Data access method and device based on quantum key distribution and program product

Abstract

The invention discloses a data access method and device based on quantum key distribution and a program product, and relates to the field of data recovery, the method comprises the following steps: when a hard disk fault is detected, positioning a first data block lost in the hard disk according to residual data blocks and verification blocks of the hard disk; receiving a first quantum key corresponding to the first data block; decrypting the first data block by adopting the first quantum key to obtain a second data block, and recovering the hard disk according to the second data block to obtain a recovered hard disk; and predicting to-be-accessed first data in the recovered hard disk through the target prediction model, and recovering the first data into the cache for the client to access. Through application of the method and the device, the problem that a financial institution cannot continuously provide services for customers due to the fact that a long time needs to be spent on positioning, checking and data recovery when a backup system encounters a fault in the related technology is solved.

Description

Technical Field

[0001] The present application relates to the field of data recovery, and more specifically, to a data access method, device, and program product based on quantum key distribution. Background Art

[0002] As a data-intensive industry, the banking industry generates and processes massive amounts of transaction records, customer information, and market analysis data every day. These data are not only the core assets of banks, but also the key to maintaining business continuity and the quality of financial services. However, with the exponential growth of data volume, traditional data backup and recovery systems are beginning to show their limitations. Most of these systems rely on encryption algorithms to protect data, but with the rapid development of quantum computing, many existing encryption methods are at risk of being cracked by future quantum computers, which directly threatens data security.

[0003] The emergence of Quantum Key Distribution (QKD) technology provides a revolutionary solution to this challenge. QKD technology uses quantum entanglement and uncertainty principles to generate and share a theoretically uncrackable key between communicating parties. Even if potential attackers have unlimited computing power, including future quantum computers, they cannot crack or copy the key, thus achieving "unconditional security" for data protection. This feature makes QKD technology an ideal means of protecting bank data from advanced cyber attacks, such as quantum computing attacks and man-in-the-middle attacks. However, in the face of physical disasters such as natural disasters and hardware failures, financial institutions' backup systems often take a long time to locate, verify and restore critical data, which can lead to service interruptions and seriously affect customer experience and the reputation of financial institutions.

[0004] Currently, no effective solution has been proposed to the problem that when the backup system in related technologies encounters a failure, it takes a long time to locate, verify and restore data, which causes financial institutions to be unable to continue to provide services to customers. Summary of the invention

[0005] The main purpose of this application is to provide a data access method, device and program product based on quantum key distribution to solve the problem in the related technology that when the backup system encounters a failure, it takes a long time to locate, verify and restore data, which makes it impossible for financial institutions to continue to provide services to customers.

[0006] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a data access method based on quantum key distribution is provided, the method comprising: when a hard disk failure is detected, locating a first data block lost by the hard disk based on the remaining data blocks and check blocks of the hard disk, wherein the hard disk stores data encrypted by a quantum key; receiving a first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on quantum key distribution technology; decrypting the first data block using the first quantum key to obtain a second data block, and restoring the hard disk based on the second data block to obtain a restored hard disk; predicting the first data to be accessed in the restored hard disk by using a target prediction model, and restoring the first data to a cache for access by a client.

[0007] Furthermore, before locating the first data block lost from the hard disk based on the remaining data blocks and the check blocks of the hard disk, the method further includes: generating a quantum key based on the polarization state of the quantum, and verifying the quantum key to obtain a first verification result; when the first verification result is that the verification is passed, encrypting the data to be encrypted using the quantum one-time pad technology and the quantum key to obtain encrypted data; verifying the encrypted data using an enhanced quantum hash function to obtain a first verification result; and when the first verification result is that the verification is passed, transmitting the encrypted data to the hard disk.

[0008] Furthermore, the method also includes: upon receiving a data recovery request, verifying the data recovery request to obtain a second verification result, wherein the data recovery request is a request initiated by the client; when the second verification result is a successful verification, determining the data to be recovered, and receiving a second quantum key corresponding to the data to be recovered, wherein the second quantum key is a quantum key generated based on quantum key distribution technology; verifying the second quantum key through the client to obtain a third verification result; when the third verification result is a successful verification, using the second quantum key to decrypt the data to be recovered to obtain second data, and sending the second data to the client in response to the data recovery request.

[0009] Furthermore, a quantum key is generated according to a polarization state of a quantum, and the quantum key is verified to obtain a first verification result, including: generating the quantum key based on the polarization state of a quantum bit and a target device, wherein the target device refers to a device configured with quantum key distribution technology and quantum error correction coding technology and deployed with a single-mode optical fiber; performing a hash operation on the quantum key using a first encryption algorithm to obtain the first verification result, and when the first verification result is that the verification is passed, encrypting and storing the quantum key, and dynamically assigning the quantum key to the data to be backed up.

[0010] Furthermore, the data to be encrypted is encrypted using the quantum one-time pad technology and the quantum key to obtain the encrypted data, including: establishing a first communication channel based on a first security protocol and a second encryption algorithm; receiving the data to be encrypted through the first communication channel, and dividing the data to be encrypted into N data blocks, wherein each of the N data blocks includes an independent key fragment of a preset length, and N is a positive integer; using the quantum one-time pad technology and a multi-core processor to encrypt the N data blocks in parallel to obtain the encrypted N data blocks and encryption metadata, wherein the encryption metadata at least includes: a key ID, an encryption timestamp, and an encryption algorithm version; storing the encryption metadata and the encrypted N data blocks, and determining the encrypted data based on the encrypted N data blocks.

[0011] Furthermore, the first data block is decrypted using the first quantum key to obtain a second data block, including: decrypting the first data block in a multi-threaded parallel manner based on a second encryption algorithm to obtain a decrypted first data block; performing integrity verification on the decrypted first data block using a quantum-safe hash algorithm to obtain a second verification result; and when the second verification result is a verification pass, determining the second data block based on the decrypted first data block.

[0012] Furthermore, before predicting the first data to be accessed in the restored hard disk through the target prediction model, the method also includes: collecting request information of historical data read and write requests to obtain a training set, wherein the request information includes at least: access time and data block location; inputting the training set into a preset model to predict the third data to be accessed by the data read and write request, wherein the preset model includes at least: a neural network model for prediction based on time series; training the preset model based on the fourth data actually accessed by the data read and write request and the third data to obtain the target prediction model.

[0013] Furthermore, the data recovery request is verified to obtain a second verification result. When the second verification result is that the verification is passed, the data to be recovered is determined, and a second quantum key corresponding to the data to be recovered is received, including: encapsulating the data recovery request to obtain an encapsulated data recovery request, wherein the data recovery request at least includes identity authentication information and a key identifier; verifying the encapsulated data recovery request to obtain the second verification result; establishing a second communication channel through a second security protocol; and when the second verification result is that the verification is passed, receiving the second quantum key corresponding to the data to be recovered based on the second communication channel.

[0014] Furthermore, the check block is a data block pre-constructed based on the parity check principle, and the check block at least includes: a fifth data block and a sixth data block. Before locating the first data block lost by the hard disk based on the remaining data blocks and the check block of the hard disk, the method also includes: performing mathematical operations on each data block of the hard disk to obtain the fifth data block; calculating each data block of the hard disk based on a preset polynomial to obtain the sixth data block; and storing the fifth data block and the sixth data block in different hard disks.

[0015] Furthermore, after generating a quantum key based on the polarization state of the quantum and verifying the quantum key to obtain a first verification result, the method also includes: storing the quantum key; generating a new quantum key after a preset time period has passed or an alarm message is detected, and using the new quantum key to update the quantum key.

[0016] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a data access system based on quantum key distribution is provided, including: a quantum key distribution device, used to generate a quantum key, the quantum key distribution device is configured with a quantum error correction coding technology, and the quantum key distribution device is deployed with a single-mode optical fiber; a key management server, used to receive the quantum key, and send the quantum key to a data recovery server; a data backup server, used to encrypt the data to be encrypted using the quantum one-time pad technology and the quantum key to obtain the encrypted data; the encrypted data is verified using an enhanced quantum hash function, and after the encrypted data passes the verification, the encrypted data is transmitted to the data recovery server, and the data backup server is based on the encryption A secure communication channel is used to communicate with the business system; a data recovery server is used to receive the encrypted data sent by the data backup server; the data recovery server includes a hard disk, and when the hard disk failure is detected, the first data block lost by the hard disk is located and constructed according to the remaining data blocks and check blocks of the hard disk; the first data block is decrypted by using the target quantum key generated by the quantum key distribution device to obtain the second data block, and the second data block is used to perform data recovery on the hard disk to obtain a recovered hard disk; the target data to be accessed in the recovered hard disk is predicted by using the target prediction model, and the target data is restored to the cache for access by the client; the data recovery server uses a redundant independent disk array storage architecture to store data.

[0017] In order to achieve the above-mentioned purpose, according to another aspect of the present application, a data access device based on quantum key distribution is provided, and the device includes: a reconstruction unit, which is used to locate the first data block lost by the hard disk according to the remaining data blocks and check blocks of the hard disk when a hard disk failure is detected, wherein the hard disk stores data encrypted by the quantum key; a receiving unit, which is used to receive a first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on quantum key distribution technology; a recovery unit, which is used to decrypt the first data block using the first quantum key to obtain a second data block, and restore the hard disk according to the second data block to obtain a restored hard disk; a prediction unit, which is used to predict the first data to be accessed in the restored hard disk through a target prediction model, and restore the first data to a cache for access by a client.

[0018] Furthermore, the device also includes: a generation unit, which is used to generate a quantum key according to the polarization state of the quantum and verify the quantum key to obtain a first verification result before locating the first data block lost by the hard disk according to the remaining data blocks and the check block of the hard disk; an encryption unit, which is used to encrypt the data to be encrypted by using the quantum one-time pad technology and the quantum key to obtain encrypted data when the first verification result is verification passed; a verification unit, which is used to verify the encrypted data by using an enhanced quantum hash function to obtain a first verification result; and a transmission unit, which is used to transmit the encrypted data to the hard disk when the first verification result is verification passed.

[0019] Furthermore, the device also includes: a first verification unit, used to verify the data recovery request when a data recovery request is received, and obtain a second verification result, wherein the data recovery request is a request initiated by the client; a determination unit, used to determine the data to be recovered when the second verification result is a passed verification, and receive a second quantum key corresponding to the data to be recovered, wherein the second quantum key is a quantum key generated based on quantum key distribution technology; a second verification unit, used to verify the second quantum key through the client, and obtain a third verification result; a response unit, used to use the second quantum key to decrypt the data to be recovered when the third verification result is a passed verification, obtain second data, and send the second data to the client to respond to the data recovery request.

[0020] Furthermore, the generation unit includes: a generation subunit, used to generate the quantum key based on the polarization state of the quantum bit and the target device, wherein the target device refers to a device configured with quantum key distribution technology and quantum error correction coding technology and deployed with a single-mode optical fiber; a calculation subunit, used to perform a hash operation on the quantum key using a first encryption algorithm to obtain the first verification result, and when the first verification result is verification passed, encrypt and store the quantum key, and dynamically assign the quantum key to the data to be backed up.

[0021] Furthermore, the encryption unit includes: a first establishment subunit, used to establish a first communication channel based on a first security protocol and a second encryption algorithm; a second receiving subunit, used to receive the data to be encrypted through the first communication channel, and divide the data to be encrypted into N data blocks, wherein each of the N data blocks includes an independent key fragment of a preset length, and N is a positive integer; an encryption subunit, used to use quantum one-time pad technology and a multi-core processor to encrypt the N data blocks in parallel to obtain the encrypted N data blocks and encryption metadata, wherein the encryption metadata includes at least: a key ID, an encryption timestamp, and an encryption algorithm version; a first determination subunit, used to store the encryption metadata and the encrypted N data blocks, and determine the encrypted data based on the encrypted N data blocks.

[0022] Furthermore, the recovery unit includes: a decryption subunit, used to decrypt the first data block in a multi-threaded parallel manner based on a second encryption algorithm to obtain a decrypted first data block; a verification subunit, used to perform integrity verification on the decrypted first data block using a quantum-safe hash algorithm to obtain a second verification result; and a second determination subunit, used to determine the second data block based on the decrypted first data block when the second verification result is a verification pass.

[0023] Furthermore, the device also includes: a collection unit, which is used to collect request information of historical data read and write requests before predicting the first data to be accessed in the restored hard disk through the target prediction model, so as to obtain a training set, wherein the request information at least includes: access time and data block location; an input unit, which is used to input the training set into a preset model to predict the third data to be accessed by the data read and write request, wherein the preset model at least includes: a neural network model for prediction based on time series; a training unit, which is used to train the preset model according to the fourth data and the third data actually accessed by the data read and write request, so as to obtain the target prediction model.

[0024] Furthermore, the first verification unit includes: an encapsulation subunit, used to encapsulate the data recovery request to obtain an encapsulated data recovery request, wherein the data recovery request at least includes identity authentication information and a key identifier; a verification subunit, used to verify the encapsulated data recovery request to obtain the second verification result; the determination unit includes: a second establishment subunit, used to establish a second communication channel through a second security protocol; a second receiving subunit, used to receive the second quantum key corresponding to the data to be recovered based on the second communication channel when the second verification result is verification passed.

[0025] Furthermore, the check block is a data block pre-constructed based on the parity check principle, and the check block at least includes: a fifth data block and a sixth data block. The device also includes: a first calculation unit, which is used to perform mathematical operations on each data block of the hard disk before locating the first data block lost by the hard disk based on the remaining data blocks and the check block of the hard disk to obtain the fifth data block; a second calculation unit, which is used to calculate each data block of the hard disk based on a preset polynomial to obtain the sixth data block; and a storage unit, which is used to store the fifth data block and the sixth data block in different hard disks.

[0026] Furthermore, the device also includes: a third verification unit, used to generate a quantum key based on the polarization state of the quantum, and verify the quantum key, and store the quantum key after obtaining a first verification result; an update unit, used to generate a new quantum key after a preset time period has passed or an alarm information is detected, and use the new quantum key to update the quantum key.

[0027] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a computer program product is provided, including a computer program. When the computer program is executed by a processor, it implements any one of the above-mentioned data access methods based on quantum key distribution. When the computer program is executed by the processor, it implements the steps of the data access method based on quantum key distribution described in each embodiment of the present application.

[0028] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium includes stored computer instructions, wherein when the computer instructions are executed by a processor, any one of the above-mentioned data access methods based on quantum key distribution is implemented.

[0029] In order to achieve the above-mentioned purpose, according to one aspect of the present application, an electronic device is provided, comprising one or more processors and a memory, wherein the memory is used to store one or more programs, wherein when the one or more programs are executed by one or more processors, the one or more processors implement any one of the above-mentioned data access methods based on quantum key distribution.

[0030] In an embodiment of the present application, when a hard disk failure is detected, the first data block lost by the hard disk is located according to the remaining data blocks and the check blocks of the hard disk, wherein the hard disk stores data encrypted by a quantum key; a first quantum key corresponding to the first data block is received, wherein the first quantum key is a quantum key generated based on quantum key distribution technology; the first data block is decrypted using the first quantum key to obtain a second data block, and the hard disk is restored according to the second data block to obtain a restored hard disk; the first data to be accessed in the restored hard disk is predicted by a target prediction model, and the first data is restored to the cache for access by the client, thereby solving the technical problem that when a backup system encounters a failure, it takes a long time to locate, check and restore data, thereby causing the financial institution to be unable to continue to provide services to customers.

[0031] Through the parity check mechanism of the data recovery server, even in the case of hard disk failure, the lost first data block can be automatically rebuilt, which enhances the security and reliability of data storage and improves the efficiency of data recovery. At the same time, by using quantum one-time pad technology and the first quantum key generated based on quantum key distribution technology to encrypt and decrypt data, the absolute security of data during storage and recovery is ensured. Even if the hard disk fails, it cannot be accessed by unauthorized persons, ensuring the business stability of financial institutions. The first data to be accessed is loaded into the cache in advance through the target prediction model, which further reduces the data access delay, ensures the rapid recovery and continuity of the business, improves the response speed of data access, reduces the business interruption time caused by hardware failure, and achieves the effect of improving the operating efficiency and customer experience of financial institutions. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0033] Figure 1 It is a hardware structure block diagram of a computer terminal (or mobile device) for implementing a data access method based on quantum key distribution according to the first embodiment of the present application;

[0034] Figure 2 is a flowchart of an optional data access method based on quantum key distribution provided according to Embodiment 1 of the present application;

[0035] Figure 3 is a schematic diagram of an optional data access method based on quantum key distribution provided according to Embodiment 1 of the present application;

[0036] Figure 4is a schematic diagram of a data access device based on quantum key distribution provided according to Embodiment 2 of the present application;

[0037] Figure 5 This is a schematic diagram of a data access electronic device based on quantum key distribution provided according to Example 5 of the present application. DETAILED DESCRIPTION

[0038] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0039] It should be noted that the methods and devices determined by the processing methods, devices, storage media and electronic devices of the present application documents can be used in the financial technology field in the process of restoring data when the backup system encounters a failure, thereby improving the stability of the business system of the financial institution. They can also be used in any field other than the financial technology field, and the application fields of the methods and devices determined by the processing methods, devices, storage media and electronic devices of the present application documents are not limited.

[0040] It should be noted that the collected information (including but not limited to user device information, user personal information, collected data, used data, generated data, processed data, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, collected information, used information, generated information, processed information, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data are in compliance with the relevant laws, regulations and standards of relevant countries and regions, necessary confidentiality measures are taken, and public order and good customs are not violated, and corresponding operation entrances are provided for users to choose to authorize or refuse. For example, an interface is set up between this system and relevant users or institutions to provide users with corresponding operation entrances for users to choose to agree or refuse the results of automated decision-making; if the user chooses to refuse, the expert decision-making process will be entered.

[0041] Example 1

[0042] According to an embodiment of the present application, a method embodiment of data access based on quantum key distribution is also provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0043] The method embodiment provided in the first embodiment of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1The hardware structure block diagram of a computer terminal (or mobile device) for implementing a data access method based on quantum key distribution is shown. Figure 1 As shown, the computer terminal 10 (or mobile device) may include one or more (102a, 102 based on quantum key distribution data access, ..., 102n are used to illustrate) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (US based on quantum key distribution data access) port (which may be included as one of the ports of the US bus based on quantum key distribution data access), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0044] It should be noted that the one or more processors 102 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 10 (or mobile device). As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0045] The memory 104 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the data access method based on quantum key distribution in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, realizing the above-mentioned data access method based on quantum key distribution. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0046] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0047] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 (or mobile device).

[0048] Under the above operating environment, this application provides Figure 2 The data access method based on quantum key distribution is shown. Figure 2 This is a flow chart of a data access method based on quantum key distribution according to Example 1 of the present application.

[0049] Optionally, in a data access system based on quantum key distribution provided in Embodiment 1 of the present application, the system includes: a quantum key distribution device for generating a quantum key, the quantum key distribution device is configured with a quantum error correction coding technology, and the quantum key distribution device is deployed with a single-mode optical fiber; a key management server for receiving a quantum key and sending the quantum key to a data recovery server; a data backup server for encrypting data to be encrypted using a quantum one-time pad technology and a quantum key to obtain encrypted data; an enhanced quantum hash function is used to verify the encrypted data, and after the encrypted data passes the verification, the encrypted data is transmitted to the data recovery server, and the data backup server is based on an encrypted communication channel. The channel is connected to the business system for communication; a data recovery server is used to receive the encrypted data sent by the data backup server; the data recovery server includes a hard disk, and when a hard disk failure is detected, the first data block lost by the hard disk is located and constructed according to the remaining data blocks and check blocks of the hard disk; the first data block is decrypted by using the target quantum key generated by the quantum key distribution device to obtain the second data block, and the second data block is used to perform data recovery on the hard disk to obtain a recovered hard disk; the target data to be accessed in the recovered hard disk is predicted by the target prediction model, and the target data is restored to the cache for access by the client; the data recovery server uses a redundant independent disk array (redundant independent disk array) storage architecture to store data.

[0050] The execution subject of a data access method based on quantum key distribution provided in the first embodiment of the present application can be a data access system based on quantum key distribution. The system at least includes: a quantum key distribution device, a key management server, a data backup server and a data recovery server.

[0051] The quantum key distribution device is responsible for generating real-time quantum keys, using quantum entanglement and uncertainty principles to ensure the unconditional security of the keys. The quantum key distribution device is equipped with quantum error correction coding technology to combat noise interference during transmission and maintain the integrity and validity of the keys. In addition, the quantum key distribution device is deployed through single-mode optical fiber to ensure that photons are effectively transmitted over a distance of 200 kilometers, reduce the decoherence of quantum states, and maintain the reliability of quantum communications.

[0052] The key management server receives the quantum key from the quantum key distribution device and is responsible for storing, distributing and updating the key to ensure the validity and security of the key. The key management server sends the quantum key to the data recovery server through a secure channel with the data recovery server to provide key support for the data recovery process.

[0053] The data backup server uses quantum one-time pad technology to encrypt the original data in real time using quantum keys, and the security of the encrypted data is guaranteed by the quantum keys. The data backup server implements enhanced quantum hash function verification on the encrypted data to ensure the integrity of the data. If the verification passes, the encrypted data will be transmitted to the data recovery server through an encrypted communication channel, maintaining a secure communication connection with the business system.

[0054] The data recovery server receives and stores encrypted data from the data backup server, which contains multiple hard disks and adopts a redundant independent disk array storage architecture to tolerate dual failures of hard disks without affecting data availability. When a hard disk failure is detected, the data recovery server uses the parity check principle of the redundant independent disk array to quickly reconstruct the first data block lost by the hard disk based on the mathematical operation results of the remaining data blocks and the check blocks. The data recovery server uses the target quantum key generated by the quantum key distribution device to decrypt the first data block to obtain the second data block, that is, the original data. After that, the target data to be accessed in the recovered hard disk is predicted by the target prediction model, and these data are preloaded into the cache to improve the efficiency and speed of client access to data.

[0055] Through the collaboration of the above-mentioned system architecture and components, the bank data backup and recovery system combined with quantum key distribution technology can efficiently manage and recover data while ensuring data security, significantly improving the risk resistance and business continuity of financial institutions.

[0056] Step S101, when a hard disk failure is detected, the first data block lost by the hard disk is located based on the remaining data blocks and the check blocks of the hard disk, wherein the hard disk stores data encrypted by the quantum key.

[0057] In the first embodiment of the present invention, the data recovery server continuously monitors the health status of all hard disks. When a hard disk failure is detected, the faulty hard disk can be quickly identified, and the data block stored in the faulty hard disk, i.e., the first data block mentioned above, can be located. Specifically, the data recovery server performs mathematical operations based on the information in the remaining data blocks and the parity check block (i.e., the above-mentioned check block) to locate the first data block lost by the hard disk. After reconstructing the first data block, the data recovery server needs to request the quantum key associated with the first data block from the key management server, and decrypt the reconstructed first data block based on the quantum key to restore the original data.

[0058] Through the above steps, when a hard disk fails, the redundant mechanism of the redundant independent disk array and the encryption protection of the quantum key can be used to quickly locate and reconstruct the lost data blocks, ensuring the absolute security of the data during the recovery process and greatly improving the reliability and security of the bank's data backup and recovery system.

[0059] Step S102: receiving a first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on quantum key distribution technology.

[0060] In the first embodiment, when the data recovery server needs to recover the first data block, it requests the first quantum key corresponding to the first data block from the key management server. The key management server transmits the first quantum key to the data recovery server, and then uses the first quantum key for decryption.

[0061] By receiving the first quantum key, data recovery can be performed based on the first quantum key, which improves the security of data recovery and ensures the integrity and security of the data.

[0062] Step S103, decrypting the first data block using the first quantum key to obtain a second data block, and restoring the hard disk based on the second data block to obtain a restored hard disk.

[0063] In the first embodiment, after receiving the first quantum key, the data recovery server decrypts the first data block of the backup based on an encryption algorithm (e.g., AES-256-GCM algorithm or other encryption algorithms). Parallel processing technology (multi-threading or multi-processing) can also be used to improve the decryption efficiency, for example, to ensure that the decryption time for each GB of data does not exceed 1 second.

[0064] The first data block obtained after decryption is called the second data block. The data recovery server will recover the hard disk based on the second data block. If the hard disk failure is caused by the loss of one or more data blocks, the data recovery server uses the parity check principle of the redundant independent disk array, combines the remaining data blocks and the P and Q parity check blocks, and reconstructs the lost data blocks through mathematical algorithms to restore the normal state of the hard disk.

[0065] Through efficient recovery algorithms, financial institutions can quickly restore affected businesses, reduce service interruption time, maintain business continuity, and ensure absolute data security through quantum-level security mechanisms, thereby achieving the effect of efficient and secure data recovery when financial institutions face hardware failures.

[0066] Step S104, predicting the first data to be accessed in the restored hard disk by using the target prediction model, and restoring the first data to the cache for access by the client.

[0067] In the first embodiment, the target prediction model uses statistical methods such as time series analysis or more advanced deep learning algorithms (such as long short-term memory networks) to predict future data access trends, that is, the first data to be accessed. Based on the prediction results of the target prediction model, the data recovery server will preload the predicted data blocks to be accessed (first data) into the cache after the hard disk data is recovered, thereby significantly reducing the response time when the client accesses the data.

[0068] Through the above process, not only the efficiency of data access is improved and the waiting time of the client is reduced, but also the overall performance of the system and user experience are effectively improved.

[0069] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, before locating the first data block lost on the hard disk based on the remaining data blocks and the check blocks of the hard disk, the method further includes: generating a quantum key based on the polarization state of the quantum, and verifying the quantum key to obtain a first verification result; when the first verification result is that the verification is passed, using the quantum one-time pad technology and the quantum key to encrypt the data to be encrypted to obtain the encrypted data; using an enhanced quantum hash function to verify the encrypted data to obtain a first verification result; when the first verification result is that the verification is passed, transmitting the encrypted data to the hard disk.

[0070] In the first embodiment, the BB84 protocol or other quantum key distribution technology can be used to generate a shared quantum key between the sender Alice (e.g., a data backup server) and the receiver Bob (e.g., a data recovery server) by sending photons in a quantum state of polarization. Subsequently, the sender Alice and the receiver Bob perform key integrity verification, i.e., the above-mentioned "first verification result", by calculating and comparing the quantum hash value of the generated quantum key (e.g., the output of the SHA-3-256 algorithm), to check whether there is a transmission error or potential eavesdropping. Only when the verification is passed can the validity of the quantum key be determined, and the encryption step can be performed.

[0071] Once the quantum key is verified (i.e. the first verification result is verification passed), the data backup server will use the quantum key and quantum one-time pad technology to encrypt the data to be encrypted (also referred to as the data to be stored). The encrypted data will be verified by an enhanced quantum hash function (for example, Lindenstrauss Transform-based quantum hash or other quantum hash algorithms with stronger collision resistance) to generate the above-mentioned first verification result. This hash function uses the non-cloning property of the quantum state to ensure the integrity of the data. Only when the first verification result indicates that the verification is passed, that is, the encrypted data has not been tampered with or damaged, the data backup server will send the encrypted data to the hard disk of the data recovery server for storage.

[0072] By combining quantum security technology and traditional data protection strategies, data not only obtains the highest level of encryption protection provided by quantum keys before being stored on the hard disk, but is also verified through quantum hash functions, ensuring the integrity and consistency of the data, significantly improving the security of data backup and recovery.

[0073] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, the method further includes: when a data recovery request is received, verifying the data recovery request to obtain a second verification result, wherein the data recovery request is a request initiated by the client; when the second verification result is verification passed, determining the data to be recovered, and receiving a second quantum key corresponding to the data to be recovered, wherein the second quantum key is a quantum key generated based on quantum key distribution technology; verifying the second quantum key through the client to obtain a third verification result; when the third verification result is verification passed, using the second quantum key to decrypt the data to be recovered to obtain second data, and sending the second data to the client in response to the data recovery request.

[0074] In the first embodiment, when the data recovery server receives a data recovery request from a client, it verifies the data recovery request and obtains the second verification result mentioned above. This verification process may include client authentication, permission check, and request integrity check to ensure that only authorized clients can access the backup data. The data recovery request usually includes the client's identity information, the data identifier requested for recovery, and encryption information for secure transmission.

[0075] After the data recovery request is verified, the data recovery server determines the specific data block (i.e., the data to be recovered) that needs to be recovered by retrieving the encryption metadata (such as the key identifier (ID), encryption timestamp, and other decryption information, which are used to accurately locate the location of the data to be recovered in the backup storage) based on the information in the data recovery request. Next, the data recovery server needs to obtain the second quantum key corresponding to the data to be recovered from the key management server. The key management server will verify the validity of the second quantum key to ensure that the second quantum key has not expired, has not been revoked or reused, and the second quantum key will only be transmitted to the data recovery server if it passes the verification.

[0076] In addition, after the data recovery server receives the second quantum key, the client will also verify the second quantum key to prevent man-in-the-middle attacks and ensure that the key received by the client is sent by the data recovery server and is the correct key for decrypting the data to be recovered. Client verification may include checking the digital signature of the key, verifying the integrity of the key, etc.

[0077] When the second quantum key is verified, the data recovery server will use the second quantum key to decrypt the data to be recovered to obtain the original data, that is, the second data mentioned above. The decryption process can use the same algorithm as the encryption, for example, AES-256-GCM. The decrypted second data will be transmitted to the client in response to the data recovery request. At the same time, high-speed networks and parallel processing technologies may be used to accelerate data transmission to ensure the efficiency and speed of data recovery. Before receiving the second data, the client can perform another verification, such as quantum hash verification, to ensure that the data has not been tampered with during transmission.

[0078] Through the above-mentioned multiple verification and validation steps, the security of the data recovery process and the integrity of the data are enhanced for data recovery requests, the risk of data omission or hacking is reduced, and the data security of financial institutions is improved.

[0079] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, a quantum key is generated based on the polarization state of the quantum, and the quantum key is verified to obtain a first verification result, including: generating a quantum key based on the polarization state of the quantum bit and the target device, wherein the target device refers to a device configured with quantum key distribution technology and quantum error correction coding technology and deployed with a single-mode optical fiber; using a first encryption algorithm to perform a hash operation on the quantum key to obtain a first verification result, and when the first verification result is verification passed, encrypting and storing the quantum key, and dynamically assigning the quantum key to the data to be backed up.

[0080] In the first embodiment of the present invention, a target device equipped with quantum key distribution technology is used to generate a quantum key using the polarization state of the quantum bit as the quantum state carrier. The sender Alice (for example, a data backup server) and the receiver Bob (for example, a data recovery server) transmit and receive quantum information through a single-mode optical fiber. The quantum bit sent by the sender can be in a polarization state of horizontal (|0>), vertical (|1>), +45 degrees (|+>) or -45 degrees (|->), and the receiver measures it after receiving it. By comparing the measurement results of both parties, a shared quantum key can be generated according to the principles of quantum mechanics. This process takes advantage of the non-cloning of the quantum state and the uncertainty of measurement to ensure the unconditional security of the key.

[0081] The generated quantum key will be sent to the key management server. On the key management server, the quantum key is hashed using a first encryption algorithm (such as SHA-3-256) to generate a hash value of a fixed length. This hash value is used to verify the integrity and consistency of the key, which is the first verification result. Key verification usually involves calculating the hash value of the key at both Alice and Bob, and then comparing them through a secure channel. Only when the hash values ​​at both ends are consistent can it be confirmed that no error or eavesdropping occurred during the key transmission process, thereby determining that the first verification result is verification passed.

[0082] If the first verification result is a successful verification, the key management server will use a hardware security module (HSM) to encrypt and store the quantum key to ensure the security of the key during static storage. The hardware security module can provide physical isolation and encryption processing capabilities to protect the key from external threats. In addition, in order to dynamically respond to the needs of data backup and recovery, the key management server will dynamically allocate the quantum key to the data to be backed up based on the request of the data backup server. The allocation process follows the principle of least privilege, that is, the key is only exposed at the moment of actual use, reducing the risk of key leakage.

[0083] Through the above steps, the security of the quantum key generation, transmission, verification, storage and distribution process is ensured, as well as the high security of data during real-time encrypted backup, which greatly improves the data security of financial institutions, as well as the security of financial institutions' backup and recovery data.

[0084] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, the data to be encrypted is encrypted using quantum one-time pad technology and a quantum key to obtain encrypted data, including: establishing a first communication channel based on a first security protocol and a second encryption algorithm; receiving the data to be encrypted through the first communication channel, and dividing the data to be encrypted into N data blocks, wherein each of the N data blocks includes an independent key fragment of a preset length, and N is a positive integer; using quantum one-time pad technology and a multi-core processor to encrypt the N data blocks in parallel to obtain the encrypted N data blocks and encryption metadata, wherein the encryption metadata includes at least: a key ID, an encryption timestamp, and an encryption algorithm version; storing the encryption metadata and the encrypted N data blocks, and determining the encrypted data based on the encrypted N data blocks.

[0085] In the first embodiment of the present invention, the data backup server establishes a secure first communication channel based on a first security protocol (e.g., IPsec protocol, ESP protocol or other protocol) and a second encryption algorithm (e.g., AES-256-GCM). This channel ensures the confidentiality and integrity of the data during transmission through encryption and authentication mechanisms to prevent the data from being intercepted or tampered with. The data to be encrypted is transmitted from the business system (or other location where data is stored) to the data backup server through the first communication channel. After receiving the data, the data backup server divides it into N data blocks, where N is a positive integer representing the number of blocks into which the data is divided.

[0086] Then, the data backup server uses quantum one-time pad technology and the parallel processing capability of multi-core processors to encrypt N data blocks simultaneously. Each of the N data blocks is an independent key fragment with the same length as the data block. These key fragments come from the quantum key generated by quantum key distribution technology. Therefore, even in the face of TB-level data, it can maintain high encryption efficiency and ensure real-time backup of data.

[0087] In addition, encryption metadata will be generated during the encryption process. These metadata include at least the following information: key ID, which is used to identify the quantum key used for encryption, which is convenient for subsequent key management and data recovery; encryption timestamp, which is used to record the specific time of data encryption, which helps to track data versions and time series; encryption algorithm version, which is used to record the specific algorithm version used during encryption, to ensure that the same decryption algorithm can be used correctly when data is restored. The encryption metadata and the encrypted data blocks (N data blocks) will be stored in a highly secure database or encrypted storage to ensure that the security of data and metadata is guaranteed even during the storage process.

[0088] After the N encrypted data blocks have been integrity checked (such as quantum hash check), they will be securely stored on the hard disk of the data backup server, hardware security module or data recovery server, waiting for recovery when needed. It should be noted that the N encrypted data blocks and encryption metadata can be stored separately so that they can be retrieved and managed more efficiently during data recovery.

[0089] Through the above steps, the data backup process not only obtains the unconditional security encryption provided by the quantum key, but also ensures the efficiency of the encryption process and the accuracy of data recovery through parallel processing technology and encryption metadata management, thereby building a data backup and recovery system that is both secure and efficient.

[0090] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, the first data block is decrypted using the first quantum key to obtain the second data block, including: decrypting the first data block in a multi-threaded parallel manner based on the second encryption algorithm to obtain the decrypted first data block; performing integrity verification on the decrypted first data block using a quantum-safe hash algorithm to obtain a second verification result; and when the second verification result is verification passed, determining the second data block based on the decrypted first data block.

[0091] In the first embodiment, the data recovery server can use multi-threading or GPU parallel processing capabilities to perform parallel decryption on the first data block based on the second encryption algorithm (for example, AES-256-GCM, etc.). Through parallel processing, the decryption speed can be significantly improved, and even in the face of a large number of data blocks, decryption can be completed in a very short time, ensuring the efficiency of data recovery.

[0092] The first decrypted data block will be checked for integrity by a quantum-safe hash algorithm (e.g., Lindenstrauss Transform-based quantum hash or Crystals-Kyber, Crystals-Dilithium, etc.) to obtain the above-mentioned second verification result to verify whether the data has not been tampered with or damaged during transmission and storage. The quantum-safe hash algorithm uses the principles of quantum mechanics to provide higher anti-collision capabilities than traditional hash algorithms and can effectively detect any changes in data.

[0093] If the second check result indicates that the integrity check has passed, that is, the first data block after decryption is completely consistent with the data block at the time of backup, and there is no data loss or damage, then the data recovery server will confirm that the first data block after decryption is a valid second data block. This means that the data recovery server can use the second data block for subsequent business operations or data recovery processes to ensure that the data is accurate and available in a timely manner.

[0094] By using quantum key distribution technology for data encryption and decryption, and using a quantum-safe hash algorithm for integrity verification, the accuracy and security of data recovery are ensured. At the same time, the efficiency of data recovery is improved through parallel processing and quantum safety technology.

[0095] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, before predicting the first data to be accessed in the restored hard disk through the target prediction model, the above method also includes: collecting request information of historical data read and write requests to obtain a training set, wherein the request information includes at least: access time, data block location; inputting the training set into a preset model to predict the third data to be accessed by the data read and write request, wherein the preset model includes at least: a neural network model for prediction based on time series; training the preset model according to the fourth data and the third data actually accessed by the data read and write request to obtain a target prediction model.

[0096] In the first embodiment, the data recovery server will continue to record the detailed information of each data read and write request to form the request information of the above-mentioned historical data read and write requests. This information includes at least the access time (i.e., the time point when the request occurs) and the data block location (i.e., the specific location of the data block requested to be accessed in the storage system). By collecting this information, a training set containing historical access patterns and behaviors can be constructed to provide a data basis for the training of subsequent target prediction models.

[0097] Then, the training set is input into the preset model to predict the data read and write requests, and predict the third data that the historical data read and write requests attempt to access. These predicted third data will be used to train the preset model, thereby guiding the data preloading and I / O scheduling strategy to reduce the delay during actual access. The preset model can be a neural network model based on time series prediction, such as a long short-term memory network (LSTM), a sequence to sequence model (Seq2Seq), etc.

[0098] Secondly, the actual access data of historical data read and write requests, that is, the fourth data, is compared with the third data. By comparing the difference between the predicted data block and the actually accessed data block, the performance of the prediction model can be evaluated, and the model parameters can be adjusted to improve the prediction accuracy. This process is carried out through a feedback loop. Each new data read and write request provides a new learning opportunity for the model, allowing it to gradually adapt to the dynamic changes of the storage system and the data access pattern. After continuous training and optimization, a more accurate target prediction model is obtained. The target prediction model can more effectively predict the data that may be accessed in the future, thereby reducing the disk seek time and I / O latency, thereby achieving the effect of accelerating data recovery.

[0099] Through the above steps, machine learning technology can be used to predict future data read and write requests based on historical data access patterns, and pre-load data blocks that may need to be accessed into the cache, significantly reducing the delay in data access, and providing strong support for accelerating the data recovery process and improving overall system performance. This prediction-based I / O scheduling strategy helps financial institutions restore key services faster and reduce business interruption time in hardware failure or disaster recovery scenarios, further achieving the effect of improving customer experience.

[0100] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, the data recovery request is verified to obtain a second verification result, and when the second verification result is that the verification is successful, the data to be recovered is determined, and a second quantum key corresponding to the data to be recovered is received, including: encapsulating the data recovery request to obtain an encapsulated data recovery request, wherein the data recovery request includes at least identity authentication information and a key identifier; verifying the encapsulated data recovery request to obtain a second verification result; establishing a second communication channel through a second security protocol; and when the second verification result is that the verification is successful, receiving the second quantum key corresponding to the data to be recovered based on the second communication channel.

[0101] In the first embodiment of the present invention, when the client needs to recover data, a data recovery request is initiated. The request contains at least authentication information (such as the client's user name, password or digital certificate) and a key identifier (used to specify the specific quantum key required to decrypt the data to be recovered). In order to protect the confidentiality and integrity of the request content, the system uses JSON WebToken (JWT) or other secure encapsulation mechanisms to encapsulate the data recovery request to obtain an encapsulated data recovery request. The encapsulation process may also include digitally signing the request to prevent the request from being tampered with. The encapsulated data recovery request will be sent to the data recovery server. The data recovery server will verify the received request, and the verification process may include authentication, permission checking, and request integrity verification to ensure that the source of the data recovery request is an authorized client and that the content of the data recovery request has not been maliciously modified. If the verification is successful, it indicates that the data recovery request is safe and legal. In the case where the second verification result is a successful verification, the data recovery server will establish a second communication channel with the key management server based on a second security protocol (for example, TLS1.3 or other encryption protocols) to ensure the security of quantum key transmission and prevent the key from being eavesdropped or tampered with during transmission.

[0102] Through the second communication channel, the data recovery server can receive the quantum key corresponding to the data to be recovered, that is, the second quantum key, from the key management server. The second quantum key is a key pre-generated during the data backup process and used to encrypt data, ensuring that the decryption process can restore the original data. The data recovery server will perform additional verification on the received second quantum key to ensure the validity and security of the key. The verification process may include checking the digital signature of the key or verifying the version information of the key.

[0103] By verifying the data recovery request and building a second communication channel to transmit the second quantum key, the integrity of the data recovery process and the confidentiality of the data are ensured. At the same time, through secure encapsulation, identity authentication, security protocol establishment and effective management of quantum keys, the data backup and recovery system of financial institutions can safely and efficiently restore data in the face of failures and continue to provide services to customers, thus improving the stability and reliability of financial institutions and further achieving the effect of improving customer experience.

[0104] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, the check block is a data block pre-constructed based on the parity check principle, and the check block includes at least: a fifth data block and a sixth data block. Before locating the first data block lost by the hard disk based on the remaining data blocks of the hard disk and the check block, the above method also includes: performing mathematical operations on each data block of the hard disk to obtain a fifth data block; calculating each data block of the hard disk based on a preset polynomial to obtain a sixth data block; and storing the fifth data block and the sixth data block in different hard disks.

[0105] In the first embodiment, the hard disk of the data recovery server adopts a storage system at the level of a redundant independent disk array. Specifically, for a storage system at the level of a redundant independent disk array, each data block will be subjected to a modulo-2 sum operation to generate a parity check block, namely, the fifth data block. The sum operation usually includes an XOR operation of the current data block and all previous data blocks to ensure that the fifth data block can reflect the integrity of all data blocks. If the P check of a redundant independent disk array is used, the fifth data block can be expressed as P = (D0 + D1 + ... + D n-2 )%2, where D i represents the i-th data block, and n represents the number of data blocks.

[0106] The sixth data block is obtained by calculating a preset polynomial in a finite field. For example, the preset polynomial may be g(x)=x 2 +x+1, for each data block D i , the corresponding polynomial value Q will be calculated i =(D i ×1+D i+1 ×x+…+D n-1 × n-i-1 )%g(x). In this way, another type of check block can be generated, namely the sixth data block Q, which provides redundant information different from the fifth data block and helps to recover data more accurately when multiple hard disks fail.

[0107] Finally, the parity blocks (the fifth and sixth data blocks) are stored on different hard disks in the redundant independent disk array. This distributed storage strategy ensures that even if two hard disks fail at the same time, the lost data can be recovered based on the remaining data blocks and parity blocks, enhancing data availability and disaster recovery capabilities.

[0108] By implementing a redundant independent disk array-level storage solution, combined with the fifth data block (P check block) generated by mathematical operations and the sixth data block (Q check block) generated based on polynomial calculations, the financial institution's data backup and recovery system can quickly recover lost data through the remaining data blocks and check blocks when facing hard disk failures, ensuring high data availability and business continuity. At the same time, by distributing data blocks and check blocks on different hard disks, redundant data storage is achieved, further improving the system's fault tolerance and data security.

[0109] Optionally, in the data access method based on quantum key distribution provided in Example 1 of the present application, after generating a quantum key based on the polarization state of the quantum and verifying the quantum key to obtain a first verification result, the method further includes: storing the quantum key; generating a new quantum key after a preset time period or when an alarm information is detected, and using the new quantum key to update the quantum key.

[0110] In the first embodiment, the quantum key generated by the quantum key distribution technology is stored in the hardware security module. The hardware security module not only provides physical and logical security isolation for the key, but also has encryption processing capabilities to ensure the security of the key during static storage. During storage, the access and use of the key will be strictly controlled to prevent unauthorized access and leakage.

[0111] In an optional embodiment, a new quantum key can be generated by a quantum key distribution device after a preset period of time (for example, 7 days, which can be flexibly adjusted according to actual production conditions without specific restrictions), and the quantum key can be updated with the new quantum key, or the specific security policy can be adjusted. The automatic update process ensures the timely replacement of the key, reduces the risk of the key being continuously monitored and analyzed, and improves the overall security of the system. The update process can include the replacement of the key, that is, replacing the old key with a new key, and updating all key-related metadata, such as the key ID, update timestamp, etc. The update process needs to ensure seamless progress without affecting ongoing data backup and recovery operations, as well as the normal operation of the system. In addition, when updating the key, a key update log should also be recorded to facilitate auditing and tracking.

[0112] In an optional embodiment, once any alarm information is detected, the key update process will be immediately triggered to generate a new quantum key to replace the current key. This response mechanism is based on the principle of "security first" and can quickly respond to possible security threats and ensure data security even in non-periodic situations. Alarm information includes but is not limited to key leakage, abnormal key usage, quantum security network abnormalities and other information. Through the above-mentioned key management process, the data backup and recovery system of financial institutions can maintain the dynamics and security of quantum keys, and even in the face of advanced network attacks or physical security threats, it can ensure encryption security during data transmission and storage through timely key update strategies.

[0113] Optionally, in the first embodiment, the process of performing data backup and data recovery can be as follows: Figure 3As shown, it includes quantum key generation and distribution, real-time encrypted backup, efficient data verification, fast data recovery, and key update and management. During the quantum key generation and distribution process, the quantum key distribution device is responsible for real-time generation of quantum keys and secure distribution of them to the data backup server and data recovery server. The quantum key distribution device uses the BB84 protocol or the E91 protocol to generate quantum keys, and its generation rate can be configured according to the actual needs of the network environment to ensure that the encryption and decryption process of data can be carried out efficiently. Quantum keys are distributed through single-mode optical fibers, and the transmission distance of the optical fiber network can reach 200 kilometers, which provides a solid foundation for remote data backup. At the same time, quantum security networks are used to transmit quantum keys and data, combined with IPsec protocols and AES-256-GCM encryption algorithms, to provide additional protection for data transmission security. During the real-time encrypted backup process, the data backup server is closely connected to the quantum key distribution device. After receiving the quantum key, the key is used to encrypt the data obtained from the data source, thereby realizing real-time quantum encrypted backup of the data. The data backup server integrates a hardware security module and a quantum random number generator, which enhances the security of key generation and storage and effectively prevents unauthorized access and tampering. During the process of efficient data verification and fast data recovery, the data recovery server communicates with the quantum key distribution device and the data backup server, and uses the quantum key to decrypt the backup data. In order to ensure the accuracy and efficiency of data recovery, the data recovery server uses the Lindenstrauss Transform-based quantum hash function for fast data verification. At the same time, through the redundant independent disk array storage architecture and intelligent I / O scheduling algorithm (such as the Anticipatory algorithm), the data writing speed and data recovery efficiency are improved, and the integrity and accuracy of the data are guaranteed. During the key update and management process, the key management server is responsible for verifying the validity of the quantum key and managing the periodic automatic update of the quantum key. It implements a dynamic allocation strategy to provide independent quantum keys for different data backup tasks, enhancing the security of key use. By setting the key update cycle, the quantum key is automatically updated according to the data transmission volume and security risk assessment, avoiding security vulnerabilities that may be caused by the long-term use of the key. The key management server comprehensively controls the life cycle of the quantum key, including generation, distribution, storage, update and destruction, to ensure the absolute security and effectiveness of the key.

[0114] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0115] In summary, the data access method based on quantum key distribution provided by the embodiment of the present application can automatically reconstruct the lost first data block even in the case of hard disk failure through the parity check mechanism of the data recovery server, thereby enhancing the security and reliability of data storage and improving the efficiency of data recovery. At the same time, by using the quantum one-time password technology and the first quantum key generated based on the quantum key distribution technology to encrypt and decrypt the data, the absolute security of the data during the storage and recovery process is ensured, and even if the hard disk fails, it cannot be accessed by unauthorized persons, thereby ensuring the business stability of the financial institution. The first data to be accessed is loaded into the cache in advance through the target prediction model, which further reduces the data access delay, ensures the rapid recovery and continuity of the business, improves the response speed of data access, reduces the business interruption time caused by hardware failure, and achieves the effect of improving the operating efficiency and customer experience of the financial institution, thereby solving the problem in the related technology that when the backup system encounters a failure, it takes a long time to locate, check and recover the data, which causes the financial institution to be unable to continue to provide services to customers.

[0116] Example 2

[0117] The embodiment of the present application also provides a data access device based on quantum key distribution. It should be noted that the data access device based on quantum key distribution in the embodiment of the present application can be used to execute the data access method based on quantum key distribution provided in the embodiment of the present application. The data access device based on quantum key distribution provided in the embodiment of the present application is introduced below.

[0118] According to an embodiment of the present application, a device for implementing the above-mentioned data access method based on quantum key distribution is also provided, such as Figure 4 As shown, the device comprises:

[0119] Specifically, the reconstruction unit 401 is used to locate the first data block lost in the hard disk based on the remaining data blocks and the check blocks of the hard disk when a hard disk failure is detected, wherein the hard disk stores data encrypted by the quantum key.

[0120] The receiving unit 402 is used to receive a first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on a quantum key distribution technology.

[0121] The recovery unit 403 is used to decrypt the first data block using the first quantum key to obtain the second data block, and recover the hard disk according to the second data block to obtain a recovered hard disk.

[0122] The prediction unit 404 is used to predict the first data to be accessed in the restored hard disk through the target prediction model, and restore the first data to the cache for access by the client.

[0123] The data access device based on quantum key distribution provided in the embodiment of the present application locates the first data block lost in the hard disk according to the remaining data blocks and check blocks of the hard disk through the reconstruction unit 401 when a hard disk failure is detected, wherein the hard disk stores data encrypted by the quantum key, and the receiving unit 402 receives the first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on the quantum key distribution technology, and the recovery unit 403 decrypts the first data block using the first quantum key to obtain the second data block, and recovers the hard disk according to the second data block to obtain the recovered hard disk, and the prediction unit 404 predicts the first data to be accessed in the recovered hard disk through the target prediction model, and restores the first data to the cache for access by the client, thereby solving the problem in the related technology that when the backup system encounters a failure, it takes a long time to locate, check and recover data, thereby causing the financial institution to be unable to continue to provide services to customers.

[0124] Through the parity check mechanism of the data recovery server, even in the case of hard disk failure, the lost first data block can be automatically rebuilt, which enhances the security and reliability of data storage and improves data recovery efficiency. At the same time, by using quantum one-time pad technology and the first quantum key generated based on quantum key distribution to encrypt and decrypt data, the absolute security of data during storage and recovery is ensured. Even if the hard disk fails, it cannot be accessed by unauthorized persons, ensuring the business stability of financial institutions. The first data to be accessed is loaded into the cache in advance through the target prediction model, which further reduces data access delays, ensures rapid recovery and continuity of business, improves the response speed of data access, and reduces business interruption time caused by hardware failure, achieving the effect of improving the operating efficiency and customer experience of financial institutions.

[0125] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned device also includes: a generation unit, which is used to generate a quantum key based on the polarization state of the quantum, and verify the quantum key to obtain a first verification result before locating the first data block lost by the hard disk based on the remaining data blocks and the check block of the hard disk; an encryption unit, which is used to encrypt the data to be encrypted by using the quantum one-time pad technology and the quantum key when the first verification result is verification passed, so as to obtain encrypted data; a verification unit, which is used to verify the encrypted data by using an enhanced quantum hash function to obtain a first verification result; and a transmission unit, which is used to transmit the encrypted data to the hard disk when the first verification result is verification passed.

[0126] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned device also includes: a first verification unit, used to verify the data recovery request when a data recovery request is received, and obtain a second verification result, wherein the data recovery request is a request initiated by the client; a determination unit, used to determine the data to be recovered when the second verification result is verification passed, and receive a second quantum key corresponding to the data to be recovered, wherein the second quantum key is a quantum key generated based on quantum key distribution technology; a second verification unit, used to verify the second quantum key through the client, and obtain a third verification result; a response unit, used to use the second quantum key to decrypt the data to be recovered when the third verification result is verification passed, obtain second data, and send the second data to the client to respond to the data recovery request.

[0127] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned generation unit includes: a generation subunit, used to generate a quantum key based on the polarization state of the quantum bit and the target device, wherein the target device refers to a device configured with quantum key distribution technology and quantum error correction coding technology and deployed with a single-mode optical fiber; a calculation subunit, used to perform a hash operation on the quantum key using a first encryption algorithm to obtain a first verification result, and when the first verification result is verification passed, encrypt and store the quantum key, and dynamically assign the quantum key to the data to be backed up.

[0128] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned encryption unit includes: a first establishment subunit, used to establish a first communication channel based on a first security protocol and a second encryption algorithm; a second receiving subunit, used to receive the data to be encrypted through the first communication channel, and divide the data to be encrypted into N data blocks, wherein each of the N data blocks includes an independent key fragment of a preset length, and N is a positive integer; an encryption subunit, used to use quantum one-time pad technology and a multi-core processor to encrypt the N data blocks in parallel to obtain the encrypted N data blocks and encryption metadata, wherein the encryption metadata includes at least: a key ID, an encryption timestamp, and an encryption algorithm version; a first determination subunit, used to store the encryption metadata and the encrypted N data blocks, and determine the encrypted data based on the encrypted N data blocks.

[0129] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned recovery unit 403 includes: a decryption subunit, used to decrypt the first data block in a multi-threaded parallel manner based on the second encryption algorithm to obtain a decrypted first data block; a verification subunit, used to perform integrity verification on the decrypted first data block using a quantum-safe hash algorithm to obtain a second verification result; and a second determination subunit, used to determine the second data block based on the decrypted first data block when the second verification result is a verification pass.

[0130] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned device also includes: a collection unit, which is used to collect request information of historical data read and write requests before predicting the first data to be accessed in the restored hard disk through the target prediction model, so as to obtain a training set, wherein the request information at least includes: access time and data block location; an input unit, which is used to input the training set into a preset model to predict the third data to be accessed by the data read and write request, wherein the preset model at least includes: a neural network model for prediction based on time series; a training unit, which is used to train the preset model according to the fourth data and the third data actually accessed by the data read and write request, so as to obtain a target prediction model.

[0131] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned first verification unit includes: an encapsulation subunit, used to encapsulate the data recovery request to obtain an encapsulated data recovery request, wherein the data recovery request includes at least identity authentication information and a key identifier; a verification subunit, used to verify the encapsulated data recovery request to obtain a second verification result; the determination unit includes: a second establishment subunit, used to establish a second communication channel through a second security protocol; a second receiving subunit, used to receive a second quantum key corresponding to the data to be recovered based on the second communication channel when the second verification result is verification passed.

[0132] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned check block is a data block pre-constructed based on the parity check principle, and the check block at least includes: a fifth data block and a sixth data block, and the device also includes: a first calculation unit, which is used to perform mathematical operations on each data block of the hard disk before locating the lost first data block of the hard disk based on the remaining data blocks and the check block of the hard disk to obtain a fifth data block; a second calculation unit, which is used to calculate each data block of the hard disk based on a preset polynomial to obtain a sixth data block; and a storage unit, which is used to store the fifth data block and the sixth data block in different hard disks.

[0133] Optionally, in the data access device based on quantum key distribution provided in Example 2 of the present application, the above-mentioned device also includes: a third verification unit, which is used to generate a quantum key, verify the quantum key, and store the quantum key after obtaining a first verification result; an update unit, which is used to generate a new quantum key after a preset time period has passed or an alarm information is detected, and use the new quantum key to update the quantum key.

[0134] It should be noted that the above-mentioned reconstruction unit 401, receiving unit 402, recovery unit 403 and prediction unit 404 correspond to steps S201 to S204 in Example 1, and the two modules and the corresponding steps implement the same examples and application scenarios, but are not limited to the contents disclosed in the above-mentioned Example 1. It should be noted that the above-mentioned modules or units may be hardware components or software components stored in a memory (e.g., memory 104) and processed by one or more processors (e.g., processors 102a, 102 based on quantum key distribution data access, ..., 102n), and the above-mentioned modules may also be part of the device and may be run in the computer terminal 10 provided in Example 1.

[0135] Example 3

[0136] An embodiment of the present application may provide an electronic device, Figure 5 is a structural block diagram of an electronic device according to an embodiment of the present application. Figure 5 As shown, the electronic device may include: one or more ( Figure 5 Only one is shown) processor 502, memory 504, storage controller, and peripheral interface, wherein the peripheral interface is connected to the radio frequency module, audio module and display. Among them, the memory can be used to store software programs and modules, such as program instructions / modules corresponding to the method and device in the embodiment of the present application, and the processor executes various functional applications and data processing by running the software programs and modules stored in the memory, that is, realizing the above method. The memory may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0137] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: when a hard disk failure is detected, locate the first data block lost by the hard disk based on the remaining data blocks and the check blocks of the hard disk, wherein the hard disk stores data encrypted by the quantum key; receive the first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on the quantum key distribution technology; use the first quantum key to decrypt the first data block to obtain the second data block, and restore the hard disk based on the second data block to obtain a restored hard disk; predict the first data to be accessed in the restored hard disk through the target prediction model, and restore the first data to the cache for access by the client.

[0138] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: before locating the first data block lost from the hard disk based on the remaining data blocks and the check blocks of the hard disk, the above method also includes: generating a quantum key based on the polarization state of the quantum, and verifying the quantum key to obtain a first verification result; when the first verification result is that the verification is passed, using the quantum one-time pad technology and the quantum key to encrypt the data to be encrypted to obtain the encrypted data; using the enhanced quantum hash function to verify the encrypted data to obtain a first verification result; when the first verification result is that the verification is passed, transmitting the encrypted data to the hard disk.

[0139] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: when a data recovery request is received, verify the data recovery request to obtain a second verification result, wherein the data recovery request is a request initiated by the client; when the second verification result is that the verification is passed, determine the data to be recovered, and receive the second quantum key corresponding to the data to be recovered, wherein the second quantum key is a quantum key generated based on quantum key distribution technology; verify the second quantum key through the client to obtain a third verification result; when the third verification result is that the verification is passed, use the second quantum key to decrypt the data to be recovered to obtain the second data, and send the second data to the client in response to the data recovery request.

[0140] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: generate a quantum key based on the polarization state of the quantum, and verify the quantum key to obtain a first verification result, including: generate a quantum key based on the polarization state of the quantum bit and the target device, wherein the target device refers to a device configured with quantum key distribution technology and quantum error correction coding technology and deployed with a single-mode optical fiber; use a first encryption algorithm to perform a hash operation on the quantum key to obtain a first verification result, and when the first verification result is verification passed, encrypt and store the quantum key, and dynamically assign the quantum key to the data to be backed up.

[0141] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: use the quantum one-time pad technology and the quantum key to encrypt the data to be encrypted to obtain the encrypted data, including: establishing a first communication channel based on the first security protocol and the second encryption algorithm; receiving the data to be encrypted through the first communication channel, and dividing the data to be encrypted into N data blocks, wherein each of the N data blocks includes an independent and preset length of the key fragment, N is a positive integer; using the quantum one-time pad technology and the multi-core processor to encrypt the N data blocks in parallel to obtain the encrypted N data blocks and encryption metadata, wherein the encryption metadata at least includes: a key ID, an encryption timestamp, and an encryption algorithm version; storing the encryption metadata and the encrypted N data blocks, and determining the encrypted data based on the encrypted N data blocks.

[0142] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: use the first quantum key to decrypt the first data block to obtain the second data block, including: based on the second encryption algorithm, use a multi-threaded parallel method to decrypt the first data block to obtain the decrypted first data block; use a quantum-safe hash algorithm to perform integrity verification on the decrypted first data block to obtain a second verification result; when the second verification result is verification passed, determine the second data block based on the decrypted first data block.

[0143] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: before predicting the first data to be accessed in the restored hard disk through the target prediction model, the above method also includes: collecting request information of historical data read and write requests to obtain a training set, wherein the request information at least includes: access time, data block location; inputting the training set into the preset model to predict the third data to be accessed by the data read and write request, wherein the preset model at least includes: a neural network model for prediction based on time series; training the preset model according to the fourth data and third data actually accessed by the data read and write request to obtain the target prediction model.

[0144] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: verify the data recovery request to obtain a second verification result, and when the second verification result is that the verification is passed, determine the data to be recovered, and receive the second quantum key corresponding to the data to be recovered, including: encapsulating the data recovery request to obtain an encapsulated data recovery request, wherein the data recovery request at least includes identity authentication information and a key identifier; verifying the encapsulated data recovery request to obtain a second verification result; establishing a second communication channel through a second security protocol; and when the second verification result is that the verification is passed, receiving the second quantum key corresponding to the data to be recovered based on the second communication channel.

[0145] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: the check block is a data block pre-constructed based on the parity check principle, and the check block at least includes: the fifth data block and the sixth data block. Before locating the first data block lost by the hard disk based on the remaining data blocks and the check block of the hard disk, the above method also includes: performing mathematical operations on each data block of the hard disk to obtain the fifth data block; calculating each data block of the hard disk based on a preset polynomial to obtain the sixth data block; storing the fifth data block and the sixth data block in different hard disks.

[0146] The processor can call the information and application stored in the memory through the transmission device to perform the following steps: after generating a quantum key based on the polarization state of the quantum and verifying the quantum key to obtain a first verification result, the above method also includes: storing the quantum key; after a preset time period has passed or an alarm information is detected, generating a new quantum key, and using the new quantum key to update the quantum key.

[0147] It can be understood by those skilled in the art that Figure 5 The structure shown is for illustration only, and the electronic device may also be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a PDA, a mobile Internet device (Mobile Internet Devices, MID), a PAD, and other terminal devices. Figure 5 The structure of the electronic device is not limited. Figure 5 More or fewer components (such as network interfaces, display devices, etc.) shown in, or having Figure 5 Different configurations are shown.

[0148] A person of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing the hardware related to the terminal device through a program, and the program can be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0149] Example 4

[0150] The embodiments of the present application also provide a storage medium. Optionally, in this embodiment, the above-mentioned storage medium can be used to store the program code executed by the data access method based on quantum key distribution provided in the above-mentioned embodiment one. Optionally, in this embodiment, the above-mentioned storage medium can be located in any one of the computer terminals in the computer terminal group in the computer network, or in any one of the mobile terminals in the mobile terminal group. The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program of the steps of the data access method based on quantum key distribution. The above-mentioned serial numbers of the embodiments of the present application are only for description and do not represent the advantages and disadvantages of the embodiments. In the above-mentioned embodiments of the present application, the descriptions of each embodiment have their own emphasis. For the parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0151] In the several embodiments provided in the present application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point, the coupling or direct coupling or communication connection between each other shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms. The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. In addition, each functional unit in each embodiment of the present application can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units.

[0152] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0153] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A data access method based on quantum key distribution, characterized in that: include: When a hard disk failure is detected, locating a first data block lost by the hard disk according to remaining data blocks and a check block of the hard disk, wherein the hard disk stores data encrypted by a quantum key; Receiving a first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on a quantum key distribution technology; Decrypting the first data block using the first quantum key to obtain a second data block, and restoring the hard disk based on the second data block to obtain a restored hard disk; The first data to be accessed in the restored hard disk is predicted by a target prediction model, and the first data is restored to a cache for access by a client.

2. The method according to claim 1, characterized in that Before locating the first data block lost by the hard disk according to the remaining data blocks and the check blocks of the hard disk, the method further includes: Generating a quantum key according to the polarization state of the quantum, and verifying the quantum key to obtain a first verification result; When the first verification result is that the verification is passed, encrypting the data to be encrypted by using the quantum one-time pad technology and the quantum key to obtain encrypted data; Verifying the encrypted data using an enhanced quantum hash function to obtain a first verification result; When the first verification result is verification passed, the encrypted data is transmitted to the hard disk.

3. The method according to claim 1, characterized in that The method further comprises: When receiving a data recovery request, verifying the data recovery request to obtain a second verification result, wherein the data recovery request is a request initiated by the client; If the second verification result is that the verification is passed, determining the data to be recovered, and receiving a second quantum key corresponding to the data to be recovered, wherein the second quantum key is a quantum key generated based on a quantum key distribution technology; Verifying the second quantum key by the client to obtain a third verification result; When the third verification result is verification passed, the second quantum key is used to decrypt the data to be recovered to obtain second data, and the second data is sent to the client to respond to the data recovery request.

4. The method according to claim 2, characterized in that: Generating a quantum key according to the polarization state of a quantum, and verifying the quantum key to obtain a first verification result, including: Generating the quantum key based on the polarization state of the quantum bit and the target device, wherein the target device refers to a device configured with quantum key distribution technology and quantum error correction coding technology and deployed with a single-mode optical fiber; A first encryption algorithm is used to perform a hash operation on the quantum key to obtain the first verification result, and when the first verification result is that the verification is passed, the quantum key is encrypted and stored, and the quantum key is dynamically assigned to the data to be backed up.

5. The method according to claim 2, characterized in that: The data to be encrypted is encrypted using the quantum one-time pad technology and the quantum key to obtain encrypted data, including: Establishing a first communication channel based on a first security protocol and a second encryption algorithm; receiving the data to be encrypted through the first communication channel, and dividing the data to be encrypted into N data blocks, wherein each of the N data blocks includes an independent key fragment of a preset length, and N is a positive integer; The N data blocks are encrypted in parallel using quantum one-time pad technology and a multi-core processor to obtain the encrypted N data blocks and encryption metadata, wherein the encryption metadata at least includes: a key ID, an encryption timestamp, and an encryption algorithm version; The encrypted metadata and the encrypted N data blocks are stored, and the encrypted data is determined based on the encrypted N data blocks.

6. The method according to claim 1, characterized in that Decrypting the first data block using the first quantum key to obtain a second data block includes: Decrypting the first data block in a multi-threaded parallel manner based on a second encryption algorithm to obtain a decrypted first data block; Performing an integrity check on the decrypted first data block using a quantum-safe hash algorithm to obtain a second check result; When the second verification result is verification passed, the second data block is determined based on the decrypted first data block.

7. The method according to claim 1, characterized in that Before predicting the first data to be accessed in the restored hard disk by using the target prediction model, the method further includes: Collecting request information of historical data read and write requests to obtain a training set, wherein the request information at least includes: access time and data block location; Inputting the training set into a preset model to predict the third data to be accessed by the data read / write request, wherein the preset model at least includes: a neural network model for prediction based on time series; The preset model is trained according to the fourth data and the third data actually accessed by the data read and write request to obtain the target prediction model.

8. The method according to claim 3, characterized in that Verifying the data recovery request to obtain a second verification result, and when the second verification result is that the verification is passed, determining the data to be recovered, and receiving a second quantum key corresponding to the data to be recovered, including: Encapsulating the data recovery request to obtain an encapsulated data recovery request, wherein the data recovery request at least includes identity authentication information and a key identifier; Verifying the encapsulated data recovery request to obtain the second verification result; establishing a second communication channel through a second security protocol; When the second verification result is that the verification is passed, the second quantum key corresponding to the data to be recovered is received based on the second communication channel.

9. The method according to claim 3, characterized in that: The check block is a data block pre-constructed based on the parity check principle, and the check block at least includes: a fifth data block and a sixth data block. Before locating the first data block lost by the hard disk according to the remaining data blocks and the check block of the hard disk, the method further includes: Performing mathematical operations on each data block of the hard disk to obtain the fifth data block; Calculate each data block of the hard disk based on a preset polynomial to obtain the sixth data block; The fifth data block and the sixth data block are stored in different hard disks.

10. The method according to claim 2, characterized in that After generating a quantum key according to the polarization state of a quantum, and verifying the quantum key to obtain a first verification result, the method further includes: Storing the quantum key; After a preset time period has passed or an alarm message is detected, a new quantum key is generated, and the new quantum key is used to update the quantum key.

11. A data access system based on quantum key distribution, characterized in that: include: A quantum key distribution device, used for generating a quantum key, wherein the quantum key distribution device is equipped with a quantum error correction coding technology and a single-mode optical fiber is deployed on the quantum key distribution device; A key management server, configured to receive the quantum key and send the quantum key to a data recovery server; A data backup server is used to encrypt the data to be encrypted by using the quantum one-time pad technology and the quantum key to obtain encrypted data; the encrypted data is verified by using an enhanced quantum hash function, and after the encrypted data passes the verification, the encrypted data is transmitted to a data recovery server, and the data backup server is connected to the business system through an encrypted communication channel; A data recovery server, used for receiving the encrypted data sent by the data backup server; The data recovery server includes a hard disk, and when a hard disk failure is detected, the first data block lost by the hard disk is located and constructed according to the remaining data blocks and the check blocks of the hard disk; Decrypting the first data block using the target quantum key generated by the quantum key distribution device to obtain a second data block, and performing data recovery on the hard disk using the second data block to obtain a recovered hard disk; The target data to be accessed in the restored hard disk is predicted by a target prediction model, and the target data is restored to a cache for access by a client; the data recovery server uses a redundant independent disk array storage architecture to store data.

12. A data access device based on quantum key distribution, characterized in that: include: A reconstruction unit, configured to locate a first data block lost by the hard disk according to remaining data blocks and a check block of the hard disk when a hard disk failure is detected, wherein the hard disk stores data encrypted by a quantum key; A receiving unit, configured to receive a first quantum key corresponding to the first data block, wherein the first quantum key is a quantum key generated based on a quantum key distribution technology; a recovery unit, configured to decrypt the first data block using the first quantum key to obtain a second data block, and recover the hard disk based on the second data block to obtain a recovered hard disk; The prediction unit is used to predict the first data to be accessed in the restored hard disk through a target prediction model, and restore the first data to a cache for access by a client.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored executable program, wherein when the executable program is run, the device where the computer-readable storage medium is located is controlled to execute the data access method based on quantum key distribution according to any one of claims 1 to 10.

14. An electronic device, characterized in that: include: A memory storing an executable program; A processor, configured to run the program, wherein the program executes the method according to any one of claims 1 to 10 when running.

15. A computer program product comprising computer instructions, characterized in that When the computer instructions are executed by a processor, the steps of the method according to any one of claims 1 to 10 are implemented.

Images