Cross-domain talkback group communication system, method, device, equipment and medium

Abstract

The embodiment of the invention provides a cross-domain talkback group communication system, method, device, equipment and medium, and the method comprises the steps: transmitting a key application request for communication of a group to a first quantum key system through a first quantum security software development kit, receiving first authentication code information and a key identifier transmitted by the first quantum key system, and transmitting the first authentication code information and the key identifier to the first quantum key system; sending the group information of the group, the first authentication code information and the key identifier to a second quantum security software development kit, and sending the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier to a second quantum key system by the second quantum security software development kit, and the second quantum key system determines the verified authentication code information, and the second talkback terminal establishes communication with the first talkback terminal through the verified authentication code information, so that the first talkback terminal and the second talkback terminal can communicate even if the first talkback terminal and the second talkback terminal are terminals of a talkback group of a cross-domain quantum resource pool.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a cross-domain intercom group communication system, a cross-domain intercom group communication method, a cross-domain intercom group communication device, an electronic device and a computer-readable storage medium. Background Art

[0002] With the development of communication technology, public network intercom group communication provides wide coverage and convenient communication. In related technologies, although encryption technology is used to encrypt communication data in order to protect the security of communication, related technologies cannot meet the needs of cross-domain group intercom. Summary of the invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide a cross-domain intercom group communication system, a cross-domain intercom group communication method, a cross-domain intercom group communication device, an electronic device and a computer-readable storage medium that overcome the above problems or at least partially solve the above problems.

[0004] In order to solve the above problems, an embodiment of the present invention discloses a cross-domain intercom group communication system, characterized in that the system includes: a first intercom terminal, a second intercom terminal, a first quantum security software development kit, a second quantum security software development kit, a first quantum key system and a second quantum key system;

[0005] The first intercom terminal is used to send a call request to the first quantum security software development kit;

[0006] The first quantum security software development kit is used to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system; receive the first authentication code information and key identifier sent by the first quantum key system; and send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal;

[0007] The first quantum key system is configured to receive the key application request, and determine the first authentication code information and the key identifier according to the key application request; and send the first authentication code information and the key identifier to the first quantum secure software development kit;

[0008] The second intercom terminal is used to receive the group information of the group, the first authentication code information and the key identifier, and send the group information of the group, the first authentication code information and the key identifier to the second quantum security software development toolkit; receive the verified authentication code information sent by the second quantum key system; and establish communication with the first intercom terminal according to the verified authentication code information;

[0009] The second quantum-safe software development kit is configured to receive the group information, the first authentication code information, and the key identifier; and send the identity token of the second quantum-safe software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0010] The second quantum key system is used to receive the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier, determine the verified authentication code information according to the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier; and send the verified authentication code information to the second intercom terminal.

[0011] Optionally, the system further comprises: a quantum secure intercom resource control center;

[0012] The first quantum security software development kit is used to receive a call request sent by the first intercom terminal, and send a query request to the quantum security intercom resource control center in response to the call request; receive the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship sent by the quantum security intercom resource control center; obtain the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal and the group identifier of the group; generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group; send the key application request to the first quantum key system;

[0013] The quantum secure intercom resource control center is used to receive the query request, determine the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes; and send the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes to the first quantum secure software development kit.

[0014] Optionally, the system further comprises: an intercom service system;

[0015] The first intercom terminal is used to send a group establishment application request to the intercom service system; obtain the group identifier of the group sent by the service intercom system; and send a group joining request to the second intercom terminal;

[0016] The business intercom system is used to receive the group establishment application request; establish a group according to the group application request, and determine the group identifier of the group; and send the group identifier of the group to the first intercom terminal;

[0017] The second intercom terminal is used to receive the group joining request and join the group according to the group joining request.

[0018] Optionally, the system further comprises: an intercom service system;

[0019] The first quantum security software development kit is used to send the group information of the group, the first authentication code information and the key identifier to the intercom service system;

[0020] The docking service system is used to receive the group information of the group, the first authentication code information and the key identifier; and send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal;

[0021] The second intercom terminal is used to receive the group information of the group, the first authentication code information and the key identifier.

[0022] Optionally, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0023] Optionally, the second quantum key system is used to determine the corresponding quantum key according to the key identifier, determine the second authentication code information according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key; and verify the second authentication code information according to the first authentication code information to obtain the verified authentication code information.

[0024] The embodiment of the present invention further discloses a cross-domain intercom group communication method, which is applied to a first quantum security software development kit; the first quantum security software development kit is deployed on a first intercom terminal, and the method includes:

[0025] receiving a call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request;

[0026] receiving first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request;

[0027] Sending the group information of the group, the first authentication code information and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development toolkit, the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier to the second quantum key system, the second quantum key system determines the verified authentication code information according to the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier, and sends the verified authentication code information to the second intercom terminal, the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal.

[0028] Optionally, the receiving the call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request, includes:

[0029] Receiving a call request sent by the first intercom terminal, and sending a query request to a quantum security intercom resource control center in response to the call request;

[0030] Receiving the system identification of the first quantum key system, the system identification of the second quantum key system, and the relationship between quantum network nodes sent by the quantum secure intercom resource control center; the system identification of the first quantum key system, the system identification of the second quantum key system, and the relationship between quantum network nodes are determined by the quantum secure intercom resource control center according to the query request;

[0031] Obtaining an identity token corresponding to the first quantum security software development kit, an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group;

[0032] Generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group;

[0033] Sending the key application request to the first quantum key system.

[0034] Optionally, before receiving the call request sent by the first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request, the method further includes:

[0035] Sending a group establishment application request to the intercom service system through the first intercom terminal;

[0036] Receiving, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is a group identifier determined by the intercom service system according to the group application request to establish a group;

[0037] A group joining request is sent to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0038] Optionally, the sending the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal includes:

[0039] The group information of the group, the first authentication code information and the key identifier are sent to the second intercom terminal through the intercom service system.

[0040] Optionally, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0041] The embodiment of the present invention further discloses a cross-domain intercom group communication method, which is applied to a second quantum security software development kit; the second quantum security software development kit is deployed on a second intercom terminal, and the method includes:

[0042] Receiving, through the second intercom terminal, group information, first authentication code information and key identifier of the group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and responding to the call request, sending a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group;

[0043] Sending the identity token of the second quantum secure software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0044] Receiving, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier;

[0045] The second intercom terminal establishes communication with the first intercom terminal according to the verified authentication code information.

[0046] Optionally, the group information includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0047] Optionally, the verified authentication code information is determined by the second quantum key system according to the key identifier to obtain the corresponding quantum key, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key, and the second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0048] The embodiment of the present invention further discloses a cross-domain intercom group communication device, which is applied to a first quantum security software development kit; the first quantum security software development kit is deployed on a first intercom terminal, and the device includes:

[0049] A first receiving module, configured to receive a call request sent by the first intercom terminal, and send a key application request for group communication to the first quantum key system in response to the call request;

[0050] A second receiving module is used to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request;

[0051] The first sending module is used to send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development toolkit, and the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier to the second quantum key system, and the second quantum key system determines the verified authentication code information according to the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier, and sends the verified authentication code information to the second intercom terminal, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal.

[0052] Optionally, the first receiving module includes:

[0053] A first receiving submodule, configured to receive a call request sent by the first intercom terminal, and send a query request to the quantum security intercom resource control center in response to the call request;

[0054] A second receiving submodule is used to receive the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request;

[0055] In the acquisition submodule, the user obtains the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group;

[0056] A generating submodule, configured to generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group;

[0057] The first sending submodule is used to send the key application request to the first quantum key system.

[0058] Optionally, the device further comprises:

[0059] A second sending module, used for sending a group establishment application request to the intercom service system through the first intercom terminal;

[0060] A third receiving module is used to receive, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is a group identifier determined by the intercom service system according to the group application request to establish a group;

[0061] The third sending module is used to send a group joining request to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0062] Optionally, the first sending module includes:

[0063] The second sending submodule is used to send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal through the intercom service system.

[0064] Optionally, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0065] An embodiment of the present invention further provides a cross-domain intercom group communication device, the device is applied to a second quantum security software development kit; the second quantum security software development kit is deployed on a second intercom terminal, and the device includes:

[0066] A fourth sending module is used to receive, through the second intercom terminal, group information, first authentication code information and key identifier of the group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group;

[0067] a fifth sending module, configured to send the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0068] A fourth receiving module is used to receive, through the second intercom terminal, the verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier;

[0069] The communication module is used to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

[0070] Optionally, the group information includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0071] Optionally, the verified authentication code information is determined by the second quantum key system according to the key identifier to obtain the corresponding quantum key, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key, and the second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0072] The present invention also discloses a device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the cross-domain intercom group communication method as described above are implemented.

[0073] The present invention also discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the cross-domain intercom group communication method as described above are implemented.

[0074] The embodiments of the present invention include the following advantages:

[0075] In an embodiment of the present invention, a first quantum security software development kit first receives a call request sent by a first intercom terminal, and in response to the call request, sends a key application request for group communication to a first quantum key system, and then receives first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request, and then sends group information, the first authentication code information and the key identifier of the group to a second quantum security software development kit of a second intercom terminal, and the second quantum security software development kit sends the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development kit to the second quantum key system, and the second The quantum key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of an intercom group in a cross-domain quantum resource pool. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] Figure 1 It is a flowchart of the steps of a cross-domain intercom communication method provided by an embodiment of the present invention;

[0077] Figure 2 This is a structural block diagram of a cross-domain intercom terminal provided by an embodiment of the present invention;

[0078] Figure 3 This is a flowchart of the steps of establishing a cross-domain intercom group provided by an embodiment of the present invention;

[0079] Figure 4 is a flowchart of another cross-domain intercom communication method provided by an embodiment of the present invention;

[0080] Figure 5 is a flowchart of another cross-domain intercom communication method provided by an embodiment of the present invention;

[0081] Figure 6 It is a structural block diagram of a cross-domain intercom group communication system provided by an embodiment of the present invention;

[0082] Figure 7 It is a structural block diagram of a cross-domain intercom group communication device provided by an embodiment of the present invention;

[0083] Figure 8 It is a structural block diagram of another cross-domain intercom group communication device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0084] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0085] In the related art, although encryption technology is used to encrypt communication data in order to protect the security of communication, it cannot meet the needs of cross-domain group intercom. In order to solve the above technical problems, the present invention provides a cross-domain intercom group communication system, a first intercom terminal, used to send a call request to a first quantum security software development toolkit; the first quantum security software development toolkit is used to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system; receive the first authentication code information and key identification sent by the first quantum key system; send the group information, first authentication code information and key identification of the group to the second intercom terminal; the first quantum key system is used to receive the key application request, and determine the first authentication code information and key identification according to the key application request; send the first authentication code information and key identification to the first quantum security software development toolkit; the second intercom terminal is used to receive the group information, first authentication code information and key identification of the group, and send the group information of the group to the first quantum security software development toolkit; , first authentication code information and key identification, and send them to the second quantum security software development toolkit; receive the verified authentication code information sent by the second quantum key system; establish communication with the first intercom terminal according to the verified authentication code information; the second quantum security software development toolkit is used to receive group information, the first authentication code information and the key identification; send the identity token, group information, first authentication code information and key identification of the second quantum security software development toolkit to the second quantum key system; the second quantum key system is used to receive the identity token, group information, first authentication code information and key identification of the second quantum security software development toolkit, determine the verified authentication code information according to the identity token, group information, first authentication code information and key identification of the second quantum security software development toolkit; and send the verified authentication code information to the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, so that the first intercom terminal and the second intercom terminal can communicate even if they are terminals of the intercom group of the cross-domain quantum resource pool.

[0086] Reference Figure 1, shows a flow chart of the steps of a cross-domain intercom communication method provided by an embodiment of the present invention, the method is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the method may specifically include the following steps:

[0087] Step 101: receive a call request sent by the first intercom terminal, and send a key application request for group communication to a first quantum key system in response to the call request.

[0088] In the embodiment of the present invention, the cross-domain intercom communication method is aimed at the intercom terminal between cross-domains. The intercom terminal between cross-domains in the present invention may refer to the terminal between different cities. The same city uses the same quantum resource pool and the same quantum cryptography system. Figure 2 As shown, a structural block diagram of a cross-domain intercom terminal is shown. Intercom terminal 1a and intercom terminal 1b are connected to quantum key system 1, intercom terminal 2a and intercom terminal 2b are connected to quantum key system 2, intercom terminal 3a and intercom terminal 3b are connected to quantum key system 3, quantum key system 1, quantum key system 2 and quantum key system 3 are respectively connected to the quantum security intercom resource control center through a quantum network, intercom terminal 1a and intercom terminal 1b are non-cross-domain intercom terminals, belonging to intra-city intercommunication, intercom terminal 2a and intercom terminal 2b are non-cross-domain intercom terminals, belonging to intra-city intercommunication, intercom terminal 3a and intercom terminal 3b are non-cross-domain intercom terminals, belonging to intra-city intercommunication. When intercom terminal 1a needs to be a cross-domain intercom terminal with intercom terminal 2b, and the two intercom terminals need to communicate through a quantum network, it is cross-domain intercommunication. When intercom terminal 1b needs to be a cross-domain intercom terminal with intercom terminal 2a, and the two intercom terminals need to communicate through a quantum network, it is cross-domain intercommunication.

[0089] The present invention can first establish an intercom group before the first intercom terminal sends a call request to the first quantum security software development toolkit.

[0090] In an embodiment of the present invention, before receiving a call request sent by the first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request, it may also include: sending a group establishment application request to the intercom service system through the first intercom terminal; receiving a group identifier of the group sent by the intercom service system through the first intercom terminal; the group identifier is established by the intercom service system according to the group application request, and the group identifier is determined according to the group; and sending a group joining request to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0091] Specifically, Figure 3As shown, a flowchart of the steps of establishing a cross-domain intercom group provided by an embodiment of the present invention is shown. The first intercom terminal can send a group establishment application request to the intercom service system. The intercom service system can establish a group according to the group application request after the identity authentication of the first intercom terminal is passed. The group can be a cross-domain group, and then the group identifier of the group is determined, and then the group identifier of the group is sent to the first intercom terminal. The first intercom terminal can select the second intercom terminal and pull the second intercom terminal into the group. Among them, the second intercom terminal and the first intercom terminal are cross-domain intercom terminals.

[0092] In an embodiment of the present invention, a first quantum security software development toolkit may be deployed in the first intercom terminal. After the first intercom terminal pulls the second intercom terminal into the group, the first intercom terminal may send a call request to the first quantum security software development toolkit. The first quantum security software development toolkit may respond to the call request and send a key application request for group communication to the first quantum key system. The first quantum key system belongs to the quantum key system corresponding to the first intercom terminal.

[0093] In one embodiment, receiving a call request sent by a first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request may include: receiving a call request sent by the first intercom terminal, and sending a query request to a quantum secure intercom resource control center in response to the call request; receiving a system identifier of the first quantum key system, a system identifier of the second quantum key system, and a quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request; obtaining an identity token corresponding to a first quantum secure software development kit, an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group; generating a key application request for group communication according to the identity token corresponding to the first quantum secure software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group; and sending a key application request to the first quantum key system.

[0094] Specifically, the user can send a call request to the first quantum security software development toolkit through the first intercom terminal, and the first quantum security software development toolkit sends a query request for the group to the quantum security intercom resource control center in response to the call request. After receiving the query request, the quantum security intercom resource control center can determine the system identifier of the first quantum key system corresponding to the first intercom terminal in the group, the system identifier of the second quantum key system corresponding to the second intercom terminal, and the quantum network node relationship, and then send the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship to the first quantum security software development toolkit.

[0095] After the first quantum security software development kit is obtained, the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal and the group identifier of the group can be obtained, and then according to the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group, a key application request is sent to the first quantum key system, wherein the key application request includes the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group.

[0096] Step 102: receiving first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request.

[0097] In an embodiment of the present invention, after the first quantum security software development kit sends a key application request to the first quantum key system, the first quantum key system can determine the corresponding quantum key according to the key application request, and the quantum key is used as a key for group management and communication, and then determine the key identifier and first authentication code information corresponding to the quantum key.

[0098] Specifically, after receiving the key application request, the first quantum key system can apply for a quantum key from the quantum network according to the quantum network node relationship in the key application, the system identifier of the first quantum key system and the system identifier of the second quantum key system. The quantum key can be generated by the quantum key distribution system and issued to the first quantum key system. The quantum key can be a quantum key for group management and communication of the first quantum key system and the second quantum key system, and the key identifier corresponding to the quantum key is determined. According to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier, an HMAC (Hash-based Message Authentication Code) operation is performed to obtain the first authentication code information, and the first authentication code information and the key identifier are sent to the first quantum security software development kit.

[0099] Step 103: Send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal.

[0100] In an embodiment of the present invention, after the first quantum security software development kit receives the first authentication code information and the key identifier, the group information, the first authentication code information and the key identifier can be sent to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development kit, and the second quantum security software development kit sends the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development kit to the second quantum key system. The second quantum key system determines the verified authentication code information according to the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development kit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development kit is deployed in the second intercom terminal.

[0101] In one embodiment, sending the group information, the first authentication code information and the key identifier of the group to the second intercom terminal may include: sending the group information, the first authentication code information and the key identifier of the group to the second intercom terminal through the intercom service system.

[0102] Specifically, after the first quantum security software development kit receives the first authentication code information and the key identifier, the group information, the first authentication code information and the key identifier can be sent to the intercom service system, and the intercom service system then sends the group information, the first authentication code information and the key identifier to the second intercom terminal.

[0103] In the present invention, the group information of the group includes: the identity of the first intercom terminal, the identity of the second intercom terminal, and the group identifier of the group.

[0104] Specifically, after receiving the first authentication code information and key identifier, the first quantum security software development kit may send the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, the first authentication code information and the key identifier to the intercom service system. The intercom service system may store the relationship between the first authentication code information and the second intercom terminal, and send the identity identifier of the first intercom terminal, the group identifier of the group, the key identifier and the first authentication code information to the second intercom terminal according to the identity identifier of the second intercom terminal. After receiving the identity identifier of the first intercom terminal, the group identifier of the group, the key identifier and the first authentication code information, the second intercom terminal may send the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, the key identifier and the first authentication code information to the second quantum security software development kit. The second quantum security software development kit then sends the identity token of the second quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier, the key identifier and the first authentication code information to the second quantum key system. The second quantum key system may obtain the corresponding quantum key according to the key identifier, and then obtain the corresponding quantum key according to the quantum key, The identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier, and the key identifier are subjected to HMAC operation to obtain the second authentication code information. The second quantum key system then determines the validity period of the identity token of the second quantum security software development toolkit based on the identity token of the second quantum security software development toolkit, verifies whether the second authentication code information is consistent with the first authentication code information, and if they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The validity period of the verified authentication code information is consistent with the validity period of the identity token of the second quantum security software development toolkit. Finally, the second intercom terminal establishes communication with the first intercom terminal based on the verified authentication code information.

[0105] In an embodiment of the present invention, a call request sent by a first intercom terminal is received, and a key application request for group communication is sent to a first quantum key system in response to the call request; first authentication code information and a key identifier sent by the first quantum key system are received; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; group information, the first authentication code information and the key identifier of the group are sent to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to a second quantum security software development toolkit, the second quantum security software development toolkit sends the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development toolkit to the second quantum key system, the second quantum key system determines the verified authentication code information according to the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development toolkit, and sends the verified authentication code information to the second intercom terminal, the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, so that the first intercom terminal and the second intercom terminal can communicate even if they are terminals of the intercom group of the cross-domain quantum resource pool.

[0106] Reference Figure 4 , shows a flowchart of another cross-domain intercom communication method provided by an embodiment of the present invention, the method is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the method may specifically include the following steps:

[0107] Step 401: Receive, through the second intercom terminal, group information, first authentication code information and key identifier of a group sent by a first quantum security software development kit.

[0108] In an embodiment of the present invention, the first quantum security software development kit can send the group information, the first authentication code information and the key identifier of the group to the second intercom terminal, and the second intercom terminal then sends the group information, the first authentication code information and the key identifier of the group to the second quantum security software development kit. Among them, the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit from the call request sent by the first intercom terminal, and responds to the call request to send a key application request for the communication of the group to the first quantum key system; the first intercom terminal and the second intercom terminal belong to the same group of intercom terminals across domains.

[0109] In the present invention, the group information may include: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0110] Specifically, the first intercom terminal can send a group establishment application request to the intercom service system. After the identity authentication of the first intercom terminal is passed, the intercom service system can establish a group according to the group application request. The group can be a cross-domain group. Then, the group identifier of the group is determined, and then the group identifier of the group is sent to the first intercom terminal. The first intercom terminal can select the second intercom terminal and add the second intercom terminal to the group. The second intercom terminal and the first intercom terminal are cross-domain intercom terminals.

[0111] In an embodiment of the present invention, a first quantum security software development toolkit may be deployed in the first intercom terminal. After the first intercom terminal pulls the second intercom terminal into the group, the first intercom terminal may send a call request to the first quantum security software development toolkit. The first quantum security software development toolkit may respond to the call request and send a key application request for group communication to the first quantum key system. The first quantum key system belongs to the quantum key system corresponding to the first intercom terminal.

[0112] The user can send a call request to the first quantum security software development toolkit through the first intercom terminal, and the first quantum security software development toolkit sends a query request for the group to the quantum security intercom resource control center in response to the call request. After receiving the query request, the quantum security intercom resource control center can determine the system identifier of the first quantum key system corresponding to the first intercom terminal in the group, the system identifier of the second quantum key system corresponding to the second intercom terminal, and the quantum network node relationship, and then send the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship to the first quantum security software development toolkit.

[0113] After the first quantum security software development kit is obtained, the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal and the group identifier of the group can be obtained, and then according to the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group, a key application request is sent to the first quantum key system, wherein the key application request includes the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group.

[0114] After receiving the key application request, the first quantum key system can apply for a quantum key from the quantum network according to the quantum network node relationship, the system identifier of the first quantum key system and the system identifier of the second quantum key system in the key application request. The quantum key can be generated by the quantum key distribution system and issued to the first quantum key system. The quantum key can be a quantum key for group management and communication of the first quantum key system and the second quantum key system, and the key identifier corresponding to the quantum key is determined. According to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier, an HMAC operation is performed to obtain the first authentication code information, and the first authentication code information and the key identifier are sent to the first quantum security software development kit.

[0115] After receiving the first authentication code information and the key identifier, the first quantum security software development kit can send the identity identifier of the first intercom terminal to the intercom service system, and the identity identifier of the second intercom terminal, the group identifier of the group, the first authentication code information and the key identifier are sent to the intercom service system. The intercom service system can store the relationship between the first authentication code information and the second intercom terminal, and according to the identity identifier of the second intercom terminal, send the identity identifier of the first intercom terminal, the group identifier of the group, the key identifier and the first authentication code information to the second intercom terminal.

[0116] Step 402: Send the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system.

[0117] In an embodiment of the present invention, after the second quantum secure software development kit receives the group information, the first authentication code information and the key identifier of the group, the identity token, the group information, the first authentication code information and the key identifier of the second quantum secure software development kit can be sent to the second quantum key system.

[0118] Specifically, the second quantum security software development kit sends the identity token of the second quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the group identifier, the key identifier and the first authentication code information to the second quantum key system.

[0119] Step 403: receiving, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier.

[0120] In an embodiment of the present invention, after the second quantum secure software development kit sends the identity token, group information, first authentication code information and key identifier of the second quantum secure software development kit to the second quantum key system, the second quantum key system can determine the verified authentication code information based on the identity token, group information, first authentication code information and key identifier of the second quantum secure software development kit, and then send the verified authentication code information to the second intercom terminal.

[0121] In the present invention, the verified authentication code information is determined by the second quantum key system according to the key identifier to obtain the corresponding quantum key, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key, and the second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0122] Specifically, the second quantum key system can obtain the corresponding quantum key according to the key identifier, and then perform HMAC operation according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier, and the key identifier to obtain the second authentication code information. The second quantum key system then determines the validity period of the identity token of the second quantum security software development toolkit based on the identity token of the second quantum security software development toolkit, and verifies whether the second authentication code information is consistent with the first authentication code information. If they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The validity period of the verified authentication code information is consistent with the validity period of the identity token of the second quantum security software development toolkit.

[0123] Step 404: Establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

[0124] In an embodiment of the present invention, after receiving the verified authentication code information sent by the second quantum key system, the second intercom terminal can establish communication with the first intercom terminal according to the verified authentication code information.

[0125] In order to better understand the present invention, Figure 5 The embodiments of the present invention are described in detail. Figure 5As shown, a flow chart of the steps of another cross-domain intercom communication method provided by an embodiment of the present invention, the first intercom terminal sends a call request to the first quantum security SDK (Software Development Kit), the first quantum security SDK responds to the call request, sends a query request to the quantum security intercom resource center, the quantum security intercom resource center sends the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship to the first quantum security SDK, the first quantum security SDK sends the identity token of the first quantum security SDK, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship and the group identifier to the first quantum key system, the first quantum security SDK sends the identity token of the first quantum security SDK, the identity identifier of the first ... security SDK according to the quantum The quantum key is applied to the quantum network based on the relationship between the network nodes, the system identifier of the first quantum key system and the system identifier of the second quantum key system, and then an HMAC operation is performed according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier to obtain the first authentication code information, and the first authentication code information and the key identifier are sent to the first quantum security SDK. The first quantum security SDK sends the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, the first authentication code information and the key identifier to the intercom service system. The intercom service system stores the first authentication code information and the relationship between the second intercom terminal. The identity of the intercom terminal is sent, the identity of the first intercom terminal, the group identity, the key identity and the first authentication code information are sent to the second intercom terminal, the second intercom terminal sends the identity of the first intercom terminal, the identity of the second intercom terminal, the group identity, the key identity and the first authentication code information to the second quantum security SDK, the second quantum security SDK then sends the identity token of the second quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the group identity, the key identity and the first authentication code information to the second quantum key system, the second quantum key system obtains the corresponding quantum key according to the key identity, and then An HMAC operation is performed according to the quantum key, the identity of the first intercom terminal, the identity of the second intercom terminal, the group identifier, and the key identifier to obtain the second authentication code information. The second quantum key system then determines the validity period of the identity token of the second quantum security SDK based on the identity token of the second quantum security SDK, and verifies whether the second authentication code information is consistent with the first authentication code information. If they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The validity period of the verified authentication code information is consistent with the validity period of the identity token of the second quantum security SDK. Finally, the second intercom terminal establishes communication with the first intercom terminal based on the verified authentication code information.

[0126] In an embodiment of the present invention, a call request sent by a first intercom terminal is received, and a key application request for group communication is sent to a first quantum key system in response to the call request; first authentication code information and a key identifier sent by the first quantum key system are received; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; group information, the first authentication code information and the key identifier of the group are sent to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to a second quantum security software development toolkit, the second quantum security software development toolkit sends the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development toolkit to the second quantum key system, the second quantum key system determines the verified authentication code information according to the identity token, group information, the first authentication code information and the key identifier of the second quantum security software development toolkit, and sends the verified authentication code information to the second intercom terminal, the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, so that the first intercom terminal and the second intercom terminal can communicate even if they are terminals of the intercom group of the cross-domain quantum resource pool.

[0127] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0128] Reference Figure 6 , shows a structural block diagram of a cross-domain intercom group communication system provided by an embodiment of the present invention, the system comprising: a first intercom terminal 601, a second intercom terminal 602, a first quantum security software development kit 603, a second quantum security software development kit 604, a first quantum key system 605 and a second quantum key system 606;

[0129] The first intercom terminal 601 is used to send a call request to the first quantum security software development toolkit 603;

[0130] The first quantum security software development kit 603 is used to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system 605; receive the first authentication code information and key identifier sent by the first quantum key system 605; and send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal 602;

[0131] The first quantum key system 605 is used to receive the key application request, and determine the first authentication code information and the key identifier according to the key application request; and send the first authentication code information and the key identifier to the first quantum secure software development kit 603;

[0132] The second intercom terminal 602 is used to receive the group information of the group, the first authentication code information and the key identifier, and send the group information of the group, the first authentication code information and the key identifier to the second quantum security software development toolkit 604; receive the verified authentication code information sent by the second quantum key system 606; and establish communication with the first intercom terminal 601 according to the verified authentication code information;

[0133] The second quantum-safe software development kit 604 is configured to receive the group information, the first authentication code information, and the key identifier; and send the identity token of the second quantum-safe software development kit 604, the group information, the first authentication code information, and the key identifier to a second quantum key system 606;

[0134] The second quantum key system 606 is used to receive the identity token of the second quantum security software development kit 604, the group information, the first authentication code information and the key identifier, determine the verified authentication code information according to the identity token of the second quantum security software development kit 604, the group information, the first authentication code information and the key identifier; and send the verified authentication code information to the second intercom terminal 602.

[0135] In one embodiment, the system further comprises: a quantum secure intercom resource control center;

[0136] The first quantum secure software development kit 603 is used to receive a call request sent by the first intercom terminal 601, and send a query request to the quantum secure intercom resource control center in response to the call request; receive the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606 and the quantum network node relationship sent by the quantum secure intercom resource control center; obtain the identity token corresponding to the first quantum secure software development kit 603, the identity identifier of the first intercom terminal 601, the identity identifier of the second intercom terminal 602 and the group identifier of the group; generate a key application request for communication of the group according to the identity token corresponding to the first quantum secure software development kit 603, the identity identifier of the first intercom terminal 601, the identity identifier of the second intercom terminal 602, the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, the quantum network node relationship of the group and the group identifier of the group; send the key application request to the first quantum key system 605;

[0137] The quantum secure intercom resource control center is used to receive the query request, determine the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, and the quantum network node relationship; and send the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, and the quantum network node relationship to the first quantum secure software development kit 603.

[0138] In one embodiment, the system further comprises: an intercom service system;

[0139] The first intercom terminal 601 is used to send a group establishment application request to the intercom service system; obtain the group identifier of the group sent by the service intercom system; and send a group joining request to the second intercom terminal 602;

[0140] The business intercom system is used to receive the group establishment application request; establish a group according to the group application request, and determine the group identifier of the group; send the group identifier of the group to the first intercom terminal 601;

[0141] The second intercom terminal 602 is used to receive the group joining request and join the group according to the group joining request.

[0142] In one embodiment, the system further comprises: an intercom service system;

[0143] The first quantum security software development kit 603 is used to send the group information of the group, the first authentication code information and the key identifier to the intercom service system;

[0144] The docking service system is used to receive the group information of the group, the first authentication code information and the key identifier; and send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal 602;

[0145] The second intercom terminal 602 is used to receive the group information of the group, the first authentication code information and the key identifier.

[0146] In one embodiment, the group information of the group includes: the identity of the first intercom terminal 601, the identity of the second intercom terminal 602, and the group identifier of the group.

[0147] In one embodiment, the second quantum key system 606 is used to determine the corresponding quantum key according to the key identifier, determine the second authentication code information according to the quantum key, the identity identifier of the first intercom terminal 601, the identity identifier of the second intercom terminal 602, the group identifier of the group and the quantum key; verify the second authentication code information according to the first authentication code information to obtain the verified authentication code information.

[0148] In an embodiment of the present invention, a first intercom terminal is used to send a call request to a first quantum security software development kit; the first quantum security software development kit is used to receive the call request, and in response to the call request, send a key application request for group communication to a first quantum key system; receive first authentication code information and a key identifier sent by the first quantum key system; send group information, first authentication code information and a key identifier of the group to a second intercom terminal; the first quantum key system is used to receive the key application request, and determine the first authentication code information and the key identifier according to the key application request; send the first authentication code information and the key identifier to the first quantum security software development kit; the second intercom terminal is used to receive the group information, the first authentication code information and the key identifier of the group, and send the group information, the first authentication code information and the key identifier of the group to the first intercom terminal; The second quantum security software development toolkit is used to receive the verified authentication code information sent by the second quantum key system; the communication with the first intercom terminal is established according to the verified authentication code information; the second quantum security software development toolkit is used to receive the group information, the first authentication code information and the key identification; the identity token, group information, the first authentication code information and the key identification of the second quantum security software development toolkit are sent to the second quantum key system; the second quantum key system is used to receive the identity token, group information, the first authentication code information and the key identification of the second quantum security software development toolkit, and determine the verified authentication code information according to the identity token, group information, the first authentication code information and the key identification of the second quantum security software development toolkit; the verified authentication code information is sent to the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, the first authentication code information and the key identification of the second quantum security software development toolkit, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, so that the first intercom terminal and the second intercom terminal can communicate even if they are terminals of the intercom group of the cross-domain quantum resource pool.

[0149] Reference Figure 7 , shows a structural block diagram of a cross-domain intercom group communication device provided by an embodiment of the present invention, wherein the device is applied to a first quantum secure software development kit; the first quantum secure software development kit is deployed in a first intercom terminal, and may specifically include the following modules:

[0150] A first receiving module 701 is used to receive a call request sent by the first intercom terminal, and send a key application request for group communication to the first quantum key system in response to the call request;

[0151] A second receiving module 702 is used to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request;

[0152] The first sending module 703 is used to send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development toolkit, and the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier to the second quantum key system, and the second quantum key system determines the verified authentication code information according to the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier, and sends the verified authentication code information to the second intercom terminal, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal.

[0153] In one embodiment, the first receiving module 701 includes:

[0154] A first receiving submodule, configured to receive a call request sent by the first intercom terminal, and send a query request to the quantum security intercom resource control center in response to the call request;

[0155] A second receiving submodule is used to receive the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request;

[0156] In the acquisition submodule, the user obtains the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group;

[0157] A generating submodule, configured to generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group;

[0158] The first sending submodule is used to send the key application request to the first quantum key system.

[0159] In one embodiment, the device further comprises:

[0160] A second sending module, used for sending a group establishment application request to the intercom service system through the first intercom terminal;

[0161] A third receiving module is used to receive, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is a group identifier determined by the intercom service system according to the group application request to establish a group;

[0162] The third sending module is used to send a group joining request to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0163] In one embodiment, the first sending module 703 includes:

[0164] The second sending submodule is used to send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal through the intercom service system.

[0165] In one embodiment, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0166] In an embodiment of the present invention, a first receiving module is used to receive a call request sent by a first intercom terminal, and in response to the call request, send a key application request for group communication to the first quantum key system; a second receiving module is used to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; a first sending module is used to send group information, the first authentication code information and the key identifier of the group to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development kit, and the second quantum The security software development kit sends the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit to the second quantum key system. The second quantum key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information. The first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group. The second quantum security software development kit is deployed in the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, so that the first intercom terminal and the second intercom terminal can communicate even if they are terminals of the intercom group of the cross-domain quantum resource pool.

[0167] Reference Figure 8 , shows a structural block diagram of another cross-domain intercom group communication device provided by an embodiment of the present invention, wherein the device is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed in a second intercom terminal, and specifically may include the following modules:

[0168] The fourth sending module 801 is used to receive the group information, first authentication code information and key identifier of the group sent by the first quantum security software development kit through the second intercom terminal; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit from the call request sent by the first intercom terminal, and responds to the call request to send a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal belong to the same group of intercom terminals across domains;

[0169] A fifth sending module 802 is used to send the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier to a second quantum key system;

[0170] A fourth receiving module 803 is configured to receive, through the second intercom terminal, the verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier;

[0171] The communication module 804 is used to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

[0172] In one embodiment, the group information includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0173] In one embodiment, the verified authentication code information is determined by the second quantum key system according to the key identifier to correspond to the quantum key, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key, and the second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0174] In an embodiment of the present invention, a fourth sending module is used to receive group information, first authentication code information and key identification of a group sent by a first quantum security software development kit through a second intercom terminal; the first authentication code information and key identification are determined by the first quantum key system according to a key application request; the key application request is received by the first quantum security software development kit from a call request sent by the first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the fifth sending module is used to send the identity token, group information, first authentication code information and key identification of the second quantum security software development kit to the second quantum key system; the fourth receiving module is used to receive the verified authentication code information determined by the second quantum key system according to the identity token, group information, first authentication code information and key identification of the second quantum security software development kit through the second intercom terminal; the communication module is used to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, so that the first intercom terminal and the second intercom terminal can communicate even if they are terminals of the intercom group of the cross-domain quantum resource pool.

[0175] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0176] An embodiment of the present invention further provides an electronic device, including:

[0177] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, each process of the above-mentioned cross-domain intercom group communication method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0178] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned cross-domain intercom group communication method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0179] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0180] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0181] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0182] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0183] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0184] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0185] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0186] The above is a detailed introduction to a cross-domain intercom group communication system, a cross-domain intercom group communication method, a cross-domain intercom group communication device, an electronic device and a computer-readable storage medium provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and scope of application. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A cross-domain intercom group communication system, characterized in that: The system comprises: a first intercom terminal, a second intercom terminal, a first quantum security software development kit, a second quantum security software development kit, a first quantum key system and a second quantum key system; The first intercom terminal is used to send a call request to the first quantum security software development kit; The first quantum security software development kit is used to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system; receive the first authentication code information and key identifier sent by the first quantum key system; and send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal; The first quantum key system is configured to receive the key application request, and determine the first authentication code information and the key identifier according to the key application request; and send the first authentication code information and the key identifier to the first quantum secure software development kit; The second intercom terminal is used to receive the group information of the group, the first authentication code information and the key identifier, and send the group information of the group, the first authentication code information and the key identifier to the second quantum security software development toolkit; receive the verified authentication code information sent by the second quantum key system; and establish communication with the first intercom terminal according to the verified authentication code information; The second quantum-safe software development kit is configured to receive the group information, the first authentication code information, and the key identifier; and send the identity token of the second quantum-safe software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system; The second quantum key system is used to receive the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier, determine the verified authentication code information according to the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier; and send the verified authentication code information to the second intercom terminal.

2. The cross-domain intercom group communication system according to claim 1, characterized in that: The system also includes: a quantum secure intercom resource control center; The first quantum security software development kit is used to receive a call request sent by the first intercom terminal, and send a query request to the quantum security intercom resource control center in response to the call request; receive the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship sent by the quantum security intercom resource control center; obtain the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal and the group identifier of the group; generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group; send the key application request to the first quantum key system; The quantum secure intercom resource control center is used to receive the query request, determine the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes; and send the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes to the first quantum secure software development kit.

3. The cross-domain intercom group communication system according to claim 1, characterized in that: The system also includes: an intercom service system; The first intercom terminal is used to send a group establishment application request to the intercom service system; obtain the group identifier of the group sent by the service intercom system; and send a group joining request to the second intercom terminal; The business intercom system is used to receive the group establishment application request; establish a group according to the group application request, and determine the group identifier of the group; and send the group identifier of the group to the first intercom terminal; The second intercom terminal is used to receive the group joining request and join the group according to the group joining request.

4. The cross-domain intercom group communication system according to claim 1, characterized in that: The system also includes: an intercom service system; The first quantum security software development kit is used to send the group information of the group, the first authentication code information and the key identifier to the intercom service system; The docking service system is used to receive the group information of the group, the first authentication code information and the key identifier; and send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal; The second intercom terminal is used to receive the group information of the group, the first authentication code information and the key identifier.

5. The cross-domain intercom group communication system according to claim 1, characterized in that: The group information of the group includes: the identity of the first intercom terminal, the identity of the second intercom terminal, and the group identifier of the group.

6. The cross-domain intercom group communication system according to claim 5, characterized in that: The second quantum key system is used to determine the corresponding quantum key according to the key identifier, and determine the second authentication code information according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the quantum key; The second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

7. A cross-domain intercom group communication method, characterized in that: The method is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the method includes: receiving a call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request; receiving first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; Sending the group information of the group, the first authentication code information and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development toolkit, the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier to the second quantum key system, the second quantum key system determines the verified authentication code information according to the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier, and sends the verified authentication code information to the second intercom terminal, the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal.

8. The cross-domain intercom group communication method according to claim 7, characterized in that: The receiving the call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request, includes: Receiving a call request sent by the first intercom terminal, and sending a query request to the quantum security intercom resource control center in response to the call request; Receiving the system identification of the first quantum key system, the system identification of the second quantum key system, and the relationship between quantum network nodes sent by the quantum secure intercom resource control center; the system identification of the first quantum key system, the system identification of the second quantum key system, and the relationship between quantum network nodes are determined by the quantum secure intercom resource control center according to the query request; Obtaining an identity token corresponding to the first quantum security software development kit, an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group; Generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group and the group identifier of the group; Sending the key application request to the first quantum key system.

9. The cross-domain intercom group communication method according to claim 7, characterized in that: Before receiving the call request sent by the first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request, the method further includes: Sending a group establishment application request to the intercom service system through the first intercom terminal; Receiving, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is a group identifier determined by the intercom service system according to the group application request to establish a group; A group joining request is sent to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

10. The cross-domain intercom group communication method according to claim 7, characterized in that: The sending the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal includes: The group information of the group, the first authentication code information and the key identifier are sent to the second intercom terminal through the intercom service system.

11. The cross-domain intercom group communication method according to claim 7, characterized in that: The group information of the group includes: the identity of the first intercom terminal, the identity of the second intercom terminal, and the group identifier of the group.

12. A cross-domain intercom group communication method, characterized in that: The method is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the method includes: Receiving, through the second intercom terminal, group information, first authentication code information and key identifier of the group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and responding to the call request, sending a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; Sending the identity token of the second quantum secure software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system; Receiving, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier; The second intercom terminal establishes communication with the first intercom terminal according to the verified authentication code information.

13. The cross-domain intercom group communication method according to claim 12, characterized in that: The group information includes: the identity of the first intercom terminal, the identity of the second intercom terminal, and the group identifier of the group.

14. The cross-domain intercom group communication method according to claim 13, characterized in that: The verified authentication code information is determined by the second quantum key system according to the key identifier to correspond to the quantum key, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key, and the second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

15. A cross-domain intercom group communication device, characterized in that: The device is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the device includes: A first receiving module, configured to receive a call request sent by the first intercom terminal, and send a key application request for group communication to the first quantum key system in response to the call request; A second receiving module is used to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; The first sending module is used to send the group information of the group, the first authentication code information and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development toolkit, and the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier to the second quantum key system, and the second quantum key system determines the verified authentication code information according to the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier, and sends the verified authentication code information to the second intercom terminal, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; the second quantum security software development toolkit is deployed in the second intercom terminal.

16. A cross-domain intercom group communication device, characterized in that: The device is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed in a second intercom terminal, and the device includes: A fourth sending module is used to receive, through the second intercom terminal, group information, first authentication code information and key identifier of the group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; a fifth sending module, configured to send the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system; A fourth receiving module is used to receive, through the second intercom terminal, the verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier; The communication module is used to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

17. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the cross-domain intercom group communication method as described in any one of claims 5-11 or 12-14 are implemented.

18. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of the cross-domain intercom group communication method as described in any one of claims 5-11 or 12-14 are implemented.

Images