Multicast source global quantum security network multicast communication method

Abstract

The invention relates to the technical field of information security, in particular to a multicast source global quantum security network multicast communication method. In the scheme of the invention, when a multicast source sends a multicast message, the message is encrypted by using a message key, and the encrypted message is sent to all members in a multicast form; and meanwhile, the index of the message key and the group member ID are sent to the access base station, the message key is encrypted by using the multicast key through cooperation of the access base station and the multicast base station, and the message key is sent to all multicast members in a multicast form, so that the security of key relay is ensured. According to the mode, the multicast source is allowed to send the encrypted multicast message, independent encryption for each receiver is not needed, the complexity and time of encryption operation are reduced, meanwhile, the burden of directly relaying all message keys through the access base station corresponding to the multicast member is relieved, and reduction of communication delay is facilitated.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a multicast source global quantum security network multicast communication method. Background Art

[0002] Global quantum-safe encryption can achieve quantum-safe encrypted communication between any two terminals by establishing a quantum-safe symmetric key between each terminal and the access base station. The communication between terminals is not directly relayed through the access base station, but each terminal shares a pair of independent symmetric keys with its access base station. In this way, if a terminal wants to conduct quantum-safe communication with all other terminals, it needs to establish independent symmetric keys with each terminal, rather than just a pair of symmetric keys.

[0003] However, in the multicast network method of multicast source, such as video conferencing, online live broadcast, online games, stock market quotations, remote teaching, etc., the message of any terminal needs to be sent to all other members in the multicast network. In this case, a terminal may be both a multicast source and a multicast member. If the message of a multicast source needs to be relayed to all members of the multicast network through its access base station, it will lead to a large amount of relay and complexity, which may cause delays and affect the service quality and user experience of the business. Therefore, this relay method may not be the best choice.

[0004] Therefore, how to solve the problem of global quantum secure communication in the above-mentioned network environment and ensure that the multicast source multicast network can enjoy quantum security protection is an urgent problem to be solved. Summary of the invention

[0005] To solve the above problems, the present application discloses a multicast source global quantum secure network multicast communication method, which specifically includes the following steps:

[0006] Multicast devices access the quantum secure network;

[0007] Establish a multicast group through a multicast base station and use a multicast address to identify the multicast group;

[0008] The multicast base station matches the corresponding multicast key center according to the multicast address and sends a multicast key distribution request to the multicast key center;

[0009] The multicast key center generates a multicast key according to the multicast key distribution request, and generates a corresponding multicast protection key for the multicast key; and returns the multicast key to the multicast base station;

[0010] The multicast device applies to join the multicast group through its corresponding access base station; obtains the multicast protection key and the multicast key center information through the access base station, downloads the multicast key encrypted by the multicast protection key according to the multicast key center information, and then decrypts the multicast protection key to obtain the multicast key;

[0011] When a multicast source sends a multicast message, it encrypts the multicast message to be sent by using a message key to form an encrypted multicast message, and sends the encrypted multicast message to the multicast members in a multicast form; then sends the message key index and its member ID to the corresponding access base station; the message key is a symmetric key paired between the multicast source and its corresponding access base station;

[0012] The access base station matches the corresponding message key according to the received message key index, carries the message key and the received group member ID in a key relay message and sends it to the multicast base station;

[0013] After receiving the key relay message, the multicast base station uses the multicast key to encrypt the obtained message key to form an encrypted message key, and sends the encrypted message key and the group member ID to the multicast members in a multicast form;

[0014] After receiving the encrypted message key and the group member ID, the multicast member determines whether the group member ID is its own. If so, it discards it; otherwise, it uses the multicast key to decrypt the encrypted message key to obtain the message key, and uses the message key to decrypt the obtained encrypted multicast message to obtain the civilized multicast message.

[0015] Among them, the quantum security network includes an access base station and a key center, the multicast device is accessed under the access base station, a symmetric quantum key is paired between the multicast device and the access base station, the symmetric quantum key is generated by the key center, and the message key is a symmetric quantum key.

[0016] The process of the multicast device accessing the access base station includes:

[0017] The multicast device initiates a quantum secure network access request to its corresponding access base station, which authenticates and authorizes the multicast device. After the authentication and authorization are passed, the multicast device is granted permission to access the quantum secure network.

[0018] In the above scheme, after receiving the request to join the multicast, the access base station authenticates the multicast device; and after the authentication is passed, the corresponding multicast key center is matched based on the multicast address, and then a multicast protection key request is constructed and sent to the corresponding multicast key center;

[0019] The multicast key center receives the multicast key request, matches the corresponding multicast protection key based on the multicast address, allocates the corresponding member ID to the multicast device requesting to join the multicast group, and returns the multicast protection key and the member ID to the access base station;

[0020] The access base station sends the acquired multicast protection key and group member ID, as well as the corresponding multicast key center information to the corresponding multicast device;

[0021] The multicast device downloads the multicast key encrypted by the multicast protection key from the corresponding multicast key center according to the acquired multicast key center information, and then decrypts the multicast protection key to obtain the corresponding multicast key.

[0022] The multicast device includes a quantum security terminal, and the quantum security terminal includes a quantum encryption and decryption module, and the quantum encryption and decryption module is used to perform quantum encryption and decryption processing according to a quantum key.

[0023] The multicast key, multicast protection key and message key are all quantum random number keys, and the quantum random number keys are generated by a quantum true random number generator.

[0024] In the scheme of the present application, when sending a multicast message, the multicast source uses the message key to encrypt the message, and sends the encrypted message to all members in the form of multicast; at the same time, the index of the message key and the group member ID are sent to the access base station, and through the cooperation between the access base station and the multicast base station, the message key is encrypted using the multicast key, and sent to all multicast members in the form of multicast to ensure the security of key relay. This method allows the multicast source to send encrypted multicast messages without the need to encrypt them separately for each receiver, reducing the complexity and time of encryption operations, while reducing the burden of directly relaying all message keys through the access base station corresponding to the multicast member, and is conducive to reducing communication delays. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 This is a timing diagram of establishing a multicast group through a multicast base station in an embodiment of the present application;

[0026] Figure 2 This is a timing diagram of a multicast device joining a multicast group in an embodiment of the present application;

[0027] Figure 3 This is a timing diagram of the multicast device communication method in an embodiment of the present application. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0029] Embodiment: A multicast source global quantum secure network multicast communication method, specifically comprising the following steps:

[0030] S101: Multicast devices access the quantum secure network;

[0031] The quantum security network includes an access base station and a key center, the multicast device is connected to the access base station, a symmetric quantum key is paired between the multicast device and the access base station, the symmetric quantum key is generated by the key center, and the message key is a symmetric quantum key;

[0032] The process of the multicast device accessing the access base station includes:

[0033] The multicast device initiates a quantum secure network access request to its corresponding access base station, and the access base station authenticates and authorizes the multicast device. After the authentication and authorization are passed, the multicast device is granted permission, so that the multicast device can access the quantum secure network;

[0034] The multicast device includes a quantum security terminal, and the quantum security terminal includes a quantum encryption and decryption module. The quantum encryption and decryption module is used to perform quantum encryption and decryption processing according to a quantum key; specifically, encryption can be performed using an XOR method.

[0035] The multicast device is a quantum security terminal that includes a quantum encryption and decryption module. Before accessing, the multicast device must ensure that the quantum key pairing between the multicast device and the access base station is correct; the multicast device sends an access request to the access base station through the quantum security terminal. The access request contains device identity information, authentication information, etc. After receiving the access request, the access base station authenticates and authenticates the multicast device. The authentication process can use quantum keys for encrypted communication to ensure the security of authentication information. After authentication and certification are passed, the access base station grants the multicast device access to the quantum security network. After obtaining permission, the multicast device officially accesses the quantum security network.

[0036] The use of symmetric quantum keys ensures the security of message keys during communication and prevents information leakage. Compared with traditional encryption methods, quantum encryption and decryption have higher speed and stronger security. The global quantum security network built by accessing base stations and key centers provides a stable and secure transmission environment for multicast communications. It ensures the real-time, reliability and security of multicast communications in a wide area.

[0037] S102: Figure 1 As shown, a multicast group is established through a multicast base station, and a multicast address is used to identify the multicast group;

[0038] The multicast base station initializes the multicast group and assigns a unique multicast address to the multicast group; the multicast base station associates the multicast address with the multicast group to ensure the accuracy of multicast communication;

[0039] S103: The multicast base station matches the corresponding multicast key center according to the multicast address, and sends a multicast key distribution request to the multicast key center;

[0040] S104: The multicast key center generates a multicast key according to the multicast key distribution request, and generates a corresponding multicast protection key for the multicast key; and returns the multicast key to the multicast base station;

[0041] S105: The multicast device applies to join the multicast group through its corresponding access base station; obtains the multicast protection key and the multicast key center information through the access base station, downloads the multicast key encrypted by the multicast protection key according to the multicast key center information, and then decrypts the multicast protection key to obtain the multicast key;

[0042] like Figure 2 As shown, in a specific solution, after receiving the request to join the multicast, the access base station authenticates the multicast device; and after the authentication is passed, the corresponding multicast key center is matched based on the multicast address, and then a multicast protection key request is constructed and sent to the corresponding multicast key center;

[0043] The multicast key center receives the multicast key request, matches the corresponding multicast protection key based on the multicast address, allocates the corresponding member ID to the multicast device requesting to join the multicast group, and returns the multicast protection key and the member ID to the access base station;

[0044] The access base station sends the acquired multicast protection key and group member ID, as well as the corresponding multicast key center information to the corresponding multicast device;

[0045] The multicast device downloads the multicast key encrypted by the multicast protection key from the corresponding multicast key center according to the acquired multicast key center information, and then decrypts the multicast protection key to obtain the corresponding multicast key.

[0046] S106: Figure 3 As shown, when a multicast source sends a multicast message, the multicast message to be sent is encrypted by a message key to form an encrypted multicast message, and the encrypted multicast message is sent to the multicast members in a multicast form; then the message key index and its member ID are sent to the corresponding access base station; the message key is a symmetric key paired between the multicast source and its corresponding access base station;

[0047] The multicast source sends the encrypted multicast message to all members of the multicast network in the form of multicast. Multicast is a network transmission method that allows data to be sent from one source to multiple destinations. It is usually used in applications such as video conferencing and live broadcasting. The multicast source sends the index of the message key (an identifier used to indicate the location or identity of the key) and its own member ID to the corresponding access base station;

[0048] By using message key encryption, the security of multicast messages during transmission is ensured. Even if they are intercepted, they cannot be decrypted by unauthorized persons. Multicast communication is more efficient than unicast communication because it reduces the data traffic in the network. Multiple receivers share the same data stream.

[0049] By sending the message key index and group member ID, the necessary information is provided to the access base station to facilitate the relay of the message key;

[0050] S107: The access base station matches the corresponding message key according to the received message key index, carries the message key and the received group member ID in a key relay message and sends it to the multicast base station;

[0051] The purpose of the key relay message is to securely pass the message key to the multicast base station so that the multicast base station can further distribute the key to other members in the multicast network; by relaying the message key through the access base station, the security of the key during transmission is ensured, because only the access base station and the multicast base station know how to handle this key information. The multicast source does not need to exchange keys directly with each multicast member, reducing communication complexity and potential security risks. The access base station can manage the keys of multiple multicast sources as needed, improving the flexibility and scalability of key management;

[0052] S108: After receiving the key relay message, the multicast base station uses the multicast key to encrypt the obtained message key to form an encrypted message key, and sends the encrypted message key and the group member ID to the multicast members in a multicast form;

[0053] The multicast base station receives a key relay message from the access base station, which contains the message key and the group member ID; the multicast base station encrypts the received message key using the multicast key shared in advance with all multicast members; the process of encrypting the message key ensures that even if the message key is intercepted during transmission, a third party without the multicast key cannot decrypt and use the message key; the multicast base station sends the encrypted message key message to all members in the multicast network in the form of multicast. Since the message is sent by multicast, all multicast members will receive the message. Sending the encrypted message key by multicast reduces repeated data transmission in the network and improves communication efficiency.

[0054] S109: After receiving the encrypted message key and the group member ID, the multicast member determines whether the group member ID is its own. If so, it discards it; otherwise, it uses the multicast key to decrypt the encrypted message key to obtain the message key, and uses the message key to decrypt the obtained encrypted multicast message to obtain the civilized multicast message.

[0055] In the above scheme, the multicast key, multicast protection key and message key are all quantum random number keys, and the quantum random number keys are generated by a quantum true random number generator.

[0056] Quantum random number generators (QRNGs) use quantum phenomena (such as polarization of photons, quantum entanglement, etc.) to generate random numbers that are unpredictable because they are rooted in the basic principles of quantum mechanics. Due to the quantum no-cloning theorem, quantum states cannot be completely copied, so random numbers generated based on quantum phenomena cannot be copied either. Quantum random number keys are difficult to crack because they are not generated based on any algorithm, but based on physical processes, which makes them highly resistant to both traditional cryptographic attacks and quantum computing attacks. The use of quantum random number keys greatly improves the security of the keys because these keys are not generated based on algorithms, but based on physical processes, which makes them almost impossible to predict or copy.

[0057] In this embodiment, a quantum secure symmetric key is established between the multicast device (quantum secure terminal) and the access base station, and each multicast device (terminal) shares a pair of independent symmetric keys with its access base station, ensuring the basic security of communication between terminals.

[0058] In traditional quantum secure communication, the communication between terminals needs to establish independent symmetric keys respectively, which will lead to a large number of key management and relay problems in multicast networks. In this solution, when sending multicast messages, the multicast source uses the message key to encrypt the message and sends the encrypted message to all members in the form of multicast. At the same time, only the index of the message key and the member ID are sent to the access base station. Through the collaboration between the access base station and the multicast base station, the message key is encrypted with the multicast key and sent to all multicast members in the form of multicast to ensure the security of key relay.

[0059] The multicast key is generated by the multicast key center and is used to encrypt and decrypt message keys, while the message key is a symmetric key paired between the multicast source and its access base station, which is used to encrypt the actual multicast message. This method allows the multicast source to send encrypted multicast messages without the need to encrypt each receiver separately, reducing the complexity and time of encryption operations.

[0060] The multicast base station sends the encrypted message key to each multicast member via multicast. Compared with the method of relaying the message key to the multicast members one by one through the access base station, the solution of this embodiment reduces the burden of the access base station directly relaying all message keys, reduces the relay volume and complexity, and is conducive to reducing communication delays and improving service quality.

[0061] The combination of quantum security network and multicast technology ensures that multicast source multicast network can enjoy quantum security protection while improving communication efficiency. This is especially important for application scenarios such as video conferencing and distance learning that have high requirements for real-time and security.

[0062] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A multicast source global quantum secure network multicast communication method, characterized in that: The following steps are involved: Multicast devices access the quantum secure network; Establish a multicast group through a multicast base station and use a multicast address to identify the multicast group; The multicast base station matches the corresponding multicast key center according to the multicast address and sends a multicast key distribution request to the multicast key center; The multicast key center generates a multicast key according to the multicast key distribution request, and generates a corresponding multicast protection key for the multicast key; and returning the multicast key to the multicast base station; The multicast device applies to join the multicast group through its corresponding access base station; obtains the multicast protection key and the multicast key center information through the access base station, downloads the multicast key encrypted by the multicast protection key according to the multicast key center information, and then decrypts the multicast protection key to obtain the multicast key; When the multicast source sends a multicast message, the multicast message to be sent is encrypted by using a message key to form an encrypted multicast message, and the encrypted multicast message is sent to the multicast members in a multicast form; Then, the message key index and its member ID are sent to the corresponding access base station; the message key is the symmetric key paired between the multicast source and its corresponding access base station; The access base station matches the corresponding message key according to the received message key index, carries the message key and the received group member ID in a key relay message and sends it to the multicast base station; After receiving the key relay message, the multicast base station uses the multicast key to encrypt the obtained message key to form an encrypted message key, and sends the encrypted message key and the group member ID to the multicast members in a multicast form; After receiving the encrypted message key and the group member ID, the multicast member determines whether the group member ID is its own. If so, it discards it; otherwise, it uses the multicast key to decrypt the encrypted message key to obtain the message key, and uses the message key to decrypt the obtained encrypted multicast message to obtain the civilized multicast message.

2. The method according to claim 1, characterized in that The quantum security network includes an access base station and a key center. The multicast device is connected to the access base station. A symmetric quantum key is paired between the multicast device and the access base station. The symmetric quantum key is generated by the key center, and the message key is a symmetric quantum key.

3. The method according to claim 2, characterized in that The process of the multicast device accessing the access base station includes: The multicast device initiates a quantum secure network access request to its corresponding access base station, which authenticates and authorizes the multicast device. After the authentication and authorization are passed, the multicast device is granted permission to access the quantum secure network.

4. The method according to claim 1, characterized in that After receiving the request to join the multicast, the access base station authenticates the multicast device; after the authentication is passed, the access base station matches the corresponding multicast key center based on the multicast address, reconstructs the multicast protection key request and sends it to the corresponding multicast key center; The multicast key center receives the multicast key request, matches the corresponding multicast protection key based on the multicast address, allocates the corresponding member ID to the multicast device requesting to join the multicast group, and returns the multicast protection key and the member ID to the access base station; The access base station sends the acquired multicast protection key and group member ID, as well as the corresponding multicast key center information to the corresponding multicast device; The multicast device downloads the multicast key encrypted by the multicast protection key from the corresponding multicast key center according to the acquired multicast key center information, and then decrypts the multicast protection key to obtain the corresponding multicast key.

5. The method according to claim 1, characterized in that The multicast device includes a quantum security terminal, and the quantum security terminal includes a quantum encryption and decryption module, and the quantum encryption and decryption module is used to perform quantum encryption and decryption processing according to a quantum key.

6. The method according to claim 1, characterized in that The multicast key, multicast protection key and message key are all quantum random number keys, and the quantum random number keys are generated by a quantum true random number generator.

Images