Data transmission method and system based on hybrid encryption

Abstract

The invention belongs to the technical field of data transmission, and discloses a data transmission method and system based on hybrid encryption. The method comprises the following steps: a trusted mechanism generates a public and private key pair and signature information of each user terminal; the first user terminal generates a symmetric key and selects a target data transmission network channel; the first user terminal carries out symmetric encryption on the real-time data according to the symmetric key and signs the encrypted real-time data; the first user terminal performs asymmetric encryption on the symmetric key, and sends the encrypted symmetric key, the encrypted real-time data and the real-time signature data to the second user terminal; and the second user terminal performs digital identity authentication, performs asymmetric decryption on the encrypted symmetric key, and performs symmetric decryption on the encrypted real-time data according to the obtained decrypted symmetric key. According to the invention, the problems of low data security and low transmission reliability in the prior art are solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of data transmission, and in particular relates to a data transmission method and system based on hybrid encryption. Background Art

[0002] Data transmission technology refers to the methods and means of transmitting data between different devices or networks. With the rapid development of information technology, data transmission technology plays a vital role in modern society. In the process of data transmission, data security is particularly important because data is more vulnerable to attacks during transmission, and data transmission is threatened by unauthorized access, leakage, tampering, destruction, etc.

[0003] The traditional single-layer encryption algorithm used in existing data transmission has poor data encryption capabilities. Its encryption key can be easily intercepted and brute-force cracked by illegal users, resulting in the transmission data being easily decrypted. Therefore, the security of data and the reliability of transmission cannot be guaranteed. Summary of the invention

[0004] In order to solve the problems of low data security and low transmission reliability in the prior art, the present invention aims to provide a data transmission method and system based on hybrid encryption.

[0005] The technical solution adopted by the present invention is: A data transmission method based on hybrid encryption comprises the following steps: The trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal, and uses digital identity registration technology to generate signature information for each user terminal; the public-private key pair includes a public key and a private key; The first user terminal as the sender generates a corresponding symmetric key according to the user's real-time biometric features, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel; The first user terminal symmetrically encrypts the real-time data according to the symmetric key to obtain the encrypted real-time data, and signs the encrypted real-time data according to the signature information of the first user terminal to obtain the real-time signature data; The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal through the target data transmission network channel; The second user terminal performs digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data.

[0006] Furthermore, the trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal, and uses a digital identity registration technology to generate signature information for each user terminal, including the following steps: The trusted institution performs key initialization, obtains public parameters, master keys and original public keys, and collects attribute information and identity numbers of each user terminal; According to the public parameters, the master key, the original public key and the attribute information of the user terminal, an asymmetric key is generated using an asymmetric encryption algorithm to obtain the corresponding public-private key pair of the user terminal; the public-private key pair includes a public key and a private key; According to the public key and identity number of the user terminal, use the digital identity registration technology to register the digital identity and obtain the signature information of the corresponding user terminal; Traverse all user terminals, obtain the public-private key pair and signature information of each user terminal, store the public key in a trusted institution, and return the signature information and private key to the corresponding user terminal; Collect historical biometrics of all legal users, and build a legal user biometric database based on the historical biometrics of several legal users.

[0007] Furthermore, the first user terminal as the sender generates a corresponding symmetric key according to the real-time biometric features of the user, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel, including the following steps: The first user terminal as the sender collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification is passed, the corresponding symmetric key is generated; Confirming a second user terminal as a receiver, and establishing a quantum communication channel and several data transmission network channels between the first user terminal and the second user terminal; A pre-trained channel quality analysis model is used to select a target data transmission network channel from several data transmission network channels.

[0008] Furthermore, the first user terminal as the sender collects the real-time biometric features of the user and performs legal verification on the real-time biometric features. After the legal verification is passed, a corresponding symmetric key is generated, including the following steps: The first user terminal as the sender collects the real-time biometric features of the user, and searches and matches the biometric feature database of legitimate users of the trusted institution based on the real-time biometric features to obtain a real-time matching result; If the real-time matching result is that there is a matching historical biometric feature, the legal verification is passed and the next step is entered; otherwise, the legal verification fails and the data transmission ends; The user's real-time biometric features are converted into a real-time digital sequence, and a hash function is used to generate a corresponding symmetric key based on the real-time digital sequence.

[0009] Further, using the pre-trained channel quality analysis model, selecting a target data transmission network channel from a plurality of data transmission network channels includes the following steps: Using any data transmission network channel as an initial target data transmission network channel, and sending a real-time heartbeat generation signal to the second user terminal through the initial target data transmission network channel; Receive a real-time heartbeat response signal sent by a second user terminal, and collect real-time channel monitoring data between sending the real-time heartbeat generation signal and receiving the real-time heartbeat response signal; According to the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain a real-time channel quality analysis result; If the real-time channel quality analysis result is that the channel quality is poor, the next data transmission network channel will be switched and the channel quality analysis will be performed again, otherwise, the next step will be entered; The current target data transmission network channel is used as the final target data transmission network channel.

[0010] Furthermore, the channel quality analysis model is constructed based on the RF-Attention-MLP algorithm, and the channel quality analysis model includes a key feature extraction module constructed based on the RF algorithm, an attention weight module constructed based on the Attention mechanism, and a channel quality analysis module constructed based on the MLP algorithm, which are connected in sequence.

[0011] Further, according to the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain a real-time channel quality analysis result, including the following steps: Inputting the real-time channel monitoring data of the initial target data transmission network channel into the pre-trained channel quality analysis model; Use the key feature extraction module of the channel quality analysis model to extract M real-time key features of the real-time channel monitoring data, where M is the total number of key features; According to the preset attention weight value, the attention weight module is used to perform weighted fusion on the M real-time key features to obtain the real-time weighted fusion feature; According to the real-time weighted fusion features, the channel quality analysis module is used to perform channel quality analysis to obtain real-time channel quality analysis results.

[0012] Further, the first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain the encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel, including the following steps: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain the encrypted symmetric key, and sends the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel; The first user terminal uses the QKD technology to encode the encrypted symmetric key into a key quantum state, transmits the key quantum state to the second user terminal through the quantum communication channel, measures the key quantum state to obtain a first measurement result, and publishes the first measurement result in the target data transmission network channel; The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction based on the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key.

[0013] Further, the second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction according to the second measurement result and the first measurement result of the first user terminal to obtain the corresponding encrypted symmetric key, including the following steps: The second user terminal uses a preset correction code to perform error correction on the received key quantum state to obtain an error-corrected key quantum state; Measuring the quantum state of the key after error correction to obtain a second measurement result, and publishing the second measurement result in a target data transmission network channel; The second measurement result disclosed by the target data transmission network channel and the first measurement result of the first user terminal are compared with public basis vectors and the error rate is estimated to obtain an encrypted symmetric key.

[0014] A data transmission system based on hybrid encryption is used to implement a data transmission method. The system includes a trusted institution and several user terminals. The trusted institution is communicated with the several user terminals respectively. The user terminals include a first user terminal as a sender and a second user terminal as a receiver. The first user terminal is communicated with the second user terminal.

[0015] The beneficial effects of the present invention are: The present invention provides a data transmission method and system based on hybrid encryption, which adopts a hybrid encryption algorithm of an asymmetric encryption algorithm and a symmetric encryption algorithm to perform double encryption on data, thereby ensuring the security of data and the reliability of data transmission, and combines digital identity authentication technology to further improve the security level, effectively prevent middleman attacks, and ensure the integrity of data during transmission; uses biometric encryption technology to generate keys, which increases the complexity and cracking difficulty of keys; and automatically generates and manages keys through trusted organizations, which reduces human errors and improves the efficiency of key management.

[0016] Other beneficial effects of the present invention will be further described in the specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 It is a flowchart of the data transmission method based on hybrid encryption in the present invention.

[0018] Figure 2 It is a structural block diagram of the data transmission system based on hybrid encryption in the present invention. DETAILED DESCRIPTION

[0019] The present invention will be further explained below in conjunction with the accompanying drawings and specific embodiments.

[0020] Embodiment 1: like Figure 1 As shown, this embodiment provides a data transmission method based on hybrid encryption, comprising the following steps: S1: The trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal, and uses digital identity registration technology to generate signature information for each user terminal, including the following steps: S1-1: The trusted institution performs key initialization, obtains public parameters, master keys and original public keys, and collects attribute information and identity numbers of each user terminal; The formula is:

[0021] In the formula, is a public parameter; is the master key; is the original public key; Integer domain A random number; Hash function for target hash; for The random number of the generator; is a random number Bilinear mapping of ; It is the base point of the prime domain; S1-2: Generate an asymmetric key using an asymmetric encryption algorithm based on the public parameters, the master key, the original public key, and the attribute information of the user terminal to obtain a public-private key pair of the corresponding user terminal; the public-private key pair includes a public key and a private key; The formula is:

[0022] In the formula, For user terminals The private key of Integer domain A random number; All are private key parameters; Public parameters The target hash hash function; Indicator quantity for user terminal; is the master key; is the original public key; For user terminals 's public key; for The random number of the generator; For user terminals Attribute information of A random number for the private key; S1-3: Perform digital identity registration based on the public key and identity number of the user terminal using digital identity registration technology to obtain the signature information of the corresponding user terminal; The formula is:

[0023] In the formula, k is a random number; For signature information; K u is the registration parameter; KID u For registration ID ; Hash function for target hash; ID u For user terminals identification number; For user terminals The private key of is a prime number order; To find the remainder function; S1-4: Traverse all user terminals, obtain the public-private key pair and signature information of each user terminal, store the public key in a trusted institution, and return the signature information and private key to the corresponding user terminal; S1-5: Collect historical biometrics of all legal users, and build a legal user biometric database based on the historical biometrics of several legal users; S2: The first user terminal as the sender generates a corresponding symmetric key according to the user's real-time biometric features, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel, including the following steps: S2-1: The first user terminal as the sender collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification passes, the corresponding symmetric key is generated, including the following steps: S2-1-1: The first user terminal as the sender collects the user's real-time biometric features, and searches and matches the legal user biometric feature database of the trusted institution based on the real-time biometric features to obtain a real-time matching result; S2-1-2: If the real-time matching result is that there is a matching historical biometric feature, the legal verification is passed and the next step is entered; otherwise, the legal verification fails and the data transmission ends; S2-1-3: Convert the user's real-time biometric features into a real-time digital sequence, and generate a corresponding symmetric key based on the real-time digital sequence using a hash function, such as the SHA-256 function; Biometrics include fingerprints, irises, and facial features. Each person's biometrics are unique, which makes the symmetric key based on biometrics highly secure. S2-2: Confirm the second user terminal as the recipient, and establish a quantum communication channel and several data transmission network channels between the first user terminal and the second user terminal, including the following steps: S2-2-1: confirming a second user terminal as a recipient, and obtaining a second physical address and a second IP address of the second user terminal; S2-2-2: Building a quantum communication line according to a first physical address of the first user terminal and a second physical address of the second user terminal; If necessary, several quantum repeaters connected in sequence are set up on the quantum communication line, and entanglement exchange operations are performed at the middle quantum repeater, so that two remote entangled states can be connected, thereby establishing quantum entanglement over a longer distance. By deploying quantum repeaters, the communication range of quantum key distribution can be expanded; S2-2-3: defining a data communication line according to a first IP address of the first user terminal and a second IP address of the second user terminal; S2-3: Using a pre-trained channel quality analysis model, selecting a target data transmission network channel from a number of data transmission network channels, including the following steps: S2-3-1: using any data transmission network channel as an initial target data transmission network channel, and sending a real-time heartbeat generation signal to the second user terminal through the initial target data transmission network channel; S2-3-2: Receive a real-time heartbeat response signal sent by the second user terminal, and collect real-time channel monitoring data between sending the real-time heartbeat generation signal and receiving the real-time heartbeat response signal; S2-3-3: Perform channel quality analysis based on the real-time channel monitoring data of the initial target data transmission network channel using a pre-trained channel quality analysis model to obtain a real-time channel quality analysis result; The channel quality analysis model is built based on the Random Forest (RF)-Attention-Multilayer Perceptron (MLP) algorithm, and the channel quality analysis model includes a key feature extraction module built based on the RF algorithm, an attention weight module built based on the Attention mechanism, and a channel quality analysis module built based on the MLP algorithm, which are connected in sequence; The key feature extraction module screens the feature components of the input channel monitoring data through the internal Classification And Regression Tree (CART), can process a large number of feature components, generate key feature importance scores for each feature component, and select the most stable and discriminative key feature components according to the key feature importance scores. The trained key feature extraction module can directly screen the newly input channel monitoring data according to the selected key features to obtain several corresponding key features. In this embodiment, the channel monitoring data includes channel transmission flow data, channel transmission response data and channel network signal data of the data transmission network channel, and the key features include flow packet size features, response delay features, signal transmission frequency features and network signal stability features; the Attention mechanism performs weighted fusion on the key features, enhances the model's attention to important features, and improves the accuracy and efficiency of model prediction; the MLP network, as a fully connected network, can perform accurate and efficient label prediction based on the fused features; S2-3-3-1: Based on the real-time channel monitoring data of the initial target data transmission network channel, use the pre-trained channel quality analysis model to perform channel quality analysis to obtain real-time channel quality analysis results, including the following steps: S2-3-3-2: input the real-time channel monitoring data of the initial target data transmission network channel into the pre-trained channel quality analysis model; S2-3-3-3: Use the key feature extraction module of the channel quality analysis model to extract M real-time key features of the real-time channel monitoring data, where M is the total number of key features; S2-3-3-4: According to the preset attention weight value, use the attention weight module to perform weighted fusion on the M real-time key features to obtain the real-time weighted fusion feature; S2-3-3-5: Based on the real-time weighted fusion features, use the channel quality analysis module to perform channel quality analysis and obtain real-time channel quality analysis results; S2-3-4: If the real-time channel quality analysis result is that the channel quality is poor, the next data transmission network channel will be switched and the channel quality analysis will be performed again, otherwise, the next step will be entered; S2-3-5: Using the current target data transmission network channel as the final target data transmission network channel; S3: The first user terminal symmetrically encrypts the real-time data according to the symmetric key to obtain encrypted real-time data, and signs the encrypted real-time data according to the signature information of the first user terminal to obtain real-time signature data; The formula is:

[0024] In the formula, It is encrypted real-time data; is a symmetric encryption function; For real-time data; is a symmetric key; is an indication quantity of the first user terminal;

[0025] In the formula, First user terminal Real-time signature data; Signature parameters; is a random number; is a prime number order; It is the base point of the prime domain; It is a one-way mapping hash function; First user terminal Signature information; First user terminal Registration parameters; First user terminal Registration ID ; First user terminal The terminal number of S4: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain the encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel, including the following steps: S4-1: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain the encrypted symmetric key, and sends the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel; The formula is:

[0026] In the formula, is the encrypted symmetric key; is an asymmetric encryption function; First user terminal The private key of S4-2: The first user terminal uses quantum key distribution (QKD) technology to encode the encrypted symmetric key into a key quantum state, transmits the key quantum state to the second user terminal through the quantum communication channel, measures the key quantum state, obtains a first measurement result, and publishes the first measurement result in the target data transmission network channel; Using quantum communication technology to encrypt and distribute keys makes it almost impossible to intercept or crack, thus ensuring the security of keys and the reliability of data transmission; S4-3: The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction according to the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key, including the following steps: S4-3-1: The second user terminal uses a preset correction code to perform error correction on the received key quantum state to obtain an error-corrected key quantum state; S4-3-2: Measure the quantum state of the key after error correction to obtain a second measurement result, and make the second measurement result public in the target data transmission network channel; S4-3-3: performing public basis vector comparison and error rate estimation on the second measurement result disclosed by the target data transmission network channel and the first measurement result of the first user terminal to obtain an encrypted symmetric key; The first user terminal and the second user terminal publicly compare the basis vectors for measuring the quantum state through the target data transmission network channel. Only when the basis vectors of the first user terminal and the second user terminal are the same, the second measurement result of the second user terminal is valid. By comparing some measurement results, the error rate of the quantum communication line is estimated. If the error rate is too high, it may indicate that there is eavesdropping, and the quantum key interaction should be abandoned at this time. S5: The second user terminal performs digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data, including the following steps: S5-1: The second user terminal calls the trusted institution to authenticate the real-time signature data. If the authentication is successful, the next step is entered; otherwise, the data transmission is terminated.

[0027] In the formula, is the signature authentication parameter. If the left formula is equal to the right formula, the identity authentication is successful. S5-2: extracting the public key of the first user terminal stored in the trusted institution, and asymmetrically decrypting the encrypted symmetric key according to the public key to obtain the decrypted symmetric key; The formula is:

[0028] In the formula, is the decrypted symmetric key; is an asymmetric decryption function; First user terminal 's public key; S5-3: Symmetrically decrypt the encrypted real-time data according to the decrypted symmetric key to obtain completely decrypted real-time data; The formula is:

[0029] In the formula, It is real-time data after complete decryption; is the symmetric decryption function.

[0030] Embodiment 2: like Figure 2As shown, this embodiment provides a data transmission system based on hybrid encryption, which is used to implement a data transmission method. The system includes a trusted institution and a plurality of user terminals. The trusted institutions are respectively connected to the plurality of user terminals for communication. The user terminals include a first user terminal as a sender and a second user terminal as a receiver. The first user terminal is connected to the second user terminal for communication. A trusted institution is used to generate a public-private key pair for each user terminal using an asymmetric encryption algorithm, and to generate signature information for each user terminal using digital identity registration technology; The first user terminal is used to generate a corresponding symmetric key according to the real-time biometric features of the user, confirm the second user terminal as the recipient, and use the pre-trained channel quality analysis model to select a target data transmission network channel; symmetrically encrypt the real-time data according to the symmetric key to obtain encrypted real-time data, and sign the encrypted real-time data according to the signature information of the first user terminal to obtain real-time signature data; asymmetrically encrypt the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and send the encrypted symmetric key, the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel; The second user terminal is used to perform digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data.

[0031] The present invention provides a data transmission method and system based on hybrid encryption, which adopts a hybrid encryption algorithm of an asymmetric encryption algorithm and a symmetric encryption algorithm to perform double encryption on data, thereby ensuring the security of data and the reliability of data transmission, and combines digital identity authentication technology to further improve the security level, effectively prevent middleman attacks, and ensure the integrity of data during transmission; uses biometric encryption technology to generate keys, which increases the complexity and cracking difficulty of keys; and automatically generates and manages keys through trusted organizations, which reduces human errors and improves the efficiency of key management.

[0032] The present invention is not limited to the above optional implementations, and anyone can derive other various forms of products under the enlightenment of the present invention. The above specific implementations should not be understood as limiting the scope of protection of the present invention. The scope of protection of the present invention should be based on the definition in the claims, and the description can be used to interpret the claims.

Claims

1. A data transmission method based on hybrid encryption, characterized in that: The steps include: The trusted institution generates a public-private key pair for each user terminal using an asymmetric encryption algorithm, and generates signature information for each user terminal using a digital identity registration technology; the public-private key pair includes a public key and a private key; The first user terminal as the sender generates a corresponding symmetric key according to the user's real-time biometric features, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel; The first user terminal symmetrically encrypts the real-time data according to the symmetric key to obtain the encrypted real-time data, and signs the encrypted real-time data according to the signature information of the first user terminal to obtain the real-time signature data; The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal through the target data transmission network channel; The second user terminal performs digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data.

2. A data transmission method based on hybrid encryption according to claim 1, characterized in that: The trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal, and uses digital identity registration technology to generate signature information for each user terminal, including the following steps: The trusted institution performs key initialization, obtains public parameters, master keys and original public keys, and collects attribute information and identity numbers of each user terminal; According to the public parameters, the master key, the original public key and the attribute information of the user terminal, an asymmetric key is generated using an asymmetric encryption algorithm to obtain the corresponding public-private key pair of the user terminal; the public-private key pair includes a public key and a private key; According to the public key and identity number of the user terminal, use the digital identity registration technology to register the digital identity and obtain the signature information of the corresponding user terminal; Traverse all user terminals, obtain the public-private key pair and signature information of each user terminal, store the public key in a trusted institution, and return the signature information and private key to the corresponding user terminal; Collect historical biometrics of all legal users, and build a legal user biometric database based on the historical biometrics of several legal users.

3. A data transmission method based on hybrid encryption according to claim 2, characterized in that: The first user terminal as the sender generates a corresponding symmetric key according to the real-time biometric features of the user, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel, including the following steps: The first user terminal as the sender collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification is passed, the corresponding symmetric key is generated; Confirming a second user terminal as a receiver, and establishing a quantum communication channel and several data transmission network channels between the first user terminal and the second user terminal; A pre-trained channel quality analysis model is used to select a target data transmission network channel from several data transmission network channels.

4. A data transmission method based on hybrid encryption according to claim 3, characterized in that: The first user terminal as the sender collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification is passed, the corresponding symmetric key is generated, including the following steps: The first user terminal as the sender collects the real-time biometric features of the user, and searches and matches the biometric feature database of legitimate users of the trusted institution based on the real-time biometric features to obtain a real-time matching result; If the real-time matching result is that there is a matching historical biometric feature, the legal verification is passed and the next step is entered; otherwise, the legal verification fails and the data transmission ends; The user's real-time biometric features are converted into a real-time digital sequence, and a hash function is used to generate a corresponding symmetric key based on the real-time digital sequence.

5. A data transmission method based on hybrid encryption according to claim 3, characterized in that: Using a pre-trained channel quality analysis model, a target data transmission network channel is selected from a number of data transmission network channels, including the following steps: Using any data transmission network channel as an initial target data transmission network channel, and sending a real-time heartbeat generation signal to the second user terminal through the initial target data transmission network channel; Receive a real-time heartbeat response signal sent by a second user terminal, and collect real-time channel monitoring data between sending the real-time heartbeat generation signal and receiving the real-time heartbeat response signal; According to the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain a real-time channel quality analysis result; If the real-time channel quality analysis result is that the channel quality is poor, the next data transmission network channel will be switched and the channel quality analysis will be performed again, otherwise, the next step will be entered; The current target data transmission network channel is used as the final target data transmission network channel.

6. A data transmission method based on hybrid encryption according to claim 5, characterized in that: The channel quality analysis model is constructed based on the RF-Attention-MLP algorithm, and the channel quality analysis model includes a key feature extraction module constructed based on the RF algorithm, an attention weight module constructed based on the Attention mechanism, and a channel quality analysis module constructed based on the MLP algorithm, which are connected in sequence.

7. A data transmission method based on hybrid encryption according to claim 6, characterized in that: According to the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain a real-time channel quality analysis result, including the following steps: Inputting the real-time channel monitoring data of the initial target data transmission network channel into the pre-trained channel quality analysis model; Use the key feature extraction module of the channel quality analysis model to extract M real-time key features of the real-time channel monitoring data, where M is the total number of key features; According to the preset attention weight value, the attention weight module is used to perform weighted fusion on the M real-time key features to obtain the real-time weighted fusion feature; According to the real-time weighted fusion features, the channel quality analysis module is used to perform channel quality analysis to obtain real-time channel quality analysis results.

8. A data transmission method based on hybrid encryption according to claim 3, characterized in that: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain the encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel, including the following steps: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain the encrypted symmetric key, and sends the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel; The first user terminal uses the QKD technology to encode the encrypted symmetric key into a key quantum state, transmits the key quantum state to the second user terminal through the quantum communication channel, measures the key quantum state to obtain a first measurement result, and publishes the first measurement result in the target data transmission network channel; The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction based on the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key.

9. A data transmission method based on hybrid encryption according to claim 8, characterized in that: The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction according to the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key, including the following steps: The second user terminal uses a preset correction code to perform error correction on the received key quantum state to obtain an error-corrected key quantum state; Measuring the quantum state of the key after error correction to obtain a second measurement result, and publishing the second measurement result in a target data transmission network channel; The second measurement result disclosed by the target data transmission network channel and the first measurement result of the first user terminal are compared with public basis vectors and the error rate is estimated to obtain an encrypted symmetric key.

10. A data transmission system based on hybrid encryption, used to implement the data transmission method according to any one of claims 1 to 9, characterized in that: The system includes a trusted institution and several user terminals. The trusted institution is respectively connected to the several user terminals in communication. The user terminals include a first user terminal as a sender and a second user terminal as a receiver. The first user terminal is connected to the second user terminal in communication.

Images