Data encryption transmission method without network and related device

Abstract

The application discloses a network-free data encryption transmission method and related device, and relates to the technical field of quantum encryption communication. In the network-free data encryption transmission process, after receiving first data to be sent, a first terminal can encrypt the first data by using a first quantum session key in a quantum session key set, so as to obtain first ciphertext. Since the first quantum session key is used a small number of times, the security of the obtained first ciphertext can be further improved. In this way, since the terminal devices in the same communication cluster as the first terminal all store the same quantum session key set in advance, the terminal devices in the communication cluster can decrypt the first ciphertext to obtain the first data, and other communication clusters cannot decrypt the first ciphertext since they do not have the same quantum session key set.

Description

Technical Field

[0001] This invention belongs to the field of quantum encrypted communication technology, specifically a method and related device for wireless data encrypted transmission. Background Technology

[0002] With the development of science and technology, users may use wireless communication devices for interaction during certain activities. For example, during outdoor hiking or training, satellite signals may be unstable in some mountainous areas, so users may need to communicate using communication devices such as walkie-talkies that do not require a mobile network.

[0003] In this process, the communication device directly transmits the data. If another communication device is on the same channel as the transmitting device, it can receive the data and exchange information. However, since it is uncertain whether there are other communication devices on the same channel, this data transmission scenario carries a significant risk of data leakage.

[0004] Therefore, it is of great significance to strengthen communication security between communication devices in the absence of satellite networks. Summary of the Invention

[0005] The purpose of this invention is to provide a method and related apparatus for encrypted data transmission without a network. The communication devices in the first communication cluster are pre-configured with the same set of quantum session keys, while the sets of quantum session keys configured in different communication clusters are different. Therefore, communication devices in the same cluster can communicate with each other, while communication devices in different communication clusters cannot communicate with each other. This ensures the security of information exchange between communication devices in the communication cluster even without a network.

[0006] In a first aspect, one embodiment of this application provides a method for encrypted data transmission without a network, applied to a first terminal in a first communication cluster, wherein multiple terminals in the first communication cluster all include the same set of quantum session keys, and terminals in different communication clusters include different sets of quantum session keys; and the method includes:

[0007] In response to receiving the first data to be sent, a first quantum session key for encrypting the first data is determined from the set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times;

[0008] The first data is encrypted using the first quantum session key to obtain the first ciphertext;

[0009] First broadcast data is generated based on the first ciphertext, and the first broadcast data is transmitted using a predefined transmission method;

[0010] The predefined transmission methods mentioned above include any of the following:

[0011] Radio transmission, decentralized communication, and digital walkie-talkie communication.

[0012] Optionally, the quantum session key set includes a string, and before determining a first quantum session key for encrypting the first data from the quantum session key set included in the first terminal in response to receiving the first data to be sent, the method further includes:

[0013] Each quantum session key in the above quantum session key set is determined as follows:

[0014] The string is divided into multiple substrings according to a predefined method; each substring indicates a quantum session key.

[0015] Optionally, a quantum session key corresponds to a key identifier, and a communication cluster corresponds to a cluster identifier; and the generation of the first broadcast data based on the first ciphertext includes:

[0016] The first key identifier, the first cluster identifier, and the aforementioned first ciphertext are used to generate the aforementioned first broadcast data.

[0017] Wherein, the first key identifier indicates the first quantum session key, and the first cluster identifier indicates the first communication cluster.

[0018] Optionally, the above method further includes:

[0019] In response to receiving second broadcast data, determine whether the second cluster identifier in the second broadcast data indicates the first communication cluster;

[0020] In the case where the second cluster identifier indicates the first communication cluster, the second quantum session key is determined from the quantum session key set based on the second key identifier in the second broadcast data;

[0021] The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain the second data.

[0022] Optionally, each quantum session key used corresponds to an indicator.

[0023] In this context, the quantum session key is used for both encryption and decryption, thus confirming that the quantum session key has been used.

[0024] Optionally, determining the first quantum session key for encrypting the first data from the set of quantum session keys included in the first terminal includes:

[0025] From the above set of quantum session keys, a first type of quantum session key subset is determined, wherein the quantum session keys in the first type of quantum session key subset do not have corresponding indicator identifiers;

[0026] The first quantum session key is determined from the first type of quantum session key subset mentioned above.

[0027] Optionally, one communication device corresponds to one secure digital storage card, which is used to store the aforementioned set of quantum session keys.

[0028] Secondly, another embodiment of this application provides a network-free data encryption transmission device applied to a first terminal in a first communication cluster, wherein multiple terminals in the first communication cluster all include the same set of quantum session keys, and terminals in different communication clusters include different sets of quantum session keys. The device includes:

[0029] The determining unit is configured to, in response to receiving the first data to be sent, determine a first quantum session key for encrypting the first data from the set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times;

[0030] An encryption unit is used to encrypt the first data using the first quantum session key to obtain the first ciphertext;

[0031] A broadcast unit is configured to generate first broadcast data based on the first ciphertext and to transmit the first broadcast data using a predefined transmission method.

[0032] The predefined transmission methods mentioned above include any of the following:

[0033] Radio transmission, decentralized communication, and digital walkie-talkie communication.

[0034] Thirdly, another embodiment of this application provides a storage medium storing a computer program, wherein the computer program is configured to execute the above-described offline data encryption transmission method when running.

[0035] Fourthly, another embodiment of this application provides an electronic device, including a memory and a processor, wherein the memory stores a computer program and the processor is configured to run the computer program to perform the above-described offline data encryption transmission method.

[0036] Compared with existing technologies, the present invention provides a method and related apparatus for encrypted data transmission without a network. During encrypted data transmission without a network, after receiving the first data to be sent, the first terminal can encrypt the first data using a first quantum session key from a quantum session key set, thereby obtaining the first ciphertext. Since the first quantum session key is used less frequently, the security of the obtained first ciphertext is further enhanced. In this method, because terminal devices in the same communication cluster as the first terminal pre-store the same quantum session key set, the terminal devices in that communication cluster can decrypt the first ciphertext to obtain the first data. Other communication clusters, lacking the same quantum session key set, are obviously unable to decrypt the first ciphertext.

[0037] Furthermore, the security of the first ciphertext can be further enhanced by using a quantum session key for encryption. Attached Figure Description

[0038] Figure 1 A flowchart illustrating a method for encrypted data transmission without a network, as provided in an embodiment of the present invention;

[0039] Figure 2 This is a schematic diagram illustrating a structural form of broadcast data provided in an embodiment of the present invention;

[0040] Figure 3 This is a schematic diagram of a call process between walkie-talkies provided in an embodiment of the present invention;

[0041] Figure 4 A connection diagram of a network-free data encryption transmission device provided in an embodiment of the present invention;

[0042] Figure 5 A schematic diagram of the structure of a computer device provided in one embodiment of this application is shown. Detailed Implementation

[0043] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0044] As can be seen from the above background information, there may be a risk of data leakage in wireless trunking communication.

[0045] To make it easier to understand, let's take a walkie-talkie as an example of a communication device. Walkie-talkies usually have multiple preset channels (communication channels). In related technologies, multiple users who need to communicate can be informed in advance which specific channel will be used for this communication. In this way, when multiple walkie-talkies are on the same channel, users can use the walkie-talkies to communicate.

[0046] However, in some scenarios, it may be necessary for only specific users to receive communication data, while other users do not need to receive it. For example, during field training exercises, participants may be divided into groups, and it may be desired that users within the same group can communicate with each other, while users in different groups do not wish to communicate with each other. In such cases, existing solutions are difficult to implement. This is because users in different groups can receive the transmitted data even when their walkie-talkies are tuned to the same channel.

[0047] For example, if Group A and Group B are conducting a field training competition, it is stipulated that members of Group A will use channel A to communicate when using walkie-talkies, while members of Group B will use channel B. If a member of Group A uses channel B when using a walkie-talkie, they may also receive communication data between members of Group B.

[0048] In other words, the communication methods in the relevant technologies cannot guarantee the security of communication between clusters.

[0049] In this embodiment of the disclosure, the communication devices in the first communication cluster are pre-configured with the same set of quantum session keys, while the sets of quantum session keys configured in different communication clusters are different. Therefore, communication devices in the same cluster can communicate with each other, while communication devices in different communication clusters cannot communicate with each other. This ensures the security of information exchange between communication devices in the communication cluster even without a network.

[0050] See Figure 1 , Figure 1 This is a flowchart illustrating a method for encrypted data transmission without a network, provided by an embodiment of the present invention. This method can be applied to a first terminal in a first communication cluster. Multiple terminals in the first communication cluster can all include the same set of quantum session keys; terminals in different communication clusters may include different sets of quantum session keys. The first terminal can be understood as a device with network-free communication capabilities, such as a walkie-talkie.

[0051] It should be noted that in actual use, there may be multiple communication clusters. This embodiment only describes the communication of one of the multiple communication clusters. The communication methods used by other communication clusters in the multiple communication clusters may be the same as the communication methods disclosed in this embodiment. Therefore, this disclosure selects the communication method of one of the communication clusters (the first communication cluster) for detailed description in order to facilitate understanding of the data transmission process of the communication devices in the communication cluster of this disclosure.

[0052] It should be understood that the number of communication devices in each communication cluster can be different, and the number of communication devices in each communication cluster can be limited according to the actual situation.

[0053] It's important to note that terminals in different communication clusters use different sets of quantum session keys. For example, communication cluster A includes communication devices A1, A2, ..., An, while communication cluster B includes communication devices B1, B2, ..., Bn. Communication devices A1, A2, ..., An all use quantum session key set A, while communication devices B1, B2, ..., Bn all use quantum session key set B. Since quantum session key set A and quantum session key set B are different, ciphertext A obtained by encrypting data using quantum session keys in quantum session key set A cannot be decrypted using quantum session keys in quantum session key set B. Similarly, information encrypted using quantum session keys in quantum session key set B cannot be decrypted using quantum session keys in quantum session key set A. This method prevents communication devices in different communication clusters from interacting, thus ensuring the security of information exchange between devices within the same communication cluster.

[0054] In a communication cluster, any communication device may need to encrypt the data it needs to send. For example... Figure 1 As shown, the wireless data encryption transmission method provided in this disclosure may include the following steps:

[0055] Step 101: In response to receiving the first data to be sent, determine a first quantum session key for encrypting the first data from the set of quantum session keys included in the first terminal;

[0056] Step 102: Encrypt the first data using the first quantum session key to obtain the first ciphertext;

[0057] Step 103: Generate first broadcast data based on the first ciphertext, and transmit the first broadcast data using a predefined transmission method.

[0058] Here, the predefined transmission methods include any of the following:

[0059] Wireless data transmission methods, such as radio transmission, decentralized communication, and digital walkie-talkie communication, are characterized by their ability to transmit data directly through the hardware integrated into the communication equipment itself, without relying on satellite networks for data forwarding. However, this method allows communication devices operating on the same frequency band to receive the data sent by the transmitter.

[0060] Here, the first quantum session key is used no more than a preset number of times.

[0061] As an example, the default number can be 2 or 1. That is, it can be understood that the first quantum session key is only used a few times.

[0062] As an example, the number of times the first quantum session key is used as an encryption key can be understood as the number of times it is used for encryption or decryption. That is, during the communication process between various communication devices in the communication cluster, for example, when the preset number is 2, the first quantum session key is used at most twice for encryption or decryption. In this way, multiple different quantum session keys can be used in multiple data exchanges during the communication process, thereby increasing the difficulty of cracking the exchanged data.

[0063] As an example, the number of quantum session keys in the quantum session key set can be set according to the actual situation. For instance, in some scenarios, communication devices in a communication cluster may need to engage in frequent dialogues, so the number of quantum session keys in the quantum session key set can be set to be larger. Conversely, in cases where communication devices in a communication cluster have a lower dialogue frequency and only need to engage in dialogues for a short period of time, the number of quantum session keys in the quantum session key set can be set to be smaller.

[0064] It should be understood that a quantum session key set can be understood as a string consisting of a certain number of characters, while a quantum session key can be understood as a portion of that string. For example, a quantum session key set is a string consisting of 100,000 characters, and every 16 consecutive characters constitute a quantum session key.

[0065] As an example, a quantum session key can be understood as a session key generated based on quantum random numbers and a quantum key distribution protocol. The ciphertext obtained by encrypting data using a quantum session key has a certain ability to resist cracking by a quantum computer, thus helping to make the ciphertext obtained by encrypting data using a quantum session key more secure.

[0066] As an example, when the first terminal needs to send the first data, the first quantum session key can be determined from the set of quantum session keys. This first quantum session key can then be used to encrypt the first data, thus obtaining the first ciphertext. Since the first quantum session key may not have been used before, or may have only been used sparingly, the first ciphertext obtained using it is more secure, further ensuring the security of the wireless communication process.

[0067] It should be understood that if the first quantum session key has not been used, then even if the key corresponding to a previously exchanged message is cracked, it will still be unable to be used to crack the first ciphertext. This can further increase the security of the communication process.

[0068] As an example, the process of generating the first broadcast data from the first ciphertext can be understood as adding protocol data to the first ciphertext so that it can be known by other terminals after being sent out, and so that other terminals can know whether the data is complete, etc.

[0069] As can be seen, in this disclosure, during the wireless data encryption transmission process, after receiving the first data to be sent, the first terminal can encrypt the first data using the first quantum session key from the quantum session key set, thereby obtaining the first ciphertext. Since the first quantum session key is used relatively infrequently, the security of the obtained first ciphertext can be further enhanced. In this method, because all terminal devices in the same communication cluster as the first terminal pre-store the same quantum session key set, the terminal devices in that communication cluster can decrypt the first ciphertext to obtain the first data. Other communication clusters, lacking the same quantum session key set, are obviously unable to decrypt the first ciphertext.

[0070] Furthermore, the security of the first ciphertext can be further enhanced by using a quantum session key for encryption.

[0071] In some embodiments, the quantum session key set may include a string, and prior to step 101, "in response to receiving the first data to be sent, determining a first quantum session key from the quantum session key set included in the first terminal for encrypting the first data," the method may further include:

[0072] Each quantum session key in the quantum session key set is determined as follows:

[0073] The string is divided into multiple substrings according to a predefined method; each substring indicates a quantum session key.

[0074] As an example, a quantum session key set can be understood as a string of random numbers generated by quantum random number units; while a quantum session key can be understood as a part of that string.

[0075] For example, a quantum session key set consists of 10,000 random numbers, while a single quantum session key can correspond to 16 random numbers. Of course, in specific implementations, the total number of random numbers in the quantum session key set and the number of random numbers corresponding to a single quantum session key can be limited according to the actual situation.

[0076] As an example, the predefined method can be continuous selection, interval selection, etc. For instance, when the predefined method is continuous selection, the random numbers from the 1st to the 16th position can be used to determine a quantum session key, the random numbers from the 17th to the 32nd position can be used to determine a quantum session key, and so on. When using interval selection, the random numbers from the 1st, 3rd, 5th, 7th, ... 31st position can be used to determine a quantum session key, and the random numbers from the 33rd, 35th, 37th, 39th, ... 63rd position can be used to determine a quantum session key. Of course, when using interval selection, the number of random numbers in the interval can also be limited according to the actual situation.

[0077] It should be understood that any terminal in the first communication cluster uses the same predefined method to determine the quantum session key from the quantum session key set, which helps that any terminal in the first communication cluster can include the same quantum session key.

[0078] Of course, different communication clusters can use different methods to determine the quantum session key from the set of quantum session keys. In this way, each communication cluster only needs to use a different method to determine the quantum session key, that is, this method allows different communication clusters to correspond to the same set of quantum session keys.

[0079] In some embodiments, a quantum session key corresponds to a key identifier, and a communication cluster corresponds to a cluster identifier; and step 103, "generating first broadcast data based on the first ciphertext," may specifically include:

[0080] The first key identifier, the first cluster identifier, and the first ciphertext are used to generate the first broadcast data.

[0081] As an example, the first key identifier can indicate the first quantum session key, and the first cluster identifier can indicate the first communication cluster.

[0082] As an example, the first broadcast data can include cluster identification information. This allows other terminals receiving the first broadcast data to efficiently determine whether it needs to be decrypted. For instance, when terminal A (which belongs to communication cluster A) receives broadcast data, if the cluster identification in the broadcast data simply indicates that the broadcast data was sent by a terminal device in communication cluster B, then terminal A does not need to decrypt the broadcast data; nor can it. This approach avoids unnecessary performance overhead for the terminals.

[0083] As an example, the broadcast data can also include key identification information. After the terminal receives the key identification information, it can directly use the key identification information to determine the quantum session key required to decrypt the ciphertext, thereby helping to decrypt the ciphertext information more efficiently.

[0084] In some embodiments, the above method may further include:

[0085] In response to receiving second broadcast data, determine whether the second cluster identifier in the second broadcast data indicates the first communication cluster;

[0086] In the case where the second cluster identifier indicates the first communication cluster, the second quantum session key is determined from the quantum session key set based on the second key identifier in the second broadcast data;

[0087] The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain the second data.

[0088] As can be seen, this method allows for the rapid determination of whether the ciphertext in a broadcast data needs to be decrypted after receiving it, and, if so, how to efficiently decrypt the ciphertext.

[0089] It should be understood that in this disclosure, when multiple terminal devices communicate in a communication cluster, each piece of data may be encrypted using a different quantum session key. Therefore, the number of quantum session keys in the quantum session key set may be large. The key identifier can locate the specific quantum session key used for decryption in the quantum session key set, thereby helping to decrypt the encrypted information more efficiently.

[0090] To better understand the structure of broadcast data, it is possible to combine... Figure 2 To explain, Figure 2 This can be understood as the structural form of broadcast data, consisting of... Figure 2As can be seen, the protocol header and trailer are used to mark the integrity of data packets. The packet identifier indicates which channel the initiating walkie-talkie is using and which packet corresponds to it (this can also be understood as a cluster identifier). The key sequence number indicates the position of the key for the corresponding group within the key string. For example, a key sequence number of 0 means taking 16 bits from position 0 onwards as the key, while a key sequence number of 1 means taking 16 bits from position 16 onwards as the key. Following this are the length and content of the voice data, as well as data integrity verification to ensure data accuracy.

[0091] In some embodiments, each quantum session key used can correspond to an indicator identifier.

[0092] Here, the quantum session key is used for both encryption and decryption, which confirms that the quantum session key is being used.

[0093] As an example, the design of the indicator can prevent a single quantum session key from being used multiple times, which helps to ensure that each communication data is encrypted with a different quantum session key, thereby making communication between clusters more secure.

[0094] It should be understood that when a terminal device in the first communication cluster transmits data as a sender or receives data as a receiver, it consumes a quantum session key. This ensures that the quantum session key consumed by each terminal device in the first communication cluster is consistent. This also helps each terminal to more efficiently determine the quantum session key used for encryption, or more efficiently determine the quantum session key used for decryption.

[0095] For example, consider walkie-talkies as communication devices. Each walkie-talkie in the first communication cluster is charged with the same key. This ensures that all walkie-talkies share the same key. When one walkie-talkie makes a call, all other walkie-talkies receive a message and consume one key. Each call consumes one key. To ensure communication security, a one-time pad mechanism is used. The key used for each new conversation can be shifted 16 bits forward, and each encryption consumes 16 bytes. Thus, the quantum session key used for decryption or encryption can be determined based on the recorded character consumption position.

[0096] In some embodiments, determining a first quantum session key for encrypting the first data from a set of quantum session keys included in the first terminal may specifically include:

[0097] A first type of quantum session key subset is determined from the set of quantum session keys, wherein the quantum session keys in the first type of quantum session key subset do not have corresponding indicator identifiers;

[0098] The first quantum session key is determined from the first subset of quantum session keys.

[0099] As an example, the first type of quantum session key subset can be understood as a set of quantum session keys that have not yet been used. Determining the first quantum session key from the first type of quantum session key subset ensures that the determined first quantum session key has not yet been used. This increases the difficulty of cracking the information in the interaction process. For example, each piece of communication data needs to be cracked again. This can better ensure the security of the interaction between terminal devices in the same communication cluster.

[0100] In some embodiments, a communication device may correspond to a secure digital storage card, which can be used to store a subset of quantum session keys loaded by a key distribution terminal.

[0101] As an example, since secure digital storage cards can be inserted into communication devices, while key distribution terminals may not be portable, storing a subset of quantum session keys on secure digital storage cards allows the key distribution terminal to simply distribute the quantum session keys to the secure storage card. In practical use, the secure digital storage card only needs to be inserted into the corresponding communication device. This approach makes it easier for communication devices to obtain and update quantum session keys (e.g., by updating the secure digital storage card).

[0102] As an example, a secure digital storage card may include, but is not limited to, memory cards, SIM cards, etc.

[0103] It is also important to emphasize that quantum computers are physical devices that perform high-speed mathematical and logical operations, store and process quantum information in accordance with the laws of quantum mechanics. When a device processes and calculates quantum information and runs quantum algorithms, it is a quantum computer. Because of its ability to process mathematical problems more efficiently than ordinary computers—for example, reducing the time to crack RSA keys from hundreds of years to hours—quantum computers have become a key technology under research.

[0104] In other words, with the development of quantum technology, the existing protection measures in the communication process may not be ideal. That is, the protection measures in the traditional communication process are difficult to resist attacks by quantum computers. In this disclosure, the data interaction between communication devices uses quantum session keys, which can resist quantum computer attacks to a certain extent and enhance the security of the communication process.

[0105] In some embodiments, the communication device in this disclosure may be a walkie-talkie, and to better understand the concept of this disclosure, it may be combined with... Figure 3To explain, Figure 3 This can be understood as a call diagram between walkie-talkies within the same communication cluster. When the calling walkie-talkie sends a message to the called walkie-talkie, the spoken data needs to be converted into packets, using a protocol header, a channel group identifier, and the key identifier used. The key identifier changes with each call, and the used key is destroyed immediately after use. Encrypted communication uses a one-time key method. For example, in the first call, all keys belonging to the same key will consume a set of keys, with key number 0 used. In subsequent encryptions, all key numbers start from 1. Then, the call data length and the data itself are added, along with checksums to verify the correctness of encryption and decryption, etc.

[0106] The called walkie-talkie parses the information sent by the calling walkie-talkie, first determining if they belong to the same group. If they are in the same group, it searches for the key identifier, then decrypts and verifies the data, and finally transmits the data, completing the entire communication process.

[0107] See Figure 4 , Figure 4 This is a schematic diagram of a network-free data encryption transmission device provided in an embodiment of the present invention. The network-free data encryption transmission device 400 is applied to a first terminal in a first communication cluster. Multiple terminals in the first communication cluster all include the same set of quantum session keys, while terminals in different communication clusters include different sets of quantum session keys. The device 400 includes:

[0108] The determining unit 401 is configured to, in response to receiving the first data to be sent, determine a first quantum session key for encrypting the first data from the set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times;

[0109] The encryption unit 402 is used to encrypt the first data using the first quantum session key to obtain the first ciphertext;

[0110] The broadcast unit 403 is used to generate first broadcast data based on the first ciphertext and to transmit the first broadcast data using a predefined transmission method.

[0111] The predefined transmission methods mentioned above include any of the following:

[0112] Radio transmission, decentralized communication, and digital walkie-talkie communication.

[0113] In some embodiments, the quantum session key set includes strings, and the wireless data encryption transmission device 400 is further applied to: determining each quantum session key in the quantum session key set by:

[0114] The string is divided into multiple substrings according to a predefined method; each substring indicates a quantum session key.

[0115] In some embodiments, a quantum session key corresponds to a key identifier, and a communication cluster corresponds to a cluster identifier; the broadcast unit 403 is further configured to: generate the first broadcast data from the first key identifier, the first cluster identifier, and the first ciphertext.

[0116] Wherein, the first key identifier indicates the first quantum session key, and the first cluster identifier indicates the first communication cluster.

[0117] In some embodiments, the offline data encryption transmission device 400 is further configured to: in response to receiving second broadcast data, determine whether the second cluster identifier in the second broadcast data indicates the first communication cluster;

[0118] In the case where the second cluster identifier indicates the first communication cluster, the second quantum session key is determined from the quantum session key set based on the second key identifier in the second broadcast data;

[0119] The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain the second data.

[0120] In some embodiments, each used quantum session key corresponds to an indicator, wherein the use of the quantum session key for encryption or decryption determines that the quantum session key has been used.

[0121] In some embodiments, the determining unit 401 is further configured to: determine a first type of quantum session key subset from the quantum session key set, wherein the quantum session keys in the first type of quantum session key subset do not have corresponding indicator identifiers;

[0122] The first quantum session key is determined from the aforementioned subset of the first type of quantum session keys.

[0123] In some embodiments, a communication device corresponds to a secure digital storage card, which is used to store the aforementioned set of quantum session keys.

[0124] Figure 5 A schematic diagram of the structure of a computer device provided in one embodiment of this application is shown, including a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the function of the computer system of the amplitude preparation circuit generation method in any of the above embodiments.

[0125] This application also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a computer, causes the computer to perform the functions of the computer system of the offline data encryption transmission method in any of the above embodiments.

[0126] This application also provides a computer program product containing instructions that, when executed by a computer, cause the computer to perform the functions of the computer system of the wireless data encryption transmission method in any of the above embodiments.

[0127] It is understood that the specific examples in this application are only intended to help those skilled in the art better understand the implementation methods of this application, and are not intended to limit the scope of the invention.

[0128] It is understood that in the various embodiments of this application, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not limit the implementation process of the embodiments of this application in any way.

[0129] It is understood that the various implementation methods described in this application can be implemented individually or in combination, and the implementation methods in this application are not limited in this respect.

[0130] Unless otherwise stated, all technical and scientific terms used in the embodiments of this application have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to limit the scope of this application. The term "and / or" as used in this application includes any and all combinations of one or more of the associated listed items. The singular forms "a," "the," and "the" as used in the embodiments of this application and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise.

[0131] It is understood that the processor in the embodiments of this application can be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method embodiments can be completed by the integrated logic circuits in the processor's hardware or by instructions in software form. The processor can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules can be located in random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. This storage medium is located in memory; the processor reads information from the memory and, in conjunction with its hardware, completes the steps of the above method.

[0132] It is understood that the memory in the embodiments of this application may be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. Specifically, non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory may be random access memory (RAM). It should be noted that the memory in the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0133] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0134] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the aforementioned method implementations, and will not be repeated here.

[0135] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0136] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0137] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0138] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0139] The above are merely specific embodiments of this application, but the scope of protection of this invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this invention should be determined by the scope of the claims.

Claims

1. A method for encrypted data transmission without a network, characterized in that, The method is applied to a first terminal in a first communication cluster, wherein multiple terminals in the first communication cluster all include the same set of quantum session keys, and terminals in different communication clusters include different sets of quantum session keys; and the method includes: In response to receiving the first data to be sent, a first quantum session key for encrypting the first data is determined from the set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times; wherein each used quantum session key corresponds to an indicator, and the use of the quantum session key for encryption or decryption determines that the quantum session key has been used; The first data is encrypted using the first quantum session key to obtain the first ciphertext; First broadcast data is generated based on the first ciphertext, and the first broadcast data is transmitted using a predefined transmission method; The predefined transmission method includes any of the following: Radio transmission, decentralized communication, and digital walkie-talkie communication.

2. The method according to claim 1, characterized in that, The quantum session key set includes strings, and, prior to determining a first quantum session key for encrypting the first data from the quantum session key set included in the first terminal in response to receiving the first data to be sent, the method further includes: Each quantum session key in the quantum session key set is determined in the following manner: The string is divided according to a predefined method to obtain multiple substrings; wherein, each substring indicates a quantum session key.

3. The method according to claim 1, characterized in that, One quantum session key corresponds to one key identifier, and one communication cluster corresponds to one cluster identifier; and the generation of first broadcast data based on the first ciphertext includes: The first broadcast data is generated by combining the first key identifier, the first cluster identifier, and the first ciphertext. Wherein, the first key identifier indicates the first quantum session key, and the first cluster identifier indicates the first communication cluster.

4. The method according to claim 3, characterized in that, The method further includes: In response to receiving second broadcast data, determine whether the second cluster identifier in the second broadcast data indicates the first communication cluster; In the case where the second cluster identifier indicates the first communication cluster, the second quantum session key is determined from the quantum session key set based on the second key identifier in the second broadcast data; The second ciphertext in the second broadcast data is decrypted using the second quantum session key to obtain the second data.

5. The method according to claim 1, characterized in that, Determining the first quantum session key for encrypting the first data from the set of quantum session keys included in the first terminal includes: A first type of quantum session key subset is determined from the quantum session key set, wherein the quantum session keys in the first type of quantum session key subset do not have corresponding indicator identifiers; The first quantum session key is determined from the first type of quantum session key subset.

6. The method according to claim 1, characterized in that, One communication device corresponds to one secure digital storage card, which is used to store the quantum session key set.

7. A network-free data encryption transmission device, characterized in that, A first terminal applied in a first communication cluster, wherein multiple terminals in the first communication cluster all include the same set of quantum session keys, terminals in different communication clusters include different sets of quantum session keys, and the device comprises: The determining unit is configured to, in response to receiving the first data to be sent, determine a first quantum session key for encrypting the first data from the set of quantum session keys included in the first terminal; wherein the first quantum session key is used no more than a preset number of times; wherein each used quantum session key corresponds to an indicator, and the use of the quantum session key for encryption or decryption determines that the quantum session key has been used; An encryption unit is used to encrypt the first data using the first quantum session key to obtain the first ciphertext; A broadcast unit is configured to generate first broadcast data based on the first ciphertext, and to transmit the first broadcast data using a predefined transmission method; The predefined transmission method includes any of the following: Radio transmission, decentralized communication, and digital walkie-talkie communication.

8. A storage medium, characterized in that, The storage medium stores a computer program, wherein the computer program is configured to execute the method described in any one of claims 1 to 6 when it is run.

9. An electronic device comprising a memory and a processor, characterized in that, The memory stores a computer program, and the processor is configured to run the computer program to perform the method as described in any one of claims 1 to 6.

Images