Mesh ad hoc network global quantum security communication method and system

Abstract

The invention discloses a Mesh ad hoc network global quantum security communication method and system. For any quantum security terminal in the Mesh ad hoc network, the quantum security terminal prestores decryption true random numbers corresponding to all one-way receiving relations in the Mesh ad hoc network and encryption true random numbers corresponding to all one-way sending relations in the Mesh ad hoc network. Therefore, the quantum security terminal can perform quantum decryption on first quantum encryption data sent by any sending end in the Mesh ad hoc network based on decryption symmetric true random numbers corresponding to all one-way receiving relations in the Mesh ad hoc network, and perform quantum decryption on second quantum encryption data sent by any sending end in the Mesh ad hoc network based on encryption true random numbers corresponding to all one-way sending relations in the Mesh ad hoc network. The second plaintext data can be sent to any receiving end in the Mesh ad hoc network in a quantum encryption manner, so that quantum security communication between any two quantum security terminals in the Mesh ad hoc network is realized, and the communication security of the decentralized Mesh ad hoc network is ensured.

Description

Technical Field

[0001] The present application relates to the field of information security and quantum encryption technology, and in particular to a method and system for global quantum secure communication in a Mesh self-organizing network. Background Art

[0002] As an advanced network architecture, Mesh (wireless mesh network) self-organizing communication network occupies an important position in the field of modern communications with its unique self-organization, self-configuration and self-healing capabilities. The core advantage of this network architecture lies in the diversity of its node functions, that is, each node in the network can not only serve as an access point for end users to send and receive data, but also play the role of a router to forward data packets to other nodes. This design enables Mesh self-organizing network to build a dynamic, multi-hop and decentralized communication network, greatly improving the flexibility and reliability of the network.

[0003] In practical applications, this feature of Mesh self-organizing network communication network has made it widely used in many important occasions. For example, in some intelligent occasions, Mesh self-organizing network can quickly build a temporary communication network to provide stable and reliable communication support for staff; in drone communication occasions, Mesh self-organizing network can ensure unimpeded communication between drones and between drones and ground control stations, providing strong communication guarantee for drone communication; in addition, in the application of intelligent robots such as robot dogs and robot wolves, Mesh self-organizing network can also play its unique advantages to realize information sharing and collaborative operation between robots.

[0004] However, with the widespread application of Mesh communication networks in various fields, the security issues of their communication information have become increasingly prominent. Since the data transmission in Mesh communication networks is dynamic, multi-hop, and there is no fixed central node, the information in the network is more vulnerable to attacks and eavesdropping. Once the communication information is leaked or tampered with, it may have a serious impact on task execution, communication command, etc. in the workplace. Therefore, for Mesh communication networks, how to ensure the security and reliability of communication information has become an important issue that needs to be solved urgently. Summary of the invention

[0005] The present application provides a method and system for global quantum secure communication in a Mesh self-organizing network, which are used to implement quantum secure communication in a Mesh self-organizing network.

[0006] In a first aspect, the present application provides a method for global quantum secure communication in a Mesh self-organizing network, the method being applied to any quantum secure terminal in the Mesh self-organizing network, the method comprising:

[0007] For the first quantum encrypted data sent from any sending end in the Mesh ad hoc network, determine the target decryption true random number corresponding to the target unidirectional receiving relationship from the sending end to the quantum security terminal from the pre-saved decryption true random numbers corresponding to each unidirectional receiving relationship in the Mesh ad hoc network; perform quantum decryption on the first quantum encrypted data based on the target decryption true random number to obtain first plaintext data; wherein the types of the first plaintext data include the following: application data, key file, and security signaling;

[0008] For the second plaintext data to be sent to any receiving end in the Mesh self-organizing network, a target encrypted true random number corresponding to the target sending relationship from the quantum security terminal to the receiving end is determined from the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network that are pre-saved; wherein the types of the second plaintext data include the following: application data, key file, and service signaling; based on the target encrypted true random number, the second plaintext data is quantum encrypted to obtain second quantum encrypted data; and the second quantum encrypted data is sent to the receiving end.

[0009] In a second aspect, the present application also provides a Mesh self-organizing network global quantum secure communication system, the system comprising a quantum secure terminal for executing the above-mentioned method.

[0010] The beneficial effects of this application are as follows:

[0011] For any quantum security terminal in the Mesh self-organizing network, since the quantum security terminal pre-stores the decrypted true random numbers corresponding to each unidirectional receiving relationship in the Mesh self-organizing network and the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network, the quantum security terminal can perform quantum decryption on the first quantum encrypted data sent from any sending end in the Mesh self-organizing network based on the decrypted symmetric true random numbers corresponding to each unidirectional receiving relationship in the Mesh self-organizing network, and can send the second plaintext data to any receiving end in the Mesh self-organizing network by quantum encryption based on the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network, thereby realizing quantum secure communication between any two quantum security terminals in the Mesh self-organizing network, ensuring the communication security of the decentralized Mesh self-organizing network. In addition, the key files, security signaling, and application data communicated between two quantum security terminals in the Mesh self-organizing network can all be transmitted using the quantum secure communication method, thereby realizing all-round protection of the security of the data communicated between two quantum security terminals in the Mesh self-organizing network. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0013] Figure 1 A schematic diagram of a process of global quantum secure communication in a Mesh self-organizing network provided in an embodiment of the present application;

[0014] Figure 2 A communication relationship topology diagram of 7 nodes in a Mesh ad hoc network provided in an embodiment of the present application;

[0015] Figure 3 A communication relationship topology diagram of seven nodes in another Mesh ad hoc network provided in an embodiment of the present application;

[0016] Figure 4 A communication relationship topology diagram of seven nodes in another Mesh ad hoc network provided in an embodiment of the present application;

[0017] Figure 5 A communication relationship topology diagram of seven nodes in another Mesh ad hoc network provided in an embodiment of the present application;

[0018] Figure 6 A system structure diagram of a Mesh self-organizing network global quantum secure communication provided in this application. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0020] In order to improve the security of Mesh self-organizing network communication, the present application provides a Mesh self-organizing network global quantum secure communication method and system.

[0021] Embodiment 1:

[0022] Figure 1 A schematic diagram of a process of global quantum secure communication in a Mesh self-organizing network provided in an embodiment of the present application, the process comprising:

[0023] S101: For first quantum encrypted data sent from any sending end in the Mesh ad hoc network, determine a target decryption true random number corresponding to a target unidirectional receiving relationship from the sending end to the quantum security terminal from pre-saved decryption true random numbers corresponding to each unidirectional receiving relationship in the Mesh ad hoc network; based on the target decryption true random number, perform quantum decryption on the first quantum encrypted data to obtain first plaintext data; wherein the types of the first plaintext data include the following: application data, key file, and security signaling.

[0024] S102: For the second plaintext data to be sent to any receiving end in the Mesh self-organizing network, determine the target encrypted true random number corresponding to the target sending relationship from the quantum security terminal to the receiving end from the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network that are pre-saved; wherein the types of the second plaintext data include the following: application data, key file, and service signaling; based on the target encrypted true random number, quantum encrypt the second plaintext data to obtain second quantum encrypted data; and send the second quantum encrypted data to the receiving end.

[0025] In this application, the Mesh self-organizing network is a decentralized self-healing communication network. Each node in the network has a neighbor table and a routing table for communicating with neighbors or forwarding data. This means that any node in the Mesh self-organizing network can communicate with any other node, and the communication relationship between the nodes in the entire Mesh self-organizing network forms a mesh structure. In the Mesh self-organizing network global quantum secure communication method provided by this application, the nodes in the Mesh self-organizing network are quantum secure terminals, which have quantum secure communication capabilities, and provide a device foundation for quantum secure communication between the nodes in the Mesh self-organizing network.

[0026] In order to realize quantum secure communication between nodes in the Mesh self-organizing network, in this application, it is necessary to save true random numbers for quantum secure communication in each node according to the communication relationship between nodes in the Mesh self-organizing network. Taking a Mesh self-organizing network containing 7 nodes as an example (the nodes are marked as AG, and the situation of other numbers of nodes is similar), according to the communication relationship between the 7 nodes, the following is established: Figure 2 The mathematical model shown in Figure 2 In the example, AG can be used as both a receiver and a transmitter. According to the one-way communication relationship between the seven nodes and the exclusion of the scenario where the nodes send messages to themselves, the remaining Figure 2 The blank grid shown in the mathematical model, each blank grid represents a one-way communication relationship. Figure 3As shown, the communication relationship between B and C occupies two blank grids, and the two blank grids represent different unidirectional communication relationships between B and C. The unidirectional communication relationship of C->B represents that C is the sender and B is the receiver. The unidirectional communication relationship of B->C represents that B is the sender and C is the receiver.

[0027] For each blank grid, that is, for each one-way communication relationship, a set of true random numbers is assigned to the sender and receiver in the one-way communication relationship, denoted as R(X, Y), where X is the sender and Y is the receiver. Figure 4 Indicates that the true random number corresponding to the one-way communication relationship C->B is R(C, B), and the true random number corresponding to the one-way communication relationship B->C is R(B, C). In this way, each blank grid will correspond to a set of true random numbers, that is, each one-way communication relationship corresponds to a set of true random numbers. When performing quantum secure communication in a certain one-way communication relationship, the sender and the receiver can implement quantum encryption and decryption based on the true random numbers corresponding to the one-way communication relationship.

[0028] like Figure 5 As shown in the figure, if the nodes on the horizontal axis are the receiving end and the nodes on the vertical axis are the sending end, for any node on the vertical axis, each blank grid on the horizontal axis corresponding to the node can be understood as the encrypted true random number used by the node when sending data to the nodes on the horizontal axis. For any node on the horizontal axis, each blank grid on the vertical axis corresponding to the node can be understood as the decrypted true random number used by the node when receiving data sent from the nodes on the vertical axis. Taking C as an example, Figure 5 In the figure, C corresponds to a horizontal axis and a vertical axis, that is, if C conducts quantum secure communication with all other nodes in the Mesh ad hoc network, C needs to store the decrypted true random numbers and encrypted true random numbers for quantum secure communication with all other nodes.

[0029] Therefore, for each node in the Mesh self-organizing network, the node will be assigned two true random numbers, one is the encrypted true random number assigned horizontally, and the other is the decrypted true random number assigned vertically. Among them, the encrypted true random number includes the encrypted true random number used when the node is used as a sender to send data to all other nodes in the Mesh self-organizing network, that is, the encrypted true random number corresponding to each unidirectional sending relationship in the Mesh self-organizing network. The decrypted true random number includes the decrypted true random number used when the node is used as a receiver to receive data sent from all other nodes in the Mesh self-organizing network, that is, the decrypted true random number corresponding to each unidirectional receiving relationship in the Mesh self-organizing network. After such processing, any node in the Mesh self-organizing network can perform two-way quantum secure encryption communication with all other nodes in the Mesh self-organizing network, and can send quantum secure encrypted messages, and can also receive quantum encrypted data and decrypt it.

[0030] It should be noted that, for any two communicating nodes in the Mesh ad hoc network, the one-way transmission relationship from one node to another, the encrypted true random number corresponding to the one-way transmission relationship stored by the transmitter and the decrypted true random number corresponding to the one-way receiving relationship from the transmitter to the receiver stored by the receiver are symmetrical. For example, any two communicating nodes in the Mesh ad hoc network are C and A, respectively, the encrypted true random number corresponding to the one-way transmission relationship from C->A stored in C is symmetrical with the decrypted true random number corresponding to the one-way receiving relationship from C->A stored in A, and the encrypted true random number corresponding to the one-way transmission relationship from A->C stored in A is symmetrical with the decrypted true random number corresponding to the one-way receiving relationship from A->C stored in C.

[0031] For any quantum security terminal in the Mesh self-organizing network, after the quantum security terminal has pre-stored the true random numbers corresponding to each unidirectional communication direction, the quantum security terminal can act as both a receiving end and a sending end to perform quantum security communication with all other quantum security terminals in the Mesh self-organizing network. The following is an explanation of the specific scenario:

[0032] Scenario 1: Quantum security terminal serves as the receiving end.

[0033] When a quantum security terminal acts as a receiving end, it can continuously monitor the communication channels with all other quantum security terminals in the Mesh ad hoc network, that is, the communication channels with each sending end, so as to timely capture any encrypted data sent to it (recorded as the first quantum encrypted data).

[0034] Once the first quantum encrypted data is received from any sender in the Mesh ad hoc network, the quantum security terminal can determine the one-way receiving relationship (recorded as the target one-way receiving relationship) representing the one-way receiving relationship from the sender to the quantum security terminal. Then, the decryption true random number corresponding to each one-way receiving relationship in the pre-saved Mesh ad hoc network is determined (recorded as the target decryption true random number). For example, if the quantum security terminal is C, the sender is A, and the target one-way receiving relationship is A->C, C will find the target decryption true random number R(A, C) corresponding to A->C from the decryption true random numbers corresponding to each one-way receiving relationship that it has pre-saved.

[0035] The quantum security terminal then decrypts the true random number based on the target and determines the decryption key. Based on the decryption key, the first quantum encrypted data is quantum decrypted to obtain plaintext data (recorded as the first plaintext data). Among them, the types of the first plaintext data include the following: application data, key files, and security signaling. The application data is the business data sent by the sender to the receiver, and the receiver will pass it to the upper application for processing. The key file contains the supplementary true random number sent by the sender, and the receiver can store or update it to the key management system. The security signaling refers to the signaling between the sender and the receiver regarding the quantum security service, such as a supplementary message.

[0036] It should be noted that the quantum decryption process belongs to the existing technology and will not be described in detail here.

[0037] Scenario 2: Quantum security terminal serves as the transmitter.

[0038] When a quantum security terminal in a Mesh self-organizing network acts as a transmitter, the quantum security terminal first prepares the plaintext data (recorded as the second plaintext data) to be sent to a receiver in the Mesh self-organizing network. These second plaintext data can be application data (such as business data, files, etc. generated by upper-layer applications), key files or business signaling (such as supplementary messages). Determine the target sending relationship corresponding to the quantum security terminal and the receiver. For example, if the quantum security terminal is C and the receiver is A, then the target sending relationship is C->A. From the encrypted true random numbers corresponding to each unidirectional sending relationship in the pre-saved Mesh self-organizing network, determine the encrypted true random number corresponding to the target sending relationship (recorded as the target encrypted true random number). For example, from the encrypted true random numbers corresponding to each unidirectional sending relationship in the pre-saved Mesh self-organizing network, determine the target encrypted true random number R (C, A) corresponding to C->A.

[0039] Based on the determined target encrypted true random number, an encryption key is determined. According to the encryption key, quantum encryption is performed on the second plaintext data to obtain quantum encrypted data (recorded as second quantum encrypted data).

[0040] It should be noted that the quantum encryption process belongs to the existing technology and will not be described in detail here.

[0041] After acquiring the second quantum encrypted data, the quantum security terminal can send the second quantum encrypted data to the receiving end.

[0042] In a possible implementation, the method further includes:

[0043] If it is determined that the other end quantum security terminal in any one-way communication relationship is out of connection, the true random number corresponding to the one-way communication relationship is discarded; wherein the one-way communication relationship includes a one-way sending relationship and a one-way receiving relationship.

[0044] When any node in the entire Mesh self-organizing network loses connection, for example, it is offline, stolen, or down, the loss of connection of the node does not affect the quantum secure communication between all other nodes in the entire Mesh self-organizing network, because any node only has the true random number corresponding to the one-way communication relationship associated with itself, and does not have the true random number required for communication between other nodes. Therefore, if any node in the Mesh self-organizing network loses connection, it does not affect the security and stability of the Mesh self-organizing network. On this basis, for any quantum security terminal in the Mesh self-organizing network, if the quantum security terminal determines that the quantum security terminal at the other end in a certain one-way communication relationship is lost, the true random number corresponding to the one-way communication relationship can be discarded. For example, if it is determined that the quantum security terminal at the other end in a certain one-way receiving relationship is lost, the decrypted true random number corresponding to the one-way receiving relationship is discarded; if it is determined that the quantum security terminal at the other end in a certain one-way sending relationship is lost, the encrypted true random number corresponding to the one-way sending relationship is discarded.

[0045] The beneficial effects of this application are as follows:

[0046] For any quantum security terminal in the Mesh self-organizing network, since the quantum security terminal pre-stores the decrypted true random numbers corresponding to each unidirectional receiving relationship in the Mesh self-organizing network and the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network, the quantum security terminal can perform quantum decryption on the first quantum encrypted data sent from any sending end in the Mesh self-organizing network based on the decrypted symmetric true random numbers corresponding to each unidirectional receiving relationship in the Mesh self-organizing network, and can send the second plaintext data to any receiving end in the Mesh self-organizing network by quantum encryption based on the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network, thereby realizing quantum secure communication between any two quantum security terminals in the Mesh self-organizing network, ensuring the communication security of the decentralized Mesh self-organizing network. In addition, the key files, security signaling, and application data communicated between two quantum security terminals in the Mesh self-organizing network can all be transmitted using the quantum secure communication method, thereby realizing all-round protection of the security of the data communicated between two quantum security terminals in the Mesh self-organizing network.

[0047] Embodiment 2:

[0048] For the Mesh self-organizing network of this application, its unique mesh structure makes the communication relationship between each node complicated. Especially when building a Mesh self-organizing network of tens of thousands of scales, each node needs to preset a large number of initialization true random numbers corresponding to the one-way communication relationship to ensure the smooth progress of quantum secure communication. Specifically, for any node in the Mesh self-organizing network, the node needs to save the decrypted true random number and encrypted true random number corresponding to the quantum secure communication between the node and tens of thousands of nodes, which undoubtedly puts extremely high requirements on the storage space of the quantum secure terminal.

[0049] However, due to the limited storage space of current quantum security terminals, the number of preset true random numbers cannot be infinite, so in the process of long-term task execution, the supplement of true random numbers becomes an inevitable requirement. In order to maintain the continuity and stability of the global quantum security communication of the Mesh self-organizing network, this application proposes an innovative key supplement mechanism.

[0050] Conventional key replenishment is based on a key center distributing keys to a requesting quantum security terminal, while the Mesh self-organizing network is a decentralized communication network. Any node may be disconnected or exit the network at any time. In order to ensure that the disconnection or exit of any node cannot affect the quantum security communication security of the entire Mesh self-organizing network, in order to meet the characteristics of the Mesh self-organizing network, any node in the Mesh self-organizing network needs to have the key distribution capability, that is, any node in the Mesh self-organizing network has quantum security encryption and decryption capabilities and key distribution capabilities for global quantum security encrypted communications, so as to meet the decentralization of the Mesh self-organizing network.

[0051] Specifically, since each node has the ability to generate true random numbers, when a quantum security terminal detects that the true random numbers with a certain node are insufficient, it can actively trigger the key distribution mechanism, use the existing encrypted true random numbers to encrypt the supplementary true random numbers, and distribute these supplementary true random numbers to the other end. In the communication relationship between two nodes, each party is responsible for the key detection and distribution of a one-way communication relationship. Since the encrypted true random numbers are used first and then supplemented, each party is responsible for detecting the use of encrypted true random numbers in its own one-way sending relationship, and promptly supplementing the true random numbers to the other end when insufficient.

[0052] Based on this, in the present application, the type of plaintext data communicated between two nodes in the Mesh ad hoc network may be a key file containing a supplementary true random number. Exemplarily, when the second plaintext data is a key file, obtaining the second plaintext data to be sent to the receiving end includes:

[0053] Determining that the remaining capacity of the encrypted true random number corresponding to the target sending relationship satisfies a preset supplementary condition;

[0054] Generate a corresponding supplementary true random number for the target sending relationship, so as to determine the second plaintext data through the supplementary true random number.

[0055] The quantum security terminal can monitor the remaining capacity of the encrypted true random numbers corresponding to a certain receiving end in the Mesh ad hoc network, that is, determine the remaining capacity of the encrypted true random numbers corresponding to the target sending relationship of the quantum security terminal->receiving end.

[0056] In order to determine when the true random number needs to be replenished, the quantum security terminal will make decisions based on pre-configured replenishment conditions. These replenishment conditions can be set based on the percentage of remaining capacity, for example, when the remaining capacity is lower than a certain percentage (such as 20%, 30%, etc.), the replenishment mechanism is triggered; or, they can also be based on a capacity threshold, that is, when the remaining capacity drops below the capacity threshold, the replenishment process is initiated.

[0057] Once the supplementary condition is met, the quantum security terminal will start to generate the supplementary true random numbers corresponding to the target sending relationship, and build a key file based on these true random numbers, and use the key file as a second plaintext data to be sent to the receiving end. Subsequently, the key file carrying the supplementary true random numbers can be sent to the receiving end in the manner of sending the second plaintext data in the above embodiment.

[0058] In one example, after determining that the remaining capacity of the encrypted true random number corresponding to the target sending relationship satisfies a preset supplementary condition, before generating a corresponding supplementary true random number for the target sending relationship to determine the second plaintext data by using the supplementary true random number, the method further includes:

[0059] generating a supplemental message;

[0060] Based on the target encrypted true random number, quantum encrypting the supplementary message and sending it to the receiving end;

[0061] A supplementation-allowed response sent by the receiving end is received.

[0062] When it is confirmed that the encrypted true random number corresponding to the target sending relationship is insufficient, the quantum security terminal can generate a supplementary message. Among them, the supplementary message is used to notify the receiving end to receive the distributed key file. Then the supplementary message is used as a second plaintext data, and the method in the above embodiment is used to quantum encrypt the supplementary message and send it to the receiving end. Specifically, when it is confirmed that the encrypted true random number corresponding to the target sending relationship is insufficient, the quantum security terminal obtains the supplementary message to be sent to the receiving end. Determine the target sending relationship corresponding to the quantum security terminal and the receiving end. Among the encrypted true random numbers corresponding to each unidirectional sending relationship in the pre-saved Mesh self-organizing network, determine the target encrypted true random number corresponding to the target sending relationship (recorded as the target encrypted true random number). Based on the determined target encrypted true random number, determine the encryption key. According to the encryption key, the second plaintext data is quantum encrypted to obtain the second quantum encrypted data. The quantum security terminal sends the second quantum encrypted data to the receiving end. After receiving the encrypted supplementary message, the receiving end can decrypt the encrypted supplementary message based on the method in scenario one in the above embodiment to obtain the plaintext supplementary message. When the receiving end determines that supplementation is allowed, it generates a supplementation-allowed response, and uses the method in the above scenario 2 to encrypt and send the supplementation-allowed response to the quantum security terminal to notify the quantum security terminal that the true random number can be supplemented.

[0063] by Figure 4Take the communication relationship between B and C as an example. Between B and C, C detects the remaining capacity of R(C, B), and B detects the remaining capacity of R(B, C). When the remaining capacity of R(C, B) is insufficient, C initiates a true random number supplement to B, and uses R(C, B) to encrypt and send the supplementary message to B. Upon receiving a response from B allowing supplementation, R(C, B) is used to encrypt and send the generated supplementary true random number to B. Similarly, when the remaining capacity of R(B, C) is insufficient, B initiates a true random number supplement to C, and uses R(B, C) to encrypt and send the supplementary message to C. Upon receiving a response from C allowing supplementation, R(B, C) is used to encrypt and send the generated supplementary true random number to C.

[0064] In one example, when the second plaintext data is a key file, the performing quantum encryption on the second plaintext data based on the target encrypted true random number to obtain second quantum encrypted data includes:

[0065] Obtaining a dedicated encrypted true random number from the target encrypted true random number; wherein the dedicated encrypted true random number is obtained by expanding a basic true random number of a first preset length in the target encrypted true random number using a first preset expansion algorithm and a first preset expansion ratio, wherein the first preset expansion ratio indicates a multiple of the length by which each 1-bit true random number is expanded;

[0066] Determining an encryption key from the dedicated encrypted true random number according to the data length of the second plaintext data;

[0067] Based on the encryption key, quantum encryption is performed on the second plaintext data to obtain the second quantum encrypted data.

[0068] In order to quickly supplement a large number of true random numbers and reduce the encrypted true random numbers consumed in the true random number distribution process, in the present application, for any one-way sending relationship, the true random number of a preset length (recorded as the first preset length) in the encrypted true random number corresponding to the one-way sending relationship can be determined as the basic true random number. Then, the basic true random number is expanded using a preset expansion algorithm (recorded as the first preset expansion algorithm) and a first expansion ratio (recorded as the first preset expansion ratio) to obtain a dedicated encrypted true random number. Among them, the dedicated encrypted true random number is mainly used to encrypt and supplement random numbers. The expansion algorithm can be an algorithm such as AES or DES, which is not specifically limited here. The first preset expansion ratio represents the length multiple of each 1-bit true random number after being expanded. For example, if the expansion ratio is 10, then a 1-bit true random number will be expanded into a 10-bit key fragment.

[0069] Among them, the timing for expanding the dedicated encryption true random number can be real-time expansion when the quantum security terminal initiates key supplementation, or it can be pre-expanded for direct use when the key is supplemented.

[0070] It should be noted that the first preset length can be flexibly adjusted according to the needs of the actual application scenario. For example, in a scenario with extremely high security requirements, a longer first preset length can be selected to ensure that the basic true random number has sufficient entropy and unpredictability, thereby enhancing the security of the encryption system; if you want to minimize the encrypted true random number consumed in the true random number distribution process, you can choose a shorter first preset length. Similarly, the setting of the first expansion ratio can also be set to different values ​​according to different scenarios. If you want to minimize the consumption of true random numbers, the expansion ratio can be set to a larger value; if you want to ensure the high security and anti-cracking ability of the encryption key, the expansion ratio can be set to a smaller value.

[0071] When the second plaintext data is determined based on the supplementary true random number corresponding to a one-way transmission relationship, the encryption key can be determined from the dedicated encryption true random number corresponding to the one-way transmission relationship according to the data length of the second plaintext data. Then, based on the encryption key, the second plaintext data is quantum encrypted to obtain the second quantum encrypted data.

[0072] The first preset expansion ratio is 8, the first preset length is 1 megabyte (M), Figure 4 For example, if each blank grid in the network is preset with 2M true random numbers, then for an n-level Mesh ad hoc network, the required storage of the true random numbers preset by a quantum security terminal is 2*(2n-2)M, of which 2*(n-1)M are encrypted true random numbers and 2*(n-1)M are decrypted true random numbers. If n is 7, that is, a Mesh ad hoc network with 7 nodes, then the space required to store true random numbers in a node is 24M, of which 12M are encrypted true random numbers and 12M are decrypted true random numbers. For a one-way sending relationship of any node, such as C->B, 1M true random numbers can be taken from the encrypted true random numbers corresponding to C->B as the basic true random numbers. Through the first preset expansion algorithm and the first preset expansion ratio, the 1M basic true random numbers are expanded to 8M dedicated encrypted true random numbers. When the encryption ratio is 1:1, the 8M dedicated encrypted true random numbers can encrypt 8M supplementary true random numbers.

[0073] In one example, in order to facilitate any receiving end in the Mesh self-organizing network to correctly decrypt the key file distributed by the quantum security terminal, in this application, for each one-way sending relationship, the quantum security terminal first uses the first preset expansion algorithm and the first preset expansion ratio to expand the basic true random number (whose length is determined by the first preset length) to generate a dedicated encrypted true random number. Subsequently, the quantum security terminal will notify the corresponding receiving end of these expansion parameters (i.e., the first preset expansion algorithm, the first preset expansion ratio and the first preset length) and negotiate and confirm with it. In this way, the receiving end can obtain the basic true random number of the same length from the pre-saved decrypted true random number corresponding to the one-way receiving relationship from the quantum security terminal to the receiving end, and perform the same expansion operation to obtain a dedicated decrypted true random number paired with the sending end. For example, when the quantum security terminal sends a supplementary message or a key file to the receiving end, it can carry the first preset expansion algorithm, the first preset expansion ratio and the first preset length.

[0074] Based on the above embodiments, it can be known that in the Mesh self-organizing network, the quantum security terminal can also be used as a receiving end, and negotiate with each sending end in the Mesh self-organizing network to determine the expansion algorithm (recorded as the second expansion algorithm), expansion ratio (recorded as the second expansion ratio) and preset length (recorded as the second preset length) corresponding to the communication direction from the sending end to the quantum security terminal, so that the quantum security terminal can obtain a dedicated decryption true random number from the decryption true random number corresponding to the one-way receiving relationship from the sending end to the quantum security terminal. Exemplarily, the quantum security terminal obtains a basic true random number of the second preset length from the pre-stored decryption true random number corresponding to the one-way receiving relationship from the sending end to the quantum security terminal, and expands the basic true random number based on the second preset expansion algorithm and the second preset expansion ratio, thereby obtaining a dedicated decryption true random number. When the quantum security terminal performs quantum decryption on the encrypted key file (i.e., the first quantum encrypted data) sent by the sender, the quantum security terminal determines the target decryption true random number corresponding to the target unidirectional receiving relationship from the sender to the quantum security terminal according to the decryption true random numbers corresponding to each unidirectional receiving relationship in the pre-saved Mesh ad hoc network. From the target decryption true random number, a dedicated decryption true random number is obtained. Then, according to the data length of the first quantum encrypted data, a decryption key is determined from the dedicated decryption true random number. Based on the decryption key, the first quantum encrypted data is quantum decrypted to obtain the first plaintext data.

[0075] Taking the first preset expansion ratio as 8, the first preset length as 1 megabyte (M), and 2M as the critical point for initiating true random number supplementation as an example, even if all nodes initiate true random number supplementation at the same time, after all nodes are supplemented, the true random number storage of any node is 9*(2n-2)M. If it is a mesh network of 10,000 nodes, the maximum true random number storage of any node is: 9*(2*10000-2)M, which is less than 180G. This storage is very small for the storage device size.

[0076] Embodiment 3:

[0077] Based on the same inventive concept, this application also provides a Mesh self-organizing network global quantum secure communication system. Figure 6 A system structure diagram of a Mesh self-organizing network global quantum secure communication provided in this application, the system includes multiple quantum security terminals for executing the method described in any of the above embodiments.

[0078] It should be noted that the principle of solving the problem by the Mesh self-organizing network global quantum secure communication system is the same as the principle of solving the technical problem in the above method embodiment, and the repeated parts will not be repeated.

Claims

1. A method for global quantum secure communication in a Mesh self-organizing network, characterized in that: The method is applied to any quantum security terminal in a Mesh self-organizing network, and the method includes: For the first quantum encrypted data sent from any sending end in the Mesh ad hoc network, determine the target decryption true random number corresponding to the target unidirectional receiving relationship from the sending end to the quantum security terminal from the pre-saved decryption true random numbers corresponding to each unidirectional receiving relationship in the Mesh ad hoc network; perform quantum decryption on the first quantum encrypted data based on the target decryption true random number to obtain first plaintext data; wherein the types of the first plaintext data include the following: application data, key file, and security signaling; For the second plaintext data to be sent to any receiving end in the Mesh self-organizing network, a target encrypted true random number corresponding to the target sending relationship from the quantum security terminal to the receiving end is determined from the encrypted true random numbers corresponding to each unidirectional sending relationship in the Mesh self-organizing network that are pre-saved; wherein the types of the second plaintext data include the following: application data, key file, and service signaling; based on the target encrypted true random number, the second plaintext data is quantum encrypted to obtain second quantum encrypted data; and the second quantum encrypted data is sent to the receiving end.

2. The method according to claim 1, characterized in that The method further comprises: If it is determined that the other end quantum security terminal in any one-way communication relationship is out of connection, the true random number corresponding to the one-way communication relationship is discarded; wherein the one-way communication relationship includes a one-way sending relationship and a one-way receiving relationship.

3. The method according to claim 1, characterized in that In the case where the second plaintext data is a key file, obtaining the second plaintext data to be sent to the receiving end includes: Determining that the remaining capacity of the encrypted true random number corresponding to the target sending relationship satisfies a preset supplementary condition; Generate a corresponding supplementary true random number for the target sending relationship, so as to determine the second plaintext data through the supplementary true random number.

4. The method according to claim 3, characterized in that After determining that the remaining capacity of the encrypted true random number corresponding to the target sending relationship satisfies a preset supplementary condition, before generating a corresponding supplementary true random number for the target sending relationship to determine the second plaintext data by using the supplementary true random number, the method further includes: generating a supplemental message; Based on the target encrypted true random number, quantum encrypting the supplementary message and sending it to the receiving end; A supplementation-allowed response sent by the receiving end is received.

5. The method according to claim 3, characterized in that In the case where the second plaintext data is a key file, the step of performing quantum encryption on the second plaintext data based on the target encrypted true random number to obtain second quantum encrypted data includes: Obtaining a dedicated encrypted true random number from the target encrypted true random number; wherein the dedicated encrypted true random number is obtained by expanding a basic true random number of a first preset length in the target encrypted true random number using a first preset expansion algorithm and a first preset expansion ratio, wherein the first preset expansion ratio indicates a multiple of the length by which each 1-bit true random number is expanded; Determining an encryption key from the dedicated encrypted true random number according to the data length of the second plaintext data; Based on the encryption key, quantum encryption is performed on the second plaintext data to obtain the second quantum encrypted data.

6. The method according to claim 5, characterized in that In the case where the first plaintext data is the key file, and the sending end negotiates with the quantum security terminal to determine a second preset expansion algorithm, a second preset expansion ratio, and a second preset length, the first quantum encrypted data is quantum decrypted based on the target decryption true random number to obtain the first plaintext data, including: Obtaining a dedicated decryption true random number from the target decryption true random number; wherein the dedicated decryption true random number is obtained by expanding a basic true random number of a second preset length in the target decryption true random number using the second preset expansion algorithm and the second preset expansion ratio; Determining a decryption key from the dedicated decryption true random number according to the data length of the first quantum encrypted data; Based on the decryption key, quantum decryption is performed on the first quantum encrypted data to obtain the first plaintext data.

7. A Mesh self-organizing network global quantum secure communication system, characterized in that: The system comprises a plurality of quantum security terminals for executing the method according to any one of claims 1 to 6.

Images