A data transmission method and system based on hybrid encryption

Abstract

The present invention belongs to the field of data transmission technology and discloses a data transmission method and system based on hybrid encryption. The method comprises the following steps: a trusted institution generates a public-private key pair and signature information for each user terminal; a first user terminal generates a symmetric key and selects a target data transmission network channel; the first user terminal symmetrically encrypts real-time data based on the symmetric key and signs the encrypted real-time data; the first user terminal asymmetrically encrypts the symmetric key and sends the encrypted symmetric key, encrypted real-time data, and real-time signature data to a second user terminal; the second user terminal performs digital identity authentication, asymmetrically decrypts the encrypted symmetric key, and symmetrically decrypts the encrypted real-time data based on the decrypted symmetric key. The present invention solves the problems of low data security and low transmission reliability in the prior art.

Description

Technical Field

[0001] The present invention belongs to the technical field of data transmission, and in particular relates to a data transmission method and system based on hybrid encryption. Background Art

[0002] Data transmission technology refers to the methods and means of transferring data between different devices or networks. With the rapid development of information technology, data transmission technology plays a vital role in modern society. Data security is particularly important during data transmission, as data is more vulnerable to attacks during transmission, and data transmission is subject to threats such as unauthorized access, leakage, tampering, and destruction.

[0003] The traditional single-layer encryption algorithm used in existing data transmission has poor data encryption capabilities. Its encryption key can be easily intercepted and brute-force cracked by illegal users, resulting in the transmitted data being easily decrypted. Therefore, data security and transmission reliability cannot be guaranteed. Summary of the Invention

[0004] In order to solve the problems of low data security and low transmission reliability in the prior art, the present invention aims to provide a data transmission method and system based on hybrid encryption.

[0005] The technical solution adopted in the present invention is:

[0006] A data transmission method based on hybrid encryption includes the following steps:

[0007] The trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal and uses digital identity registration technology to generate signature information for each user terminal; the public-private key pair includes a public key and a private key;

[0008] The first user terminal, acting as the sender, generates a corresponding symmetric key based on the user's real-time biometrics, confirms the second user terminal, acting as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel;

[0009] The first user terminal symmetrically encrypts the real-time data according to the symmetric key to obtain encrypted real-time data, and signs the encrypted real-time data according to the signature information of the first user terminal to obtain real-time signature data;

[0010] The first user terminal asymmetrically encrypts the symmetric key based on the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal through the target data transmission network channel;

[0011] The second user terminal performs digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data.

[0012] Furthermore, the trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal, and uses digital identity registration technology to generate signature information for each user terminal, including the following steps:

[0013] The trusted institution performs key initialization, obtains public parameters, master keys, and original public keys, and collects attribute information and identity numbers of each user terminal;

[0014] Based on the public parameters, the master key, the original public key, and the attribute information of the user terminal, an asymmetric key is generated using an asymmetric encryption algorithm to obtain the corresponding public-private key pair of the user terminal; the public-private key pair includes a public key and a private key;

[0015] According to the public key and identity number of the user terminal, use the digital identity registration technology to register the digital identity and obtain the signature information of the corresponding user terminal;

[0016] Traverse all user terminals, obtain the public and private key pairs and signature information of each user terminal, store the public key in a trusted institution, and return the signature information and private key to the corresponding user terminal;

[0017] Collect the historical biometrics of all legal users and build a legal user biometric database based on the historical biometrics of several legal users.

[0018] Furthermore, the first user terminal as the sender generates a corresponding symmetric key based on the user's real-time biometric features, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel, including the following steps:

[0019] The first user terminal, acting as the sender, collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification passes, the corresponding symmetric key is generated;

[0020] Identify a second user terminal as the recipient, and establish a quantum communication channel and several data transmission network channels between the first user terminal and the second user terminal;

[0021] Use the pre-trained channel quality analysis model to select the target data transmission network channel from several data transmission network channels.

[0022] Furthermore, the first user terminal as the sender collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification passes, the corresponding symmetric key is generated, including the following steps:

[0023] The first user terminal, acting as the sender, collects the user's real-time biometric features and searches and matches the real-time biometric features in the legal user biometric feature database of the trusted institution to obtain a real-time matching result;

[0024] If the real-time matching result shows that there is a matching historical biometric feature, the legal verification is passed and the next step is entered; otherwise, the legal verification fails and the data transmission ends;

[0025] The user's real-time biometric features are converted into a real-time digital sequence, and a hash function is used based on the real-time digital sequence to generate the corresponding symmetric key.

[0026] Furthermore, using a pre-trained channel quality analysis model, a target data transmission network channel is selected from a plurality of data transmission network channels, including the following steps:

[0027] Using any data transmission network channel as an initial target data transmission network channel, and sending a real-time heartbeat generation signal to the second user terminal through the initial target data transmission network channel;

[0028] Receive the real-time heartbeat response signal sent by the second user terminal, and collect real-time channel monitoring data between the sending of the real-time heartbeat generation signal and the receiving of the real-time heartbeat response signal;

[0029] Based on the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain real-time channel quality analysis results;

[0030] If the real-time channel quality analysis result shows that the channel quality is poor, the next data transmission network channel will be switched and the channel quality analysis will be performed again. Otherwise, the process proceeds to the next step.

[0031] The current target data transmission network channel is used as the final target data transmission network channel.

[0032] Furthermore, the channel quality analysis model is constructed based on the RF-Attention-MLP algorithm, and the channel quality analysis model includes a key feature extraction module constructed based on the RF algorithm, an attention weight module constructed based on the Attention mechanism, and a channel quality analysis module constructed based on the MLP algorithm, which are connected in sequence.

[0033] Furthermore, based on the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain a real-time channel quality analysis result, including the following steps:

[0034] Inputting the initial real-time channel monitoring data of the target data transmission network channel into the pre-trained channel quality analysis model;

[0035] Use the key feature extraction module of the channel quality analysis model to extract M real-time key features of the real-time channel monitoring data, where M is the total number of key features;

[0036] According to the preset attention weight value, the attention weight module is used to perform weighted fusion on the M real-time key features to obtain the real-time weighted fusion feature;

[0037] According to the real-time weighted fusion features, the channel quality analysis module is used to perform channel quality analysis and obtain real-time channel quality analysis results.

[0038] Furthermore, the first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal through the target data transmission network channel, including the following steps:

[0039] The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel;

[0040] The first user terminal uses QKD technology to encode the encrypted symmetric key into a key quantum state, transmits the key quantum state to the second user terminal through a quantum communication channel, measures the key quantum state to obtain a first measurement result, and publishes the first measurement result on a target data transmission network channel;

[0041] The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction based on the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key.

[0042] Furthermore, the second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction based on the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key, including the following steps:

[0043] The second user terminal uses a preset correction code to perform error correction on the received key quantum state to obtain an error-corrected key quantum state;

[0044] Measuring the quantum state of the key after error correction to obtain a second measurement result, and publishing the second measurement result on a target data transmission network channel;

[0045] A public basis vector comparison and error rate estimation are performed on the second measurement result disclosed by the target data transmission network channel and the first measurement result of the first user terminal to obtain an encrypted symmetric key.

[0046] A data transmission system based on hybrid encryption is used to implement a data transmission method. The system includes a trusted organization and several user terminals. The trusted organization is communicatively connected to the several user terminals respectively. The user terminals include a first user terminal as a sender and a second user terminal as a receiver. The first user terminal is communicatively connected to the second user terminal.

[0047] The beneficial effects of the present invention are:

[0048] The present invention provides a data transmission method and system based on hybrid encryption, which adopts a hybrid encryption algorithm of an asymmetric encryption algorithm and a symmetric encryption algorithm to perform double encryption on data, thereby ensuring the security of the data and the reliability of data transmission. In addition, it combines digital identity authentication technology to further improve the security level, effectively prevent middleman attacks, and ensure the integrity of data during transmission; it uses biometric encryption technology to generate keys, which increases the complexity and cracking difficulty of the keys; and automatically generates and manages keys through trusted institutions, reducing human errors and improving the efficiency of key management.

[0049] Other beneficial effects of the present invention will be further described in the specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 It is a flowchart of the data transmission method based on hybrid encryption in the present invention.

[0051] Figure 2 It is a structural block diagram of the data transmission system based on hybrid encryption in the present invention. DETAILED DESCRIPTION

[0052] The present invention will be further explained below with reference to the accompanying drawings and specific embodiments.

[0053] Example 1:

[0054] like Figure 1 As shown, this embodiment provides a data transmission method based on hybrid encryption, comprising the following steps:

[0055] S1: The trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal and uses digital identity registration technology to generate signature information for each user terminal, including the following steps:

[0056] S1-1: The trusted institution performs key initialization, obtains public parameters, master key, and original public key, and collects attribute information and identity number of each user terminal;

[0057] The formula is:

[0058]

[0059] Where, is a public parameter; is the master key; is the original public key; Integer domain Random number; Hash function for the target hash; for The random number of the generator; is a random number Bilinear mapping of ; It is the base point of the prime domain;

[0060] S1-2: Based on the public parameters, the master key, the original public key, and the attribute information of the user terminal, an asymmetric key is generated using an asymmetric encryption algorithm to obtain the corresponding public-private key pair of the user terminal; the public-private key pair includes a public key and a private key;

[0061] The formula is:

[0062]

[0063] Where, For user terminals The private key of Integer domain Random number; All are private key parameters; For public parameters The target hash function; It is the indication quantity of the user terminal; is the master key; is the original public key; For user terminals 's public key; for The random number of the generator; For user terminals Attribute information of A random number for the private key;

[0064] S1-3: Use digital identity registration technology to register the digital identity based on the public key and identity number of the user terminal and obtain the signature information of the corresponding user terminal;

[0065] The formula is:

[0066]

[0067] Where, k is a random number; Signature information; K u is the registration parameter; KID u For registration ID ; Hash function for the target hash; ID u For user terminals identification number; For user terminals The private key of is a prime order; To find the remainder function;

[0068] S1-4: Traverse all user terminals, obtain the public and private key pairs and signature information of each user terminal, store the public key in a trusted institution, and return the signature information and private key to the corresponding user terminal;

[0069] S1-5: Collect historical biometrics of all legal users and build a legal user biometric database based on the historical biometrics of several legal users;

[0070] S2: The first user terminal, acting as the sender, generates a corresponding symmetric key based on the user's real-time biometrics, identifies the second user terminal, acting as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel, including the following steps:

[0071] S2-1: The first user terminal, acting as the sender, collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification passes, the corresponding symmetric key is generated, including the following steps:

[0072] S2-1-1: The first user terminal, acting as the sender, collects the user's real-time biometric features and searches and matches them against the biometric feature database of legitimate users of a trusted institution to obtain a real-time matching result.

[0073] S2-1-2: If the real-time matching result shows that there is a matching historical biometric feature, the legal verification is passed and the process proceeds to the next step. Otherwise, the legal verification fails and the data transmission ends.

[0074] S2-1-3: Convert the user's real-time biometrics into a real-time digital sequence and generate a corresponding symmetric key based on the real-time digital sequence using a hash function, such as the SHA-256 function;

[0075] Biometrics include fingerprints, irises, and facial features. Each person's biometrics are unique, which makes symmetric keys based on biometrics highly secure.

[0076] S2-2: Identify the second user terminal as the recipient, and establish a quantum communication channel and several data transmission network channels between the first user terminal and the second user terminal, including the following steps:

[0077] S2-2-1: Identify the second user terminal as the recipient and obtain the second physical address and second IP address of the second user terminal;

[0078] S2-2-2: Establishing a quantum communication line according to the first physical address of the first user terminal and the second physical address of the second user terminal;

[0079] If necessary, several quantum repeaters connected in sequence are set up in the quantum communication line. At the intermediate quantum repeater, entanglement exchange operation is performed. This can connect two remote entangled states, thereby establishing quantum entanglement over a longer distance. By deploying quantum repeaters, the communication range of quantum key distribution can be expanded.

[0080] S2-2-3: defining a data communication line according to the first IP address of the first user terminal and the second IP address of the second user terminal;

[0081] S2-3: Using a pre-trained channel quality analysis model, select a target data transmission network channel from among several data transmission network channels, including the following steps:

[0082] S2-3-1: using any data transmission network channel as an initial target data transmission network channel, and sending a real-time heartbeat generation signal to the second user terminal through the initial target data transmission network channel;

[0083] S2-3-2: Receive a real-time heartbeat response signal sent by the second user terminal, and collect real-time channel monitoring data between the sending of the real-time heartbeat generation signal and the receiving of the real-time heartbeat response signal;

[0084] S2-3-3: Based on the real-time channel monitoring data of the initial target data transmission network channel, use the pre-trained channel quality analysis model to perform channel quality analysis and obtain real-time channel quality analysis results;

[0085] The channel quality analysis model is built based on the Random Forest (RF)-Attention-Multilayer Perceptron (MLP) algorithm. It consists of a key feature extraction module based on the RF algorithm, an attention weight module based on the Attention mechanism, and a channel quality analysis module based on the MLP algorithm.

[0086] The key feature extraction module uses an internal Classification and Regression Tree (CART) to filter the feature components of the input channel monitoring data. It can process a large number of feature components and generate a key feature importance score for each feature component. The most stable and discriminative key feature components are selected based on the key feature importance score. The trained key feature extraction module can directly filter the newly input channel monitoring data based on the selected key features to obtain several corresponding key features. In this embodiment, the channel monitoring data includes channel transmission flow data, channel transmission response data, and channel network signal data of the data transmission network channel. The key features include flow packet size features, response delay features, signal transmission frequency features, and network signal stability features. The Attention mechanism performs weighted fusion of key features to enhance the model's attention to important features, thereby improving the accuracy and efficiency of model prediction. The MLP network, as a fully connected network, can accurately and efficiently predict labels based on the fused features.

[0087] S2-3-3-1: Based on the real-time channel monitoring data of the initial target data transmission network channel, use the pre-trained channel quality analysis model to perform channel quality analysis to obtain real-time channel quality analysis results, including the following steps:

[0088] S2-3-3-2: Input the real-time channel monitoring data of the initial target data transmission network channel into the pre-trained channel quality analysis model;

[0089] S2-3-3-3: Use the key feature extraction module of the channel quality analysis model to extract M real-time key features of the real-time channel monitoring data, where M is the total number of key features;

[0090] S2-3-3-4: According to the preset attention weight value, use the attention weight module to perform weighted fusion on the M real-time key features to obtain the real-time weighted fusion feature;

[0091] S2-3-3-5: Based on the real-time weighted fusion features, use the channel quality analysis module to perform channel quality analysis and obtain real-time channel quality analysis results;

[0092] S2-3-4: If the real-time channel quality analysis result shows that the channel quality is poor, the next data transmission network channel will be switched and the channel quality analysis will be repeated. Otherwise, the process proceeds to the next step.

[0093] S2-3-5: Use the current target data transmission network channel as the final target data transmission network channel;

[0094] S3: The first user terminal symmetrically encrypts the real-time data according to the symmetric key to obtain encrypted real-time data, and signs the encrypted real-time data according to the signature information of the first user terminal to obtain real-time signature data;

[0095] The formula is:

[0096]

[0097] Where, It is encrypted real-time data; is a symmetric encryption function; For real-time data; is a symmetric key; is an indication quantity of the first user terminal;

[0098]

[0099] Where, First user terminal Real-time signature data; Signature parameters; is a random number; is a prime order; It is the base point of the prime domain; It is a one-way mapping hash function; First user terminal Signature information; First user terminal Registration parameters; First user terminal Registration ID ; First user terminal The terminal number of

[0100] S4: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal through the target data transmission network channel, including the following steps:

[0101] S4-1: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel;

[0102] The formula is:

[0103]

[0104] Where, is the encrypted symmetric key; is an asymmetric encryption function; First user terminal The private key of

[0105] S4-2: The first user terminal uses quantum key distribution (QKD) technology to encode the encrypted symmetric key into a key quantum state, transmits the key quantum state to the second user terminal via a quantum communication channel, measures the key quantum state, obtains a first measurement result, and publishes the first measurement result on the target data transmission network channel;

[0106] Using quantum communication technology to distribute encrypted keys makes it almost impossible to intercept or crack, thus ensuring the security of the keys and the reliability of data transmission;

[0107] S4-3: The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction based on the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key, including the following steps:

[0108] S4-3-1: The second user terminal uses a preset correction code to perform error correction on the received key quantum state to obtain an error-corrected key quantum state;

[0109] S4-3-2: Measure the quantum state of the key after error correction to obtain a second measurement result, and publish the second measurement result on the target data transmission network channel;

[0110] S4-3-3: Perform a public basis vector comparison and error rate estimation on the second measurement result disclosed by the target data transmission network channel and the first measurement result of the first user terminal to obtain an encrypted symmetric key;

[0111] The first user terminal and the second user terminal publicly compare the basis vectors used to measure the quantum state through the target data transmission network channel. The second measurement result of the second user terminal is valid only when the basis vectors of the first user terminal and the second user terminal are the same. By comparing some of the measurement results, the error rate of the quantum communication line is estimated. If the error rate is too high, it may indicate that there is eavesdropping, and the quantum key exchange should be abandoned.

[0112] S5: The second user terminal performs digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain a decrypted symmetric key. The encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain fully decrypted real-time data, including the following steps:

[0113] S5-1: The second user terminal calls the trusted institution to authenticate the real-time signature data. If the authentication is successful, the process proceeds to the next step; otherwise, the data transmission ends.

[0114]

[0115] Where, is the signature authentication parameter. If the left formula is equal to the right formula, the identity authentication is successful.

[0116] S5-2: Extracting the public key of the first user terminal stored in the trusted institution, and asymmetrically decrypting the encrypted symmetric key based on the public key to obtain a decrypted symmetric key;

[0117] The formula is:

[0118]

[0119] Where, is the decrypted symmetric key; is an asymmetric decryption function; First user terminal 's public key;

[0120] S5-3: Symmetrically decrypt the encrypted real-time data according to the decrypted symmetric key to obtain fully decrypted real-time data;

[0121] The formula is:

[0122]

[0123] Where, It is real-time data after complete decryption; is the symmetric decryption function.

[0124] Example 2:

[0125] like Figure 2 As shown, this embodiment provides a data transmission system based on hybrid encryption, which is used to implement a data transmission method. The system includes a trusted institution and multiple user terminals. The trusted institutions are respectively connected to the multiple user terminals for communication. The user terminals include a first user terminal as a sender and a second user terminal as a receiver. The first user terminal is connected to the second user terminal for communication.

[0126] A trusted institution is used to generate a public-private key pair for each user terminal using an asymmetric encryption algorithm and to generate signature information for each user terminal using digital identity registration technology;

[0127] The first user terminal is configured to generate a corresponding symmetric key based on the user's real-time biometric features, identify the second user terminal as the recipient, and select a target data transmission network channel using a pre-trained channel quality analysis model; symmetrically encrypt the real-time data based on the symmetric key to obtain encrypted real-time data, and sign the encrypted real-time data based on the signature information of the first user terminal to obtain real-time signature data; asymmetrically encrypt the symmetric key based on the private key of the first user terminal to obtain an encrypted symmetric key, and transmit the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal via the target data transmission network channel;

[0128] The second user terminal is used to perform digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data.

[0129] The present invention provides a data transmission method and system based on hybrid encryption, which adopts a hybrid encryption algorithm of an asymmetric encryption algorithm and a symmetric encryption algorithm to perform double encryption on data, thereby ensuring the security of the data and the reliability of data transmission. In addition, it combines digital identity authentication technology to further improve the security level, effectively prevent middleman attacks, and ensure the integrity of data during transmission; it uses biometric encryption technology to generate keys, which increases the complexity and cracking difficulty of the keys; and automatically generates and manages keys through trusted institutions, reducing human errors and improving the efficiency of key management.

[0130] The present invention is not limited to the above optional embodiments. Anyone can derive various other forms of products based on the teachings of the present invention. The above specific embodiments should not be construed as limiting the scope of protection of the present invention. The scope of protection of the present invention shall be based on the scope defined in the claims, and the description can be used to interpret the claims.

Claims

1. A data transmission method based on hybrid encryption, characterized by: The steps include: The trusted institution uses an asymmetric encryption algorithm to generate a public-private key pair for each user terminal and uses digital identity registration technology to generate signature information for each user terminal, including the following steps: The trusted institution performs key initialization, obtains public parameters, master keys, and original public keys, and collects attribute information and identity numbers of each user terminal; Based on the public parameters, the master key, the original public key, and the attribute information of the user terminal, an asymmetric key is generated using an asymmetric encryption algorithm to obtain the corresponding public-private key pair of the user terminal; the public-private key pair includes a public key and a private key; According to the public key and identity number of the user terminal, use the digital identity registration technology to register the digital identity and obtain the signature information of the corresponding user terminal; Traverse all user terminals, obtain the public and private key pairs and signature information of each user terminal, store the public key in a trusted institution, and return the signature information and private key to the corresponding user terminal; Collect historical biometrics of all legal users and build a legal user biometric database based on the historical biometrics of several legal users; The first user terminal as the sender generates a corresponding symmetric key based on the user's real-time biometric features, confirms the second user terminal as the receiver, and uses a pre-trained channel quality analysis model to select a target data transmission network channel, including the following steps: The first user terminal, acting as the sender, collects the user's real-time biometric features and performs legal verification on the real-time biometric features. After the legal verification passes, the corresponding symmetric key is generated, including the following steps: The first user terminal, acting as the sender, collects the user's real-time biometric features and searches and matches the real-time biometric features in the legal user biometric feature database of the trusted institution to obtain a real-time matching result; If the real-time matching result shows that there is a matching historical biometric feature, the legal verification is passed and the next step is entered; otherwise, the legal verification fails and the data transmission ends; Convert the user's real-time biometrics into a real-time digital sequence, and use a hash function to generate a corresponding symmetric key based on the real-time digital sequence; Identify a second user terminal as the recipient, and establish a quantum communication channel and several data transmission network channels between the first user terminal and the second user terminal; Using a pre-trained channel quality analysis model, a target data transmission network channel is selected from multiple data transmission network channels, including the following steps: Using any data transmission network channel as an initial target data transmission network channel, and sending a real-time heartbeat generation signal to the second user terminal through the initial target data transmission network channel; Receive the real-time heartbeat response signal sent by the second user terminal, and collect real-time channel monitoring data between the sending of the real-time heartbeat generation signal and the receiving of the real-time heartbeat response signal; Based on the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain real-time channel quality analysis results; The channel quality analysis model is constructed based on the RF-Attention-MLP algorithm, and the channel quality analysis model includes a key feature extraction module constructed based on the RF algorithm, an attention weight module constructed based on the Attention mechanism, and a channel quality analysis module constructed based on the MLP algorithm, which are connected in sequence; Based on the real-time channel monitoring data of the initial target data transmission network channel, a pre-trained channel quality analysis model is used to perform channel quality analysis to obtain real-time channel quality analysis results, including the following steps: Inputting the initial real-time channel monitoring data of the target data transmission network channel into the pre-trained channel quality analysis model; Use the key feature extraction module of the channel quality analysis model to extract M real-time key features of the real-time channel monitoring data, where M is the total number of key features; According to the preset attention weight value, the attention weight module is used to perform weighted fusion on the M real-time key features to obtain the real-time weighted fusion feature; According to the real-time weighted fusion features, the channel quality analysis module is used to perform channel quality analysis and obtain real-time channel quality analysis results; If the real-time channel quality analysis result shows that the channel quality is poor, the next data transmission network channel will be switched and the channel quality analysis will be performed again. Otherwise, the process proceeds to the next step. Using the current target data transmission network channel as the final target data transmission network channel; The first user terminal symmetrically encrypts the real-time data according to the symmetric key to obtain encrypted real-time data, and signs the encrypted real-time data according to the signature information of the first user terminal to obtain real-time signature data; The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted symmetric key, the encrypted real-time data, and the real-time signature data to the second user terminal through the target data transmission network channel, including the following steps: The first user terminal asymmetrically encrypts the symmetric key according to the private key of the first user terminal to obtain an encrypted symmetric key, and sends the encrypted real-time data and the real-time signature data to the second user terminal through the target data transmission network channel; The first user terminal uses QKD technology to encode the encrypted symmetric key into a key quantum state, transmits the key quantum state to the second user terminal through a quantum communication channel, measures the key quantum state to obtain a first measurement result, and publishes the first measurement result on a target data transmission network channel; The second user terminal measures the received key quantum state to obtain a second measurement result, and performs quantum key interaction based on the second measurement result and the first measurement result of the first user terminal to obtain a corresponding encrypted symmetric key, including the following steps: The second user terminal uses a preset correction code to perform error correction on the received key quantum state to obtain an error-corrected key quantum state; Measuring the quantum state of the key after error correction to obtain a second measurement result, and publishing the second measurement result on a target data transmission network channel; Performing a public basis vector comparison and error rate estimation on the second measurement result disclosed by the target data transmission network channel and the first measurement result of the first user terminal to obtain an encrypted symmetric key; The second user terminal performs digital identity authentication on the real-time signature data. After the digital identity authentication is passed, the encrypted symmetric key is asymmetrically decrypted according to the public key of the first user terminal to obtain the decrypted symmetric key, and the encrypted real-time data is symmetrically decrypted according to the decrypted symmetric key to obtain the completely decrypted real-time data.

2. A data transmission system based on hybrid encryption, used to implement the data transmission method according to claim 1, characterized in that: The system includes a trusted institution and several user terminals. The trusted institution is communicatively connected to the several user terminals respectively. The user terminals include a first user terminal as a sender and a second user terminal as a receiver. The first user terminal is communicatively connected to the second user terminal.

Images