A mobile communication method, a mobile terminal and a server

Abstract

The application discloses a kind of mobile communication method, mobile terminal equipment and server, method is used to realize the data communication between client and server, client is integrated with SIM card, server is integrated with data processing unit, method includes: first random number is generated by SIM card, first random number and the equipment information of SIM card are signed by first hybrid algorithm by SIM card;Second random number and second hybrid algorithm signature are generated by data processing unit, and second hybrid algorithm signature comes from the combined signature of first random number and second random number;SIM card encrypts first random number and second random number;Session key is encrypted by SIM card, and session key is sent to data processing unit decryption by client, and data communication is realized between client and server.Compared with prior art, the mobile communication method provided by the application ensures the secure communication between client and server, even under the threat of quantum computing, the confidentiality and integrity of data can be maintained.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of mobile communication technology, in particular to a mobile communication method, a mobile terminal and a server. BACKGROUND

[0002] The scheme currently used by the server is to use a classical cryptography scheme. For example, the web server uses the ssl protocol to perform handshake authentication and negotiate an encryption method to encrypt data, thereby achieving the effect of data confidentiality. The algorithms used in the SSL protocol are all based on classical cryptography schemes and cannot resist quantum effects.

[0003] Due to the continuous development of quantum computing technology, the calculation speed of quantum cryptography algorithms is very fast, and can crack the most advanced cryptographic algorithms in a few seconds, posing a great threat to existing classical cryptographic algorithms.

[0004] To solve the short board problem of traditional classical cryptography in quantum algorithm resistance, quantum algorithm resistance needs to be introduced. When introducing quantum algorithm resistance, it is also necessary to consider not affecting the previous transmission protocol. Traditional cryptographic algorithms have been very maturely applied in various fields and are accepted as standards by everyone. Before the new quantum-resistant standard is introduced, quantum-resistant algorithms need to be introduced on the basis of traditional cryptography, and the communication protocol followed by traditional cryptography needs to be followed. Quantum algorithms with traditional cryptographic algorithms can be applied to various fields. SUMMARY

[0005] The purpose of the present application is to provide a mobile communication method, a mobile terminal device and a server to solve the technical problems in the prior art and ensure that the server and the client can maintain secure communication.

[0006] In a first aspect, the present application provides a mobile communication method for realizing data communication between a client and a server, wherein the client is integrated with a SIM card, and the server is integrated with a data processing unit, and the method comprises the following steps:

[0007] The SIM card generates a first random number, and the SIM card performs a first hybrid algorithm signature on the first random number and device information of the SIM card;

[0008] The first hybrid algorithm signature is sent by the client to the data processing unit for signature verification. After successful signature verification, a second random number and a second hybrid algorithm signature are generated by the data processing unit, and the second hybrid algorithm signature is derived from the combined signature of the first random number and the second random number;

[0009] The second hybrid algorithm signature is sent by the client to the SIM card for signature verification. After successful signature verification, the SIM card encrypts the first random number and the second random number. The encrypted data is sent by the client to the data processing unit for decryption to confirm network access;

[0010] After successful network access confirmation, the SIM card encrypts the session key. The session key is sent by the client to the data processing unit for decryption. After successful decryption, the server notifies the client that the session establishment is successful, and data communication is realized between the client and the server.

[0011] As described above, a mobile communication method, preferably, before the client establishes communication with the server, the client registers in advance with the server, and the client and the server exchange certificates containing public key information with each other.

[0012] The client first initializes the SIM card. The client sends a command to the SIM card to read device information. The SIM card receives the command and returns the device information to the client.

[0013] After the client obtains the device information of the SIM card, it requests the SIM card to generate a random number. The SIM card generates a first random number and returns it to the client.

[0014] The SIM card uses the national encryption algorithm and the quantum-resistant algorithm to sign the first random number and the device information of the SIM card using the first hybrid algorithm.

[0015] As described above, a mobile communication method, preferably, after the first hybrid algorithm signature is completed, the first random number, the device information, and the first hybrid algorithm signature are sent by the client to the server. After receiving the information, the server queries whether the device information exists. If it exists, the server sends the first hybrid algorithm signature to the data processing unit for signature verification. The data processing unit uses the national encryption algorithm and the quantum-resistant algorithm to verify the first hybrid algorithm signature.

[0016] As described above, a mobile communication method, preferably, after the first hybrid algorithm signature is successfully verified, the server requests a random number from the data processing unit. The data processing unit generates a second random number and returns it to the server. The server sends a command to the data processing unit to mix and sign the first random number and the second random number. The data processing unit uses the national encryption algorithm and the quantum-resistant algorithm to mix and sign the first random number and the second random number to generate a second hybrid quantum signature.

[0017] The data processing unit returns the signature result to the server, the server notifies the client of the success of network access, and returns the second hybrid algorithm signature data to the client.

[0018] The mobile communication method as described above, preferably, the client sends the second hybrid signature data to the SIM card for signature verification, and waits for the signature verification result, the SIM card verifies the second hybrid algorithm signature by using the national secret algorithm and the quantum-resistant algorithm.

[0019] After the signature result shows that the signature verification is successful, the client requests the SIM card to encrypt the first random number and the second random number, the SIM card uses the server public key to encrypt the session key by using the national secret algorithm and the quantum-resistant algorithm, and the encrypted ciphertext is sent to the server by the client for correctness verification.

[0020] The mobile communication method as described above, preferably, the server requests the data processing unit to decrypt the ciphertext encrypted by the public key, the data processing unit decrypts the first hybrid algorithm signature by using the national secret algorithm and the quantum-resistant algorithm, and returns the decrypted plaintext to the server.

[0021] The server compares the decrypted plaintext with the first random number and the second random number stored in the server, if the comparison is correct, the server returns the client with the network access confirmation success.

[0022] The mobile communication method as described above, preferably, after the network access confirmation success, the client requests the session symmetric key from the SIM card, the SIM card uses the server public key to encrypt the session key by using the national secret algorithm and the quantum-resistant algorithm, and the encrypted symmetric key is sent to the server by the client.

[0023] After receiving the symmetric session key, the server sends the symmetric session key to the data processing unit for decryption, the data processing unit decrypts the session key by using the national secret algorithm and the quantum-resistant algorithm.

[0024] After the decryption success, the server notifies the client of the success of session establishment, and the two parties can start encrypted communication.

[0025] The mobile communication method as described above, preferably, the first random number and the second random number are quantum random numbers.

[0026] The mobile communication method as described above, preferably, the client is one of a vehicle-mounted device, a walkie-talkie device, a mobile phone, a computer device, a smart watch, an Internet of Things device, a wireless router, and a drone.

[0027] In a second aspect, the present application provides a mobile terminal device applied to the mobile communication method, which comprises a master control chip, a network communication module, an information storage module, a national secret algorithm module, an anti-quantum algorithm module, a first quantum random number module and an SD card module, and the network communication module, the information storage module, the national secret algorithm module, the anti-quantum algorithm module, the first quantum random number module and the SD card module are respectively connected with the master control chip in signal, wherein:

[0028] The network communication module is used for controlling the network communication of the SIM card.

[0029] The information storage module is used for storing program files and device information of the SIM card.

[0030] The national secret algorithm module is used for providing a national secret algorithm.

[0031] The anti-quantum algorithm module is used for providing an anti-quantum algorithm.

[0032] The first quantum random number module is used for providing a first random number.

[0033] The SD card module is used for storing a key encryption key ciphertext.

[0034] In a third aspect, the present application provides a server applied to the mobile communication method, wherein the server is integrated with a data processing unit, and the data processing unit comprises a key storage module, a first encryption module, a second encryption module and a second quantum random number module, wherein:

[0035] The key storage module is used for storing key information.

[0036] The first encryption module is used for providing a national secret algorithm.

[0037] The second encryption module is used for providing an anti-quantum algorithm.

[0038] The second quantum random number module is used for providing a second random number.

[0039] Compared with the prior art, the mobile communication method provided by the present application ensures the secure communication between the client and the server, and can maintain the confidentiality and integrity of data even under the threat of quantum computing. BRIEF DESCRIPTION OF DRAWINGS

[0040] Figure 1 is the principle flowchart of the mobile communication method provided by the embodiment of the present application;

[0041] Figure 2 is the structural block diagram of the SIM card provided by the embodiment of the present application;

[0042] Figure 3 is a structural block diagram of a server provided by an embodiment of the present application. DETAILED DESCRIPTION

[0043] The embodiments described below with reference to the drawings are exemplary and are only used to explain the present application and cannot be explained as a limitation of the present application.

[0044]

Mobile communication method

[0045] Referring to Figure 1 The embodiment of the present application provides a mobile communication method for realizing data communication between a client and a server, the client is one of a vehicle-mounted device, a walkie-talkie device, a mobile phone, a computer device, a smart watch, an Internet of Things device, a wireless router and a drone, and the server is integrated with a data processing unit.

[0046] In a feasible implementation manner, the mobile communication method comprises:

[0047] Step S101: client registration and certificate exchange.

[0048] Before the client and the server establish communication, the client registers in the server in advance, and the both exchange certificates, so that the server has the certificate of the client, and the client has the certificate of the server, and the certificate contains public key information.

[0049] Step S102: client initialization and signature request.

[0050] The client first initializes the SIM card, and the client sends an instruction of reading device information to the SIM card, and the SIM card returns the device information to the client after receiving the instruction.

[0051] After the client obtains the device information of the SIM card, the client requests the SIM card to generate a random number, the SIM card generates a first random number and returns it to the client, preferably, the first random number is a true random number, and is a quantum random number generated by a first quantum random number module in the SIM card. The quantum random number is a random number generated based on the principle of quantum mechanics. The intrinsic randomness of quantum mechanics means that the results of some quantum experiments cannot be predicted. This unpredictability is used to generate a truly random number. The random number sequence has unpredictability and non-repeatability.

[0052] The SIM card performs first hybrid algorithm signature on the first random number and the device information of the SIM card. In the embodiment of the present application, the SIM card uses a private key to perform first hybrid algorithm signature on the first random number and the device information of the SIM card by using a national secret algorithm and an anti-quantum algorithm, so as to verify the source and integrity of the information.

[0053] The national secret algorithm is full name national commercial cipher algorithm, in the embodiment provided by the application, the national secret algorithm includes one or more algorithms in SM1, SM2, SM3, SM4, SM7, SM9 and Zuchongzhi cipher algorithm (ZUC), preferably, SM2 algorithm is used as an example for description, SM2 is an asymmetric encryption algorithm based on ECC (Elliptic Curve Cryptography) elliptic curve, including digital signature, key exchange and public key encryption and other functions.

[0054] The anti-quantum algorithm is also called post-quantum cryptography (PQC), which is a kind of encryption algorithm designed to resist quantum computer attacks, in the embodiment provided by the application, the anti-quantum algorithm includes one or more algorithms in Kyber and Dilithum, preferably, Dilithium is used as an example for description, Dilithium is an anti-quantum digital signature algorithm based on lattice cryptography, which uses modular lattice learning with errors (LWE) and short integer solution (SIS) and other difficult problems in the lattice, which are extremely difficult to crack even under the attack of quantum computers.

[0055] The first hybrid algorithm signature provided by the SIM card uses the hybrid signature of SM2 and Dilithium, which combines the advantages of national secret algorithm and anti-quantum algorithm, improves the overall security, this hybrid signature method combines the high efficiency of SM2 and the post-quantum security of Dilithium, provides a powerful secure communication solution, which can maintain compatibility with existing cryptographic infrastructure while enhancing the defense capability against quantum computing threats, and prepares for future quantum computing threats, through SM2+Dilithium hybrid signature, the defense capability against quantum computing threats can be enhanced on the basis of existing national secret algorithm, and the long-term security of data is ensured.

[0056] Step S103: network access authentication.

[0057] After the first hybrid algorithm signature is completed, the client initiates network access authentication to the server after obtaining the first hybrid algorithm signature information. The first random number, device information and the first hybrid algorithm signature are sent to the server. After receiving the information, the server first queries whether the device information exists. If it exists, the server sends the first hybrid algorithm signature to the data processing unit for signature verification processing. The data processing unit uses the national encryption algorithm and the anti-quantum algorithm to verify the signature of the first hybrid algorithm signature. Corresponding to the first hybrid algorithm signature, the data processing unit also uses SM2 and Dilithium algorithms for signature verification, and returns the signature result to the server.

[0058] Step S104: Server response.

[0059] After the first hybrid algorithm signature is verified successfully, the server requests a random number from the data processing unit. The data processing unit generates a second random number and returns it to the server. Preferably, the second random number is a true random number and is a quantum random number generated by the second quantum random number module in the data processing unit.

[0060] The server sends an instruction to the data processing unit to mix and sign the first random number and the second random number. The data processing unit uses the national encryption algorithm and the anti-quantum algorithm to mix and sign the first random number and the second random number to generate a second hybrid quantum signature. In one possible implementation, the second hybrid algorithm signature provided by the data processing unit combines the SM2 and Dilithium encryption algorithms, combining the efficiency of SM2 and the post-quantum security of Dilithium.

[0061] The data processing unit returns the signature result to the server. The server notifies the client that the network access is successful and returns the second hybrid algorithm signature data to the client.

[0062] Step S105: Client signature verification and encryption.

[0063] The client sends the second hybrid signature data to the SIM card for signature verification operation and waits for the signature verification result. The SIM card uses the national encryption algorithm and the anti-quantum algorithm to verify the second hybrid algorithm signature. Corresponding to the second hybrid algorithm signature, the SIM card also uses SM2 and Dilithium algorithms for signature verification, and returns the signature result to the client.

[0064] The signature result is displayed as a successful signature, and the client requests the first random number and the second random number from the SIM card. The SIM card uses the server public key to encrypt the session key by using the national encryption algorithm and the quantum-resistant algorithm. In a feasible implementation, the encryption combines the SM2 and Dilithium encryption algorithms, combines the high efficiency of SM2 and the post-quantum security of Dilithium, and the public key encrypted ciphertext is sent to the server by the client for correctness verification.

[0065] Step S106: The server decrypts and confirms.

[0066] The server requests the data processing unit to decrypt the ciphertext encrypted by the public key. The data processing unit decrypts by using the national encryption algorithm and the quantum-resistant algorithm. Corresponding to the encryption process, the data processing unit also uses the SM2 and Dilithium algorithms for decryption, and returns the decrypted plaintext to the server.

[0067] The server compares the decrypted plaintext with the first random number and the second random number stored in the server. If the comparison is correct, the server returns the client network access confirmation success.

[0068] Step S107: Session key exchange.

[0069] After the network access confirmation is successful, the client requests the symmetric key of the session from the SIM card. The SIM card uses the server public key to encrypt the session key by using the national encryption algorithm and the quantum-resistant algorithm. In a feasible implementation, the encryption combines the SM2 and Dilithium encryption algorithms, combines the high efficiency of SM2 and the post-quantum security of Dilithium, and the encrypted symmetric key is sent to the server by the client.

[0070] After receiving the symmetric session key, the server sends it to the data processing unit for decryption. The data processing unit uses the national encryption algorithm and the quantum-resistant algorithm to decrypt the session key. Corresponding to the encryption process, the data processing unit also uses the SM2 and Dilithium algorithms for decryption.

[0071] After successful decryption, the server notifies the client that the session establishment is successful, and the two parties can start encrypted communication.

[0072] The mobile communication method provided by the above embodiment increases the function of resisting quantum algorithm in the SIM card of the client and the data processing unit of the server, and uses the resisting quantum algorithm to encrypt data. Even if a quantum computer can break the encryption protocol of the traditional national secret algorithm and obtain the data of the server, only the ciphertext of the data of the server can be obtained, and the real data of the server is encrypted by using the resisting quantum algorithm. Even if the data ciphertext is obtained, the real data content cannot be cracked. The data can be effectively kept secret, the security of the communication of the server is increased, the safe communication between the client and the server is ensured, and the data confidentiality and integrity can be maintained even under the threat of quantum computing.

[0073] Mobile terminal device

[0074] With reference to Figure 2 The embodiment of the application provides a mobile terminal device applied to the mobile communication method, and the mobile terminal device is used as a client and integrates various security functions for processing network communication, data storage, encryption operation and key management. Specifically, the mobile terminal device comprises a master control chip, a network communication module, an information storage module, a national secret algorithm module, a resisting quantum algorithm module, a first quantum random number module and an SD card module. The network communication module, the information storage module, the national secret algorithm module, the resisting quantum algorithm module, the first quantum random number module and the SD card module are respectively connected with the master control chip. The master control chip and various modules can be integrated in a SIM card. The SIM card can be built-in or detachably arranged in the mobile terminal device. The mobile terminal device is one of a vehicle-mounted device, a walkie-talkie device, a mobile phone, a computer device, a smart watch, an Internet of Things device, a wireless router and a drone. In the mobile terminal device,

[0075] The master control chip is a central processing unit of the mobile terminal device, is responsible for controlling and coordinating all functions of the mobile terminal device, manages the network communication module, and ensures that the mobile terminal device can perform operations such as online and phone call. The master control chip controls the generation of the first quantum random number module to provide the first random number for the encryption process, manages the storage operation of the SD card module, including the storage and backup of the key, and coordinates the operation of the national secret algorithm and the resisting quantum algorithm.

[0076] The network communication module can be used for controlling the network communication of the mobile terminal device, is responsible for the network connection of the mobile terminal device, including data transmission and voice call, and cooperates with the master control chip to execute network-related instructions.

[0077] The information storage module can be used for storing program files and device information of the mobile terminal device, and is divided into two parts: one part is used for storing program files, and the other part is used for storing sensitive information such as mobile phone number, card information, PIN code, certificate and public and private key information, to ensure the safe storage and access of all sensitive data.

[0078] The national cryptographic algorithm module can be used to provide national cryptographic algorithms, execute encryption algorithms such as SM2, SM3, and SM4 issued by the National Cryptographic Administration, and be used for data encryption, decryption, digital signature, and verification operations.

[0079] The anti-quantum algorithm module provides anti-quantum algorithms such as Kyber and Dilithium on one hand to ensure data security in the quantum computing era, and on the other hand to generate and verify anti-quantum signatures.

[0080] The first quantum random number module can be used to provide a first random number, which is a high-quality quantum random number that cannot be predicted, and is used for key generation and secure communication in the encryption process.

[0081] The SD card module can be used to store key encryption key ciphertext, and is used for mass storage and backup of keys to prevent key loss, and cooperates with the master control chip to perform storage and backup operations.

[0082] The entire system realizes the integration of network communication, data storage, encryption operation, and key management through the coordination of the master control chip. Not only does it improve the security of mobile terminal devices, but also ensures long-term security in the face of quantum computing threats. By using national cryptographic algorithms and anti-quantum algorithms, mobile terminal devices can provide strong security protection to protect user data and communication security. At the same time, the introduction of the SD card module provides an additional storage and backup solution for keys, further enhancing the reliability and data protection capabilities of mobile terminal devices.

[0083]

Service end data processing unit

[0084] Referring to Figure 3 The present application provides a kind of service end, applied to the mobile communication method described above, service end is integrated with data processing unit, data processing unit plays the core role, is responsible for processing encryption, decryption, signature, verification and key management etc., data processing unit includes key storage module, first encryption module, second encryption module and second quantum random number module, service end is executed these operations by calling different modules, to ensure the security and integrity of data, wherein:

[0085] The key storage module can be used to store key information and other sensitive data, providing a secure storage solution to ensure data confidentiality and integrity.

[0086] The first encryption module can be used to provide national cryptographic algorithms and execute encryption and decryption operations based on algorithms issued by the National Cryptographic Administration (such as SM2, SM3, SM4, etc.), which can encrypt data, generate digital signatures, or verify the validity of signatures.

[0087] The second encryption module can be used to provide anti-quantum algorithms, perform post-quantum cryptography (PQC) related encryption and decryption operations such as Kyber and Dilithium signature algorithms, provide security in the quantum computing era, and ensure that data is protected even in the face of quantum computers.

[0088] The second quantum random number module can be used to provide a second random number, which is a high-quality quantum random number that cannot be predicted, for key generation in encryption processes, and the generated second random number or key can be directly stored in the key storage module.

[0089] Wherein: the first encryption module and the second encryption module can independently interact with the key storage module to store or retrieve key information, and this design allows the server to select appropriate encryption algorithms according to different security requirements.

[0090] The second random number generated by the second quantum random number module can be directly used in the key generation process in the first encryption module and the second encryption module, or stored in the key storage module for later use.

[0091] When the server needs to perform encryption or decryption operations, it will call the corresponding encryption module according to the nature of the operation (e.g., whether post-quantum security is required).

[0092] The server can also call the second quantum random number module to generate new random numbers as needed for key exchange or data encryption.

[0093] The modular design of the data processing unit improves the flexibility and scalability of the system, allowing the server to adjust its encryption strategy according to changing security requirements and threat environments. At the same time, by separating key management and encryption operations, the system improves security because even if the encryption module is attacked, the keys in the storage module are still protected.

[0094] The above describes the structure, features and effects of the present application in detail according to the embodiments shown in the drawings. The above description is only the preferred embodiment of the present application, but the present application is not limited by the drawings shown. Any changes or modifications made in accordance with the concept of the present application, or equivalent embodiments with equivalent changes, are still within the scope of the present application.

Claims

1. A mobile communication method for realizing data communication between a client and a server, characterized in that, The client is integrated with a SIM card, and the server is integrated with a data processing unit, and the method comprises: The SIM card generates a first random number, and the SIM card uses a national secret algorithm and an anti-quantum algorithm to perform a first hybrid algorithm signature on the first random number and device information of the SIM card; The first hybrid algorithm signature is sent by the client to the data processing unit for signature verification, and after successful signature verification, a second random number and a second hybrid algorithm signature are generated by the data processing unit, the second hybrid algorithm signature being a combined signature of the first random number and the second random number and being generated by using a national secret algorithm and an anti-quantum algorithm; The second hybrid algorithm signature is sent by the client to the SIM card for signature verification, and after successful signature verification, the SIM card encrypts the first random number and the second random number, and the encrypted data is sent by the client to the data processing unit for decryption to perform network access confirmation; After successful network access confirmation, the SIM card encrypts a session key, the session key is sent by the client to the data processing unit for decryption, and after successful decryption, the server notifies the client that the session establishment is successful, and data communication is realized between the client and the server.

2. The method of claim 1, wherein: Before the client and the server establish communication, the client registers in advance in the server, and the client and the server exchange certificates with each other, and the certificates contain public key information; The client first initializes the SIM card, and the client sends a command to the SIM card to read device information, and the SIM card returns the device information to the client after receiving the command; After the client obtains the device information of the SIM card, the client requests the SIM card to generate a random number, and the SIM card generates a first random number and returns it to the client.

3. The method of claim 2, wherein: After the first hybrid algorithm signature is completed, the first random number, the device information, and the first hybrid algorithm signature are all sent by the client to the server, and after receiving the information, the server queries whether the device information exists, if it exists, the server sends the first hybrid algorithm signature to the data processing unit for signature verification, and the data processing unit uses a national secret algorithm and an anti-quantum algorithm to verify the first hybrid algorithm signature.

4. The method of claim 1, wherein: After the first hybrid algorithm signature is successfully verified, the server requests a random number from the data processing unit, the data processing unit generates a second random number and returns it to the server, and the server sends a command to the data processing unit to perform a hybrid signature on the first random number and the second random number, and the data processing unit uses a national secret algorithm and an anti-quantum algorithm to perform a hybrid signature on the first random number and the second random number to generate a second hybrid quantum signature; The data processing unit returns the signature result to the server, the server notifies the client that the network access is successful, and returns the second hybrid algorithm signature data to the client.

5. The method of claim 1, wherein: The client sends the second hybrid algorithm signature data to the SIM card for signature verification, and waits for the signature verification result. The SIM card verifies the second hybrid algorithm signature using the national encryption algorithm and the quantum-resistant algorithm; After the signature verification result is displayed as successful, the client requests the SIM card to encrypt the first random number and the second random number. The SIM card uses the server public key to encrypt the session key using the national encryption algorithm and the quantum-resistant algorithm. The encrypted ciphertext is sent to the server by the client for correctness verification.

6. The method of claim 1, wherein: The server requests the data processing unit to decrypt the public key encrypted ciphertext. The data processing unit decrypts the first hybrid algorithm signature using the national encryption algorithm and the quantum-resistant algorithm, and returns the decrypted plaintext to the server; The server compares the decrypted plaintext with the first random number and the second random number stored in the server. If the comparison is correct, the server returns the client with a successful network access confirmation.

7. The method of claim 1, wherein: After the network access confirmation is successful, the client requests the session symmetric key from the SIM card. The SIM card uses the server public key to encrypt the session key using the national encryption algorithm and the quantum-resistant algorithm. The encrypted symmetric key is sent to the server by the client. After receiving the symmetric session key, the server sends it to the data processing unit for decryption. The data processing unit decrypts the session key using the national encryption algorithm and the quantum-resistant algorithm. After successful decryption, the server notifies the client that the session has been successfully established, and the two parties can start encrypted communication.

8. The method of claim 1, wherein: The first random number and the second random number are quantum random numbers.

9. The method of claim 1, wherein: The client is one of a vehicle-mounted device, a walkie-talkie device, a mobile phone, a computer device, a smart watch, an Internet of Things device, a wireless router, and a drone.

10. A mobile terminal device for use in the mobile communication method according to any one of claims 1 to 9, characterized by The mobile terminal device includes a main control chip, a network communication module, an information storage module, a national encryption algorithm module, a quantum-resistant algorithm module, a first quantum random number module, and an SD card module. The network communication module, the information storage module, the national encryption algorithm module, the quantum-resistant algorithm module, the first quantum random number module, and the SD card module are respectively connected to the main control chip. The network communication module can be used to control the network communication of the mobile terminal device. The information storage module can be used to store program files and device information of the mobile terminal device. The national encryption algorithm module can be used to provide the national encryption algorithm. The quantum-resistant algorithm module can be used to provide the quantum-resistant algorithm. The first quantum random number module can be used to provide the first random number. The SD card module can be used to store key encryption key ciphertext.

11. A server, characterized by The server is integrated with a data processing unit. The data processing unit includes a key storage module, a first encryption module, a second encryption module, and a second quantum random number module. The key storage module can be used to store key information. The first encryption module can be used to provide the national encryption algorithm. The second encryption module can be used to provide the quantum-resistant algorithm. ​ ​ ​ The second quantum random number module can be used to provide a second random number.

Images