Video transmission method and system using quantum key encryption and application thereof

Abstract

The invention provides a video transmission method and system using quantum key encryption, and a video conference method and system implemented by means of the video transmission method. According to the method, the specific additional frame including the key index and the verification information is configured in the encrypted transmission data, so that the usage amount of the quantum key can be effectively reduced, additional transmission of key information is not needed, the encrypted transmission security can be enhanced, meanwhile, the video receiving end is allowed to conveniently retrieve the additional frame, and the transmission decryption efficiency is improved. Further, verifiability of encryption key integrity is provided by generating a quantum key based on information of both video transmission parties.

Description

Technical Field

[0001] The present invention relates to the field of quantum communication, and in particular to a video transmission method and system using quantum key encryption and applications thereof, namely, a video conferencing method and system. Background Art

[0002] In the digital age, data security is becoming increasingly important. In video transmission, we need to encrypt the video to prevent the data from being eavesdropped or destroyed. Existing encryption technology is based on algorithm encryption based on computational complexity, such as RSA, which protects data security through computational complexity. This encryption method is challenged by the development of computing power, such as quantum computers, and its unbreakability is threatened, thus threatening the data security of encrypted videos.

[0003] Quantum key distribution (QKD) is a new quantum communication protocol based on quantum mechanics rather than computational complexity, which can prevent keys from being eavesdropped or tampered with. However, the amount of video data is very large, and existing encryption methods require a large number of keys to encrypt video data. The current QKD key generation speed is not as fast as traditional algorithm-based keys, which limits the application prospects of QKD in video encryption. Summary of the invention

[0004] In view of the above problems existing in the prior art, the present invention proposes a video transmission method and system using quantum key encryption, as well as a video conferencing method and system implemented by means of the video transmission method. Among them, by configuring a specific additional frame including a key index and verification information in the encrypted transmission data, the use of quantum keys can be effectively reduced, and there is no need to transmit key information additionally, which can enhance the security of encrypted transmission, while allowing the video receiving end to easily retrieve the additional frame and improve the transmission decryption efficiency. In addition, by generating a quantum key based on the information of both parties in the video transmission, the integrity of the encryption key can be verified.

[0005] Specifically, the first aspect of the present invention relates to a video transmission method using quantum key encryption, which includes a shared key library establishment step, a video encryption transmission step, and a video decryption step;

[0006] In the shared key library establishment step, a shared key library is established in the transmitting end and the receiving end, and the shared key library includes a quantum key with a preset length of L bits;

[0007] In the video encryption transmission step, the sender divides the original video into N original data groups, where each original data group includes t data frames, and each data frame includes j bytes; obtains the first quantum key K for the original data group n from the shared key library n1 and the second quantum key K n2 , and by using the first quantum key Kn1 The pth byte C p and the second quantum key K n2 The qth byte b q For the qth byte a of the pth frame in the original data group n p" The original data group n is encrypted in an encryption manner to generate an encrypted video data group n, wherein n=1, ..., N, p=1, ..., t, q=1, ..., j; and a first additional frame F is added before and after the encrypted video data group n respectively. n1 and the second additional frame F n2 To generate an encrypted video transmission data set n, wherein the first additional frame F n1 Including the first quantum key K n1 and the second quantum key K n2 The key sequence number of the second additional frame F n2 Including the hash value of the original data group n; generating encrypted video data based on the N encrypted video transmission data groups n and sending it to the receiving end;

[0008] In the video decryption step, the receiving end uses the first additional frame F n1 Obtain the first quantum key K for encrypting the video data set n n1 and the second quantum key K n2 , and with the help of the first quantum key K n1 and the second quantum key K n2 Decrypt the encrypted video data group n to generate the original data group n, and based on the second additional frame F n2 Perform integrity verification on the received original data group n.

[0009] Furthermore, in the shared key library establishment step, a quantum key is generated based on a shared bit string generated by quantum key distribution, a common signature of the sender and the receiver, and at least a part of a hash value of the shared bit string and the common signature, and the quantum key is numbered to form a shared key library.

[0010] Furthermore, in the video encryption transmission step, by using a hash function, based on the first quantum key K n1 and its pth byte C p Generate a hash bit string and replace byte a p$ , Byte b $ The encrypted video data group n is generated by performing an XOR operation on the qth byte of the hash bit string.

[0011] Furthermore, the video transmission method of the present invention further includes a transmission request step provided before the video encryption transmission step;

[0012] In the transmission request step, the sender Alice obtains the third quantum key K1 from the shared key library to encrypt the sender signature and timestamp to generate the first verification information, and sends the transmission request and the first verification information to the receiver;

[0013] The receiving end uses the third quantum key K1 to decrypt the first verification information to obtain the sender's signature and performs identity authentication based on it. After the identity authentication is passed, the receiving end signature is encrypted with the third quantum key K1 to generate the second verification information, and the confirmation information and the second verification information are sent to the sender.

[0014] The sender uses the third quantum key K1 to decrypt the second verification information to obtain the receiver's signature, and constructs a verification code with the receiver's signature, the sender's signature and the timestamp.

[0015] Furthermore, in the transmission request step, the sender and the receiver also check the number of quantum keys in the shared key library according to a preset threshold after identity authentication; and / or, with the help of a congruence function, generate a check code based on a bit string consisting of the sender's signature and timestamp and a bit string consisting of the receiver's signature.

[0016] Furthermore, the first additional frame further includes a verification code and a timestamp, and the second additional frame further includes a verification code and a timestamp;

[0017] The video transmission method also includes a receiving verification step provided before the video decryption step, wherein the receiving end extracts the first additional frame and the second additional frame from the received encrypted video data to obtain a received verification code and a timestamp, and performs identity authentication with the help of the receiving end signature and the received verification code and / or performs time verification with the help of the received timestamp and the timestamp in the verification code.

[0018] Furthermore, in the video decryption step, an integrity check is performed by using the hash value of the original data group n obtained by decryption and the hash value of the original data group n in the received second additional frame.

[0019] A second aspect of the present invention relates to a video transmission system, which includes a transmitting end and a receiving end, and is configured to achieve video transmission between the transmitting end and the receiving end by means of the above-mentioned video transmission method using quantum key encryption.

[0020] The third aspect of the present invention relates to a video conferencing method, which includes a secure channel establishment step and a conference video encryption transmission step;

[0021] In the secure channel establishment step, the control end sends the master key to the server to which the user end belongs in an encrypted manner. The server generates a personal key based on the master key, the local quantum random number and the shared quantum key with the subordinate user end, and sends it to the user end in an encrypted manner;

[0022] In the conference video encryption transmission step, the first user end as the sending end encrypts the video data and audio data with the help of the first personal key to generate the first video encryption data and the first audio encryption data, and uploads them to the first server to which it belongs; the first server decrypts the first video encryption data with the first personal key, and decrypts the first audio encryption data with the local quantum random number and the shared quantum key used for the first personal key to generate the second audio encryption data; with the help of the above-mentioned video transmission method using quantum key encryption, the video data is transmitted to the second server to which the second user end as the receiving end belongs, and the second audio encryption data is directly transmitted to the second server; the second server encrypts the video data with the help of the second personal key used for the second user end to generate the second video encryption data, encrypts the second audio encryption data with the local quantum random number and the shared quantum key used for the second personal key to generate the third audio encryption data, and sends the second video encryption data and the third audio encryption data to the second user end; the second user end decrypts the second video encryption data and the third audio encryption data with the second personal key to obtain the audio data and the video data.

[0023] A fourth aspect of the present invention relates to a video conferencing system, which includes a control terminal, a server and a user terminal, and is configured to implement video conferencing between user terminals with the help of the above-mentioned video conferencing method, wherein the server is configured to be able to generate local quantum random numbers. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] The specific implementation modes of the present invention will be further described in detail below in conjunction with the accompanying drawings.

[0025] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. It is obvious that the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0026] Figure 1 An example of a video transmission system according to the present invention is shown;

[0027] Figure 2 An example of a video transmission method using quantum key encryption according to the present invention is shown;

[0028] Figure 3 An example of a structure of a shared quantum key for a transmitting end and a receiving end in a video transmission method and system using quantum key encryption according to the present invention is shown;

[0029] Figure 4An example of a structure of an additional frame for encrypting a video transmission data group in a video transmission method and system using quantum key encryption according to the present invention is shown;

[0030] Figure 5 An example of a video conferencing system according to the present invention is shown;

[0031] Figure 6 An example of a video conferencing method according to the present invention is shown. DETAILED DESCRIPTION

[0032] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example so as to fully convey the spirit of the present invention to those skilled in the art to which the present invention belongs. Therefore, the present invention is not limited to the embodiments disclosed herein.

[0033] Figure 1 An example of a video transmission system according to the present invention is shown, which includes a sending end Alice and a receiving end Bob.

[0034] Both the sending end Alice and the receiving end Bob are equipped with QKD equipment, data processing equipment and data storage equipment, and quantum channels and classical channels are set up between the two.

[0035] QKD devices can use quantum channels to transmit quantum state information such as polarization-coded light pulses to allow the distribution of shared quantum bit strings according to the quantum key distribution protocol.

[0036] Data processing equipment can process and process data, such as performing video encryption and decryption operations and generating a quantum key library based on a shared quantum bit string.

[0037] The data storage module can be used to store quantum key libraries, etc.

[0038] Classical channels can be used to transmit classical information. For example, classical channels can connect data processing equipment to achieve the transmission of classical information such as encrypted video data and feedback information.

[0039] Figure 2 An example of a video transmission method using quantum key encryption according to the present invention is shown, which can be used with the help of Figure 1 The video transmission system shown in the figure is implemented, and mainly includes a shared key library establishment step, a transmission request step, a video encryption transmission step, a reception verification step and a video decryption step.

[0040] The shared key library establishment step is used to generate a quantum key shared by both the sending end and the receiving end, and establish a shared key library based on it.

[0041] Specifically, the sender and the receiver can generate a quantum key based on a shared bit string generated with the help of quantum key distribution, the common signature of the sender and the receiver, and at least a part of the hash value of the shared bit string and the common signature, and then number the quantum keys to form a shared key library.

[0042] For example, the sender Alice and the receiver Bob can first generate a shared bit string through QKD, and then use the shared bit string to construct a generated Figure 3 The quantum key shown is of length L bits:

[0043] Shared bit string + Alice and Bob's joint signature + hash value of the shared bit string and the above joint signature, where the length of the shared bit string is L1, the length of the joint signature is L2, and the L-L1-L2 bit hash of the shared bit string and the joint signature is taken as the hash value for generating the quantum key.

[0044] The sending end Alice and the receiving end Bob respectively generate multiple quantum keys of length L bits according to the above method, and form a shared key library by numbering these quantum keys, for example, in sequence, and storing them in a data storage device.

[0045] On the basis of forming a shared key library, the sender Alice can use the transmission request step to send a transmission request to the receiver Bob and perform identity authentication at the same time.

[0046] like Figure 2 As shown, in the transmission request step, the sender Alice can obtain the third quantum key K1 from the shared key library, use the third quantum key K1 to encrypt the signature and timestamp of the sender Alice to generate the first verification information, and then send the transmission request and the first verification information to the receiver.

[0047] After receiving the above data, the receiving end can use the third quantum key K1 to decrypt the first verification information to obtain the signature of the sender Alice, and then perform identity authentication based on it. After the identity authentication is passed, the signature of the receiving end Bob is encrypted with the third quantum key K1 to generate the second verification information, and the confirmation information about the transmission request and the second verification information are sent to the sending end in response to the transmission request.

[0048] After receiving the confirmation information, the sender Alice continues to decrypt the second verification information with the third quantum key K1 to obtain the signature of the receiver Bob, and constructs the verification code with the signature of the receiver Bob and the signature and timestamp of the sender Alice.

[0049] In the present invention, the constructed check code can meet the following conditions, namely: the check code is a function H(A,B) of the bit string A consisting of the signature and timestamp of the sender Alice and the bit string B consisting of the signature of the receiver Bob, and when one of the parameters A and B is known, the other of the parameters A and B can be obtained through the check code H(A,B).

[0050] As a preferred example, the check code may be generated by using a congruence function, such as RSA and its variant algorithms.

[0051] In a preferred example, after the identity authentication is passed, the sender and the receiver can also perform an operation of checking the shared key library to check whether the current shared key library is sufficient. For example, the sender and the receiver can compare the current number of quantum keys in their shared key library with a preset threshold. If the current number is greater than the preset threshold, the next step is allowed to be executed, otherwise, the step of establishing the shared key library is returned to enrich the shared key library.

[0052] In the video encryption transmission step, the sender Alice may first divide the original video into multiple (eg, N) original data groups n, wherein every t frames of data are regarded as a group, each data frame includes j bytes, and n=1, ..., N.

[0053] In the present invention, a typical value of t may be between 60 and 120. Preferably, the value of t is not informed to the receiving end Bob in advance.

[0054] Then, for each original data group n, the sender Alice can obtain the corresponding first quantum key K from the shared key library n1 and the second quantum key K n2 , by using the first quantum key K n1 The pth byte C p and the second quantum key K n2 The qth byte b q For the qth byte a of the pth frame in the original data group n p" The original data group n is encrypted in an encryption manner to generate an encrypted video data group n, wherein p=1, ..., t, q=1, ..., j.

[0055] As a preferred example, the first quantum key K with a length of L can be obtained by using a hash function Hash. n1 and its pth byte C p Generate a hash bit string Hash(K ％1 ,c p ), and then byte a p$ , Byte b $and the qth byte of the hash bit string, Hash(K ％1 ,c p )- $ Perform XOR operation a p$ ⊕b $ ⊕,Hash(K ％1 ,c p )- $ In this way, an encrypted video data group n is generated.

[0056] Then, the sender Alice can add the first additional frame F in front of the encrypted video data group n. n1 , and add a second additional frame F after the encrypted video data group n n2 , forming encrypted video transmission data group n.

[0057] In the present invention, the first additional frame F n1 The first quantum key K may be included n1 and the second quantum key K n2 The key sequence number of the second additional frame F is used to provide the index information of the quantum key used for the current encrypted video data group n in the shared key library. n2 A hash value of the original data group n may be included in to allow integrity verification of the received data.

[0058] Figure 4 An example of the structure of the additional frame according to the present invention is shown, wherein: the first additional frame F n1 The first row of pixels of F is used to encode information, and the remaining pixels are the same as the remaining pixels of the first frame of the encrypted video data group n; the second additional frame F n2 The first row of pixels is used to encode information, and the remaining pixels are the same as the remaining pixels of the last frame of the encrypted video data group n.

[0059] In a preferred example, the first additional frame F n1 The encoded information is in addition to the first quantum key K n1 and the second quantum key K n2 In addition to the key sequence number, it may also include a check code, a timestamp, and an end mark. n2 The encoded information may include, in addition to the hash value of the original data group n, a checksum, a timestamp, and an end mark. The end mark may be a specific bit string agreed upon in advance by the sender Alice and the receiver Bob.

[0060] Finally, the sender Alice combines all N encrypted video transmission data groups n to generate encrypted video data (ie, encrypted video files), and then sends them to the receiver Bob via classic signals.

[0061] After receiving the encrypted video data, the receiving end Bob can first verify the reliability of the received data with the help of the receiving verification step.

[0062] exist Figure 2 In the example, the receiver Bob can locate all the additional frames by retrieving the checksum and the termination marker, and extract all the first additional frames and the second additional frames. Then, the receiver Bob substitutes his signature into the checksum for calculation. If the sender Alice's signature and timestamp can be solved, the identity verification is successful.

[0063] The receiving end Bob can further extract the timestamps of all the first and second additional frames for time verification. If the difference between the timestamps of the second additional frame and the first additional frame is less than a preset threshold T1, and the difference with the timestamp decoded from the check code is less than a preset threshold T2, then the time verification is passed.

[0064] In the receiving verification step, if any of the above identity verification and time verification fails, the receiving end Bob terminates the subsequent decryption operation and broadcasts an error message.

[0065] After passing the identity authentication and time verification with the help of the reception verification step, the receiving end Bob can perform the video decryption step.

[0066] In the video decryption step, the receiver Bob can obtain the video through the first additional frame F n1 The key sequence number in the shared key library is used to obtain the first quantum key K used to encrypt the video data group n. n1 and the second quantum key K n2 .

[0067] Therefore, we can use the first quantum key K n1 and the second quantum key K n2 The received encrypted video data group n is decrypted to obtain the original data group n.

[0068] Furthermore, the receiving end Bob can also use the second additional frame F n2 The hash value of the original data group n is used to verify the integrity of the received original data group n.

[0069] Specifically, the receiving end Bob can calculate the hash value of each received original data group n and compare it with the hash value of the original data group n in the corresponding second additional frame. If the hash values ​​of all groups are consistent, the integrity check passes, and the receiving end Bob can send the video received information to the sending end Alice; otherwise, the incomplete video information can be sent, and at this time, the sending end Alice can choose to resend.

[0070] To improve the security of data transmission, the present invention can also allow the sender Alice and the receiver Bob to delete the first, second and third quantum keys used for the current video transmission in their shared key library after the video is successfully sent, and then renumber the quantum keys in the shared key library in order.

[0071] In the video transmission system and method of the present invention, by configuring a specific additional frame structure in the encrypted video data group, which has, for example, index information of a shared key library, identity authentication information, and timestamp information, and at the same time using a quantum key corresponding to the index information in the encryption process of the video data frame associated with the additional frame, the use of quantum keys can be effectively reduced to ensure security. In addition, since decryption information is attached to the encrypted video transmission data in the form of an additional frame, it allows the encrypted video data to be directly transmitted without the need to additionally transmit the quantum key information used, which can enhance the security of encrypted transmission. Furthermore, the present invention also generates a quantum key with a specific structure based on the information of both parties in the video transmission, so that the integrity of the quantum key used in the encryption can be verified. In addition, the present invention also generates a check code based on the information of both parties in the video transmission, so that the video receiving end can easily retrieve the additional frame based on the check code, and then quickly complete the decryption operation.

[0072] Figure 5-6 An example of application of the video transmission solution according to the present invention in a video conference is shown.

[0073] like Figure 5 As shown, the video conferencing system may include a user terminal, a server and a control terminal, wherein the user terminal constitutes a user layer, and the server and the control terminal constitute a service layer.

[0074] In the present invention, the user end is a video conferencing device used by the user, wherein the user end and its server (for example, the user end can choose to connect to the server nearby) can obtain a shared quantum key through a key injection method, for example.

[0075] As an example, the shared quantum key can be generated with the help of QKD or with the help of quantum random numbers.

[0076] The server can have the functions of the transmitter and receiver in the above-mentioned video transmission method, and can generate local quantum random numbers.

[0077] In the present invention, a shared key library may be constructed between the server and the control end, and each server may also construct a shared key library through the control end.

[0078] The control end of the video conferencing system can generate a shared key pool with each server through QKD.

[0079] To better understand the video conferencing process of the present invention, Figure 6 The video conferencing method of the present invention is described in detail, which mainly includes a secure channel establishment step and a conference video encryption transmission step.

[0080] Before starting a video conference, the user end can register with the control end through the server to which it belongs.

[0081] After the control end passes the verification, it allows the corresponding server to inject the quantum key into the user end. The user end can also apply to the control end to create a video conference and attach the identity information of the participants.

[0082] In response to the video conference request, the control end may generate a conference number and send it to the conference applicant.

[0083] Afterwards, the conference participants submit the conference number to the control end to apply to join the conference.

[0084] After receiving the conference number, the control end compares the identity information of the conference participants with the identity information of the participants submitted by the conference creator, and allows the participants to join the conference after the comparison is consistent.

[0085] At this time, you can use the secure channel establishment steps to establish a conference secure channel for the participating users.

[0086] For example, Figure 6 In the example, the control end can negotiate and formulate a master key P, and for example, use a quantum key shared with the corresponding server to send the master key P to the server where each participating user terminal is located in an encrypted manner.

[0087] The server can then use its local quantum random number and the quantum key shared with the subordinate user terminal to encrypt the master key P to generate a personal key for the corresponding user terminal, and for example, use the quantum key shared with the corresponding user terminal to send the personal key to the corresponding user terminal in an encrypted manner.

[0088] For example Figure 5-6 As shown in FIG. 1 , for client A1, server A connected to client A1 can use its local quantum random number Loc A And the quantum key Q shared with the client A1 A1 Encrypt the master key P sent by the control end to obtain the personal key P for the user end A1 A1 , and then use the quantum key shared by server A and client A1 to obtain the personal key P A1 After encryption, it is sent to the client A1.

[0089] After establishing a conference security channel for each participating user terminal, the user terminal can then securely transmit the video and audio recorded by the video capture device and the audio capture device to the other participants (user terminals) through the conference security channel during the conference video encryption transmission step. The other participants will decrypt and play the received video and audio.

[0090] In the conference video encryption transmission step of the present invention, the first user end as the sender can encrypt the video data and audio data with the help of a personal key to generate first video encryption data and first audio encryption data, and upload them to the first server to which it belongs.

[0091] Subsequently, the first server can use the first personal key to decrypt the first video encrypted data, and use the local quantum random number and shared quantum key used for the first personal key to decrypt the first audio encrypted data to generate second audio encrypted data; then use the above-mentioned video transmission method to transmit the video data to the second server belonging to the second user terminal as the receiving end, and directly transmit the second audio encrypted data to the second server.

[0092] After the second server obtains the video data according to the video transmission method of the present invention, it encrypts the video data with the help of the second personal key for the second user terminal to generate second video encrypted data. In addition, it encrypts the second audio encrypted data with the local quantum random number and shared quantum key for the second personal key to generate third audio encrypted data, and sends the second video encrypted data and the third audio encrypted data to the second user terminal.

[0093] Therefore, the second client can, for example, decrypt the second video encrypted data and the third audio encrypted data with the help of the second personal key to obtain plain text.

[0094] For example Figure 5-6 As shown, the first user terminal A1 uses a personal key P using a symmetric encryption algorithm, for example. A1 The video data and the audio data are encrypted to generate first video encrypted data and first audio encrypted data, and are transmitted to the first server A.

[0095] The first server A uses the same symmetric encryption algorithm and uses the corresponding personal key P A1 The first video encrypted data is decrypted to obtain video data (plain text), and then the video encryption transmission method of the present invention is used to encrypt and transmit the video to the second server C; at the same time, the personal key P is used to encrypt and transmit the video to the second server C. A1 The corresponding local quantum random number Loc A and quantum key Q A1 The first audio encrypted data is decrypted to generate second audio encrypted data, and the second audio encrypted data is transmitted to the second server C.

[0096] After receiving the encrypted data, the second server C obtains the video data (plain text) according to the video encryption transmission method of the present invention, and then uses the personal key P C1 The video data is encrypted to generate the second video encrypted data; at the same time, the personal key P is also used to C1 The corresponding local quantum random number Loc C and quantum key Q C1 The second audio encryption data is encrypted to generate third audio encryption data; then, the second video encryption data and the third audio encryption data are transmitted to the second user terminal C1.

[0097] The second client C1 uses the same symmetric encryption algorithm and uses the personal key P C1 The second video encrypted data and the third audio encrypted data are decrypted to obtain video data and audio data (plain text).

[0098] Finally, when the participating client sends an exit command to the control terminal, the control terminal can delete the personal key of the corresponding client from the conference key library after receiving the exit command. When the number of participating clients is 0, the conference ends.

[0099] In the video conferencing method and system of the present invention, by setting up a service layer and a user layer, and using different encryption methods between the service layers and between the service layer and the user layer (i.e., the video encryption transmission scheme of the present invention and the encrypted transmission of the personal key generated based on the injection of quantum keys), the personal key cannot decrypt the ciphertext in the transmission process between other nodes, effectively enhancing the security of data transmission. In addition, the service layer uses local random numbers to generate personal keys, which can effectively avoid the leakage of a person's personal key and the shared key library causing the leakage of other people's personal keys, thereby further improving the security of the conference system.

[0100] Although the present invention has been described above through specific embodiments in conjunction with the accompanying drawings, those skilled in the art will readily recognize that the above embodiments are merely exemplary and are used to illustrate the principles of the present invention, and do not limit the scope of the present invention. Those skilled in the art may make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. A video transmission method using quantum key encryption, comprising a shared key library establishment step, a video encryption transmission step, and a video decryption step; In the shared key library establishment step, a shared key library is established in the transmitting end and the receiving end, and the shared key library includes a quantum key with a preset length of L bits; In the video encryption transmission step, the sender divides the original video into N original data groups, where each original data group includes t data frames, and each data frame includes j bytes; obtains the first quantum key K for the original data group n from the shared key library n1 and the second quantum key K n2 , and by using the first quantum key K n1 The pth byte C p and the second quantum key K n2 The qth byte b q For the qth byte a of the pth frame in the original data group n p" The original data group n is encrypted in an encryption manner to generate an encrypted video data group n, wherein n=1, ..., N, p=1, ..., t, q=1, ..., j; and a first additional frame F is added before and after the encrypted video data group n respectively. n1 and the second additional frame F n2 To generate an encrypted video transmission data set n, wherein the first additional frame F n1 Including the first quantum key K n1 and the second quantum key K n2 The key sequence number of the second additional frame F n2 Including the hash value of the original data group n; generating encrypted video data based on the N encrypted video transmission data groups n and sending it to the receiving end; In the video decryption step, the receiving end uses the first additional frame F n1 Obtain the first quantum key K for encrypting the video data set n n1 and the second quantum key K n2 , and with the help of the first quantum key K n1 and the second quantum key K n2 Decrypt the encrypted video data group n to generate the original data group n, and based on the second additional frame F n2 Perform integrity verification on the received original data group n.

2. The video transmission method according to claim 1, wherein: In the shared key library establishment step, a quantum key is generated based on a shared bit string generated by quantum key distribution, a common signature of a sender and a receiver, and at least a part of a hash value of the shared bit string and the common signature, and the quantum key is numbered to form a shared key library.

3. The video transmission method according to claim 1, wherein: In the video encryption transmission step, the first quantum key K is used to obtain the n1 and its pth byte C p Generate a hash bit string and replace byte a p$ , Byte b $ The encrypted video data group n is generated by performing an XOR operation on the qth byte of the hash bit string.

4. The video transmission method according to claim 1, further comprising a transmission request step before the video encryption transmission step; In the transmission request step, the sending end Ali ce obtains the third quantum key K1 from the shared key library to encrypt the sending end signature and timestamp to generate the first verification information, and sends the transmission request and the first verification information to the receiving end; The receiving end uses the third quantum key K1 to decrypt the first verification information to obtain the sender's signature and performs identity authentication based on it. After the identity authentication is passed, the receiving end signature is encrypted with the third quantum key K1 to generate the second verification information, and the confirmation information and the second verification information are sent to the sender. The sender uses the third quantum key K1 to decrypt the second verification information to obtain the receiver's signature, and constructs a verification code with the receiver's signature, the sender's signature and the timestamp.

5. The video transmission method according to claim 4, wherein: In the transmission request step, the sender and receiver also check the number of quantum keys in the shared key library according to a preset threshold after identity authentication; And / or, with the help of a congruence function, a check code is generated based on a bit string consisting of a signature of the sender and a timestamp and a bit string consisting of a signature of the receiver.

6. The video transmission method according to claim 5, wherein: The first additional frame also includes a verification code and a timestamp, and the second additional frame also includes a verification code and a timestamp; The video transmission method also includes a receiving verification step provided before the video decryption step, wherein the receiving end extracts the first additional frame and the second additional frame from the received encrypted video data to obtain a received verification code and a timestamp, and performs identity authentication with the help of the receiving end signature and the received verification code and / or performs time verification with the help of the received timestamp and the timestamp in the verification code.

7. The video transmission method according to claim 1, wherein: In the video decryption step, an integrity check is also performed with the help of the hash value of the original data group n obtained by decryption and the hash value of the original data group n in the received second additional frame.

8. A video transmission system, comprising a transmitting end and a receiving end, and configured to realize video transmission between the transmitting end and the receiving end by means of a video transmission method using quantum key encryption as described in any one of claims 1 to 7.

9. A video conferencing method, comprising a secure channel establishment step and a conference video encryption transmission step; In the secure channel establishment step, the control end sends the master key to the server to which the user end belongs in an encrypted manner. The server generates a personal key based on the master key, the local quantum random number and the shared quantum key with the subordinate user end, and sends it to the user end in an encrypted manner; In the step of encrypting and transmitting the conference video, the first user end as the sending end encrypts the video data and the audio data with the help of the first personal key to generate the first video encrypted data and the first audio encrypted data, and uploads them to the first server to which it belongs; The first server decrypts the first video encrypted data using the first personal key, and decrypts the first audio encrypted data using the local quantum random number and the shared quantum key used for the first personal key to generate second audio encrypted data; With the aid of the video transmission method using quantum key encryption as described in any one of claims 1 to 7, the video data is transmitted to the second server belonging to the second user terminal as the receiving end, and the second audio encrypted data is directly transmitted to the second server; the second server encrypts the video data with the aid of the second personal key used for the second user terminal to generate second video encrypted data, encrypts the second audio encrypted data using the local quantum random number and shared quantum key used for the second personal key to generate third audio encrypted data, and sends the second video encrypted data and the third audio encrypted data to the second user terminal; the second user terminal uses the second personal key to decrypt the second video encrypted data and the third audio encrypted data to obtain audio data and video data.

10. A video conferencing system comprising a control terminal, a server and a user terminal, and configured to implement a video conferencing between user terminals by means of the video conferencing method according to claim 9, wherein: The server is configured to generate local quantum random numbers.

Images