Train-ground communication key generation method and device, equipment and storage medium

Abstract

The invention discloses a train-ground communication key generation method and device, equipment and a storage medium. The method is configured on vehicle-mounted equipment of a train control system, and comprises the following steps: sending key request data to a radio block center through a wireless communication network under the condition of identifying that a current message authentication key is expired; when key response data returned by the wireless block center through the wireless communication network is received, generating initial key data with a preset bit number based on binary coding; performing quantum preparation on the initial key data to obtain real-time quantum data, and sending the real-time quantum data to a radio block center through a quantum communication network; and when quantum measurement data sent by the radio block center is received through the wireless communication network, determining a target message authentication key according to the real-time quantum data and the quantum measurement data. According to the technical scheme, the key is generated by using the quantum key distribution protocol between train-ground communication, so that the key generation efficiency and reliability can be improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communication technology, in particular to the field of vehicle-ground security communication technology, and specifically to a method, device, equipment and storage medium for generating a vehicle-ground communication key. Background Art

[0002] CTCS-3 (Chinese Train Control System Level 3) train control system is the core control system of my country's railway signal system, mainly composed of Radio Block Center (RBC) and on-board equipment (Automatic Train Protection, ATP). RBC sends the driving permit to ATP through the wireless communication network, and ATP calculates the speed control curve based on it to control the safe operation of the train.

[0003] At present, my country's CTCS-3 train control system adopts two main information security measures for the wireless communication between trains and grounds. First, the 3DES encryption algorithm is used for the communication between ATP and RBC. Second, certain technical management measures are taken for the authentication key KMAC (Keccak Message Authentication Code) used by ATP and RBC to run the 3DES (Triple Data Encryption Standard) algorithm. From the current KMAC key management measures, although the relevant agencies have formulated relevant management measures, there are still certain problems in key security and maintainability. For example, although one car and one key are adopted, the key is valid for a long time after it is generated, and there is a possibility of malicious cracking; after the KMAC key is generated, although encryption software is used to encrypt the KMAC, the distribution method of KMAC relies heavily on manual labor, and there is a risk of key leakage during the distribution process; the key needs to be manually burned into the RBC equipment and ATP equipment. In the context of the large number of train control equipment on the entire railway, the maintenance workload of the key is huge, and there is also the possibility of incorrect burning. Summary of the invention

[0004] The present application provides a method, device, equipment and storage medium for generating a vehicle-to-ground communication key to improve the efficiency and reliability of key generation.

[0005] According to one aspect of the present application, a method for generating a vehicle-to-ground communication key is provided, which is configured in an on-board device of a train control system; the train control system also includes a radio block center; the on-board device and the radio block center are connected using a wireless communication network and a quantum communication network; the method includes:

[0006] When recognizing that the current message authentication key is expired, sending key request data to the radio blocking center via the wireless communication network;

[0007] Upon receiving the key response data returned by the radio block center through the wireless communication network, generating initial key data of a preset number of bits based on binary coding;

[0008] Performing quantum preparation on the initial key data to obtain real-time quantum data, and sending the real-time quantum data to the wireless block center through the quantum communication network;

[0009] When the quantum measurement data transmitted by the wireless block center is received through the wireless communication network, a target message authentication key is determined according to the real-time quantum data and the quantum measurement data; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data.

[0010] According to another aspect of the present application, a method for generating a vehicle-to-ground communication key is provided, which is configured in a radio block center of a train control system; the train control system further includes an on-board device; the on-board device and the radio block center are connected using a wireless communication network and a quantum communication network; the method includes:

[0011] When receiving key request data sent by the vehicle-mounted device through the wireless communication network, determining key response data according to the key request data, and sending the key response data to the vehicle-mounted device through the wireless communication network;

[0012] When receiving the real-time quantum data sent by the vehicle-mounted device through the quantum communication network, quantum measurement is performed on the real-time quantum data and recorded to obtain target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device performing quantum preparation on the initial key data; the initial key data is generated by the vehicle-mounted device based on binary coding;

[0013] When the target key data satisfies the key generation condition, a target message authentication key and quantum measurement data of the target message authentication key are determined from the target key data, and the quantum measurement data are sent to the vehicle-mounted device via the wireless communication network.

[0014] According to another aspect of the present application, a vehicle-to-ground communication key generation device is provided, which is configured in an on-board device of a train control system; the train control system also includes a radio block center; the on-board device and the radio block center are connected using a wireless communication network and a quantum communication network; the device includes:

[0015] A key request module, configured to send key request data to the radio blocking center via the wireless communication network when recognizing that the current message authentication key has expired;

[0016] A data generation module, configured to generate initial key data of a preset number of bits based on binary coding when receiving key response data returned by the radio block center through the wireless communication network;

[0017] A quantum preparation module, used for performing quantum preparation on the initial key data to obtain real-time quantum data, and sending the real-time quantum data to the wireless block center through the quantum communication network;

[0018] The first key generation module is used to determine the target message authentication key according to the real-time quantum data and the quantum measurement data when receiving the quantum measurement data sent by the wireless block center through the wireless communication network; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data.

[0019] According to another aspect of the present application, a vehicle-to-ground communication key generation device is provided, which is configured in a radio block center of a train control system; the train control system also includes an on-board device; the on-board device and the radio block center are connected using a wireless communication network and a quantum communication network; the device includes:

[0020] a key response module, configured to determine key response data according to the key request data when receiving the key request data, and send the key response data to the vehicle-mounted device through the wireless communication network;

[0021] A quantum measurement module, configured to perform quantum measurement on the real-time quantum data sent by the vehicle-mounted device through the quantum communication network and record the real-time quantum data to obtain target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device performing quantum preparation on the initial key data; and the initial key data is generated by the vehicle-mounted device based on binary coding;

[0022] The second key generation module is used to determine the target message authentication key and the quantum measurement data of the target message authentication key from the target key data when the target key data meets the key generation condition, and send the quantum measurement data to the vehicle-mounted device through the wireless communication network.

[0023] According to another aspect of the present application, an electronic device is provided, the electronic device comprising:

[0024] one or more processors;

[0025] A memory for storing one or more programs;

[0026] When the one or more programs are executed by the one or more processors, the one or more processors implement any one of the vehicle-to-ground communication key generation methods provided in the embodiments of the present application.

[0027] According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the program is executed by a processor, any one of the vehicle-to-ground communication key generation methods provided in the embodiments of the present application is implemented.

[0028] According to another aspect of the present application, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the computer program implements any one of the vehicle-to-ground communication key generation methods provided in the embodiments of the present application.

[0029] The present application sends key request data to the wireless block center through the wireless communication network when the current message authentication key is identified to be expired; when receiving the key response data returned by the wireless block center through the wireless communication network, generates the initial key data of preset bits based on binary coding; performs quantum preparation on the initial key data to obtain real-time quantum data, and sends the real-time quantum data to the wireless block center through the quantum communication network; when receiving the quantum measurement data sent by the wireless block center through the wireless communication network, determines the target message authentication key according to the real-time quantum data and the quantum measurement data; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data. The above technical solution automatically identifies whether the key is expired through the vehicle-mounted device, and in the case of expiration, combines the quantum key distribution technology to realize the generation and secure distribution of the key between the vehicle-mounted device and the wireless block center, without the need for manual burning, reduces the maintenance workload of the train control key, and helps to improve the efficiency and reliability of key generation. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 is a flow chart of a method for generating a vehicle-to-ground communication key according to Embodiment 1 of the present application;

[0031] Figure 2 is a flow chart of a method for generating a vehicle-to-ground communication key according to Embodiment 2 of the present application;

[0032] Figure 3 It is a structural schematic diagram of a vehicle-to-ground communication key generation device provided according to Embodiment 3 of the present application;

[0033] Figure 4 It is a structural schematic diagram of a vehicle-to-ground communication key generation device provided according to Embodiment 4 of the present application;

[0034] Figure 5 It is a structural schematic diagram of an electronic device that implements the vehicle-to-ground communication key generation method of an embodiment of the present application. DETAILED DESCRIPTION

[0035] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0036] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0037] In addition, it should be noted that in the technical solution of this application, the collection, storage, use, processing, transmission, provision and disclosure of relevant data such as key request data and key response data are in compliance with the relevant laws and regulations and do not violate public order and good morals.

[0038] Embodiment 1

[0039] Figure 1 This is a flow chart of a method for generating a train-to-ground communication key according to the first embodiment of the present application. This embodiment is applicable to the generation of message authentication keys between RBC and ATP, and can be executed by a train-to-ground communication key generation device. The train-to-ground communication key generation device can be implemented in the form of hardware and / or software. The train-to-ground communication key generation device can be configured in a computer device, such as an on-board device of a train control system; the train control system also includes a wireless block center; the on-board device and the wireless block center are connected by a wireless communication network and a quantum communication network. Figure 1 As shown, the method includes:

[0040] S110: When it is identified that the current message authentication key is expired, key request data is sent to the radio blocking center via the wireless communication network.

[0041] In this embodiment, the current message authentication key refers to the KMAC key stored locally in the vehicle-mounted device. A wireless communication network is a type of network that transmits data via radio waves. It does not rely on physical media (such as cables or optical fibers), but transmits data via radio frequency signals; it should be noted that the wireless communication network of this application specifically refers to the vehicle-ground GSM-R (Global System for Mobile Communications – Railway) two-way wireless communication network. A wireless block center refers to a central management unit or server used for key management, communication security, etc. in a wireless communication network; it is responsible for managing security tasks such as key generation, distribution, and storage to ensure the security of wireless communications. Key request data refers to a key message containing user data, which is used to verify the relevant authentication data of the vehicle-mounted device; the key message may include the device type number of the vehicle-mounted device, the message type, the direction mark, the device ID (Identity), the supported quantum network interface type, etc.

[0042] In an optional implementation, when it is identified that the message authentication key is not stored locally, key request data is also sent to the radio blocking center via the wireless communication network.

[0043] Exemplarily, when ATP uses the existing GSM-R channel to call RBC and establish a secure connection with RBC, if it is found that the KMAC key is not stored locally or the KMAC key has expired, key request data is sent to the radio blocking center through the wireless communication network.

[0044] It should be noted that the validity period of the key is pre-set and can be flexibly configured according to the needs of the user.

[0045] S120: upon receiving the key response data returned by the radio block center through the wireless communication network, generating initial key data of a preset number of bits based on binary coding.

[0046] In this embodiment, the key response data is generated by the wireless blocking center to respond to the key request data and reply to the key message containing user data to verify the relevant authentication data of the wireless blocking center; the key response data may include the device type number of the wireless blocking center, the message type, the device ID, the supported quantum network interface type, etc. Binary encoding refers to a method of converting information into a binary (0 and 1) representation; in computer and communication systems, data is usually transmitted and stored in binary encoding. Initial key data refers to randomly generated binary data with a preset number of bits; exemplary, randomly generated key data with a length of 32768 bits.

[0047] In an optional implementation, when the key response data is received from the radio block center through the wireless communication network, the quantum communication interface for key response data feedback is started, and the subsequent quantum network communication is implemented with the quantum communication interface.

[0048] S130, performing quantum preparation on the initial key data to obtain real-time quantum data, and sending the real-time quantum data to the wireless block center through the quantum communication network.

[0049] In this embodiment, real-time quantum data refers to the quantum bit data and quantum preparation base used in real-time quantum communication. These data can be used for encryption, key exchange and other processes. Due to the special properties of quantum bits (such as superposition and entanglement), they can provide stronger security. The real-time quantum data may include at least one of quantum key data and quantum preparation base set. Among them, quantum key data refers to the quantum bit data generated or transmitted in real time in quantum communication. The quantum preparation base set refers to the quantum preparation base used to produce quantum bit data in quantum communication. A quantum communication network refers to a network that uses the principles of quantum mechanics (such as quantum entanglement and quantum superposition) for data transmission. It can provide higher security than traditional communications, especially for key exchange and data encryption processes. Quantum communication networks can be used to protect communication content from being eavesdropped or tampered with.

[0050] Optionally, according to the candidate quantum preparation bases in the quantum key distribution protocol, the value of each bit in the initial key data is quantum prepared in sequence to obtain quantum key data, and the quantum key data is sent to the wireless block center through the quantum communication network; the candidate quantum preparation bases used to quantum prepare the value of each bit in the initial key data are recorded in sequence to obtain a quantum preparation base set.

[0051] In this embodiment, the quantum key distribution protocol refers to a method that uses the principles of quantum mechanics to ensure the security of a key that can be shared by two communicating parties; in quantum key distribution, quantum states are used to transmit information between two communicating parties, and the confidentiality of the communication content is ensured through quantum measurement. A candidate quantum preparation basis refers to a set of basis states that can be used to prepare quantum states; for example, in the preparation of quantum bits, different quantum basis states can be selected to represent information; a candidate quantum preparation basis refers to a set of different basis states that can be selected during the execution of the protocol; the value of each bit (0 or 1) is prepared in quantum state according to these candidate bases. Quantum preparation refers to converting the initial key data into a quantum state according to specific rules based on the selected quantum preparation basis; in simple terms, it is to determine the corresponding quantum state according to each bit (0 or 1), and transmit these quantum states to the recipient.

[0052] Furthermore, according to the candidate quantum preparation basis in the quantum key distribution protocol, the value of each bit in the initial key data is quantum prepared in sequence to obtain the quantum key data. For each bit in the initial key data, a target quantum preparation basis is determined from the candidate quantum preparation basis; wherein the candidate quantum preparation basis includes a horizontal polarization state linear basis, a vertical polarization state linear basis, a diagonal polarization state diagonal basis and an anti-diagonal polarization state diagonal basis; and the target quantum preparation basis is used to convert the value of the bit into a polarization state to obtain the quantum key data.

[0053] In this embodiment, the horizontal polarization state linear basis represents the state of the quantum state in the horizontal polarization direction. The vertical polarization state linear basis represents the state of the quantum state in the vertical polarization direction. The diagonal polarization state diagonal basis represents the polarization state of the quantum state along the diagonal line (45 degrees and 135 degrees). The anti-diagonal polarization state diagonal basis represents the polarization state of the quantum state along the anti-diagonal line (-45 degrees and +45 degrees). The polarization state is a quantum property of a quantum photon, which represents the state of the photon vibrating in a specific direction; different polarization states (such as horizontal polarization, vertical polarization, diagonal polarization and anti-diagonal polarization) are used to represent different quantum bit states in quantum key distribution; through these polarization states, quantum key distribution can transmit encrypted information.

[0054] Exemplarily, the initial key data is encoded on the four polarization states of two groups of conjugated bases of photons: horizontal polarization state |H> linear basis, vertical polarization state |V> linear basis; 45° polarization state |D> diagonal basis, 135° polarization state |A> diagonal basis; at the same time, the protocol defines the correspondence between the four polarization states and the encoded information: |H> or |A> represents binary 0b0, |V> or |D> represents binary 0b1; ATP randomly selects a basis from two groups of bases, such as linear basis vectors and diagonal basis vectors, for preparation, encodes the initial key data bit by bit 0 and 1 to the corresponding polarization state of a single photon, obtains quantum key data, and sends it to RBC through the quantum channel. At the same time, ATP records the selected preparation basis to obtain a quantum preparation basis set.

[0055] S140. When receiving quantum measurement data sent by a wireless block center through a wireless communication network, determine a target message authentication key according to real-time quantum data and quantum measurement data; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data.

[0056] In this embodiment, quantum measurement data refers to data obtained through the quantum measurement process; the quantum measurement data may include the number of quantum states and a quantum measurement basis set; wherein the number of quantum states refers to the number of quantum states received when the wireless block center measures the target message authentication key; the quantum measurement basis set refers to a set of quantum measurement bases used in the process of quantum measurement by the wireless block center. The target message authentication key refers to the KMAC key finally obtained.

[0057] Optionally, determining the target message authentication key based on real-time quantum data and quantum measurement data can be by screening out key data of the number of quantum states from the quantum key data of the real-time quantum data to obtain candidate key data; and performing quantum measurement on the candidate key data based on a quantum measurement basis set and a quantum preparation basis set of the real-time quantum data to obtain the target message authentication key.

[0058] Exemplarily, ATP restores the correct target message authentication key based on the received number of quantum states and quantum measurement basis set, combined with the locally selected quantum preparation basis set and quantum key data, according to the principle of a simple quantum protocol.

[0059] Further, performing quantum measurement on the candidate key data according to the quantum measurement basis set and the quantum preparation basis set of the real-time quantum data to obtain the target message authentication key can be: performing consistency comparison on the quantum measurement basis set and the quantum preparation basis set of the real-time quantum data to determine the target measurement basis set and the number of quantum bits corresponding to each measurement basis in the target measurement basis set; taking the quantum bit number corresponding to each measurement basis in the target measurement basis set as the quantum measurement target, performing quantum measurement on the candidate key data according to the target measurement basis set to obtain the target message authentication key.

[0060] In this embodiment, the number of qubits corresponding to each measurement basis in the target measurement basis set refers to the number of qubits corresponding to the target message authentication key confirmed by the RBC in the candidate key data.

[0061] In an optional implementation, after the target message authentication key is determined, key confirmation data is sent to the radio blocking center.

[0062] In this embodiment, the key confirmation data refers to the relevant data sent by ATP to RBC to confirm the successful generation of the key; the data may include the device type number, message type, device ID, etc. of the vehicle-mounted device.

[0063] In an optional embodiment, a timer is also set during the generation of the target message authentication key; the timer is used to detect unacceptable delays during the generation and distribution of the KMAC key. The timer starts before the on-board device sends the key request data and ends after the on-board device sends the key confirmation data. The specific value of the timer can be flexibly configured according to the quality of the wireless communication network.

[0064] Furthermore, after the target message authentication key of the vehicle-mounted equipment and the wireless block center is produced and distributed, the vehicle and the ground use the target message authentication key to perform subsequent full connection establishment and wireless data communication.

[0065] The embodiment of the present application sends key request data to the wireless block center through the wireless communication network when the current message authentication key is identified to be expired; when receiving the key response data returned by the wireless block center through the wireless communication network, generates the initial key data of preset bits based on binary coding; performs quantum preparation on the initial key data to obtain real-time quantum data, and sends the real-time quantum data to the wireless block center through the quantum communication network; when receiving the quantum measurement data sent by the wireless block center through the wireless communication network, determines the target message authentication key according to the real-time quantum data and the quantum measurement data; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data. The above technical solution automatically identifies whether the key is expired through the vehicle-mounted device, and in the case of expiration, combines the quantum key distribution technology to realize the generation and secure distribution of the key between the vehicle-mounted device and the wireless block center, without the need for manual burning, reduces the maintenance workload of the train control key, and helps to improve the efficiency and reliability of key generation.

[0066] Embodiment 2

[0067] Figure 2 This is a flow chart of a method for generating a train-to-ground communication key according to the second embodiment of the present application. This embodiment is applicable to the generation of message authentication keys between RBC and ATP, and can be executed by a train-to-ground communication key generation device. The train-to-ground communication key generation device can be implemented in the form of hardware and / or software. The train-to-ground communication key generation device can be configured in a computer device, such as a wireless block center in a train control system; the train control system also includes on-board equipment; the on-board equipment and the wireless block center are connected using a wireless communication network and a quantum communication network. Figure 2 As shown, the method includes:

[0068] S210. When receiving key request data sent by the vehicle-mounted device through the wireless communication network, determine key response data according to the key request data, and send the key response data to the vehicle-mounted device through the wireless communication network.

[0069] In this embodiment, the key response data is generated by the wireless blocking center, which is used to respond to the key request data and reply to the key message containing user data, so as to verify the relevant authentication data of the wireless blocking center; the key response data may include the device type number of the wireless blocking center, the message type, the device ID, the supported quantum network interface type, etc.

[0070] Exemplarily, when receiving key request data, RBC enables a local quantum interface of the same type according to the quantum network interface type specified in the key request data, and replies with the type of quantum interface agreed upon by both parties in the key response data.

[0071] S220. When receiving real-time quantum data sent by the vehicle-mounted device through the quantum communication network, quantum measurement is performed on the real-time quantum data and recorded to obtain target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device performing quantum preparation on the initial key data; the initial key data is generated by the vehicle-mounted device based on binary coding.

[0072] In this embodiment, quantum measurement refers to the process of measuring a quantum system; in quantum communication, when measuring a quantum state, the value of a quantum bit collapses to a certain state; for example, when a photon transmitted through quantum communication undergoes quantum measurement, the polarization state of the photon may become a certain state depending on the measurement basis, and the measurement result is usually a binary value (such as 0 or 1). Target key data refers to the key data obtained after quantum measurement and recording.

[0073] Optionally, performing quantum measurement on real-time quantum data and recording to obtain target key data can be performed by determining a target quantum measurement basis from candidate quantum measurement bases in a quantum key distribution protocol; wherein the candidate quantum measurement bases include a horizontal polarization state linear basis, a vertical polarization state linear basis, a diagonal polarization state diagonal basis, and an anti-diagonal polarization state diagonal basis; using the target quantum measurement basis, performing quantum measurement on the real-time quantum data and recording to obtain the target key data.

[0074] S230. When the target key data satisfies the key generation condition, determine the target message authentication key and the quantum measurement data of the target message authentication key from the target key data, and send the quantum measurement data to the vehicle-mounted device through the wireless communication network.

[0075] In this embodiment, the key generation condition is artificially preset based on actual conditions or experience values; for example, the condition may be that the number of bits of the target key data is a bit threshold.

[0076] For example, after RBC receives the quantum state (real-time quantum data) of photons sent by ATP from the quantum channel, it randomly selects a set of measurement bases from two sets of bases, namely the linear basis and the diagonal basis, for measurement, and records the selected measurement basis, measurement results, and the number of measurement bits until 192 bits of correct received data are measured. These 192 bits of data are the KMAC key used for the ATP-RBC vehicle-to-ground wireless communication.

[0077] In an optional embodiment, a timer is also set during the generation of the target message authentication key; the timer is used to detect unacceptable delays during the generation and distribution of the KMAC key. The timer starts before the on-board device sends the key request data and ends after the on-board device sends the key confirmation data. The specific value of the timer can be flexibly configured according to the quality of the wireless communication network.

[0078] Furthermore, after the target message authentication key of the vehicle-mounted equipment and the wireless block center is produced and distributed, the vehicle and the ground use the target message authentication key to perform subsequent full connection establishment and wireless data communication.

[0079] The embodiment of the present application determines key response data according to the key request data when receiving key request data sent by the vehicle-mounted device through the wireless communication network, and sends the key response data to the vehicle-mounted device through the wireless communication network; when receiving real-time quantum data sent by the vehicle-mounted device through the quantum communication network, the real-time quantum data is quantum measured and recorded to obtain the target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device through quantum preparation of the initial key data; the initial key data is generated by the vehicle-mounted device based on binary coding; when the target key data meets the key generation conditions, the target message authentication key and the quantum measurement data of the target message authentication key are determined from the target key data, and the quantum measurement data is sent to the vehicle-mounted device through the wireless communication network. The above technical solution automatically identifies whether the key is expired through the vehicle-mounted device, and in the case of expiration, combines the quantum key distribution technology to realize the generation and secure distribution of keys between the vehicle-mounted device and the wireless block center, without the need for manual burning, reducing the maintenance workload of the train control key, and helping to improve the efficiency and reliability of key generation.

[0080] Embodiment 3

[0081] Figure 3 This is a structural diagram of a vehicle-to-ground communication key generation device provided in accordance with the third embodiment of the present application, which can be applied to the generation of message authentication keys between RBC and ATP. The vehicle-to-ground communication key generation device can be implemented in the form of hardware and / or software. The vehicle-to-ground communication key generation device can be configured in a computer device, such as an on-board device of a train control system; the train control system also includes a wireless block center; the on-board device and the wireless block center are connected by a wireless communication network and a quantum communication network. Figure 3 As shown, the device comprises:

[0082] The key request module 310 is used to send key request data to the radio blocking center through the wireless communication network when recognizing that the current message authentication key has expired;

[0083] The data generating module 320 is used to generate initial key data of a preset number of bits based on binary coding when receiving the key response data returned by the radio block center through the wireless communication network;

[0084] The quantum preparation module 330 is used to perform quantum preparation on the initial key data to obtain real-time quantum data, and send the real-time quantum data to the wireless block center through the quantum communication network;

[0085] The first key generation module 340 is used to determine the target message authentication key according to the real-time quantum data and the quantum measurement data when receiving the quantum measurement data sent by the wireless blocking center through the wireless communication network; wherein the quantum measurement data is determined by the wireless blocking center according to the real-time quantum data.

[0086] The embodiment of the present application sends key request data to the wireless block center through the wireless communication network when the current message authentication key is identified to be expired; when receiving the key response data returned by the wireless block center through the wireless communication network, generates the initial key data of preset bits based on binary coding; performs quantum preparation on the initial key data to obtain real-time quantum data, and sends the real-time quantum data to the wireless block center through the quantum communication network; when receiving the quantum measurement data sent by the wireless block center through the wireless communication network, determines the target message authentication key according to the real-time quantum data and the quantum measurement data; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data. The above technical solution automatically identifies whether the key is expired through the vehicle-mounted device, and in the case of expiration, combines the quantum key distribution technology to realize the generation and secure distribution of the key between the vehicle-mounted device and the wireless block center, without the need for manual burning, reduces the maintenance workload of the train control key, and helps to improve the efficiency and reliability of key generation.

[0087] Optionally, the real-time quantum data includes quantum key data and a quantum preparation basis set; accordingly, the quantum preparation module 330 includes:

[0088] A quantum preparation unit is used to perform quantum preparation on the value of each bit in the initial key data in sequence according to the candidate quantum preparation base in the quantum key distribution protocol to obtain quantum key data, and send the quantum key data to the wireless block center through the quantum communication network;

[0089] The data recording unit is used to sequentially record candidate quantum preparation bases for quantum preparation of the value of each bit in the initial key data to obtain a quantum preparation base set.

[0090] Optional, quantum preparation unit, specifically used for:

[0091] For each bit in the initial key data, a target quantum preparation basis is determined from candidate quantum preparation bases; wherein the candidate quantum preparation bases include a horizontal polarization state linear basis, a vertical polarization state linear basis, a diagonal polarization state diagonal basis, and an anti-diagonal polarization state diagonal basis;

[0092] The target quantum preparation basis is used to convert the value of the bit into a polarization state to obtain quantum key data.

[0093] Optionally, the quantum measurement data includes the number of quantum states and a quantum measurement basis set; accordingly, the first key generation module 340 includes:

[0094] A data screening unit, used to screen out key data of quantum state quantity from quantum key data of real-time quantum data to obtain candidate key data;

[0095] The quantum measurement unit is used to perform quantum measurement on the candidate key data according to the quantum measurement basis set and the quantum preparation basis set of the real-time quantum data to obtain the target message authentication key.

[0096] Optionally, a quantum measurement unit is used to:

[0097] Compare the consistency of the quantum measurement basis set and the quantum preparation basis set of real-time quantum data to determine the target measurement basis set and the number of quantum bits corresponding to each measurement basis in the target measurement basis set;

[0098] The number of qubits corresponding to each measurement basis in the target measurement basis set is taken as the quantum measurement target. According to the target measurement basis set, quantum measurement is performed on the candidate key data to obtain the target message authentication key.

[0099] The vehicle-to-ground communication key generation device provided in the embodiments of the present application can execute the vehicle-to-ground communication key generation method provided in any embodiment of the present application, and has functional modules and beneficial effects corresponding to executing each vehicle-to-ground communication key generation method.

[0100] Embodiment 4

[0101] Figure 4 This is a structural diagram of a vehicle-to-ground communication key generation device provided in accordance with the fourth embodiment of the present application, which can be applied to the generation of message authentication keys between RBC and ATP. The vehicle-to-ground communication key generation device can be implemented in the form of hardware and / or software. The vehicle-to-ground communication key generation device can be configured in a computer device, such as a wireless block center in a train control system; the train control system also includes on-board equipment; the on-board equipment and the wireless block center are connected by a wireless communication network and a quantum communication network. Figure 4 As shown, the device comprises:

[0102] The key response module 410 is used to determine the key response data according to the key request data when receiving the key request data, and send the key response data to the vehicle-mounted device through the wireless communication network;

[0103] The quantum measurement module 420 is used to perform quantum measurement on the real-time quantum data and record it when receiving the real-time quantum data sent by the vehicle-mounted device through the quantum communication network to obtain the target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device performing quantum preparation on the initial key data; the initial key data is generated by the vehicle-mounted device based on binary coding;

[0104] The second key generation module 430 is used to determine the target message authentication key and the quantum measurement data of the target message authentication key from the target key data when the target key data meets the key generation condition, and send the quantum measurement data to the vehicle-mounted device through the wireless communication network.

[0105] The embodiment of the present application determines key response data according to the key request data when receiving key request data sent by the vehicle-mounted device through the wireless communication network, and sends the key response data to the vehicle-mounted device through the wireless communication network; when receiving real-time quantum data sent by the vehicle-mounted device through the quantum communication network, the real-time quantum data is quantum measured and recorded to obtain the target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device through quantum preparation of the initial key data; the initial key data is generated by the vehicle-mounted device based on binary coding; when the target key data meets the key generation conditions, the target message authentication key and the quantum measurement data of the target message authentication key are determined from the target key data, and the quantum measurement data is sent to the vehicle-mounted device through the wireless communication network. The above technical solution automatically identifies whether the key is expired through the vehicle-mounted device, and in the case of expiration, combines the quantum key distribution technology to realize the generation and secure distribution of keys between the vehicle-mounted device and the wireless block center, without the need for manual burning, reducing the maintenance workload of the train control key, and helping to improve the efficiency and reliability of key generation.

[0106] Optionally, the quantum measurement module 420 is specifically used for:

[0107] Determine a target quantum measurement basis from candidate quantum measurement bases in a quantum key distribution protocol; wherein the candidate quantum measurement bases include a horizontal polarization state linear basis, a vertical polarization state linear basis, a diagonal polarization state diagonal basis, and an anti-diagonal polarization state diagonal basis;

[0108] The target quantum measurement base is used to perform quantum measurement on the real-time quantum data and record it to obtain the target key data.

[0109] The vehicle-to-ground communication key generation device provided in the embodiments of the present application can execute the vehicle-to-ground communication key generation method provided in any embodiment of the present application, and has functional modules and beneficial effects corresponding to executing each vehicle-to-ground communication key generation method.

[0110] According to an embodiment of the present application, the present application also provides an electronic device, a readable storage medium and a computer program product.

[0111] Embodiment 5

[0112] Figure 5 : is a schematic diagram of the structure of an electronic device 510 that implements the vehicle-to-ground communication key generation method of an embodiment of the present application. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described and / or required herein.

[0113] like Figure 5 As shown, the electronic device 510 includes at least one processor 511, and a memory connected to the at least one processor 511 in communication, such as a read-only memory (ROM) 512, a random access memory (RAM) 513, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 511 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 512 or the computer program loaded from the storage unit 518 to the random access memory (RAM) 513. In RAM513, various programs and data required for the operation of the electronic device 510 can also be stored. The processor 511, ROM512 and RAM513 are connected to each other through a bus 514. An input / output (I / O) interface 515 is also connected to the bus 514.

[0114] A number of components in the electronic device 510 are connected to the I / O interface 515, including: an input unit 516, such as a keyboard, a mouse, etc.; an output unit 517, such as various types of displays, speakers, etc.; a storage unit 518, such as a disk, an optical disk, etc.; and a communication unit 519, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 519 allows the electronic device 510 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0115] The processor 511 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 511 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 511 executes the various methods and processes described above, such as a vehicle-to-ground communication key generation method.

[0116] In some embodiments, the vehicle-to-ground communication key generation method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 518. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 510 via the ROM 512 and / or the communication unit 519. When the computer program is loaded into the RAM 513 and executed by the processor 511, one or more steps of the vehicle-to-ground communication key generation method described above may be performed. Alternatively, in other embodiments, the processor 511 may be configured as a vehicle-to-ground communication key generation method in any other appropriate manner (e.g., by means of firmware).

[0117] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0118] The computer programs for implementing the methods of the present application may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable vehicle communication key generation device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine as a stand-alone software package and partially on a remote machine, or entirely on a remote machine or server.

[0119] In the context of the present application, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device, or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0120] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0121] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0122] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0123] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this application can be executed in parallel, sequentially or in different orders, as long as the expected results of the technical solution of this application can be achieved, and this document is not limited here.

[0124] The above specific implementations do not constitute a limitation on the protection scope of this application. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of this application should be included in the protection scope of this application.

Claims

1. A method for generating a vehicle-to-ground communication key, characterized in that: An on-board device configured in a train control system; the train control system further includes a radio block center; the on-board device and the radio block center are connected using a wireless communication network and a quantum communication network; the method includes: When recognizing that the current message authentication key is expired, sending key request data to the radio blocking center via the wireless communication network; Upon receiving the key response data returned by the radio block center through the wireless communication network, generating initial key data of a preset number of bits based on binary coding; Performing quantum preparation on the initial key data to obtain real-time quantum data, and sending the real-time quantum data to the wireless block center through the quantum communication network; When the quantum measurement data transmitted by the wireless block center is received through the wireless communication network, a target message authentication key is determined according to the real-time quantum data and the quantum measurement data; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data.

2. The method according to claim 1, characterized in that The real-time quantum data includes quantum key data and a quantum preparation basis set; accordingly, the initial key data is quantum prepared to obtain real-time quantum data, and the real-time quantum data is sent to the wireless block center through the quantum communication network, including: According to the candidate quantum preparation bases in the quantum key distribution protocol, sequentially perform quantum preparation on the value of each bit in the initial key data to obtain quantum key data, and send the quantum key data to the wireless block center through the quantum communication network; Candidate quantum preparation bases for quantum preparation of the value of each bit in the initial key data are recorded in sequence to obtain a quantum preparation base set.

3. The method according to claim 2, characterized in that According to the candidate quantum preparation base in the quantum key distribution protocol, the value of each bit in the initial key data is quantum prepared in sequence to obtain quantum key data, including: For each bit in the initial key data, a target quantum preparation basis is determined from candidate quantum preparation bases; wherein the candidate quantum preparation bases include a horizontal polarization state linear basis, a vertical polarization state linear basis, a diagonal polarization state diagonal basis, and an anti-diagonal polarization state diagonal basis; The target quantum preparation basis is used to convert the value of the bit into a polarization state to obtain quantum key data.

4. The method according to claim 1, characterized in that: The quantum measurement data includes the number of quantum states and a quantum measurement basis set; accordingly, determining the target message authentication key according to the real-time quantum data and the quantum measurement data includes: Selecting key data of the number of quantum states from the quantum key data of the real-time quantum data to obtain candidate key data; According to the quantum measurement basis set and the quantum preparation basis set of the real-time quantum data, quantum measurement is performed on the candidate key data to obtain a target message authentication key.

5. The method according to claim 4, characterized in that The step of performing quantum measurement on candidate key data according to the quantum measurement basis set and the quantum preparation basis set of the real-time quantum data to obtain a target message authentication key comprises: Comparing the consistency of the quantum measurement basis set and the quantum preparation basis set of the real-time quantum data, determining a target measurement basis set and the number of qubits corresponding to each measurement basis in the target measurement basis set; The number of qubits corresponding to each measurement basis in the target measurement basis set is taken as a quantum measurement target, and quantum measurement is performed on candidate key data according to the target measurement basis set to obtain a target message authentication key.

6. A method for generating a vehicle-to-ground communication key, characterized in that: A radio block center is configured in a train control system; the train control system further comprises an on-board device; the on-board device and the radio block center are connected by a wireless communication network and a quantum communication network; the method comprises: When receiving key request data sent by the vehicle-mounted device through the wireless communication network, determining key response data according to the key request data, and sending the key response data to the vehicle-mounted device through the wireless communication network; When receiving the real-time quantum data sent by the vehicle-mounted device through the quantum communication network, quantum measurement is performed on the real-time quantum data and recorded to obtain target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device performing quantum preparation on the initial key data; the initial key data is generated by the vehicle-mounted device based on binary coding; When the target key data satisfies the key generation condition, a target message authentication key and quantum measurement data of the target message authentication key are determined from the target key data, and the quantum measurement data are sent to the vehicle-mounted device via the wireless communication network.

7. The method according to claim 6, characterized in that Performing quantum measurement on the real-time quantum data and recording it to obtain target key data includes: Determine a target quantum measurement basis from candidate quantum measurement bases in a quantum key distribution protocol; wherein the candidate quantum measurement bases include a horizontal polarization state linear basis, a vertical polarization state linear basis, a diagonal polarization state diagonal basis, and an anti-diagonal polarization state diagonal basis; The target quantum measurement base is used to perform quantum measurement on the real-time quantum data and record it to obtain target key data.

8. A vehicle-to-ground communication key generation device, characterized in that: An on-board device configured in a train control system; the train control system further includes a radio block center; the on-board device and the radio block center are connected using a wireless communication network and a quantum communication network; the device includes: A key request module, configured to send key request data to the radio blocking center via the wireless communication network when recognizing that the current message authentication key has expired; A data generation module, configured to generate initial key data of a preset number of bits based on binary coding when receiving key response data returned by the radio block center through the wireless communication network; A quantum preparation module, used for performing quantum preparation on the initial key data to obtain real-time quantum data, and sending the real-time quantum data to the wireless block center through the quantum communication network; The first key generation module is used to determine a target message authentication key according to the real-time quantum data and the quantum measurement data when receiving the quantum measurement data sent by the wireless block center through the wireless communication network; wherein the quantum measurement data is determined by the wireless block center according to the real-time quantum data.

9. A vehicle-to-ground communication key generation device, characterized in that: A radio block center configured in a train control system; the train control system further comprises an on-board device; the on-board device and the radio block center are connected by a wireless communication network and a quantum communication network; the device comprises: A key response module, configured to determine key response data according to the key request data when receiving the key request data, and send the key response data to the vehicle-mounted device through the wireless communication network; A quantum measurement module, configured to perform quantum measurement on the real-time quantum data sent by the vehicle-mounted device through the quantum communication network and record the real-time quantum data to obtain target key data; wherein the real-time quantum data is obtained by the vehicle-mounted device performing quantum preparation on the initial key data; and the initial key data is generated by the vehicle-mounted device based on binary coding; The second key generation module is used to determine the target message authentication key and the quantum measurement data of the target message authentication key from the target key data when the target key data meets the key generation condition, and send the quantum measurement data to the vehicle-mounted device through the wireless communication network.

10. An electronic device, characterized in that: include: one or more processors; A memory for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the vehicle-to-ground communication key generation method as described in any one of claims 1-7.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the vehicle-to-ground communication key generation method as described in any one of claims 1 to 7 is implemented.

12. A computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the method for generating a vehicle-to-ground communication key according to any one of claims 1 to 7 is implemented.

Images