Mobile communication method based on anti-quantum and national cryptographic algorithm mixing and mobile terminal

Abstract

The invention discloses a mobile communication method based on anti-quantum and national cryptographic algorithm mixing and a mobile terminal. The method comprises the steps that the mobile terminal generates a first mixed verification public key and a first mixed signature private key; obtaining a mixed signature certificate; the mobile terminal obtains the mixed ciphertext and the first symmetric key, and the mobile terminal signs the mixed ciphertext to obtain a mixed signature; the validity of the hybrid signature certificate is verified by the server side by using a second hybrid verification public key, the validity of the hybrid signature is verified by a first hybrid verification public key built in the hybrid signature certificate, and the hybrid signature is decrypted by the server side by using a second hybrid decryption private key to obtain a first symmetric key; and the mobile terminal and the server side perform encryption communication by using the first symmetric key. Compared with the prior art, the mobile communication method based on the anti-quantum and national cryptographic algorithm mixture provided by the invention ensures the secure communication between the client and the server, and can maintain the confidentiality and integrity of data even under the threat of quantum computing.

Description

Technical Field

[0001] The present invention relates to the field of mobile communication technology, and in particular to a mobile communication method and a mobile terminal based on a hybrid of quantum-resistant and national secret algorithms. Background Art

[0002] With the rapid development of mobile internet and cloud computing, communication between mobile devices and servers has become crucial in today's digital world. An increasing amount of sensitive information, such as online payments, personal privacy data, and corporate confidential information, is exchanged between mobile devices and servers. Mobile devices often operate on public or untrusted networks, such as public Wi-Fi and 4G / 5G networks. The openness and complexity of these networks increase security threats such as man-in-the-middle attacks and eavesdropping. Therefore, ensuring the security of these communications is a critical task.

[0003] On the other hand, with the rapid development of quantum computing technology, the security of traditional cryptographic algorithms based on mathematical complexity (such as RSA and ECC) is facing unprecedented challenges. Quantum computers can efficiently factor large integers and discrete logarithms using Shor's algorithm, making encryption algorithms based on these problems potentially ineffective in future quantum computing environments. Therefore, traditional encryption systems need to be upgraded to address the potential security threats posed by quantum computing. To address this issue, quantum-resistant algorithms (Post-Quantum Cryptography, PQC) have emerged. The goal of quantum-resistant algorithms is to maintain sufficient security even in the context of the advent of quantum computers.

[0004] Therefore, this application proposes a secure communication method specifically for mobile terminals and servers based on a hybrid scheme of quantum-resistant and classical algorithms. Summary of the Invention

[0005] The purpose of the present invention is to provide a mobile communication method and a mobile terminal based on a mixture of quantum-resistant and national secret algorithms to solve the technical problems in the prior art.

[0006] In a first aspect, the present invention provides a mobile communication method based on a hybrid of quantum-resistant and national secret algorithms, for implementing communication between a mobile terminal and a server, the method comprising:

[0007] The mobile terminal generates a first hybrid verification public key and a first hybrid signature private key;

[0008] The device information of the mobile terminal and the first hybrid verification public key are sent to the server for signature to obtain a hybrid signature certificate;

[0009] The mobile terminal uses the second hybrid encryption public key of the server to execute a hybrid key encapsulation algorithm to obtain a hybrid ciphertext and a first symmetric key, and the mobile terminal uses the first hybrid signature private key to sign the hybrid ciphertext to obtain a hybrid signature;

[0010] The mixed ciphertext, the mixed signature and the mixed signature certificate are sent to the server side, the mixed signature certificate is verified by the server side using the second mixed verification public key, the mixed signature is verified by the first mixed verification public key built into the mixed signature certificate, the mixed signature is decrypted by the server side using the second mixed decryption private key to obtain the first symmetric key, and the mobile terminal and the server side use the first symmetric key for encrypted communication.

[0011] As described above, a mobile communication method based on a mixture of quantum-resistant and national secret algorithms, wherein, preferably, the mobile terminal is integrated with a SIM card, the SIM card generates a quantum random number, and combines the national secret algorithm and the quantum-resistant algorithm to generate the first hybrid verification public key and the first hybrid signature private key, the first hybrid verification public key includes the first national secret algorithm verification public key and the first quantum-resistant algorithm verification public key, and the first hybrid signature private key includes the first national secret algorithm signature private key and the first quantum-resistant algorithm signature private key.

[0012] As described above, a mobile communication method based on a mixture of quantum-resistant and national secret algorithms, wherein preferably, the SIM card includes a main control chip, a network communication module, an information storage module, a national secret algorithm module, an anti-quantum algorithm module, a quantum random number module and an SD card module, and the network communication module, the information storage module, the national secret algorithm module, the anti-quantum algorithm module, the first quantum random number module and the SD card module are respectively connected to the main control chip signal, wherein:

[0013] The network communication module can be used to control the network communication of the SIM card;

[0014] The information storage module can be used to store program files and device information of the SIM card;

[0015] The national secret algorithm module can be used to provide the national secret algorithm;

[0016] The quantum-resistant algorithm module can be used to provide a quantum-resistant algorithm;

[0017] The quantum random number module can be used to provide quantum random numbers;

[0018] The SD card module can be used to store keys.

[0019] As described above, a mobile communication method based on a mixture of quantum-resistant and national secret algorithms, wherein, preferably, the national secret algorithms include one or more of SM1, SM2, SM3, SM4, SM7, SM9 and ZUC, and the quantum-resistant algorithms include one or more of Kyber and Dilithum.

[0020] As described above, a mobile communication method based on a mixture of quantum-resistant and national secret algorithms, wherein, preferably, the mobile terminal sends a user registration request message to the server side, the user registration request message includes device information, a first national secret algorithm verification public key and a first quantum-resistant algorithm verification public key, the device information, the first national secret algorithm verification public key and the first quantum-resistant algorithm verification public key are signed by the server side using the second national secret algorithm signature private key and the second quantum-resistant algorithm signature private key to obtain the hybrid signature certificate, and the hybrid signature certificate is sent to the mobile terminal.

[0021] In the mobile communication method based on a hybrid of quantum-resistant and national secret algorithms as described above, preferably, the second hybrid encryption public key includes a second national secret algorithm encryption public key and a second quantum-resistant algorithm encryption public key, wherein:

[0022] The mobile terminal uses the second national secret algorithm to encrypt the public key and the second quantum-resistant algorithm to encrypt the public key to execute a hybrid key encapsulation algorithm to obtain a mixed ciphertext and a first symmetric key. The mobile terminal uses the first national secret algorithm to sign the private key and the first quantum-resistant algorithm to sign the mixed ciphertext to obtain a hybrid signature.

[0023] In the mobile communication method based on a hybrid of quantum-resistant and national secret algorithms as described above, preferably, the second hybrid verification public key includes a second national secret algorithm verification public key and a second quantum-resistant algorithm verification public key, and the second hybrid decryption private key includes a second national secret algorithm decryption private key and a second quantum-resistant algorithm decryption private key, wherein:

[0024] The server verifies the validity of the public key of the hybrid signature certificate using the second national secret algorithm and the public key verification using the second quantum-resistant algorithm. The hybrid signature verifies the validity of the public key using the first national secret algorithm built into the hybrid signature certificate and the public key verification using the first quantum-resistant algorithm. The server decrypts the hybrid ciphertext using the second national secret algorithm decryption private key and the second quantum-resistant algorithm decryption private key to obtain the first symmetric key.

[0025] As described above, a mobile communication method based on a hybrid of quantum-resistant and national secret algorithms, wherein, preferably,

[0026] A first hybrid encryption public key and a first hybrid decryption private key are generated by the server;

[0027] The first hybrid encryption public key and the device information are signed by the server using a second hybrid signature private key to obtain a hybrid key encapsulation certificate;

[0028] A second symmetric key is generated by the server, the first hybrid decryption private key is encrypted by the second symmetric key to obtain a first ciphertext, and the second symmetric key is encrypted by the first national secret algorithm verification public key to obtain a second ciphertext;

[0029] The hybrid signature certificate, the hybrid key encapsulation certificate, the first ciphertext and the second ciphertext are all sent to the mobile terminal. The mobile terminal uses the first national secret algorithm signature private key to decrypt the second ciphertext to obtain the second symmetric key, and then uses the second symmetric key to decrypt the first ciphertext to obtain the first hybrid decryption private key.

[0030] As described above, a mobile communication method based on a hybrid of quantum-resistant and national secret algorithms, wherein, preferably,

[0031] The first hybrid encryption public key includes a first national secret algorithm encryption public key and a first quantum-resistant algorithm encryption public key;

[0032] The first hybrid decryption private key includes a first national secret algorithm decryption private key and a first quantum-resistant algorithm decryption private key;

[0033] The second hybrid signature private key includes a second national secret algorithm signature private key and a second quantum-resistant algorithm signature private key.

[0034] In a second aspect, the present invention provides a mobile terminal, which is applied to the aforementioned mobile communication method.

[0035] Compared with the existing technology, the mobile communication method based on the hybrid of quantum-resistant and national secret algorithms provided by the present invention ensures secure communication between the client and the server, and can maintain the confidentiality and integrity of data even under the threat of quantum computing. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 This is a principle flow chart of the user registration part of the mobile communication method provided by an embodiment of the present invention;

[0037] Figure 2 This is a principle flow chart of the secure communication part of the mobile communication method provided by an embodiment of the present invention;

[0038] Figure 3 It is a structural block diagram of the SIM card provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0039] The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and are not to be construed as limiting the present invention.

[0040] First, refer to Figure 1 as well as Figure 2 As shown, an embodiment of the present invention provides a mobile communication method based on a hybrid of quantum-resistant and national secret algorithms, for realizing communication between a mobile terminal and a server. The mobile communication method includes a user registration part and a secure communication part, wherein:

[0041]

User registration section

[0042] The user registration part includes the following steps:

[0043] Step S101: key generation.

[0044] The mobile terminal generates a first hybrid verification public key and a first hybrid signature private key. Preferably, the mobile terminal has a built-in SIM card. The mobile terminal uses the quantum random number generation function of the SIM card, combined with the national secret algorithm and the anti-quantum algorithm, to generate the first hybrid verification public key and the first hybrid signature private key as a hybrid signature public-private key pair.

[0045] The quantum random numbers generated by the SIM card are true random numbers based on the principles of quantum mechanics. The intrinsic randomness of quantum mechanics means that the results of certain quantum experiments are unpredictable. This unpredictability is used to generate true random numbers, and the random number sequence is unpredictable and non-repeatable.

[0046] The full name of the national secret algorithm is the national commercial cryptographic algorithm. In the embodiments provided by the present invention, the national secret algorithm includes one or more of SM1, SM2, SM3, SM4, SM7, SM9 and the Zu Chongzhi Cryptography Algorithm (ZUC). Preferably, the SM2 algorithm is used as an example for illustration. SM2 is an asymmetric encryption algorithm based on the ECC (Elliptic Curve Cryptography) elliptic curve, including functions such as digital signature, key exchange and public key encryption.

[0047] Quantum-resistant algorithms, also known as post-quantum cryptography (PQC), are a type of encryption algorithm designed to resist quantum computer attacks. In the embodiments provided by the present invention, quantum-resistant algorithms include one or more algorithms among Kyber and Dilithum.

[0048] In the embodiment provided by the present invention, the first hybrid verification public key includes the first national secret algorithm verification public key and the first quantum-resistant algorithm verification public key, and the first hybrid signature private key includes the first national secret algorithm signature private key and the first quantum-resistant algorithm signature private key, wherein the first national secret algorithm verification public key and the first national secret algorithm signature private key are both generated by the SM2 algorithm, and the first quantum-resistant algorithm verification public key and the first quantum-resistant algorithm signature private key are both generated by the Dilithum algorithm.

[0049] The hybrid signature public-private key pair provided by the SIM card combines the advantages of the national secret algorithm and the quantum-resistant algorithm by using the hybrid signature of SM2 and Dilithium, thereby improving the overall security. This hybrid signature method combines the efficiency of SM2 and the post-quantum security of Dilithium, providing a powerful secure communication solution that can enhance the defense against quantum computing threats while maintaining compatibility with existing cryptographic infrastructure, and prepare for future quantum computing threats. Through SM2+Dilithium hybrid signature, it is possible to enhance the defense against quantum computing threats on the basis of the existing national secret algorithm and ensure the long-term security of data.

[0050] In a feasible implementation, referring to Figure 3 As shown, the SIM card in the mobile terminal integrates multiple security functions for processing network communication, data storage, encryption operations and key management. Specifically, the SIM card includes a main control chip, a network communication module, an information storage module, a national secret algorithm module, an anti-quantum algorithm module, a quantum random number module and an SD card module. The network communication module, the information storage module, the national secret algorithm module, the anti-quantum algorithm module, the quantum random number module and the SD card module are respectively connected to the main control chip signal, wherein:

[0051] The main control chip serves as the central processing unit of the SIM card. It is responsible for controlling and coordinating all functions of the SIM card, managing the network communication module, ensuring that the SIM card can perform operations such as surfing the Internet and making calls; controlling the generation of the quantum random number module to provide quantum random numbers for the encryption process; managing the storage operations of the SD card module, including the storage and backup of keys; and coordinating the operations of the national secret algorithm and the anti-quantum algorithm.

[0052] The network communication module can be used to control the network communication of the SIM card and is responsible for the network connection of the SIM card, including data transmission and voice calls. At the same time, it cooperates with the main control chip to execute network-related instructions.

[0053] The information storage module can be used to store program files and SIM card device information. It is divided into two parts: one part is used to store program files, and the other part is used to store sensitive information such as mobile phone number, card information, PIN code, certificate and public and private key information, ensuring the secure storage and access of all sensitive data.

[0054] The national secret algorithm module can be used to provide national secret algorithms and execute encryption algorithms such as SM2, SM3, and SM4 issued by the State Cryptography Administration for operations such as data encryption, decryption, digital signature, and verification.

[0055] The quantum-resistant algorithm module provides quantum-resistant algorithms such as Kyber and Dilithium to ensure data security in the quantum computing era, and is used to generate and verify quantum-resistant signatures.

[0056] The quantum random number module can be used to provide quantum random numbers, which are unpredictable, high-quality true random numbers used for key generation in encryption and secure communication.

[0057] The SD card module can be used to store keys for large-scale storage and backup of keys to prevent key loss, and collaborate with the main control chip to perform storage and backup operations.

[0058] The entire system, coordinated by the main control chip, integrates network communications, data storage, cryptographic operations, and key management. This not only enhances SIM card security but also ensures long-term safety in the face of quantum computing threats. By utilizing national secret algorithms and quantum-resistant algorithms, the SIM card provides robust security, protecting user data and communications. Furthermore, the inclusion of an SD card module provides additional storage and backup solutions for keys, further enhancing the SIM card's reliability and data protection capabilities.

[0059] Step S102: Send a user registration request message.

[0060] The mobile terminal sends a user registration request message to the server. The user registration request message includes device information, the first national secret algorithm verification public key, and the first quantum-resistant algorithm verification public key.

[0061] Step S103: Generate a hybrid signature certificate.

[0062] The device information, the first national secret algorithm verification public key, and the first quantum-resistant algorithm verification public key are signed by the server using the second national secret algorithm signature private key and the second quantum-resistant algorithm signature private key to obtain a hybrid signature certificate. This step ensures the verification of user identity and the credibility of the public key.

[0063] Preferably, the second national secret algorithm signature private key is generated using the SM2 algorithm, and the second quantum-resistant algorithm signature private key is generated using the Dilithium algorithm.

[0064] Step S104: key encapsulation.

[0065] The server side generates a first hybrid encryption public key and a first hybrid decryption private key, which are used as hybrid keys to encapsulate a public-private key pair. The first hybrid encryption public key includes the first national secret algorithm encryption public key and the first quantum-resistant algorithm encryption public key. The first hybrid decryption private key includes the first national secret algorithm decryption private key and the first quantum-resistant algorithm decryption private key. The first national secret algorithm encryption public key and the first national secret algorithm decryption private key are both generated using the SM2 algorithm, and the first quantum-resistant algorithm encryption public key and the first quantum-resistant algorithm decryption private key are both generated using the Kyber algorithm.

[0066] Step S105: Generate a hybrid key encapsulation certificate.

[0067] The first hybrid encryption public key and device information are signed by the server using the second hybrid signature private key to obtain a hybrid key encapsulation certificate. The second hybrid signature private key includes the second national secret algorithm signature private key and the second quantum-resistant algorithm signature private key. The second national secret algorithm signature private key is generated using the SM2 algorithm, and the second quantum-resistant algorithm signature private key is generated using the Dilithium algorithm.

[0068] Step S106: Key encryption.

[0069] The server generates a second symmetric key, the first hybrid decryption private key is encrypted by the second symmetric key to obtain the first ciphertext, and the second symmetric key is encrypted by the first national secret algorithm verification public key to obtain the second ciphertext. This multi-layer encryption method increases the security of data transmission.

[0070] Step S107: Send the certificate and ciphertext.

[0071] The hybrid signature certificate, the hybrid key encapsulation certificate, the first ciphertext, and the second ciphertext are all sent to the mobile terminal.

[0072] Step S108: Key decryption.

[0073] The mobile terminal uses the first national secret algorithm signature private key to decrypt the second ciphertext to obtain the second symmetric key, and then uses the second symmetric key to decrypt the first ciphertext to obtain the first hybrid decryption private key. This process ensures the secure transmission and correct decryption of the key.

[0074] Through these steps, the quantum encryption process leverages the principles of quantum mechanics, combined with advanced encryption algorithms, to provide a high degree of security for data transmission. Quantum key distribution ensures key security, while hybrid encryption improves both the security and efficiency of data transmission. This strategy, combining quantum technology with traditional encryption methods, can effectively defend against security threats in the quantum computing era.

[0075]

Secure Communication Section

[0076] Reference Figure 2As shown, the steps of secure communication include:

[0077] Step S201: Mobile terminal configuration.

[0078] The mobile terminal has built-in the server-side second national secret algorithm verification public key, the second quantum-resistant algorithm verification public key, the second national secret algorithm encryption public key and the second quantum-resistant algorithm encryption public key. In the embodiment provided by the present invention, the second national secret algorithm verification public key and the second national secret algorithm encryption public key are both generated using the SM2 algorithm, the second quantum-resistant algorithm verification public key is generated using the Dilithium algorithm, and the second quantum-resistant algorithm encryption public key is generated using the Kyber algorithm.

[0079] Step S202: Decryption and signing.

[0080] The mobile terminal uses the server's public key encrypted using the second national secret algorithm and the public key encrypted using the second quantum-resistant algorithm to perform a hybrid key encapsulation algorithm to obtain a mixed ciphertext and the first symmetric key. Using the SM2+Kyber hybrid key encapsulation algorithm ensures data is encrypted during transmission. Even if an attacker intercepts communication data, they cannot decrypt or tamper with it, effectively preventing man-in-the-middle attacks.

[0081] The mobile terminal uses the signature private key of the first national secret algorithm and the signature private key of the first quantum-resistant algorithm to sign the mixed ciphertext to obtain a hybrid signature. Hybrid signature is the process of signing the encrypted mixed ciphertext with the mobile terminal's signature private key. The signature verifies the source and integrity of the message, ensuring that the message has not been tampered with during transmission.

[0082] Step S203: Send a secure communication request message.

[0083] The mobile terminal sends a secure communication request message to the server. The secure communication request message includes a mixed ciphertext, a mixed signature, and a mixed signature certificate and is sent to the server.

[0084] When a mobile terminal sends a secure communication request message, it includes a signature and verification certificate generated using its own signature private key. After receiving the request, the server verifies the validity of the terminal's verification certificate and signature to ensure the authenticity of the identities of both communicating parties and prevent attackers from impersonating the communicating parties.

[0085] Step S204: Server-side verification.

[0086] The server uses the second national secret algorithm to verify the public key and the second quantum-resistant algorithm to verify the validity of the public key.

[0087] The hybrid signature is verified by the first national secret algorithm built into the hybrid signature certificate and the first quantum-resistant algorithm to verify the validity of the public key.

[0088] The mixed ciphertext is decrypted by the server using the second national secret algorithm decryption private key and the second quantum-resistant algorithm decryption private key to obtain the first symmetric key.

[0089] The server first verifies the validity of the mobile terminal's authentication certificate using its own public key, and then verifies the validity of the signature using the public key in the hybrid signature certificate. This ensures that the signature was indeed generated by the mobile terminal and that the message has not been tampered with during transmission. The server then decrypts the ciphertext using its own private key, obtaining the first symmetric key, which is used for subsequent secure communications, ensuring confidentiality.

[0090] Step S205: Implement encrypted communication.

[0091] The mobile terminal and the server perform encrypted communication using the first symmetric key.

[0092] This process ensures the security of key exchange and data transmission by using hybrid key encapsulation and hybrid signature technology.

[0093] In a second aspect, the present invention provides a mobile terminal, which is applied to the aforementioned mobile communication method.

[0094] The above describes in detail the structure, features and effects of the present invention based on the embodiments shown in the drawings. The above is only a preferred embodiment of the present invention, but the scope of implementation of the present invention is not limited to what is shown in the drawings. Any changes made in accordance with the concept of the present invention, or modifications to equivalent embodiments with equivalent changes, which do not exceed the spirit covered by the description and drawings, should be within the scope of protection of the present invention.

Claims

1. A mobile communication method based on a mixture of quantum-resistant and national secret algorithms, used to achieve communication between a mobile terminal and a server, characterized in that: Methods include: The mobile terminal generates a first hybrid verification public key and a first hybrid signature private key; The device information of the mobile terminal and the first hybrid verification public key are sent to the server for signature to obtain a hybrid signature certificate; The mobile terminal uses the second hybrid encryption public key of the server to execute a hybrid key encapsulation algorithm to obtain a hybrid ciphertext and a first symmetric key, and the mobile terminal uses the first hybrid signature private key to sign the hybrid ciphertext to obtain a hybrid signature; The mixed ciphertext, the mixed signature and the mixed signature certificate are sent to the server side, the mixed signature certificate is verified by the server side using the second mixed verification public key, the mixed signature is verified by the first mixed verification public key built into the mixed signature certificate, the mixed signature is decrypted by the server side using the second mixed decryption private key to obtain the first symmetric key, and the mobile terminal and the server side perform encrypted communication using the first symmetric key.

2. The method according to claim 1, characterized in that: The mobile terminal is integrated with a SIM card, which generates a quantum random number, and combines the national secret algorithm and the anti-quantum algorithm to generate the first hybrid verification public key and the first hybrid signature private key, the first hybrid verification public key includes the first national secret algorithm verification public key and the first anti-quantum algorithm verification public key, and the first hybrid signature private key includes the first national secret algorithm signature private key and the first anti-quantum algorithm signature private key.

3. The method according to claim 2, characterized in that: The SIM card includes a main control chip, a network communication module, an information storage module, a national secret algorithm module, an anti-quantum algorithm module, a quantum random number module and an SD card module. The network communication module, the information storage module, the national secret algorithm module, the anti-quantum algorithm module, the first quantum random number module and the SD card module are respectively connected to the main control chip signal, wherein: The network communication module can be used to control the network communication of the SIM card; The information storage module can be used to store program files and device information of the SIM card; The national secret algorithm module can be used to provide a national secret algorithm; The quantum-resistant algorithm module can be used to provide a quantum-resistant algorithm; The quantum random number module can be used to provide quantum random numbers; The SD card module can be used to store keys.

4. The method according to claim 3, characterized in that: The national secret algorithm includes one or more of SM1, SM2, SM3, SM4, SM7, SM9 and ZUC, and the anti-quantum algorithm includes one or more of Kyber and Dilithum.

5. The method according to claim 2, characterized in that: The mobile terminal sends a user registration request message to the server, where the user registration request message includes device information, a first national secret algorithm verification public key, and a first anti-quantum algorithm verification public key. The device information, the first national secret algorithm verification public key, and the first anti-quantum algorithm verification public key are signed by the server using a second national secret algorithm signature private key and a second anti-quantum algorithm signature private key to obtain the hybrid signature certificate, and the hybrid signature certificate is sent to the mobile terminal.

6. The method according to claim 2, characterized in that: The second hybrid encryption public key includes a second national secret algorithm encryption public key and a second quantum-resistant algorithm encryption public key, wherein: The mobile terminal uses the second national secret algorithm to encrypt the public key and the second quantum-resistant algorithm to encrypt the public key to execute a hybrid key encapsulation algorithm to obtain a hybrid ciphertext and a first symmetric key. The mobile terminal uses the first national secret algorithm to sign the private key and the first quantum-resistant algorithm to sign the hybrid ciphertext to obtain a hybrid signature.

7. The method according to claim 2, characterized in that: The second hybrid verification public key includes a second national secret algorithm verification public key and a second anti-quantum algorithm verification public key, and the second hybrid decryption private key includes a second national secret algorithm decryption private key and a second anti-quantum algorithm decryption private key, wherein: The hybrid signature certificate is verified by the server using the second national secret algorithm to verify the public key and the second anti-quantum algorithm to verify the validity of the public key. The hybrid signature is verified by the first national secret algorithm built into the hybrid signature certificate to verify the validity of the public key and the first anti-quantum algorithm to verify the public key. The hybrid ciphertext is decrypted by the server using the second national secret algorithm decryption private key and the second anti-quantum algorithm decryption private key to obtain the first symmetric key.

8. The method according to claim 2, characterized in that: A first hybrid encryption public key and a first hybrid decryption private key are generated by the server; The first hybrid encryption public key and the device information are signed by the server using a second hybrid signature private key to obtain a hybrid key encapsulation certificate; A second symmetric key is generated by the server, the first hybrid decryption private key is encrypted by the second symmetric key to obtain a first ciphertext, and the second symmetric key is encrypted by the first national secret algorithm verification public key to obtain a second ciphertext; The hybrid signature certificate, the hybrid key encapsulation certificate, the first ciphertext and the second ciphertext are all sent to the mobile terminal. The mobile terminal uses the first national secret algorithm signature private key to decrypt the second ciphertext to obtain the second symmetric key, and then uses the second symmetric key to decrypt the first ciphertext to obtain the first hybrid decryption private key.

9. The method according to claim 8, characterized in that: The first hybrid encryption public key includes a first national secret algorithm encryption public key and a first quantum-resistant algorithm encryption public key; The first hybrid decryption private key includes a first national secret algorithm decryption private key and a first quantum-resistant algorithm decryption private key; The second hybrid signature private key includes a second national secret algorithm signature private key and a second quantum-resistant algorithm signature private key.

10. A mobile terminal, characterized in that: The mobile communication method according to any one of claims 1 to 9.

Images