Network-free data encryption transmission method and related device

Abstract

The invention discloses a network-free data encryption transmission method and a related device, and relates to the technical field of quantum encryption communication, in a network-free data encryption transmission process, after a first terminal receives to-be-sent first data, the first data can be encrypted by using a first quantum session key in a quantum session key set, and the first quantum session key can be sent to the first terminal; obtaining a first ciphertext; and since the first quantum session key is used for a small number of times, the security of the obtained first ciphertext can be further improved. According to the mode, the terminal equipment in the same communication cluster as the first terminal stores the same quantum session key set in advance, so that the terminal equipment in the communication cluster can decrypt the first ciphertext to obtain the first data, and other communication clusters do not have the same quantum session key set; obviously, the first ciphertext cannot be decrypted.

Description

Technical Field

[0001] The present invention belongs to the technical field of quantum encryption communication, and in particular to a network-free data encryption transmission method and related devices. Background Art

[0002] With the development of user science and technology, users may use non-network communication devices to interact in some activities. For example, when users are hiking outdoors, the satellite signal may not be stable in some mountainous areas, so users may need communication devices such as walkie-talkies that do not require mobile networks to communicate.

[0003] In this process, the communication device directly transmits the data, and when another communication device is on the same channel as the communication device transmitting the information, it can receive the information for information exchange. However, since it is not certain whether there are other communication devices on the channel, the risk of data leakage in this data transmission situation is relatively high.

[0004] Therefore, it is of great significance to strengthen the communication security between communication devices in the absence of satellite networks. Summary of the invention

[0005] The purpose of the present invention is to provide a network-free data encryption transmission method and related devices. The communication devices in the first communication cluster are pre-configured with the same quantum session key set, while different communication clusters are configured with different quantum session key sets. Therefore, communication devices in the same cluster can communicate with each other, while different communication clusters cannot communicate with each other. In this way, the information exchange security between communication devices in the communication cluster can be guaranteed even without a network.

[0006] In a first aspect, an embodiment of the present application provides a method for transmitting encrypted data without a network, which is applied to a first terminal in a first communication cluster, wherein the multiple terminals in the first communication cluster all include the same set of quantum session keys, and the terminals in different communication clusters include different sets of quantum session keys; and the method includes:

[0007] In response to receiving the first data to be sent, determining a first quantum session key for encrypting the first data from the quantum session key set included in the first terminal; wherein the first quantum session key is used no more than a preset number of times;

[0008] Encrypting the first data using the first quantum session key to obtain a first ciphertext;

[0009] Generating first broadcast data based on the first ciphertext, and transmitting the first broadcast data using a predefined transmission method;

[0010] The above-mentioned predefined transmission mode includes any of the following:

[0011] Radio transmission method, decentralized communication method, digital walkie-talkie communication method.

[0012] Optionally, the quantum session key set includes a character string, and before determining, in response to receiving the first data to be sent, a first quantum session key for encrypting the first data from the quantum session key set included in the first terminal, the method further includes:

[0013] Each quantum session key in the above quantum session key set is determined by:

[0014] The above character string is divided in a predefined manner to obtain multiple sub-strings; wherein one sub-string indicates one quantum session key.

[0015] Optionally, one quantum session key corresponds to one key identifier, and one communication cluster corresponds to one cluster identifier; and the generating of the first broadcast data based on the first ciphertext includes:

[0016] The first key identifier, the first cluster identifier and the first ciphertext are used to generate the first broadcast data.

[0017] The first key identifier indicates the first quantum session key, and the first cluster identifier indicates the first communication cluster.

[0018] Optionally, the above method further includes:

[0019] In response to receiving the second broadcast data, determining whether the second cluster identifier in the second broadcast data indicates the first communication cluster;

[0020] In a case where the second cluster identifier indicates the first communication cluster, determining a second quantum session key from the quantum session key set based on the second key identifier in the second broadcast data;

[0021] The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain second data.

[0022] Optionally, each quantum session key used corresponds to an indicator.

[0023] Wherein, the quantum session key is used for encryption or decryption, and it is determined that the quantum session key is used.

[0024] Optionally, the determining of the first quantum session key for encrypting the first data from the quantum session key set included in the first terminal includes:

[0025] Determine a first type of quantum session key subset from the above quantum session key set, wherein the quantum session keys in the first type of quantum session key subset have no corresponding indication identifier;

[0026] The first quantum session key is determined from the first type of quantum session key subset.

[0027] Optionally, one communication device corresponds to one secure digital storage card, and the secure digital storage card is used to store the above-mentioned quantum session key set.

[0028] In a second aspect, another embodiment of the present application provides a network-free data encryption transmission device, which is applied to a first terminal in a first communication cluster, wherein the multiple terminals in the first communication cluster all include the same quantum session key set, and the terminals in different communication clusters include different quantum session key sets, and the device includes:

[0029] a determining unit, configured to determine, in response to receiving the first data to be sent, a first quantum session key for encrypting the first data from the quantum session key set included in the first terminal; wherein the number of times the first quantum session key is used is not greater than a preset number;

[0030] An encryption unit, used to encrypt the first data using the first quantum session key to obtain a first ciphertext;

[0031] A broadcast unit, configured to generate first broadcast data based on the first ciphertext, and transmit the first broadcast data using a predefined transmission method;

[0032] The above-mentioned predefined transmission mode includes any of the following:

[0033] Radio transmission method, decentralized communication method, digital walkie-talkie communication method.

[0034] In a third aspect, another embodiment of the present application provides a storage medium, in which a computer program is stored, wherein the computer program is configured to execute the above-mentioned network-free data encryption transmission method when running.

[0035] In a fourth aspect, another embodiment of the present application provides an electronic device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the above-mentioned network-free data encryption transmission method.

[0036] Compared with the prior art, the present invention provides a method and related device for transmitting encrypted data without a network. During the process of transmitting encrypted data without a network, after receiving the first data to be sent, the first terminal can use the first quantum session key in the quantum session key set to encrypt the first data, thereby obtaining the first ciphertext; and since the first quantum session key is used less frequently, the security of the obtained first ciphertext can be further increased. In this way, since the terminal devices in the same communication cluster as the first terminal all pre-store the same quantum session key set, the terminal devices in the communication cluster can decrypt the first ciphertext to obtain the first data, while other communication clusters, since they do not have the same quantum session key set, obviously cannot decrypt the first ciphertext.

[0037] Furthermore, since the encryption uses a quantum session key, the security of the first ciphertext can be further increased. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 A schematic diagram of a flow chart of a method for transmitting encrypted data without a network provided by an embodiment of the present invention;

[0039] Figure 2 A schematic diagram of a structure of broadcast data provided by an embodiment of the present invention;

[0040] Figure 3 A schematic diagram of a calling process between walkie-talkies provided in an embodiment of the present invention;

[0041] Figure 4 A connection diagram of a network-free data encryption transmission device provided by an embodiment of the present invention;

[0042] Figure 5 A schematic diagram of the structure of a computer device provided in one embodiment of the present application is shown. DETAILED DESCRIPTION

[0043] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0044] As can be seen from the above-mentioned background art, in network-free cluster communication, there may be a risk of data leakage.

[0045] For ease of understanding, taking a walkie-talkie as an example of a communication device, a walkie-talkie usually has multiple preset channels (communication channels). In the relevant technology, multiple users who need to communicate can be informed in advance of which specific channel to use for this communication. In this way, when multiple walkie-talkies are on the same channel, users can use the walkie-talkies to communicate.

[0046] However, in some scenarios, only specific users may need to receive communication data, while other users do not need to receive communication data. For example, in a field training activity, the trainees may be grouped, and it is hoped that users in the group can communicate with each other, while users in different groups do not want to communicate with each other. In this case, the solution in the related art is difficult to implement. The reason is that when users in different groups adjust their walkie-talkies to the same channel, they can also receive the sent data.

[0047] For example, when Group A and Group B are conducting a field training competition, it is stipulated that when members of Group A use walkie-talkies, they use Channel A for communication, and when members of Group B use walkie-talkies, they use Channel B for communication. If a member of Group A uses Channel B when using a walkie-talkie, the communication data between members of Group B may also be received at this time.

[0048] That is, the communication method in the related technology cannot guarantee the security of communication between clusters.

[0049] In the disclosed embodiment, the communication devices in the first communication cluster are pre-configured with the same quantum session key set, while different communication clusters are configured with different quantum session key sets. Therefore, communication devices in the same cluster can communicate with each other, while different communication clusters cannot communicate with each other. In this way, the information exchange security between communication devices in the communication cluster can be guaranteed even without a network.

[0050] See also Figure 1 , Figure 1 A flowchart of a method for transmitting encrypted data without a network provided by an embodiment of the present invention is provided. The method for transmitting encrypted data without a network can be applied to a first terminal in a first communication cluster. Multiple terminals in the first communication cluster can include the same set of quantum session keys; terminals in different communication clusters include different sets of quantum session keys. The first terminal can be understood as a device with a networkless communication capability, such as a walkie-talkie.

[0051] It should be noted that, during actual use, there may be multiple communication clusters. This embodiment only describes the communication of one of the multiple communication clusters, and the communication methods adopted by other communication clusters in the multiple communication clusters may be the same as the communication method disclosed in this embodiment. Therefore, this disclosure selects the communication method of one of the communication clusters (the first communication cluster) for detailed description, so as to facilitate understanding of the data transmission process of the communication devices in the communication cluster of this disclosure.

[0052] It should be understood that the number of communication devices in each communication cluster may be different, and the number of communication devices in each communication cluster may be limited according to actual conditions.

[0053] It should be noted that the terminals in different communication clusters include different quantum session key sets. For example, communication cluster A includes communication device A1, communication device A2...communication device An, and communication cluster B includes communication device B1, communication device B2...communication device Bn. Among them, communication device A1, communication device A2...communication device An all use quantum session key set A, while communication device B1, communication device B2...communication device Bn all use quantum session key set B, and quantum session key set A is different from quantum session key set B. In this way, after the quantum session key in quantum session key set A is used to encrypt the data to obtain the ciphertext information A, the quantum session key in quantum session key set B cannot be used to decrypt the ciphertext information A. Correspondingly, the information encrypted by the quantum session key in quantum session key set B cannot be decrypted by the quantum session key in quantum session key set A. In this way, the communication devices between different communication clusters cannot interact, thereby ensuring the security of the communication devices in the same group of communication clusters in the process of information interaction.

[0054] When any communication device in the communication cluster needs to send data, it may need to encrypt the data to be sent. Figure 1 As shown, the network-free data encryption transmission method provided by the present disclosure may include the following steps:

[0055] Step 101, in response to receiving first data to be sent, determining a first quantum session key for encrypting the first data from a set of quantum session keys included in a first terminal;

[0056] Step 102, encrypting the first data using the first quantum session key to obtain a first ciphertext;

[0057] Step 103: Generate first broadcast data based on the first ciphertext, and transmit the first broadcast data using a predefined transmission method.

[0058] Here, the predefined transmission methods include any of the following:

[0059] Wireless transmission, decentralized communication, digital walkie-talkie communication and other non-network data transmission methods are characterized by the fact that data can be transmitted through the hardware equipment carried by the communication equipment itself, instead of using satellite network data for data forwarding. However, this transmission method enables communication equipment in the same frequency band to receive data sent by the sender.

[0060] Here, the first quantum session key is used no more than a preset number of times.

[0061] As an example, the preset number may be 2 or 1. That is, it can be understood that the first quantum session key is only used a few times.

[0062] As an example, the number of times the first quantum session key is used as an encryption key can be understood as the number of times the first quantum session key is used for encryption or decryption. That is, in the process of communication between various communication devices in the communication cluster, for example, when the preset number is 2, the first quantum session key is used at most twice for encryption or decryption. In this way, in multiple data interactions in the communication process, multiple different quantum session keys can be used, thereby increasing the difficulty of cracking the interactive data.

[0063] As an example, the number of quantum session keys in the quantum session key set can be set according to actual conditions. For example, in some scenarios, the communication devices in the communication cluster may need to communicate frequently, so the number of quantum session keys in the quantum session key set can be set to be larger. Correspondingly, if the communication devices in the communication cluster have a low frequency of conversation and only need to communicate for a short time, the number of quantum session keys in the quantum session key set can be set to be smaller.

[0064] It should be understood that the quantum session key set can be understood as a string composed of a certain number of characters, and the quantum session key can be understood as a partial string in the composed string. For example, the quantum session key set is a string composed of 100,000 characters, and every 16 consecutive characters constitute a quantum session key.

[0065] As an example, a quantum session key can be understood as a session key generated based on quantum random numbers and a quantum key distribution protocol. The ciphertext obtained after data encryption using the quantum session key enables the ciphertext to have a certain ability to resist cracking by quantum computers, thereby helping to make the ciphertext obtained after data encryption using the quantum session key more secure.

[0066] As an example, when the first terminal needs to send the first data, the first quantum session key can be determined from the quantum session key set, so that the first data can be encrypted using the first quantum session key to obtain the first ciphertext. Since the first quantum session key may not have been used, or has only been used in small quantities, the first ciphertext obtained by encrypting the first quantum session key can be more secure, thereby further ensuring the security of the network-free communication process.

[0067] It should be understood that if the first quantum session key has not been used, even if the key corresponding to a previously exchanged message is cracked, it still cannot be used to crack the first ciphertext, thus further increasing the security of the communication process.

[0068] As an example, the process of generating the first broadcast data from the first ciphertext can be understood as adding protocol data to the first ciphertext so that it can be known by other terminals after being sent out, and other terminals can know whether the data is complete.

[0069] It can be seen that in the present disclosure, in the process of networkless data encryption transmission, after receiving the first data to be sent, the first terminal can use the first quantum session key in the quantum session key set to encrypt the first data, thereby obtaining the first ciphertext; and since the first quantum session key is used less frequently, the security of the obtained first ciphertext can be further increased. In this way, since the terminal devices in the same communication cluster as the first terminal all pre-store the same quantum session key set, the terminal devices in the communication cluster can decrypt the first ciphertext to obtain the first data, while other communication clusters, since they do not have the same quantum session key set, obviously cannot decrypt the first ciphertext.

[0070] Furthermore, since the encryption uses a quantum session key, the security of the first ciphertext can be further increased.

[0071] In some embodiments, the quantum session key set may include a character string, and before step 101 "in response to receiving the first data to be sent, determining the first quantum session key used to encrypt the first data from the quantum session key set included in the first terminal", the method may further include:

[0072] Each quantum session key in the quantum session key set is determined as follows:

[0073] The character string is divided according to a predefined method to obtain multiple substrings, wherein one substring indicates one quantum session key.

[0074] As an example, a quantum session key set can be understood as a string of random numbers generated by a quantum random number unit; and a quantum session key can be understood as a part of the string.

[0075] For example, a quantum session key set consists of 10,000 random numbers, and one quantum session key can correspond to 16 random numbers. Of course, in a specific implementation, the total number of random numbers in the quantum session key set and the number of random numbers corresponding to one quantum session key can be limited according to actual conditions.

[0076] As an example, the predefined method may be a continuous selection method, an interval selection method, etc. For example, when the predefined method is a continuous selection method, the random numbers from the 1st to the 16th can be determined as a quantum session key, the random numbers from the 17th to the 32nd can be determined as a quantum session key, and so on. When the interval selection is used, the random numbers from the 1st, 3rd, 5th, 7th, ... 31st can be determined as a quantum session key, and the random numbers from the 33rd, 35th, 37th, 39th, ... 63rd can be determined as a quantum session key. Of course, when the interval selection is used, the number of random numbers in the intermediate intervals can also be limited according to actual conditions.

[0077] It should be understood that any terminal in the first communication cluster uses the same predefined method to determine the quantum session key from the quantum session key set, which helps any terminal in the first communication cluster to include the same quantum session key.

[0078] Of course, different communication clusters may use different methods to determine the quantum session key from the quantum session key set. In this way, each communication cluster only needs to use a different method to determine the quantum session key, that is, this method allows different communication clusters to correspond to the same set of quantum session keys.

[0079] In some embodiments, one quantum session key corresponds to one key identifier, and one communication cluster corresponds to one cluster identifier; and the “generating first broadcast data based on the first ciphertext” in step 103 may specifically include:

[0080] The first broadcast data is generated by using the first key identifier, the first cluster identifier and the first ciphertext.

[0081] As an example, the first key identifier may indicate a first quantum session key, and the first cluster identifier may indicate a first communication cluster.

[0082] As an example, the first broadcast data may include cluster identification information, so that when other terminals receive the first broadcast data, they can efficiently determine whether the first broadcast data needs to be decrypted. For example, when terminal A (terminal A belongs to communication cluster A) receives a certain broadcast data, the cluster identification in the broadcast data only indicates that the broadcast data is sent by a terminal device in communication cluster B, then terminal A does not need to decrypt the broadcast data; of course, it cannot decrypt it. In this way, the invalid performance overhead of the terminal can be avoided.

[0083] As an example, the broadcast data may also include key identification information. Thus, after the terminal receives the key identification information, it may directly use the key identification information to determine the quantum session key required to decrypt the ciphertext, thereby helping to more efficiently achieve the decryption of the ciphertext information.

[0084] In some embodiments, the above method may further include:

[0085] In response to receiving the second broadcast data, determining whether a second cluster identifier in the second broadcast data indicates the first communication cluster;

[0086] In a case where the second cluster identifier indicates the first communication cluster, determining a second quantum session key from the quantum session key set based on a second key identifier in the second broadcast data;

[0087] The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain second data.

[0088] It can be seen that this method can make it possible to quickly determine whether the ciphertext information in the broadcast data needs to be decrypted after receiving the broadcast data, and, when it is determined that decryption is required, how to efficiently implement the decryption of the ciphertext information.

[0089] It should be understood that in the present disclosure, when multiple terminal devices in a communication cluster communicate, each piece of data may be encrypted using a different quantum session key. Therefore, the number of quantum session keys in the quantum session key set may be large, and the key identifier can locate the quantum session key specifically used for decryption in the quantum session key set, thereby helping to more efficiently decrypt ciphertext information.

[0090] In order to understand the structure of broadcast data, you can combine Figure 2 To explain, Figure 2 It can be understood as the structure of broadcast data, consisting of Figure 2It can be seen that the protocol header and the protocol tail can be used to mark the integrity of the data packet. The group identifier can indicate which channel the currently initiated intercom uses and which channel corresponds to the relevant group (it can also be understood as a cluster identifier). The key sequence number identifies the position of the key of the corresponding group in the key string. For example, if the key sequence number is 0, it means that the corresponding group position starts from 0 and takes 16 bits as the key. If the key sequence number is 1, it means that the corresponding group position starts from 16 and takes 16 bits as the key. After that, it indicates the length and content of the voice data, as well as the integrity check of the data, so as to ensure the accuracy of the data.

[0091] In some embodiments, each used quantum session key may correspond to an indication identifier.

[0092] Here, the quantum session key is used for encryption or decryption, and it is determined that the quantum session key is used.

[0093] As an example, the design of the indicator mark can avoid the situation where a quantum session key is used multiple times, and helps to encrypt each communication data with a different quantum session key, thereby helping to make communication between clusters more secure.

[0094] It should be understood that when the terminal device in the first communication cluster sends data as a transmitter or receives data as a receiver, a quantum session key is consumed, which makes the quantum session key consumed by each terminal device in the first communication cluster consistent. In this way, it is also helpful for each terminal to more efficiently determine the quantum session key for encryption, or more efficiently determine the quantum session key for decryption.

[0095] For example, the communication device is a walkie-talkie, and each walkie-talkie in the first communication cluster is charged with the same key; in this way, the walkie-talkies can have the same key. When one walkie-talkie is calling, the other walkie-talkies will receive a message and consume a key at the same time; each call message will consume a key. In order to ensure the security of communication, a one-time one-key mechanism is required. The key used for each new conversation can be offset by 16 bits, and each encryption will consume 16 bytes. In this way, the quantum session key used for this decryption or encryption lock can be determined based on the recorded character consumption position.

[0096] In some embodiments, determining the first quantum session key used to encrypt the first data from the quantum session key set included in the first terminal may specifically include:

[0097] Determine a first type of quantum session key subset from the quantum session key set, wherein the quantum session keys in the first type of quantum session key subset have no corresponding indication identifier;

[0098] A first quantum session key is determined from the first type of quantum session key subset.

[0099] As an example, the first type of quantum session key subset can be understood as a set formed by quantum session keys that have not been used. Determining the first quantum session key from the first type of quantum session key subset can ensure that the determined first quantum session key has not been used. In this way, the difficulty of cracking the information of the interaction process can be increased. For example, each communication data needs to be cracked again. In this way, the interaction security between terminal devices in the same communication cluster can be better guaranteed.

[0100] In some embodiments, one communication device may correspond to one secure digital storage card, and the secure digital storage card may be used to store a quantum session key subset loaded by a key distribution terminal.

[0101] As an example, since the secure digital memory card can be inserted into a communication device, and the key distribution terminal may not be portable, the quantum session key subset is stored in the secure digital memory card, so that the key distribution terminal only needs to distribute the quantum session key to the secure memory card. In actual use, the secure digital memory card only needs to be inserted into the corresponding communication device. This method can make it easier for the communication device to obtain the quantum session key and update the quantum session key (for example, by updating the secure digital memory card).

[0102] As an example, the secure digital storage card may include, but is not limited to: a memory card, a SIM card, etc.

[0103] It is also important to emphasize that a quantum computer is a physical device that follows the laws of quantum mechanics to perform high-speed mathematical and logical operations, store and process quantum information. When a device processes and calculates quantum information and runs quantum algorithms, it is a quantum computer. Quantum computers have become a key technology under research because they have the ability to process mathematical problems more efficiently than ordinary computers. For example, they can speed up the time it takes to crack an RSA key from hundreds of years to a few hours.

[0104] That is, with the development of quantum technology, the protection measures in the existing communication process may not be ideal. That is, the protection measures in the traditional communication process are difficult to resist the attack of quantum computers. In the present disclosure, the data interaction between communication devices uses quantum session keys, which can resist quantum computer attacks to a certain extent and enhance the security of the communication process.

[0105] In some embodiments, the communication device in the present disclosure may be a walkie-talkie. To better understand the concept of the present disclosure, Figure 3To explain, Figure 3 It can be understood as a call diagram between walkie-talkies in the same communication cluster. When the calling walkie-talkie sends a message to the called walkie-talkie, it needs to convert the spoken data into packets, use the protocol header, and the channel grouping identifier plus the key identifier used. The key identifier will change for each call, and the used key will be destroyed immediately after use. Encrypted communication uses a one-time one-key method. For example, for the first call, all keys belonging to the same key will consume a set of keys, and the key number will be 0 when used. The next time encryption is performed, all key numbers will start from 1. Then add the data length and the data itself, plus the checksum to verify whether the encryption and decryption are correct, etc.

[0106] The called intercom analyzes the information sent by the calling intercom and first finds out whether it belongs to the same group. If it is the same group, it starts to look for the key identifier, then decrypts and verifies the data, and then completes the whole communication.

[0107] See also Figure 4 , Figure 4 A schematic structural diagram of a network-free data encryption transmission device provided in an embodiment of the present invention, wherein the network-free data encryption transmission device 400 is applied to a first terminal in a first communication cluster, wherein multiple terminals in the first communication cluster all include the same quantum session key set, and terminals in different communication clusters include different quantum session key sets, and the device 400 includes:

[0108] A determining unit 401 is configured to determine, in response to receiving first data to be sent, a first quantum session key for encrypting the first data from a set of quantum session keys included in the first terminal; wherein the number of times the first quantum session key is used is not greater than a preset number;

[0109] An encryption unit 402 is used to encrypt the first data using the first quantum session key to obtain a first ciphertext;

[0110] The broadcast unit 403 is used to generate first broadcast data based on the first ciphertext, and transmit the first broadcast data using a predefined transmission method;

[0111] The above-mentioned predefined transmission mode includes any of the following:

[0112] Radio transmission method, decentralized communication method, digital walkie-talkie communication method.

[0113] In some embodiments, the quantum session key set includes a string, and the networkless data encryption transmission device 400 is further used to: determine each quantum session key in the quantum session key set in the following manner:

[0114] The above character string is divided in a predefined manner to obtain multiple sub-strings; wherein one sub-string indicates one quantum session key.

[0115] In some embodiments, a quantum session key corresponds to a key identifier, and a communication cluster corresponds to a cluster identifier; the broadcast unit 403 is further used to: generate the first broadcast data by using the first key identifier, the first cluster identifier and the first ciphertext,

[0116] The first key identifier indicates the first quantum session key, and the first cluster identifier indicates the first communication cluster.

[0117] In some embodiments, the network-free data encryption transmission device 400 is further specifically used to: in response to receiving the second broadcast data, determine whether the second cluster identifier in the second broadcast data indicates the first communication cluster;

[0118] In a case where the second cluster identifier indicates the first communication cluster, determining a second quantum session key from the quantum session key set based on the second key identifier in the second broadcast data;

[0119] The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain second data.

[0120] In some embodiments, each used quantum session key corresponds to an indication mark, wherein the quantum session key is used for encryption or decryption, and it is determined that the quantum session key is used.

[0121] In some embodiments, the determining unit 401 is further configured to: determine a first type of quantum session key subset from the quantum session key set, wherein the quantum session key in the first type of quantum session key subset has no corresponding indication identifier;

[0122] Determine the first quantum session key from the first type of quantum session key subset.

[0123] In some embodiments, one communication device corresponds to one secure digital storage card, and the secure digital storage card is used to store the above-mentioned quantum session key set.

[0124] Figure 5 A schematic diagram of the structure of a computer device provided in one embodiment of the present application is shown, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the functions of a computer system for implementing the method for generating an amplitude preparation circuit in any of the above-mentioned embodiments are realized.

[0125] The embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a computer, the computer executes the functions of the computer system of the network-free data encryption transmission method in any of the above embodiments.

[0126] The embodiment of the present application also provides a computer program product including instructions, which, when executed by a computer, enables the computer to perform the functions of the computer system of the networkless data encryption transmission method in any of the above embodiments.

[0127] It should be understood that the specific examples in this application are only intended to help those skilled in the art to better understand the embodiments of the present application, rather than to limit the scope of the present invention.

[0128] It can be understood that in the various implementations of the present application, the size of the serial number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the implementation methods of the present application.

[0129] It can be understood that the various embodiments described in this application can be implemented individually or in combination, and the embodiments of this application are not limited to this.

[0130] Unless otherwise stated, all technical and scientific terms used in the embodiments of the present application have the same meaning as those generally understood by those skilled in the art of the technical field of the present application. The terms used in the present application are only for the purpose of describing specific embodiments and are not intended to limit the scope of the present application. The term "and / or" used in the present application includes any and all combinations of one or more related listed items. The singular forms of "a kind of", "above" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0131] It can be understood that the processor of the embodiment of the present application can be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method implementation can be completed by the hardware integrated logic circuit or software instructions in the processor. The above processor can be a general processor, a digital signal processor (DigitalSignal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiment of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present application can be directly embodied as a hardware decoding processor to perform, or the hardware and software modules in the decoding processor are combined and executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0132] It is understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (programmable ROM, PROM), an erasable programmable read-only memory (erasable PROM, EPROM), an electrically erasable programmable read-only memory (EEPROM) or a flash memory. The volatile memory may be a random access memory (RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0133] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0134] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method implementation methods and will not be repeated here.

[0135] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device implementation described above is only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0136] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0137] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0138] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of each implementation method of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program codes.

[0139] The above are only specific embodiments of the present application, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A method for transmitting encrypted data without a network, characterized in that: Applied to a first terminal in a first communication cluster, multiple terminals in the first communication cluster all include the same set of quantum session keys, and terminals in different communication clusters include different sets of quantum session keys; and the method includes: In response to receiving first data to be sent, determining a first quantum session key for encrypting the first data from a set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times; Encrypting the first data using the first quantum session key to obtain a first ciphertext; generating first broadcast data based on the first ciphertext, and transmitting the first broadcast data using a predefined transmission method; The predefined transmission mode includes any of the following: Radio transmission method, decentralized communication method, digital walkie-talkie communication method.

2. The method according to claim 1, characterized in that The quantum session key set includes a character string, and before determining, in response to receiving the first data to be sent, a first quantum session key for encrypting the first data from the quantum session key set included in the first terminal, the method further includes: Each quantum session key in the quantum session key set is determined by: The character string is divided in a predefined manner to obtain a plurality of sub-strings, wherein one sub-string indicates one quantum session key.

3. The method according to claim 1, characterized in that One quantum session key corresponds to one key identifier, and one communication cluster corresponds to one cluster identifier; and the generating first broadcast data based on the first ciphertext includes: Generate the first broadcast data by using the first key identifier, the first cluster identifier and the first ciphertext, The first key identifier indicates the first quantum session key, and the first cluster identifier indicates the first communication cluster.

4. The method according to claim 3, characterized in that The method further comprises: In response to receiving second broadcast data, determining whether a second cluster identifier in the second broadcast data indicates the first communication cluster; In a case where the second cluster identifier indicates the first communication cluster, determining a second quantum session key from the quantum session key set based on a second key identifier in the second broadcast data; The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain second data.

5. The method according to claim 1, characterized in that Each quantum session key used corresponds to an indicator. Wherein, the quantum session key is used for encryption or decryption, and it is determined that the quantum session key is used.

6. The method according to claim 5, characterized in that The determining, from a set of quantum session keys included in the first terminal, a first quantum session key for encrypting the first data comprises: Determining a first type of quantum session key subset from the quantum session key set, wherein the quantum session keys in the first type of quantum session key subset have no corresponding indication identifier; The first quantum session key is determined from the first type of quantum session key subset.

7. The method according to claim 1, characterized in that One communication device corresponds to one secure digital storage card, and the secure digital storage card is used to store the quantum session key set.

8. A network-free data encryption transmission device, characterized in that: Applied to a first terminal in a first communication cluster, multiple terminals in the first communication cluster all include the same set of quantum session keys, and terminals in different communication clusters include different sets of quantum session keys, and the device includes: a determining unit, configured to determine, in response to receiving first data to be sent, a first quantum session key for encrypting the first data from a set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times; an encryption unit, configured to encrypt the first data using the first quantum session key to obtain a first ciphertext; a broadcast unit, configured to generate first broadcast data based on the first ciphertext, and transmit the first broadcast data using a predefined transmission method; The predefined transmission mode includes any of the following: Radio transmission method, decentralized communication method, digital walkie-talkie communication method.

9. A storage medium, characterized in that: The storage medium stores a computer program, wherein the computer program is configured to execute the method according to any one of claims 1 to 7 when executed.

10. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to run the computer program to perform the method according to any one of claims 1 to 7.

Images