A cross-domain intercom group communication system, method, device, equipment and medium

Abstract

Embodiments of the present invention provide a cross-domain intercom group communication system, method, apparatus, device, and medium. The present invention uses a first quantum security software development toolkit to send a key application request for group communication to a first quantum key system, receives first authentication code information and a key identifier sent by the first quantum key system, and sends group information, first authentication code information, and key identifier of the group to a second quantum security software development toolkit. The second quantum security software development toolkit sends the identity token, group information, first authentication code information, and key identifier of the second quantum security software development toolkit to the second quantum key system. The second quantum key system determines the verified authentication code information, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of an intercom group in a cross-domain quantum resource pool.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a cross-domain intercom group communication system, a cross-domain intercom group communication method, a cross-domain intercom group communication device, an electronic device, and a computer-readable storage medium. Background Art

[0002] With the development of communication technology, public network intercom group communication provides wide coverage and convenient communication. However, in related technologies, although encryption technology is used to encrypt communication data in order to protect the security of communication, related technologies cannot meet the needs of cross-domain group intercom. Summary of the Invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide a cross-domain intercom group communication system, a cross-domain intercom group communication method, a cross-domain intercom group communication device, an electronic device and a computer-readable storage medium that overcome the above problems or at least partially solve the above problems.

[0004] In order to solve the above problems, an embodiment of the present invention discloses a cross-domain intercom group communication system, characterized in that the system includes: a first intercom terminal, a second intercom terminal, a first quantum security software development kit, a second quantum security software development kit, a first quantum key system and a second quantum key system;

[0005] The first intercom terminal is used to send a call request to the first quantum security software development toolkit;

[0006] The first quantum security software development toolkit is configured to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system; receive first authentication code information and key identifier sent by the first quantum key system; and send group information of the group, the first authentication code information, and the key identifier to the second intercom terminal;

[0007] The first quantum key system is configured to receive the key application request, determine the first authentication code information and the key identifier according to the key application request, and send the first authentication code information and the key identifier to the first quantum secure software development kit;

[0008] The second intercom terminal is configured to receive the group information of the group, the first authentication code information, and the key identifier, and send the group information, the first authentication code information, and the key identifier to the second quantum secure software development toolkit; receive the verified authentication code information sent by the second quantum key system; and establish communication with the first intercom terminal based on the verified authentication code information;

[0009] The second quantum-safe software development toolkit is configured to receive the group information, the first authentication code information, and the key identifier; and send the identity token of the second quantum-safe software development toolkit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0010] The second quantum key system is configured to receive the identity token of the second quantum-safe software development kit, the group information, the first authentication code information, and the key identifier, determine verified authentication code information based on the identity token of the second quantum-safe software development kit, the group information, the first authentication code information, and the key identifier; and send the verified authentication code information to the second intercom terminal.

[0011] Optionally, the system further comprises: a quantum secure intercom resource control center;

[0012] The first quantum-safe software development toolkit is configured to receive a call request sent by a first intercom terminal, and send a query request to a quantum-safe intercom resource control center in response to the call request; receive the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship sent by the quantum-safe intercom resource control center; obtain an identity token corresponding to the first quantum-safe software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; generate a key application request for communication of the group based on the identity token corresponding to the first quantum-safe software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group; and send the key application request to the first quantum key system;

[0013] The quantum secure intercom resource control center is configured to receive the query request, determine the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes; and send the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes to the first quantum secure software development kit.

[0014] Optionally, the system further comprises: an intercom service system;

[0015] The first intercom terminal is configured to send a group establishment application request to the intercom service system; obtain a group identifier of the group sent by the service intercom system; and send a group joining request to the second intercom terminal;

[0016] The business intercom system is configured to receive the group establishment application request; establish a group according to the group application request, and determine a group identifier of the group; and send the group identifier of the group to the first intercom terminal;

[0017] The second intercom terminal is configured to receive the group joining request and join the group according to the group joining request.

[0018] Optionally, the system further comprises: an intercom service system;

[0019] The first quantum-safe software development toolkit is configured to send the group information of the group, the first authentication code information, and the key identifier to the intercom service system;

[0020] The docking service system is configured to receive the group information of the group, the first authentication code information, and the key identifier; and send the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal;

[0021] The second intercom terminal is configured to receive the group information of the group, the first authentication code information, and the key identifier.

[0022] Optionally, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0023] Optionally, the second quantum key system is used to determine the corresponding quantum key according to the key identifier, determine the second authentication code information according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the quantum key; and verify the second authentication code information according to the first authentication code information to obtain the verified authentication code information.

[0024] An embodiment of the present invention further discloses a cross-domain intercom group communication method, which is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the method includes:

[0025] receiving a call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request;

[0026] receiving first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request;

[0027] The group information, the first authentication code information, and the key identifier of the group are sent to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to a second quantum-safe software development toolkit. The second quantum-safe software development toolkit sends the identity token of the second quantum-safe software development toolkit, the group information, the first authentication code information, and the key identifier to a second quantum key system. The second quantum key system determines verified authentication code information based on the identity token, the group information, the first authentication code information, and the key identifier of the second quantum-safe software development toolkit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information. The first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group. The second quantum-safe software development toolkit is deployed in the second intercom terminal.

[0028] Optionally, receiving the call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request, includes:

[0029] Receiving a call request sent by the first intercom terminal, and sending a query request to the quantum security intercom resource control center in response to the call request;

[0030] Receiving a system identifier of a first quantum key system, a system identifier of a second quantum key system, and a quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request;

[0031] Obtaining an identity token corresponding to the first quantum secure software development kit, an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group;

[0032] Generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group;

[0033] Sending the key application request to the first quantum key system.

[0034] Optionally, before receiving the call request sent by the first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request, the method further includes:

[0035] Sending a group establishment application request to the intercom service system through the first intercom terminal;

[0036] Receiving, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is determined by the intercom service system according to the group application request to establish a group;

[0037] A group joining request is sent to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0038] Optionally, the sending the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal includes:

[0039] The group information of the group, the first authentication code information and the key identifier are sent to the second intercom terminal through the intercom service system.

[0040] Optionally, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0041] An embodiment of the present invention further discloses a cross-domain intercom group communication method, which is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the method includes:

[0042] Receiving, through the second intercom terminal, group information, first authentication code information, and key identifier of the group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request; the first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group;

[0043] Sending the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0044] Receiving, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development toolkit, the group information, the first authentication code information, and the key identifier;

[0045] The second intercom terminal establishes communication with the first intercom terminal according to the verified authentication code information.

[0046] Optionally, the group information includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0047] Optionally, the verified authentication code information is determined by the second quantum key system according to the key identifier, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the quantum key. The second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0048] An embodiment of the present invention further discloses a cross-domain intercom group communication device, which is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the device includes:

[0049] a first receiving module, configured to receive a call request sent by the first intercom terminal, and send a key application request for group communication to the first quantum key system in response to the call request;

[0050] a second receiving module, configured to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request;

[0051] The first sending module is configured to send the group information of the group, the first authentication code information, and the key identifier to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to a second quantum-safe software development toolkit. The second quantum-safe software development toolkit sends an identity token of the second quantum-safe software development toolkit, the group information, the first authentication code information, and the key identifier to a second quantum key system. The second quantum key system determines verified authentication code information based on the identity token, the group information, the first authentication code information, and the key identifier of the second quantum-safe software development toolkit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information. The first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group. The second quantum-safe software development toolkit is deployed in the second intercom terminal.

[0052] Optionally, the first receiving module includes:

[0053] A first receiving submodule is configured to receive a call request sent by the first intercom terminal, and send a query request to the quantum security intercom resource control center in response to the call request;

[0054] A second receiving submodule is configured to receive a system identifier of a first quantum key system, a system identifier of a second quantum key system, and a quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request;

[0055] In the acquisition submodule, the user obtains the identity token corresponding to the first quantum security software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group;

[0056] A generation submodule, configured to generate a key application request for communication of the group based on the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group;

[0057] The first sending submodule is configured to send the key application request to the first quantum key system.

[0058] Optionally, the device further comprises:

[0059] A second sending module is used to send a group establishment application request to the intercom service system through the first intercom terminal;

[0060] A third receiving module is configured to receive, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is determined by the intercom service system according to the group application request to establish a group;

[0061] The third sending module is configured to send a group joining request to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0062] Optionally, the first sending module includes:

[0063] The second sending submodule is configured to send the group information of the group, the first authentication code information and the key identifier to a second intercom terminal through the intercom service system.

[0064] Optionally, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0065] An embodiment of the present invention further provides a cross-domain intercom group communication device, which is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the device includes:

[0066] A fourth sending module is configured to receive, through the second intercom terminal, group information, first authentication code information, and a key identifier of a group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to a key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal are intercom terminals across domains within the same group;

[0067] a fifth sending module, configured to send the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0068] a fourth receiving module, configured to receive, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier;

[0069] The communication module is used to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

[0070] Optionally, the group information includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0071] Optionally, the verified authentication code information is determined by the second quantum key system according to the key identifier, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the quantum key. The second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0072] The present invention also discloses a device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the cross-domain intercom group communication method described above are implemented.

[0073] The present invention also discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the cross-domain intercom group communication method as described above are implemented.

[0074] The embodiments of the present invention include the following advantages:

[0075] In an embodiment of the present invention, a first quantum security software development toolkit first receives a call request sent by a first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system, and then receives the first authentication code information and key identifier sent by the first quantum key system; the first authentication code information and key identifier are determined by the first quantum key system according to the key application request, and then sends the group information, first authentication code information and key identifier of the group to the second quantum security software development toolkit of the second intercom terminal, and the second quantum security software development toolkit sends the identity token, group information, first authentication code information and key identifier of the second quantum security software development toolkit to the second quantum key system, and the second The quantum key system determines the verified authentication code information based on the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of an intercom group in a cross-domain quantum resource pool. BRIEF DESCRIPTION OF THE DRAWINGS

[0076] Figure 1 This is a flowchart of the steps of a cross-domain intercom communication method provided by an embodiment of the present invention;

[0077] Figure 2 This is a structural block diagram of a cross-domain intercom terminal provided by an embodiment of the present invention;

[0078] Figure 3 This is a flowchart of the steps for establishing a cross-domain intercom group provided by an embodiment of the present invention;

[0079] Figure 4 This is a flowchart of another cross-domain intercom communication method provided by an embodiment of the present invention;

[0080] Figure 5 This is a flowchart of another cross-domain intercom communication method provided by an embodiment of the present invention;

[0081] Figure 6 This is a structural block diagram of a cross-domain intercom group communication system provided by an embodiment of the present invention;

[0082] Figure 7 This is a structural block diagram of a cross-domain intercom group communication device provided by an embodiment of the present invention;

[0083] Figure 8 This is a structural block diagram of another cross-domain intercom group communication device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0084] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0085] In the related art, although encryption technology is used to encrypt communication data in order to protect the security of communication, it cannot meet the needs of cross-domain group intercom. In order to solve the above technical problems, the present invention provides a cross-domain intercom group communication system, a first intercom terminal, used to send a call request to a first quantum security software development toolkit; the first quantum security software development toolkit is used to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system; receive the first authentication code information and key identifier sent by the first quantum key system; send the group information, first authentication code information and key identifier of the group to the second intercom terminal; the first quantum key system is used to receive the key application request, and determine the first authentication code information and key identifier according to the key application request; send the first authentication code information and key identifier to the first quantum security software development toolkit; the second intercom terminal is used to receive the group information, first authentication code information and key identifier of the group, and send the group information of the group to the first quantum key system. , first authentication code information and key identification, and send it to the second quantum security software development toolkit; receive the verified authentication code information sent by the second quantum key system; establish communication with the first intercom terminal according to the verified authentication code information; the second quantum security software development toolkit is used to receive group information, the first authentication code information and the key identification; send the identity token, group information, first authentication code information and key identification of the second quantum security software development toolkit to the second quantum key system; the second quantum key system is used to receive the identity token, group information, first authentication code information and key identification of the second quantum security software development toolkit, determine the verified authentication code information according to the identity token, group information, first authentication code information and key identification of the second quantum security software development toolkit; and send the verified authentication code information to the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of a cross-domain quantum resource pool intercom group.

[0086] Reference Figure 1, shows a flowchart of the steps of a cross-domain intercom communication method provided by an embodiment of the present invention, wherein the method is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the method may specifically include the following steps:

[0087] Step 101: receive a call request sent by the first intercom terminal, and send a key application request for group communication to a first quantum key system in response to the call request.

[0088] In the embodiment of the present invention, the cross-domain intercom communication method is aimed at intercom terminals between cross-domains. The intercom terminals between cross-domains in the present invention may refer to terminals between different cities. The same city uses the same quantum resource pool and the same quantum cryptography system. Figure 2 As shown, a structural block diagram of a cross-domain intercom terminal is shown. Intercom terminal 1a and intercom terminal 1b are connected to quantum key system 1, intercom terminal 2a and intercom terminal 2b are connected to quantum key system 2, and intercom terminal 3a and intercom terminal 3b are connected to quantum key system 3. Quantum key system 1, quantum key system 2, and quantum key system 3 are respectively connected to the quantum security intercom resource control center through a quantum network. Intercom terminal 1a and intercom terminal 1b are non-cross-domain intercom terminals and belong to intra-city intercommunication. Intercom terminal 2a and intercom terminal 2b are non-cross-domain intercom terminals and belong to intra-city intercommunication. Intercom terminal 3a and intercom terminal 3b are non-cross-domain intercom terminals and belong to intra-city intercommunication. When the intercom terminal 1a needs to be a cross-domain intercom terminal with the intercom terminal 2b, and the two intercom terminals need to communicate through the quantum network, it is cross-domain intercommunication. When the intercom terminal 1b needs to be a cross-domain intercom terminal with the intercom terminal 2a, and the two intercom terminals need to communicate through the quantum network, it is cross-domain intercommunication.

[0089] In the present invention, before the first intercom terminal sends a call request to the first quantum security software development toolkit, an intercom group can be established first.

[0090] In an embodiment of the present invention, before receiving a call request sent by the first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request, the method may further include: sending a group establishment application request to the intercom service system through the first intercom terminal; receiving a group identifier of the group sent by the intercom service system through the first intercom terminal; the group identifier is determined by the intercom service system based on the group application request to establish the group; and sending a group join request to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group join request.

[0091] Specifically, if Figure 3As shown, a flowchart of the steps for establishing a cross-domain intercom group provided by an embodiment of the present invention is shown. A first intercom terminal can send a group establishment application request to the intercom service system. After the identity authentication of the first intercom terminal is passed, the intercom service system can establish a group based on the group application request. The group can then determine the group identifier of the group and send the group identifier to the first intercom terminal. The first intercom terminal can select a second intercom terminal and add the second intercom terminal to the group. The second intercom terminal and the first intercom terminal are cross-domain intercom terminals.

[0092] In an embodiment of the present invention, a first quantum-safe software development toolkit may be deployed in the first intercom terminal. After the first intercom terminal adds the second intercom terminal to the group, the first intercom terminal may send a call request to the first quantum-safe software development toolkit. The first quantum-safe software development toolkit may respond to the call request and send a key application request for group communication to a first quantum key system. The first quantum key system belongs to the quantum key system corresponding to the first intercom terminal.

[0093] In one embodiment, receiving a call request sent by a first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request may include: receiving the call request sent by the first intercom terminal and sending a query request to a quantum secure intercom resource control center in response to the call request; receiving a system identifier of the first quantum key system, a system identifier of the second quantum key system, and a quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship being determined by the quantum secure intercom resource control center based on the query request; obtaining an identity token corresponding to a first quantum secure software development kit, an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group; generating a key application request for group communication based on the identity token corresponding to the first quantum secure software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group; and sending the key application request to the first quantum key system.

[0094] Specifically, the user can send a call request to the first quantum security software development toolkit through the first intercom terminal, and the first quantum security software development toolkit will send a query request for the group to the quantum security intercom resource control center in response to the call request. After receiving the query request, the quantum security intercom resource control center can determine the system identifier of the first quantum key system corresponding to the first intercom terminal in the group, the system identifier of the second quantum key system corresponding to the second intercom terminal, and the quantum network node relationship, and then send the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship to the first quantum security software development toolkit.

[0095] After the first quantum security software development kit is obtained, the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group can be obtained. Then, according to the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group, a key application request is sent to the first quantum key system, wherein the key application request includes the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group.

[0096] Step 102: Receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request.

[0097] In an embodiment of the present invention, after the first quantum security software development toolkit sends a key application request to the first quantum key system, the first quantum key system can determine the corresponding quantum key based on the key application request. The quantum key is used as a key for group management and communication, and then determine the key identifier and first authentication code information corresponding to the quantum key.

[0098] Specifically, after receiving the key application request, the first quantum key system can apply for a quantum key from the quantum network according to the quantum network node relationship, the system identifier of the first quantum key system, and the system identifier of the second quantum key system in the key application request. The quantum key can be generated by the quantum key distribution system and issued to the first quantum key system. The quantum key can be a quantum key for group management and communication of the first quantum key system and the second quantum key system, and the key identifier corresponding to the quantum key is determined. According to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier, an HMAC (Hash-based Message Authentication Code) operation is performed to obtain the first authentication code information, and the first authentication code information and the key identifier are sent to the first quantum security software development kit.

[0099] Step 103: Send the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal.

[0100] In an embodiment of the present invention, after the first quantum-safe software development toolkit receives the first authentication code information and the key identifier, the group information, the first authentication code information, and the key identifier can be sent to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to the second quantum-safe software development toolkit. The second quantum-safe software development toolkit sends the identity token, group information, the first authentication code information, and the key identifier of the second quantum-safe software development toolkit to a second quantum key system. The second quantum key system determines verified authentication code information based on the identity token, group information, the first authentication code information, and the key identifier of the second quantum-safe software development toolkit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information. The first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group. The second quantum-safe software development toolkit is deployed in the second intercom terminal.

[0101] In one embodiment, sending the group information, first authentication code information, and key identifier of the group to the second intercom terminal may include: sending the group information, first authentication code information, and key identifier of the group to the second intercom terminal through the intercom service system.

[0102] Specifically, after the first quantum security software development kit receives the first authentication code information and the key identifier, it can send the group information, the first authentication code information and the key identifier to the intercom service system, and the intercom service system then sends the group information, the first authentication code information and the key identifier to the second intercom terminal.

[0103] In the present invention, the group information of the group includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group.

[0104] Specifically, after the first quantum security software development toolkit receives the first authentication code information and the key identifier, it can send the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, the first authentication code information and the key identifier to the intercom business system. The intercom business system can store the relationship between the first authentication code information and the second intercom terminal, and according to the identity identifier of the second intercom terminal, send the identity identifier of the first intercom terminal, the group identifier of the group, the key identifier and the first authentication code information to the second intercom terminal. After receiving the identity identifier of the first intercom terminal, the group identifier of the group, the key identifier and the first authentication code information, the second intercom terminal can send the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, the key identifier and the first authentication code information to the second quantum security software development toolkit. The second quantum security software development toolkit then sends the identity token of the second quantum security software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier, the key identifier and the first authentication code information to the second quantum key system. The second quantum key system can obtain the corresponding quantum key according to the key identifier, and then obtain the corresponding quantum key according to the quantum key, An HMAC operation is performed on the identity identifier of the first intercom terminal, the identity identifier, the group identifier, and the key identifier of the second intercom terminal to obtain second authentication code information. The second quantum key system then determines the validity period of the identity token of the second quantum security software development toolkit based on the identity token of the second quantum security software development toolkit, and verifies whether the second authentication code information is consistent with the first authentication code information. If they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The validity period of the verified authentication code information is consistent with the validity period of the identity token of the second quantum security software development toolkit. Finally, the second intercom terminal establishes communication with the first intercom terminal based on the verified authentication code information.

[0105] In an embodiment of the present invention, a call request sent by a first intercom terminal is received, and in response to the call request, a key application request for group communication is sent to a first quantum key system; first authentication code information and a key identifier are received from the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; group information, the first authentication code information, and the key identifier of the group are sent to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to a second quantum secure software development toolkit, and the second quantum secure software development toolkit sends the identity token, group information, the first authentication code information, and the key identifier of the second quantum secure software development toolkit to the second quantum key system; the second quantum key system determines verified authentication code information based on the identity token, group information, the first authentication code information, and the key identifier of the second quantum secure software development toolkit, and sends the verified authentication code information to the second intercom terminal, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group; and the second quantum secure software development toolkit is deployed in the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of a cross-domain quantum resource pool intercom group.

[0106] Reference Figure 4 , shows a flowchart of the steps of another cross-domain intercom communication method provided by an embodiment of the present invention, wherein the method is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the method may specifically include the following steps:

[0107] Step 401: Receive, through the second intercom terminal, group information, first authentication code information, and key identifier of a group sent by a first quantum security software development kit.

[0108] In an embodiment of the present invention, the first quantum-safe software development toolkit can send the group information, first authentication code information, and key identifier of the group to the second intercom terminal, and the second intercom terminal then sends the group information, first authentication code information, and key identifier of the group to the second quantum-safe software development toolkit. The first authentication code information and key identifier are determined by the first quantum key system based on a key application request; the key application request is received by the first quantum-safe software development toolkit from the first intercom terminal, and in response to the call request, it sends a key application request for group communication to the first quantum key system. The first intercom terminal and the second intercom terminal are intercom terminals within the same group and cross-domain with each other.

[0109] In the present invention, the group information may include: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0110] Specifically, the first intercom terminal can send a group establishment application request to the intercom service system. After the intercom service system authenticates the first intercom terminal, it can establish a group based on the group application request. The group can be a cross-domain group. The intercom service system then determines a group identifier for the group and sends the group identifier to the first intercom terminal. The first intercom terminal can then select a second intercom terminal and add the second intercom terminal to the group. The second intercom terminal and the first intercom terminal are cross-domain intercom terminals.

[0111] In an embodiment of the present invention, a first quantum-safe software development toolkit may be deployed in the first intercom terminal. After the first intercom terminal adds the second intercom terminal to the group, the first intercom terminal may send a call request to the first quantum-safe software development toolkit. The first quantum-safe software development toolkit may respond to the call request and send a key application request for group communication to a first quantum key system. The first quantum key system belongs to the quantum key system corresponding to the first intercom terminal.

[0112] The user can send a call request to the first quantum security software development toolkit through the first intercom terminal, and the first quantum security software development toolkit will send a query request for the group to the quantum security intercom resource control center in response to the call request. After receiving the query request, the quantum security intercom resource control center can determine the system identifier of the first quantum key system corresponding to the first intercom terminal in the group, the system identifier of the second quantum key system corresponding to the second intercom terminal, and the quantum network node relationship, and then send the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship to the first quantum security software development toolkit.

[0113] After the first quantum security software development kit is obtained, the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group can be obtained. Then, according to the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group, a key application request is sent to the first quantum key system, wherein the key application request includes the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group.

[0114] After receiving the key application request, the first quantum key system can apply for a quantum key from the quantum network based on the quantum network node relationship, the system identifier of the first quantum key system, and the system identifier of the second quantum key system in the key application request. The quantum key can be generated by the quantum key distribution system and issued to the first quantum key system. The quantum key can be a quantum key for group management and communication of the first quantum key system and the second quantum key system, and the key identifier corresponding to the quantum key is determined. An HMAC operation is performed based on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier to obtain first authentication code information, and the first authentication code information and the key identifier are sent to the first quantum security software development toolkit.

[0115] After receiving the first authentication code information and key identifier, the first quantum security software development toolkit can send the identity identifier of the first intercom terminal to the intercom service system, and the identity identifier of the second intercom terminal, the group identifier of the group, the first authentication code information and the key identifier are sent to the intercom service system. The intercom service system can store the relationship between the first authentication code information and the second intercom terminal, and according to the identity identifier of the second intercom terminal, send the identity identifier of the first intercom terminal, the group identifier of the group, the key identifier and the first authentication code information to the second intercom terminal.

[0116] Step 402: Send the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system.

[0117] In an embodiment of the present invention, after the second quantum-safe software development kit receives the group information, the first authentication code information, and the key identifier of the group, it can send the identity token, group information, the first authentication code information, and the key identifier of the second quantum-safe software development kit to the second quantum key system.

[0118] Specifically, the second quantum security software development kit sends the identity token of the second quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the group identifier, the key identifier and the first authentication code information to the second quantum key system.

[0119] Step 403: Receive, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier.

[0120] In an embodiment of the present invention, after the second quantum-safe software development kit sends the identity token, group information, first authentication code information, and key identifier of the second quantum-safe software development kit to the second quantum key system, the second quantum key system can determine the verified authentication code information based on the identity token, group information, first authentication code information, and key identifier of the second quantum-safe software development kit, and then send the verified authentication code information to the second intercom terminal.

[0121] In the present invention, the verified authentication code information is determined by the second quantum key system according to the key identifier to correspond to the quantum key, and the second authentication code information is determined according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the quantum key. The second authentication code information is verified according to the first authentication code information to obtain the verified authentication code information.

[0122] Specifically, the second quantum key system can obtain the corresponding quantum key according to the key identifier, and then perform HMAC operation according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier, and the key identifier to obtain the second authentication code information. The second quantum key system then determines the validity period of the identity token of the second quantum security software development toolkit based on the identity token of the second quantum security software development toolkit, and verifies whether the second authentication code information is consistent with the first authentication code information. If they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The validity period of the verified authentication code information is consistent with the validity period of the identity token of the second quantum security software development toolkit.

[0123] Step 404: The second intercom terminal establishes communication with the first intercom terminal according to the verified authentication code information.

[0124] In an embodiment of the present invention, after receiving the verified authentication code information sent by the second quantum key system, the second intercom terminal can establish communication with the first intercom terminal according to the verified authentication code information.

[0125] In order to better understand the present invention, Figure 5 The embodiments of the present invention are described in detail. Figure 5As shown in the flowchart of another cross-domain intercom communication method provided by an embodiment of the present invention, the first intercom terminal sends a call request to the first quantum security SDK (Software Development Kit), the first quantum security SDK responds to the call request and sends a query request to the quantum security intercom resource center, the quantum security intercom resource center sends the system identifier of the first quantum key system, the system identifier of the second quantum key system and the quantum network node relationship to the first quantum security SDK, the first quantum security SDK sends the identity token of the first quantum security SDK, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship and the group identifier to the first quantum key system, and the first quantum security SDK sends the identity token of the first quantum security SDK, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship and the group identifier to the first quantum key system. The relationship between the network nodes, the system identifier of the first quantum key system and the system identifier of the second quantum key system are used to apply for the quantum key from the quantum network. Then, based on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier, an HMAC operation is performed to obtain the first authentication code information. The first authentication code information and the key identifier are sent to the first quantum security SDK. The first quantum security SDK sends the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, the first authentication code information and the key identifier to the intercom service system. The intercom service system stores the first authentication code information and the relationship between the second intercom terminal. According to the second intercom The identity of the intercom terminal is sent, and the identity of the first intercom terminal, the group identity, the key identity and the first authentication code information are sent to the second intercom terminal. The second intercom terminal sends the identity of the first intercom terminal, the identity of the second intercom terminal, the group identity, the key identity and the first authentication code information to the second quantum security SDK. The second quantum security SDK then sends the identity token of the second quantum security software development kit, the identity of the first intercom terminal, the identity of the second intercom terminal, the group identity, the key identity and the first authentication code information to the second quantum key system. The second quantum key system obtains the corresponding quantum key according to the key identity, and then An HMAC operation is performed based on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier, and the key identifier to obtain the second authentication code information. The second quantum key system then determines the validity period of the identity token of the second quantum security SDK based on the identity token of the second quantum security SDK, and verifies whether the second authentication code information is consistent with the first authentication code information. If they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The validity period of the verified authentication code information is consistent with the validity period of the identity token of the second quantum security SDK. Finally, the second intercom terminal establishes communication with the first intercom terminal based on the verified authentication code information.

[0126] In an embodiment of the present invention, a call request sent by a first intercom terminal is received, and in response to the call request, a key application request for group communication is sent to a first quantum key system; first authentication code information and a key identifier are received from the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; group information, the first authentication code information, and the key identifier of the group are sent to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to a second quantum secure software development toolkit, and the second quantum secure software development toolkit sends the identity token, group information, the first authentication code information, and the key identifier of the second quantum secure software development toolkit to the second quantum key system; the second quantum key system determines verified authentication code information based on the identity token, group information, the first authentication code information, and the key identifier of the second quantum secure software development toolkit, and sends the verified authentication code information to the second intercom terminal, and the second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group; and the second quantum secure software development toolkit is deployed in the second intercom terminal. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of a cross-domain quantum resource pool intercom group.

[0127] It should be noted that for the sake of simplicity, the method embodiments are described as a series of actions. However, those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in this specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0128] Reference Figure 6 , shows a structural block diagram of a cross-domain intercom group communication system provided by an embodiment of the present invention, the system comprising: a first intercom terminal 601, a second intercom terminal 602, a first quantum secure software development kit 603, a second quantum secure software development kit 604, a first quantum key system 605 and a second quantum key system 606;

[0129] The first intercom terminal 601 is used to send a call request to the first quantum secure software development toolkit 603;

[0130] The first quantum security software development kit 603 is configured to receive the call request and, in response to the call request, send a key application request for group communication to the first quantum key system 605; receive the first authentication code information and key identifier sent by the first quantum key system 605; and send the group information, the first authentication code information, and the key identifier of the group to the second intercom terminal 602;

[0131] The first quantum key system 605 is configured to receive the key application request, determine the first authentication code information and the key identifier according to the key application request, and send the first authentication code information and the key identifier to the first quantum secure software development toolkit 603;

[0132] The second intercom terminal 602 is configured to receive the group information of the group, the first authentication code information, and the key identifier, and send the group information, the first authentication code information, and the key identifier to the second quantum secure software development toolkit 604; receive the verified authentication code information sent by the second quantum key system 606; and establish communication with the first intercom terminal 601 based on the verified authentication code information;

[0133] The second quantum-safe software development toolkit 604 is configured to receive the group information, the first authentication code information, and the key identifier; and send the identity token of the second quantum-safe software development toolkit 604, the group information, the first authentication code information, and the key identifier to a second quantum key system 606;

[0134] The second quantum key system 606 is configured to receive the identity token of the second quantum-safe software development toolkit 604, the group information, the first authentication code information, and the key identifier, determine verified authentication code information based on the identity token, the group information, the first authentication code information, and the key identifier of the second quantum-safe software development toolkit 604, and send the verified authentication code information to the second intercom terminal 602.

[0135] In one embodiment, the system further comprises: a quantum secure intercom resource control center;

[0136] The first quantum-safe software development toolkit 603 is configured to receive a call request sent by the first intercom terminal 601, and send a query request to a quantum-safe intercom resource control center in response to the call request; receive the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, and the quantum network node relationship sent by the quantum-safe intercom resource control center; obtain an identity token corresponding to the first quantum-safe software development toolkit 603, the identity identifier of the first intercom terminal 601, the identity identifier of the second intercom terminal 602, and the group identifier of the group; generate a key application request for communication of the group based on the identity token corresponding to the first quantum-safe software development toolkit 603, the identity identifier of the first intercom terminal 601, the identity identifier of the second intercom terminal 602, the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, the quantum network node relationship of the group, and the group identifier of the group; and send the key application request to the first quantum key system 605;

[0137] The quantum secure intercom resource control center is configured to receive the query request, determine the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, and the relationship between quantum network nodes; and send the system identifier of the first quantum key system 605, the system identifier of the second quantum key system 606, and the relationship between quantum network nodes to the first quantum secure software development toolkit 603.

[0138] In one embodiment, the system further comprises: an intercom service system;

[0139] The first intercom terminal 601 is configured to send a group establishment application request to the intercom service system; obtain a group identifier of the group sent by the service intercom system; and send a group joining request to the second intercom terminal 602;

[0140] The business intercom system is configured to receive the group establishment application request; establish a group according to the group application request, and determine a group identifier of the group; and send the group identifier of the group to the first intercom terminal 601;

[0141] The second intercom terminal 602 is configured to receive the group joining request and join the group according to the group joining request.

[0142] In one embodiment, the system further comprises: an intercom service system;

[0143] The first quantum-safe software development toolkit 603 is configured to send the group information of the group, the first authentication code information, and the key identifier to the intercom service system;

[0144] The docking service system is configured to receive the group information of the group, the first authentication code information, and the key identifier; and send the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal 602;

[0145] The second intercom terminal 602 is configured to receive the group information of the group, the first authentication code information, and the key identifier.

[0146] In one embodiment, the group information of the group includes: the identity of the first intercom terminal 601 , the identity of the second intercom terminal 602 , and the group identifier of the group.

[0147] In one embodiment, the second quantum key system 606 is configured to determine a corresponding quantum key based on the key identifier, determine second authentication code information based on the quantum key, the identity identifier of the first intercom terminal 601, the identity identifier of the second intercom terminal 602, the group identifier of the group, and the quantum key; and verify the second authentication code information based on the first authentication code information to obtain the verified authentication code information.

[0148] In an embodiment of the present invention, a first intercom terminal is configured to send a call request to a first quantum security software development toolkit; the first quantum security software development toolkit is configured to receive the call request and, in response to the call request, send a key application request for group communication to a first quantum key system; receive first authentication code information and a key identifier sent by the first quantum key system; send group information, first authentication code information, and a key identifier of the group to a second intercom terminal; the first quantum key system is configured to receive the key application request and determine the first authentication code information and the key identifier according to the key application request; send the first authentication code information and the key identifier to the first quantum security software development toolkit; the second intercom terminal is configured to receive the group information, first authentication code information, and key identifier of the group, and send the group information, first authentication code information, and key identifier of the group to the first intercom terminal; The second quantum key system is configured to receive the verified authentication code information sent by the second quantum key system, and establish communication with the first intercom terminal based on the verified authentication code information. The second quantum key system is configured to receive the group information, the first authentication code information, and the key identifier, and send the identity token, group information, the first authentication code information, and the key identifier of the second quantum key system to the second quantum key system. The second quantum key system is configured to receive the identity token, group information, the first authentication code information, and the key identifier of the second quantum key system, and determine the verified authentication code information based on the identity token, group information, the first authentication code information, and the key identifier of the second quantum key system. The verified authentication code information is then sent to the second intercom terminal. The second quantum key system then determines the verified authentication code information based on the identity token, group information, the first authentication code information, and the key identifier of the second quantum key system. The second intercom terminal then establishes communication with the first intercom terminal based on the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals in an intercom group across quantum resource pools.

[0149] Reference Figure 7 , shows a structural block diagram of a cross-domain intercom group communication device provided by an embodiment of the present invention, wherein the device is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal and may specifically include the following modules:

[0150] A first receiving module 701 is configured to receive a call request sent by the first intercom terminal, and send a key application request for group communication to the first quantum key system in response to the call request;

[0151] A second receiving module 702 is configured to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request;

[0152] The first sending module 703 is configured to send the group information of the group, the first authentication code information, and the key identifier to a second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to a second quantum-safe software development toolkit. The second quantum-safe software development toolkit sends the identity token of the second quantum-safe software development toolkit, the group information, the first authentication code information, and the key identifier to a second quantum key system. The second quantum key system determines verified authentication code information based on the identity token, the group information, the first authentication code information, and the key identifier of the second quantum-safe software development toolkit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal using the verified authentication code information. The first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group. The second quantum-safe software development toolkit is deployed in the second intercom terminal.

[0153] In one embodiment, the first receiving module 701 includes:

[0154] A first receiving submodule is configured to receive a call request sent by the first intercom terminal, and send a query request to the quantum security intercom resource control center in response to the call request;

[0155] A second receiving submodule is configured to receive a system identifier of a first quantum key system, a system identifier of a second quantum key system, and a quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request;

[0156] In the acquisition submodule, the user obtains the identity token corresponding to the first quantum security software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group;

[0157] A generation submodule, configured to generate a key application request for communication of the group based on the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group;

[0158] The first sending submodule is configured to send the key application request to the first quantum key system.

[0159] In one embodiment, the apparatus further comprises:

[0160] A second sending module is used to send a group establishment application request to the intercom service system through the first intercom terminal;

[0161] A third receiving module is configured to receive, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is determined by the intercom service system according to the group application request to establish a group;

[0162] The third sending module is configured to send a group joining request to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

[0163] In one embodiment, the first sending module 703 includes:

[0164] The second sending submodule is configured to send the group information of the group, the first authentication code information and the key identifier to a second intercom terminal through the intercom service system.

[0165] In one embodiment, the group information of the group includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0166] In an embodiment of the present invention, the first receiving module is used to receive a call request sent by the first intercom terminal, and in response to the call request, send a key application request for group communication to the first quantum key system; the second receiving module is used to receive the first authentication code information and key identifier sent by the first quantum key system; the first authentication code information and key identifier are determined by the first quantum key system according to the key application request; the first sending module is used to send the group information, first authentication code information and key identifier of the group to the second intercom terminal, so that the second intercom terminal sends the group information, first authentication code information and key identifier to the second quantum security software development kit, and the second quantum The secure software development kit sends the identity token, group information, first authentication code information, and key identifier of the second quantum secure software development kit to a second quantum key system. The second quantum key system determines verified authentication code information based on the identity token, group information, first authentication code information, and key identifier of the second quantum secure software development kit, and sends the verified authentication code information to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal using the verified authentication code information. The first intercom terminal and the second intercom terminal are intercom terminals in the same group, but cross-domains. The second quantum secure software development kit is deployed on the second intercom terminal. Thus, the second quantum secure key system determines the verified authentication code information based on the identity token, group information, first authentication code information, and key identifier of the second quantum secure software development kit. The second intercom terminal establishes communication with the first intercom terminal using the verified authentication code information, thereby enabling communication between the first and second intercom terminals, even though they are terminals in a cross-domain quantum resource pool intercom group.

[0167] Reference Figure 8 , shows a structural block diagram of another cross-domain intercom group communication device provided by an embodiment of the present invention, wherein the device is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal and may specifically include the following modules:

[0168] The fourth sending module 801 is configured to receive, through the second intercom terminal, group information, first authentication code information, and key identifier of a group sent by the first quantum security software development kit; the first authentication code information and the key identifier are determined by the first quantum key system according to a key application request; the key application request is received by the first quantum security software development kit as a call request sent by the first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal are intercom terminals across domains within the same group;

[0169] a fifth sending module 802, configured to send the identity token of the second quantum secure software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system;

[0170] A fourth receiving module 803 is configured to receive, through the second intercom terminal, verified authentication code information determined by the second quantum key system according to the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier;

[0171] The communication module 804 is configured to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

[0172] In one embodiment, the group information includes: an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group.

[0173] In one embodiment, the verified authentication code information is determined by the second quantum key system based on the key identifier to determine the corresponding quantum key, and the second authentication code information is determined based on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the quantum key. The second authentication code information is verified based on the first authentication code information to obtain the verified authentication code information.

[0174] In an embodiment of the present invention, a fourth sending module is configured to receive, through a second intercom terminal, group information, first authentication code information, and key identifier of a group sent by a first quantum security software development toolkit; the first authentication code information and key identifier are determined by a first quantum key system based on a key application request; the key application request is received by the first quantum security software development toolkit in response to a call request sent by the first intercom terminal, and a key application request for group communication is sent to the first quantum key system in response to the call request; the first intercom terminal and the second intercom terminal are intercom terminals across domains within the same group; a fifth sending module is configured to send the identity token, group information, first authentication code information, and key identifier of the second quantum security software development toolkit to the second quantum key system; a fourth receiving module is configured to receive, through the second intercom terminal, verified authentication code information determined by the second quantum key system based on the identity token, group information, first authentication code information, and key identifier of the second quantum security software development toolkit; and a communication module is configured to establish communication with the first intercom terminal through the second intercom terminal based on the verified authentication code information. Thus, the second quantum security key system determines the verified authentication code information according to the identity token, group information, first authentication code information and key identifier of the second quantum security software development kit. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information, thereby enabling the first intercom terminal and the second intercom terminal to communicate even if they are terminals of a cross-domain quantum resource pool intercom group.

[0175] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0176] An embodiment of the present invention further provides an electronic device, including:

[0177] It includes a processor, a memory, and a computer program stored on the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned cross-domain intercom group communication method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0178] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned cross-domain intercom group communication method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0179] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0180] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, apparatus, or computer program products. Thus, embodiments of the present invention may take the form of a fully hardware embodiment, a fully software embodiment, or an embodiment combining software and hardware. Furthermore, embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0181] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the process in the flowchart and / or block diagram. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0182] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0183] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0184] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the basic creative concepts. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0185] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0186] The above is a detailed introduction to a cross-domain intercom group communication system, a cross-domain intercom group communication method, a cross-domain intercom group communication device, an electronic device and a computer-readable storage medium provided by the present invention. Specific examples are used herein to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the ideas of the present invention, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A cross-domain intercom group communication system, characterized in that: The system includes: a first intercom terminal, a second intercom terminal, a first quantum-safe software development kit, a second quantum-safe software development kit, a first quantum key system, and a second quantum key system; the first quantum-safe software development kit is deployed on the first intercom terminal; and the second quantum-safe software development kit is deployed on the second intercom terminal; The first intercom terminal is used to send a call request to the first quantum security software development toolkit; The first quantum security software development toolkit is configured to receive the call request, and in response to the call request, send a key application request for group communication to the first quantum key system; receive first authentication code information and key identifier sent by the first quantum key system; and send group information of the group, the first authentication code information, and the key identifier to the second intercom terminal; The first quantum key system is configured to receive the key application request, determine the first authentication code information and the key identifier according to the key application request, and send the first authentication code information and the key identifier to the first quantum secure software development kit; The second intercom terminal is configured to receive the group information of the group, the first authentication code information, and the key identifier, and send the group information, the first authentication code information, and the key identifier to the second quantum security software development toolkit; receive the verified authentication code information sent by the second quantum key system; and establish communication with the first intercom terminal based on the verified authentication code information; the first intercom terminal and the second intercom terminal are intercom terminals across domains within the same group; The second quantum-safe software development toolkit is configured to receive the group information, the first authentication code information, and the key identifier; and send the identity token of the second quantum-safe software development toolkit, the group information, the first authentication code information, and the key identifier to a second quantum key system; the group information includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; The second quantum key system is used to receive the identity token of the second quantum security software development kit, the group information, the first authentication code information and the key identifier, determine the corresponding quantum key according to the key identifier, perform an HMAC operation according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group and the key identifier to obtain second authentication code information; verify whether the second authentication code information is consistent with the first authentication code information. If they are consistent, the verification is passed, and the verified authentication code information is sent to the second intercom terminal.

2. The cross-domain intercom group communication system according to claim 1, characterized in that: The system also includes: a quantum secure intercom resource control center; The first quantum-safe software development toolkit is configured to receive a call request sent by a first intercom terminal, and send a query request to a quantum-safe intercom resource control center in response to the call request; receive the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship sent by the quantum-safe intercom resource control center; obtain an identity token corresponding to the first quantum-safe software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; generate a key application request for communication of the group based on the identity token corresponding to the first quantum-safe software development toolkit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group; and send the key application request to the first quantum key system; The quantum secure intercom resource control center is configured to receive the query request, determine the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes; and send the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the relationship between quantum network nodes to the first quantum secure software development kit.

3. The cross-domain intercom group communication system according to claim 1, characterized in that: The system also includes: an intercom service system; The first intercom terminal is configured to send a group establishment application request to the intercom service system; obtain a group identifier of the group sent by the intercom service system; and send a group joining request to the second intercom terminal; The intercom service system is configured to receive the group establishment application request; establish a group according to the group application request, and determine a group identifier of the group; and send the group identifier of the group to the first intercom terminal; The second intercom terminal is configured to receive the group joining request and join the group according to the group joining request.

4. The cross-domain intercom group communication system according to claim 1, characterized in that: The system also includes: an intercom service system; The first quantum-safe software development toolkit is configured to send the group information of the group, the first authentication code information, and the key identifier to the intercom service system; The intercom service system is configured to receive the group information of the group, the first authentication code information, and the key identifier; and send the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal; The second intercom terminal is configured to receive the group information of the group, the first authentication code information, and the key identifier.

5. A cross-domain intercom group communication method, characterized in that: The method is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the method includes: receiving a call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request; receiving first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; Sending the group information of the group, the first authentication code information and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information and the key identifier to the second quantum security software development toolkit, and the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information and the key identifier to the second quantum key system, wherein the group information includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; the second quantum key system determines the corresponding quantum key according to the key identifier A quantum key is generated, and an HMAC operation is performed according to the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the key identifier to obtain second authentication code information; the second authentication code information is verified to be consistent with the first authentication code information. If they are consistent, the verification passes, and the verified authentication code information is sent to the second intercom terminal. The second intercom terminal establishes communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal belong to intercom terminals across domains in the same group; and the second quantum security software development kit is deployed in the second intercom terminal.

6. The cross-domain intercom group communication method according to claim 5, characterized in that: The receiving the call request sent by the first intercom terminal, and sending a key application request for group communication to the first quantum key system in response to the call request, includes: Receiving a call request sent by the first intercom terminal, and sending a query request to the quantum security intercom resource control center in response to the call request; Receiving a system identifier of a first quantum key system, a system identifier of a second quantum key system, and a quantum network node relationship sent by the quantum secure intercom resource control center; the system identifier of the first quantum key system, the system identifier of the second quantum key system, and the quantum network node relationship are determined by the quantum secure intercom resource control center according to the query request; Obtaining an identity token corresponding to the first quantum secure software development kit, an identity identifier of the first intercom terminal, an identity identifier of the second intercom terminal, and a group identifier of the group; Generate a key application request for communication of the group according to the identity token corresponding to the first quantum security software development kit, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the system identifier of the first quantum key system, the system identifier of the second quantum key system, the quantum network node relationship of the group, and the group identifier of the group; Sending the key application request to the first quantum key system.

7. The cross-domain intercom group communication method according to claim 5, characterized in that: Before receiving the call request sent by the first intercom terminal and sending a key application request for group communication to the first quantum key system in response to the call request, the method further includes: Sending a group establishment application request to the intercom service system through the first intercom terminal; Receiving, through the first intercom terminal, a group identifier of a group sent by the intercom service system; the group identifier is determined by the intercom service system according to the group application request to establish a group; A group joining request is sent to the second intercom terminal through the first intercom terminal, so that the second intercom terminal joins the group according to the group joining request.

8. The cross-domain intercom group communication method according to claim 5, characterized in that: The sending the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal includes: The group information of the group, the first authentication code information and the key identifier are sent to the second intercom terminal through the intercom service system.

9. The cross-domain intercom group communication method according to claim 5, characterized in that: The group information of the group includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group.

10. A cross-domain intercom group communication method, characterized in that: The method is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the method includes: Receiving, through the second intercom terminal, group information, first authentication code information, and key identifier of the group sent by the first quantum security software development toolkit; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; the key application request is received by the first quantum security software development toolkit as a call request sent by the first intercom terminal, and in response to the call request, sending a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group; the first quantum security software development toolkit is deployed on the first intercom terminal; Sending the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system; the group information includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; Receiving, through the second intercom terminal, verified authentication code information sent by the second quantum key system; the second quantum key system determines the corresponding quantum key of the verified authentication code information according to the key identifier, and performs an HMAC operation based on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the key identifier to obtain second authentication code information; verifying whether the second authentication code information is consistent with the first authentication code information; if they are consistent, the verification passes, and the verified authentication code information is obtained; The second intercom terminal establishes communication with the first intercom terminal according to the verified authentication code information.

11. A cross-domain intercom group communication device, characterized in that: The device is applied to a first quantum-safe software development kit; the first quantum-safe software development kit is deployed on a first intercom terminal, and the device includes: a first receiving module, configured to receive a call request sent by the first intercom terminal, and send a key application request for group communication to the first quantum key system in response to the call request; a second receiving module, configured to receive first authentication code information and a key identifier sent by the first quantum key system; the first authentication code information and the key identifier are determined by the first quantum key system according to the key application request; The first sending module is configured to send the group information of the group, the first authentication code information, and the key identifier to the second intercom terminal, so that the second intercom terminal sends the group information, the first authentication code information, and the key identifier to the second quantum security software development toolkit, and the second quantum security software development toolkit sends the identity token of the second quantum security software development toolkit, the group information, the first authentication code information, and the key identifier to the second quantum key system, wherein the group information includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; the second quantum key system determines the corresponding The method comprises the steps of: performing an HMAC operation on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the key identifier to obtain second authentication code information; verifying whether the second authentication code information is consistent with the first authentication code information; if they are consistent, the verification passes, and sending the verified authentication code information to the second intercom terminal, and the second intercom terminal establishing communication with the first intercom terminal through the verified authentication code information; the first intercom terminal and the second intercom terminal are intercom terminals across domains in the same group; and deploying the second quantum security software development kit in the second intercom terminal.

12. A cross-domain intercom group communication device, characterized in that: The device is applied to a second quantum-safe software development kit; the second quantum-safe software development kit is deployed on a second intercom terminal, and the device includes: A fourth sending module is configured to receive, through the second intercom terminal, group information, first authentication code information, and a key identifier of a group sent by the first quantum security software development toolkit; the first authentication code information and the key identifier are determined by the first quantum key system according to a key application request; the key application request is received by the first quantum security software development toolkit as a call request sent by the first intercom terminal, and in response to the call request, sends a key application request for group communication to the first quantum key system; the first intercom terminal and the second intercom terminal are intercom terminals across domains within the same group; the first quantum security software development toolkit is deployed on the first intercom terminal; a fifth sending module, configured to send the identity token of the second quantum security software development kit, the group information, the first authentication code information, and the key identifier to a second quantum key system; the group information includes: the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, and the group identifier of the group; a fourth receiving module, configured to receive, through the second intercom terminal, verified authentication code information sent by the second quantum key system; the second quantum key system determines the corresponding quantum key of the verified authentication code information according to the key identifier, performs an HMAC operation based on the quantum key, the identity identifier of the first intercom terminal, the identity identifier of the second intercom terminal, the group identifier of the group, and the key identifier to obtain second authentication code information; verify whether the second authentication code information is consistent with the first authentication code information; if they are consistent, the verification passes, and the verified authentication code information is obtained; The communication module is used to establish communication with the first intercom terminal through the second intercom terminal according to the verified authentication code information.

13. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored on the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the cross-domain intercom group communication method according to any one of claims 5 to 9 or 10 are implemented.

14. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of the cross-domain intercom group communication method according to any one of claims 5 to 9 or 10 are implemented.

Images