantum security key update management is required.

[0020] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0021] 1. The present invention provides a quantum security key management method based on homomorphic encryption, which obtains and evaluates device encryption feature parameters and communication environment parameters to obtain quantum encryption demand analysis results, thereby dynamically generating quantum security keys and dynamic storage indexes according to the analysis results, thereby realizing quantum security key generation and management that accurately adapts to encryption requirements, and effectively solving the problem in the prior art that key generation and storage strategies cannot be dynamically adjusted according to specific encryption requirements.

[0022] 2. The present invention obtains and evaluates device encryption feature parameters and communication environment parameters to obtain quantum encryption impact indicators, thereby dynamically performing quantum encryption processing according to the quantum encryption impact indicators, and generating quantum security keys and dynamic storage indexes. By selecting a fully homomorphic encryption algorithm or a semi-homomorphic encryption algorithm for data encryption according to the results of quantum encryption demand analysis, the efficiency of data during transmission and storage is guaranteed.

[0023] 3. By monitoring the hidden risk parameter set of the quantum security key and analyzing it in combination with the risk reference set, the quantum security key hidden risk index is obtained, so as to determine whether it is necessary to perform quantum security key update management, thereby reducing the risk of illegal access and leakage of quantum security keys and ensuring the rational allocation and use of resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 A flow chart of the method provided in the embodiment of the present application;

[0025] Figure 2 A schematic diagram of the system structure provided in an embodiment of the present application. DETAILED DESCRIPTION

[0026] The embodiments of the present application provide a quantum secure key management method and system based on homomorphic encryption, which solves the problem in the prior art that key generation and storage strategies cannot be dynamically adjusted according to specific encryption requirements, and achieves quantum secure key generation and management that accurately adapts to encryption requirements.

[0027] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0028] like Figure 1As shown, it is a flow chart of a quantum security key management method based on homomorphic encryption provided by an embodiment of the present application. The method is applied to a quantum security key management system based on homomorphic encryption. The method includes the following steps: when the homomorphic encryption module of the central processing unit receives the data encryption signal, the device encryption characteristic parameters and the communication environment parameters are obtained and evaluated to obtain the quantum encryption impact index, thereby analyzing to obtain the quantum encryption demand analysis result; quantum encryption processing is performed according to the quantum encryption demand analysis result to generate a quantum security key and a dynamic storage index; performance indicator parameters of the quantum security key are obtained, and the evaluation is performed to obtain the quantum security key transmission performance requirement index, and the transmission quality parameters of each quantum security key transmission channel are simultaneously obtained for analysis to obtain the key transmission channel corresponding to the quantum security key; based on the dynamic storage index and the key transmission channel corresponding to the quantum security key, the quantum security key is stored in the central processing unit, and the quantum security key hidden risk index is evaluated to determine whether quantum security key update management is required.

[0029] In this embodiment, the data encryption signal is received by the homomorphic encryption module of the central processing unit, and the device encryption characteristic parameters and communication environment parameters are comprehensively considered, so that the quantum encryption impact index can be accurately evaluated, so as to perform targeted quantum encryption processing, enhance the encryption strength of the data, improve the level of data security protection, and effectively prevent the data from being illegally obtained or tampered with during transmission and storage. Generating quantum security keys and dynamic storage indexes, and storing the keys in the central processing unit based on these parameters, not only ensures the security and reliability of the keys, but also improves the flexibility and efficiency of key management. The introduction of dynamic storage indexes makes it more convenient to find and update keys, and reduces the complexity and cost of key management. By obtaining the performance indicator parameters of quantum security keys and evaluating the performance requirement indicators of quantum security key transmission, the performance requirements of keys for transmission can be intelligently judged. At the same time, the transmission quality parameters of each quantum security key transmission channel are synchronously obtained, which further ensures the security and stability of the keys during transmission. It also helps to timely discover and respond to potential key leakage risks by evaluating the hidden risk indicators of quantum security keys in real time, and judging whether key update management is needed, so as to ensure the long-term security and effectiveness of keys.

[0030] It should be noted that dynamic storage index is a data storage and retrieval mechanism that can automatically adjust and optimize the index structure according to the dynamic changes of data in data storage, improve the efficiency and accuracy of data retrieval, and reduce the risk of index failure or performance degradation due to data changes.

[0031] Furthermore, device encryption characteristic parameters and communication environment parameters, wherein: device encryption characteristic parameters include CPU utilization, memory occupancy, remaining memory capacity and number of cores of the central processing unit; communication environment parameters include network delay, network bandwidth, network data transmission rate, network communication link utilization and network transmission error rate.

[0032] In this embodiment, it should be noted that the number of cores refers to the number of cores in a processor (CPU) that independently processes data. The device encryption characteristic parameters (CPU utilization, memory occupancy, remaining memory capacity and number of cores of the central processing unit) can be obtained by viewing in the task manager.

[0033] It should also be noted that network latency and network bandwidth can be measured through network speed test tools (such as Speedtest, Ookla, etc.), and network data transmission rate, network communication link utilization and network transmission error rate can be measured through network monitoring and analysis tools (such as Wireshark, SolarWinds Network Performance Monitor, etc.).

[0034] Furthermore, device encryption feature parameters and communication environment parameters are obtained and evaluated to obtain quantum encryption impact indicators. The specific steps include: obtaining a device encryption feature reference set preset in a database, the device encryption feature reference set includes a CPU utilization reference value, a memory occupancy reference value, a remaining memory capacity reference value, and a core number reference value; obtaining a communication environment reference set preset in the database, the communication environment reference set includes a network delay reference value, a network bandwidth reference value, a network data transmission rate reference value, a network communication link utilization reference value, and a network transmission error rate reference value; analyzing the device encryption feature reference set with the device encryption feature parameters to obtain a device encryption index, analyzing the communication environment reference set with the communication environment parameters to obtain a communication environment evaluation index, and analyzing based on the device encryption index and the communication environment evaluation index to obtain a quantum encryption impact indicator; the device encryption index is used to characterize the encryption execution performance of the device; the communication environment evaluation index is used to characterize the encryption suitability of the communication environment; the quantum encryption impact indicator is used to characterize the degree of influence on homomorphic encryption of data.

[0035] In this embodiment, it should be noted that the device encryption index is obtained by:

[0036]

[0037] In the formula, S1 represents the device encryption index, ρ1 represents the CPU utilization of the central processing unit, Δρ1 represents the CPU utilization reference value, e represents the natural constant, ρ2 represents the memory occupancy of the central processing unit, Δρ2 represents the memory occupancy reference value, R represents the remaining memory capacity of the central processing unit, ΔR represents the remaining memory capacity reference value, M represents the number of cores of the central processing unit, and ΔM represents the reference value of the number of cores.

[0038] It should be noted that the device encryption index is obtained by analyzing the CPU utilization, memory occupancy, remaining memory capacity and number of cores of the central processing unit. The mutual influence between these parameters is taken into account. For example, when the CPU utilization is high, the memory utilization will increase, because the program execution requires memory to store data and instructions; high memory utilization will increase the burden on the CPU, causing the CPU to frequently replace memory pages; low remaining memory capacity will limit the efficiency of the CPU in processing tasks, because the CPU needs to wait for the memory to provide data; a large number of cores can improve the CPU's ability to handle multiple tasks, thereby indirectly reducing the memory occupancy and CPU utilization of each task.

[0039] It should also be noted that high CPU utilization will slow down the encryption process, high memory usage will reduce the memory space available for encryption operations, and low remaining memory capacity will limit the concurrency of encryption tasks. A large number of cores can process more encryption tasks in parallel, speeding up the overall encryption speed.

[0040] Communication environment evaluation indicators, the specific method is:

[0041]

[0042] In the formula, S2 represents the communication environment evaluation index, e represents the natural constant, Y represents the network delay, ΔY represents the network delay reference value, D represents the network bandwidth, ΔD represents the network bandwidth reference value, V represents the network data transmission rate, ΔV represents the network data transmission rate reference value, L represents the network communication link utilization, ΔL represents the network communication link utilization reference value, C represents the network transmission error rate, and ΔC represents the network transmission error rate reference value.

[0043] It should be noted that the communication environment evaluation index is obtained by analyzing the communication environment parameters (network delay, network bandwidth, network data transmission rate, network communication link utilization and network transmission error rate), which takes into account the mutual influence relationship between these parameters. For example, the increase in network delay leads to a longer transmission time of data packets in the network and a decrease in the network data transmission rate, which affects the real-time performance of the data. Insufficient network bandwidth will limit the improvement of network data transmission rate, so that even when the network delay is low, the data transmission speed cannot reach the ideal state. The increase in network communication link utilization may increase the network transmission error rate. When the link resources are close to saturation, the probability of data packet loss and retransmission increases. A higher network data transmission rate can improve the overall communication efficiency.

[0044] It should also be noted that the lower the network delay, the better the communication environment evaluation index; the wider the network bandwidth, the faster the encrypted data transmission rate, and the better the communication environment evaluation index. The increase in network data transmission rate helps to transmit more encrypted data in a shorter time, which is conducive to improving the communication environment evaluation index. Excessive utilization of network communication links may cause network congestion, increase the error rate of encrypted data transmission, and thus reduce the evaluation index. The lower the network transmission error rate, the higher the reliability of encrypted data transmission, and the better the communication environment evaluation index.

[0045] The quantum encryption impact index is obtained by:

[0046] MY=ln(1+e -S1 )+ln(1+e -S2 );

[0047] In the formula, MY represents the quantum encryption impact index, S1 represents the device encryption index, and S2 represents the communication environment evaluation index.

[0048] Furthermore, a quantum encryption demand analysis result is obtained, specifically including: obtaining a quantum encryption impact threshold preset in the database, and comparing it with the quantum encryption impact index; if the quantum encryption impact index is above the quantum encryption impact threshold, the quantum encryption demand analysis result is a first analysis result; if the quantum encryption impact index is less than the quantum encryption impact threshold, the quantum encryption demand analysis result is a second analysis result.

[0049] In this embodiment, it should be noted that if the result of the quantum encryption requirement analysis is the first analysis result, a fully homomorphic encryption algorithm is used for data encryption; if the result of the quantum encryption requirement analysis is the second analysis result, a semi-homomorphic encryption algorithm is used for data encryption, and then a quantum secure key is obtained.

[0050] By obtaining the quantum encryption impact threshold preset in the database and comparing it with the quantum encryption impact index actually calculated, the actual demand for quantum encryption in the current environment or data can be determined, which helps to avoid resource waste and performance degradation caused by excessive encryption, while also ensuring that key data and sensitive information can be fully protected when necessary. According to the comparison results between the quantum encryption impact index and the threshold, the quantum encryption demand analysis results can be automatically divided into the first analysis result and the second analysis result. These two results represent different encryption requirements, so that the appropriate encryption strategy can be selected according to actual needs, which helps to maximize the encryption effect while reducing the encryption cost. In addition, this method can improve the overall response speed and efficiency when it is necessary to respond quickly to potential security threats. By accurately judging encryption requirements and adopting corresponding encryption strategies, the confidentiality, integrity and availability of data and information can be more effectively protected, which helps to prevent the occurrence of security incidents such as unauthorized access, data leakage and tampering, thereby ensuring the stability of operation.

[0051] Furthermore, performance indicator parameters of quantum security keys are obtained, and evaluation is performed to obtain quantum security key transmission performance requirement indicators. The specific steps include: obtaining performance indicator parameters of quantum security keys, the performance indicator parameters of quantum security keys include key length, key generation time, key generation speed of quantum security keys, and also include maximum noise, maximum delay and communication bandwidth fluctuation rate of quantum security keys during transmission; obtaining a transmission performance requirement benchmark indicator set preset in a database, the transmission performance requirement benchmark indicator set includes a transmission performance requirement factor corresponding to a unit key length, a transmission performance requirement factor corresponding to a unit key generation time, a key generation speed benchmark value, a noise benchmark value, a delay benchmark value and a communication bandwidth fluctuation rate benchmark value; analyzing the transmission performance requirement benchmark indicator set and the performance indicator parameters of quantum security keys to obtain quantum security key transmission performance requirement indicators; the quantum security key transmission performance requirement indicators are used to characterize the transmission characteristics and self-characteristics of quantum security keys, and are used as a basis for numerical analysis of key transmission channels.

[0052] In this embodiment, the quantum secure key transmission performance requirement index is obtained by:

[0053]

[0054]

[0055] Where, X q represents the quantum secure key transmission performance requirement index, X l represents the key length of the quantum secure key, ΔX l It represents the transmission performance requirement factor corresponding to the unit key length, S kIndicates the key generation time of quantum secure key, ΔS k represents the transmission performance requirement factor corresponding to the unit key generation time, V l represents the key generation speed, ΔV l represents the key generation speed reference value, Z represents the maximum noise of the quantum security key during transmission, ΔZ represents the noise reference value, S y represents the maximum delay of quantum security key during transmission, ΔS y Denotes the delay reference value, D b represents the communication bandwidth fluctuation rate of quantum security key during transmission, ΔD b represents the base value of communication bandwidth fluctuation rate, and e represents a natural constant.

[0056] It should be noted that the key length, key generation time and key generation speed of the security key can be obtained through quantum key distribution (QKD). Through simulation tools in programming environments such as MATLAB and Python, scripts are written to simulate the QKD process and record the time and speed of key generation. The maximum noise, maximum delay and communication bandwidth fluctuation rate of the quantum security key during transmission can be obtained through noise measurement, network delay tester and bandwidth tester respectively.

[0057] The performance requirement index of quantum secure key transmission is obtained by analyzing the performance indicator parameters of quantum secure keys. This is based on the mutual influence relationship between the written parameters. For example, the longer the key length, the more security it can enhance, but it will also increase the key generation time and reduce the generation speed. Longer keys require more computing resources and time. The increase in key generation speed helps to reduce latency. During the transmission process, noise will directly affect the transmission quality and increase the bit error rate, thereby reducing the effectiveness and security of the key. The increase in the maximum latency will lead to a decrease in transmission efficiency. The fluctuation rate of the communication bandwidth will affect the stability and reliability of data transmission. The greater the bandwidth fluctuation, the more unstable the transmission performance.

[0058] It should also be noted that the longer the key length, the higher the security it can provide, and the greater the complexity and anti-cracking ability of the key. A shorter key generation time means a faster key update speed, which is conducive to improving communication efficiency. The faster the key generation speed, the more keys can be generated in a shorter time. Noise will interfere with communication and reduce transmission quality. The smaller the noise, the better the channel conditions and the lower the transmission error rate. Latency is an important indicator for measuring the real-time nature of communication. The smaller the delay, the faster the system response and the higher the communication efficiency. The bandwidth volatility reflects the stability of the channel. The smaller the volatility, the more stable the channel and the more reliable the data transmission.

[0059] By fully acquiring the performance indicator parameters of quantum security keys and accurately analyzing them with the preset transmission performance requirement benchmark indicator set, the transmission performance and self-characteristics of quantum security keys can be accurately evaluated, which helps to ensure the transmission quality and security of keys, and also provides a scientific numerical basis for the selection and optimization of key transmission channels. At the same time, the precision and efficiency of key management are improved. By flexibly adjusting key parameters and transmission strategies according to actual performance requirements, efficient resource utilization is achieved while ensuring security, and the standardization and automation of key management are promoted.

[0060] Furthermore, the transmission quality parameters of each quantum secure key transmission channel are obtained for analysis to obtain the key transmission channel corresponding to the quantum secure key. The specific steps include: obtaining the transmission quality parameters of each quantum secure key transmission channel, the transmission quality parameters of each quantum secure key transmission channel include the quantum bit error rate of each quantum secure key transmission channel, the current transmission speed, the historical accumulated optical fiber loss and the historical error rate of the detector; obtaining a set of quantum secure key transmission standards preset in a database, and comparing them with the transmission quality parameters of each quantum secure key transmission channel to obtain a transmission quality evaluation index corresponding to each quantum secure key transmission channel, thereby analyzing to obtain the key transmission channel corresponding to the quantum secure key; the transmission quality evaluation index corresponding to each quantum secure key transmission channel is used to characterize the data transmission quality of each quantum secure key transmission channel.

[0061] In this embodiment, the quantum security key transmission standard set preset in the database includes a quantum bit error rate allowable value, a transmission speed standard value, a cumulative optical fiber loss standard value, and an error rate allowable value.

[0062] By dynamically acquiring and evaluating transmission quality parameters, the selection of key transmission channels can be adjusted in real time to adapt to changing environmental conditions and transmission requirements. It can respond quickly to challenges such as network congestion and equipment failure to ensure the continuity and stability of key transmission. By accurately evaluating the transmission quality of each channel, the channel with the most suitable performance can be used for key transmission first, thus avoiding the waste of resources. Selecting a transmission channel with adaptive quality for key transmission can reduce the risk of data being intercepted or tampered with during transmission, thereby improving the security and privacy protection of data.

[0063] Further, an analysis is performed to obtain a key transmission channel corresponding to the quantum secure key, specifically including: matching the quantum secure key transmission performance requirement indicator with the transmission quality assessment control indicator corresponding to each transmission performance requirement indicator interval preset in the database, obtaining a transmission quality assessment control indicator corresponding to the interval in which the quantum secure key transmission performance requirement indicator is located, recorded as a first transmission quality assessment control indicator; comparing the transmission quality assessment indicator corresponding to each quantum secure key transmission channel with the first transmission quality assessment control indicator, if the transmission quality assessment indicator corresponding to a quantum secure key transmission channel is higher than and closest to the first transmission quality assessment control indicator, then recording the quantum secure key transmission channel as the key transmission channel corresponding to the quantum secure key.

[0064] In this embodiment, by matching the quantum security key transmission performance requirement index with the preset transmission performance requirement index interval, the required transmission quality evaluation control index (first transmission quality evaluation control index) can be accurately determined, ensuring that the selected transmission channel can meet the actual performance requirements of the quantum security key, thereby improving the reliability and efficiency of key transmission. The transmission quality evaluation index corresponding to each quantum security key transmission channel is compared with the first transmission quality evaluation control index, and the channel higher than and closest to the index is selected as the key transmission channel, which can ensure that the selected channel has the best transmission performance and does not waste channel resources. By optimizing the channel selection, the error and loss in the transmission process can be further reduced, and the accuracy and security of key transmission can be improved. By accurately matching and comparing the transmission quality evaluation index, the available transmission channel resources can be more effectively utilized. It avoids selecting a channel with poor performance for transmission, thereby reducing resource waste. The transmission channel is dynamically selected according to the actual transmission performance requirements, which enhances the flexibility and scalability of the selection. As the network environment and device performance change, the selection of the transmission channel can be adjusted accordingly to adapt to different transmission requirements.

[0065] Furthermore, the transmission quality evaluation index corresponding to each quantum security key transmission channel is obtained, and the specific method is as follows:

[0066]

[0067] In the formula, ZL i represents the transmission quality evaluation index corresponding to the i-th quantum secure key transmission channel, i represents the number of the quantum secure key transmission channel, i=1,2,...,i max ,i max represents the total number of quantum secure key transmission channels, WM i represents the quantum bit error rate of the ith quantum security key transmission channel, ΔWM represents the quantum bit error rate allowable value, and VC irepresents the current transmission speed of the i-th quantum security key transmission channel, ΔVC represents the standard value of the transmission speed, and SH i represents the historical cumulative fiber loss of the i-th quantum security key transmission channel, ΔSH represents the standard value of the cumulative fiber loss, and LW i represents the historical error rate of the detector of the i-th quantum security key transmission channel, ΔLW represents the allowable error rate, and e represents a natural constant.

[0068] In this embodiment, it should be noted that the quantum bit error rate can be obtained through quantum computing simulation software (such as Qiskit, Cirq), the transmission speed can be measured by network performance testing software (such as iperf, Speedtest, etc.), the historical accumulated fiber loss can be measured by network testing software (such as CertiFiber Pro), and the historical error rate of the detector can be obtained by accessing the historical records in the log.

[0069] It should also be noted that an increase in the qubit error rate will result in a decrease in the current transmission speed. When the bit error rate increases, more time and resources are required to correct the errors, which reduces the transmission rate of effective data. The increase in the cumulative fiber loss leads to an increase in the qubit error rate. Fiber loss can cause the signal quality to degrade, thereby increasing the possibility of bit errors. A high error rate in the detector will incorrectly detect or record the state of the qubit, resulting in an increase in the bit error rate.

[0070] Further, the quantum security key hiding risk index is evaluated to determine whether quantum security key update management is needed. The specific steps include: setting a preset period, monitoring quantum security key access within the preset period, and obtaining a quantum security key hiding risk parameter set within the preset period; the quantum security key hiding risk parameter set includes: the number of malicious access attempts, the average decryption speed, the cumulative number of decryption times, and the average decryption interval time; analyzing based on the quantum security key hiding risk parameter set within the preset period to obtain a quantum security key hiding risk index; obtaining a quantum security key hiding risk threshold preset in the database, and comparing it with the quantum security key hiding risk index, if the quantum security key hiding risk index is above the quantum security key hiding risk threshold, executing the quantum security key update, if the quantum security key hiding risk index is less than the quantum security key hiding risk threshold, not executing the quantum security key update; the quantum security key hiding risk index is used to characterize the potential threat level of the quantum security key.

[0071] In this embodiment, the specific steps of analyzing the quantum security key hiding risk parameter set within a preset period to obtain the quantum security key hiding risk indicator include: obtaining a quantum security key hiding risk reference set preset in a database, the quantum security key hiding risk reference set including a reference value for the number of malicious access attempts, a reference value for the decryption speed, a reference value for the cumulative number of decryption attempts, and a reference value for the average decryption interval time.

[0072] The specific method to obtain the quantum security key hiding risk index is as follows:

[0073]

[0074] Where YC represents the quantum security key hiding risk index, P represents the number of malicious access attempts, ΔP represents the reference value of malicious access attempts, B represents the average decryption speed, ΔB represents the reference value of decryption speed, H represents the cumulative number of decryptions, ΔH represents the reference value of cumulative decryption, T represents the average decryption interval time, ΔT represents the reference value of the average decryption interval time, e represents the natural constant, and X q represents the quantum security key transmission performance requirement index, ΔX q A hidden risk assessment factor representing the unit value of the quantum secure key transmission performance requirement indicator.

[0075] Obtain each quantum security key transmission performance requirement indicator interval preset in the database and the hidden risk assessment factor of the unit value corresponding to each quantum security key transmission performance requirement indicator interval; if the quantum security key transmission performance requirement indicator is within a preset quantum security key transmission performance requirement indicator interval, obtain the hidden risk assessment factor of the unit value corresponding to the quantum security key transmission performance requirement indicator interval and use it as the hidden risk assessment factor of the unit value corresponding to the quantum security key transmission performance requirement indicator.

[0076] It should be noted that the number of malicious access attempts, average decryption speed, cumulative decryption times and average decryption interval can be obtained by querying using log analysis tools (such as Splunk, ELK Stack (Elasticsearch, Logstash, Kibana), etc.).

[0077] The quantum security key hiding risk index is obtained by analyzing the number of malicious access attempts, average decryption speed, cumulative decryption times and average decryption interval time. This takes into account the interrelationship between these parameters. For example, an increase in the number of malicious access attempts indicates that the quantum security key faces more potential threats, resulting in an increased risk of key exposure. A higher average decryption speed indicates that attackers are trying to perform illegal decryption, resulting in a higher risk of key hiding. An increase in the cumulative number of decryptions reflects that the key has been at risk of being decrypted many times. A decrease in the average decryption interval time usually reflects that people are trying to decrypt more frequently, increasing the security risk of the key.

[0078] By setting a preset period and monitoring access to quantum security keys, potential key leaks or attacks can be discovered in a timely manner. The quantum security key hiding risk index calculated based on monitoring data can accurately reflect the current threat level of the key. Once the risk index exceeds the preset threshold, the key update is immediately executed, thereby effectively preventing the key from being exposed or cracked for a long time, significantly improving the security of the key.

[0079] By monitoring the access to the key and analyzing the risk parameter set to determine the hidden risk of the key, the key management strategy is made more scientific and reasonable. According to the changes in risk indicators, the frequency and strategy of key updates can be flexibly adjusted, thereby ensuring security while improving the efficiency and flexibility of key management. By continuously monitoring and analyzing the hidden risks of keys, new security threats can be discovered and responded to in a timely manner, which helps to enhance the overall defense capability, so that it can respond quickly and reduce losses when facing unknown or new attacks. At the same time, unnecessary key update operations are avoided. When the risk indicator is lower than the threshold, key updates will not be performed, thereby saving computing resources and time, making resources more effectively used. By regularly monitoring and analyzing the hidden risks of keys and performing key updates accordingly, the stability and reliability of operation can be ensured, which helps to prevent serious consequences such as operation crashes or data loss caused by key leakage or cracking.

[0080] If the quantum security key hiding risk index is above the quantum security key hiding risk threshold, the quantum security key update is performed, and the specific steps are: using a quantum random number generator to generate a new random number, and then automatically generating a new quantum security key according to the new random number, so as to update the quantum security key. The updated quantum security key is analyzed to obtain the updated quantum security key transmission performance requirement index, and matched with the transmission quality assessment control index corresponding to each transmission performance requirement index interval preset in the database, to obtain the transmission quality assessment control index corresponding to the interval where the updated quantum security key transmission performance requirement index is located, and recorded as the second transmission quality assessment control index; the transmission quality assessment index corresponding to each quantum security key transmission channel is compared with the second transmission quality assessment control index, and if the transmission quality assessment index corresponding to a quantum security key transmission channel is higher than and closest to the second transmission quality assessment control index, then the quantum security key transmission channel is recorded as the key transmission channel corresponding to the updated quantum security key. The updated quantum security key is transmitted by selecting the key transmission channel corresponding to the updated quantum security key, and stored in the central processing unit again.

[0081] like Figure 2 As shown, it is a structural schematic diagram of a quantum secure key management system based on homomorphic encryption provided by an embodiment of the present application. A quantum secure key management system based on homomorphic encryption provided by an embodiment of the present application includes: a quantum encryption requirement analysis module, a quantum encryption processing module, a key transmission channel analysis module and a key update module; wherein the quantum encryption requirement analysis module is used to obtain and evaluate the device encryption characteristic parameters and communication environment parameters after the homomorphic encryption module of the central processing unit receives the data encryption signal, so as to obtain the quantum encryption impact index, thereby analyzing and obtaining the quantum encryption requirement analysis result; the quantum encryption processing module is used to perform quantum encryption processing according to the quantum encryption requirement analysis result, generate a quantum secure key and a dynamic storage index; the key transmission channel analysis module is used to obtain the performance indicator parameters of the quantum secure key, and evaluate and obtain the quantum secure key transmission performance requirement index, and simultaneously obtain the transmission quality parameters of each quantum secure key transmission channel for analysis to obtain the key transmission channel corresponding to the quantum secure key; the key update module is used to store the quantum secure key to the central processing unit based on the dynamic storage index and the key transmission channel corresponding to the quantum secure key, and evaluate the quantum secure key hiding risk index, thereby judging whether quantum secure key update management is required.

[0082] In summary, this embodiment obtains and evaluates device encryption feature parameters and communication environment parameters to obtain quantum encryption demand analysis results, thereby dynamically generating quantum security keys and dynamic storage indexes based on the analysis results, thereby achieving quantum security key generation and management that accurately adapts to encryption requirements, effectively solving the problem in the prior art that key generation and storage strategies cannot be dynamically adjusted according to specific encryption requirements.

[0083] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0084] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0085] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0086] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0087] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0088] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A quantum secure key management method based on homomorphic encryption, characterized in that: The following steps are involved: When the homomorphic encryption module of the central processing unit receives the data encryption signal, it obtains and evaluates the device encryption characteristic parameters and communication environment parameters to obtain the quantum encryption impact index, and thus obtains the quantum encryption demand analysis result; Perform quantum encryption processing based on the results of quantum encryption requirements analysis to generate quantum security keys and dynamic storage indexes; Obtain the performance indicator parameters of the quantum security key, and evaluate them to obtain the quantum security key transmission performance requirement indicators, and simultaneously obtain the transmission quality parameters of each quantum security key transmission channel for analysis to obtain the key transmission channel corresponding to the quantum security key; The quantum security key is stored in the central processor based on the dynamic storage index and the key transmission channel corresponding to the quantum security key, and the quantum security key hiding risk index is evaluated to determine whether quantum security key update management is needed.

2. A quantum secure key management method based on homomorphic encryption as claimed in claim 1, characterized in that: The device encryption characteristic parameters and communication environment parameters, wherein: The device encryption characteristic parameters include the CPU utilization, memory occupancy, remaining memory capacity and number of cores of the central processing unit; The communication environment parameters include network delay, network bandwidth, network data transmission rate, network communication link utilization and network transmission error rate.

3. A quantum secure key management method based on homomorphic encryption as claimed in claim 2, characterized in that: The device encryption characteristic parameters and communication environment parameters are obtained and evaluated to obtain quantum encryption impact indicators, and the specific steps include: Obtain a device encryption feature reference set preset in a database, wherein the device encryption feature reference set includes a CPU utilization reference value, a memory occupancy reference value, a remaining memory capacity reference value, and a core quantity reference value; Acquire a communication environment reference set preset in a database, wherein the communication environment reference set includes a network delay reference value, a network bandwidth reference value, a network data transmission rate reference value, a network communication link utilization reference value, and a network transmission error rate reference value; Analyze the device encryption feature reference set and the device encryption feature parameters to obtain the device encryption index, analyze the communication environment reference set and the communication environment parameters to obtain the communication environment evaluation index, and analyze based on the device encryption index and the communication environment evaluation index to obtain the quantum encryption impact index; The device encryption indicator is used to characterize the encryption execution performance of the device; The communication environment evaluation index is used to characterize the encryption suitability of the communication environment; The quantum encryption impact index is used to characterize the degree of impact on homomorphic encryption of data.

4. A quantum secure key management method based on homomorphic encryption as claimed in claim 1, characterized in that: The obtained quantum encryption demand analysis results specifically include: The quantum encryption impact threshold preset in the database is obtained and compared with the quantum encryption impact index. If the quantum encryption impact index is above the quantum encryption impact threshold, the quantum encryption demand analysis result is the first analysis result; if the quantum encryption impact index is less than the quantum encryption impact threshold, the quantum encryption demand analysis result is the second analysis result.

5. A quantum secure key management method based on homomorphic encryption as claimed in claim 1, characterized in that: The step of obtaining the performance indicator parameters of the quantum security key and evaluating to obtain the quantum security key transmission performance requirement indicator specifically comprises: Obtaining performance indicator parameters of the quantum security key, wherein the performance indicator parameters of the quantum security key include the key length, key generation time, and key generation speed of the quantum security key, and also include the maximum noise, maximum delay, and communication bandwidth fluctuation rate of the quantum security key during transmission; Obtain a transmission performance requirement benchmark indicator set preset in a database, wherein the transmission performance requirement benchmark indicator set includes a transmission performance requirement factor corresponding to a unit key length, a transmission performance requirement factor corresponding to a unit key generation duration, a key generation speed benchmark value, a noise benchmark value, a delay benchmark value, and a communication bandwidth fluctuation rate benchmark value; The transmission performance requirement benchmark indicator set and the performance indicator parameters of the quantum security key are analyzed to obtain the quantum security key transmission performance requirement indicator; The quantum secure key transmission performance requirement index is used to characterize the transmission characteristics and self-characteristics of the quantum secure key, and is used as a basis for numerical analysis of the key transmission channel.

6. A quantum secure key management method based on homomorphic encryption as claimed in claim 1, characterized in that: The step of obtaining the transmission quality parameters of each quantum secure key transmission channel and analyzing to obtain the key transmission channel corresponding to the quantum secure key specifically comprises: Acquire transmission quality parameters of each quantum secure key transmission channel, wherein the transmission quality parameters of each quantum secure key transmission channel include a quantum bit error rate, a current transmission speed, a historical accumulated optical fiber loss, and a historical error rate of a detector of each quantum secure key transmission channel; Obtaining a set of quantum secure key transmission standards preset in a database, and comparing it with the transmission quality parameters of each quantum secure key transmission channel, obtaining a transmission quality evaluation index corresponding to each quantum secure key transmission channel, and thereby analyzing and obtaining a key transmission channel corresponding to the quantum secure key; The transmission quality evaluation index corresponding to each quantum secure key transmission channel is used to characterize the data transmission quality of each quantum secure key transmission channel.

7. A quantum secure key management method based on homomorphic encryption as claimed in claim 6, characterized in that: The step of analyzing and obtaining a key transmission channel corresponding to a quantum secure key specifically includes: Based on the quantum secure key transmission performance requirement indicator, the transmission quality assessment control indicator corresponding to each transmission performance requirement indicator interval preset in the database is matched to obtain the transmission quality assessment control indicator corresponding to the interval in which the quantum secure key transmission performance requirement indicator is located, which is recorded as the first transmission quality assessment control indicator; The transmission quality assessment index corresponding to each quantum secure key transmission channel is compared with the first transmission quality assessment control index. If the transmission quality assessment index corresponding to a quantum secure key transmission channel is higher than and closest to the first transmission quality assessment control index, the quantum secure key transmission channel is recorded as the key transmission channel corresponding to the quantum secure key.

8. A quantum secure key management system based on homomorphic encryption as claimed in claim 6, characterized in that: The specific method for obtaining the transmission quality evaluation index corresponding to each quantum secure key transmission channel is as follows: In the formula, ZL i represents the transmission quality evaluation index corresponding to the i-th quantum secure key transmission channel, i represents the number of the quantum secure key transmission channel, i=1,2,...,i max ,i max represents the total number of quantum secure key transmission channels, WM i represents the quantum bit error rate of the ith quantum security key transmission channel, ΔWM represents the quantum bit error rate allowable value, and VC i represents the current transmission speed of the i-th quantum security key transmission channel, ΔVC represents the standard value of the transmission speed, and SH i represents the historical cumulative fiber loss of the i-th quantum security key transmission channel, ΔSH represents the standard value of the cumulative fiber loss, and LW i represents the historical error rate of the detector of the i-th quantum security key transmission channel, ΔLW represents the allowable error rate, and e represents a natural constant.

9. A quantum secure key management method based on homomorphic encryption as claimed in claim 1, characterized in that: The step of evaluating the quantum security key hiding risk index and determining whether quantum security key update management is required includes: Setting a preset period, monitoring access to quantum secure keys within the preset period, and obtaining a set of quantum secure key hidden risk parameters within the preset period; The quantum-safe key hiding risk parameter set includes: the number of malicious access attempts, the average decryption speed, the cumulative number of decryptions, and the average decryption interval duration; Analyze the quantum security key hiding risk parameter set within a preset period to obtain a quantum security key hiding risk indicator; Obtaining a preset quantum security key hiding risk threshold in the database and comparing it with the quantum security key hiding risk indicator. If the quantum security key hiding risk indicator is above the quantum security key hiding risk threshold, then executing the quantum security key update; if the quantum security key hiding risk indicator is less than the quantum security key hiding risk threshold, then not executing the quantum security key update; The quantum security key hiding risk indicator is used to characterize the potential threat level of the quantum security key.

10. A system using a quantum secure key management method based on homomorphic encryption as claimed in any one of claims 1 to 9, characterized in that: include: Quantum encryption demand analysis module, quantum encryption processing module, key transmission channel analysis module and key update module; The quantum encryption requirement analysis module is used to obtain and evaluate device encryption characteristic parameters and communication environment parameters after the homomorphic encryption module of the central processing unit receives the data encryption signal, so as to obtain quantum encryption impact indicators, thereby analyzing and obtaining quantum encryption requirement analysis results; The quantum encryption processing module is used to perform quantum encryption processing according to the quantum encryption demand analysis result, and generate a quantum security key and a dynamic storage index; The key transmission channel analysis module is used to obtain the performance indicator parameters of the quantum security key, and evaluate to obtain the quantum security key transmission performance requirement index, and simultaneously obtain the transmission quality parameters of each quantum security key transmission channel to analyze and obtain the key transmission channel corresponding to the quantum security key; The key update module is used to store the quantum security key in the central processor based on the dynamic storage index and the key transmission channel corresponding to the quantum security key, and evaluate the quantum security key hiding risk index, thereby determining whether quantum security key update management is needed.

Images