Quantum key transmission method, electronic equipment and computer readable storage medium

Abstract

The invention discloses a quantum key transmission method, electronic equipment and a computer readable storage medium, and belongs to the field of communication. The method comprises the steps that link establishment information is sent to a target terminal through a short message gateway, the link establishment information comprises a URL link establishment link, a mobile phone number and quantum key characteristics, and the link establishment information is used for establishing a quantum key channel; after a quantum key channel is established between the target terminal and the quantum service platform, receiving a quantum key application request sent by the target terminal through the quantum key channel; and in response to the quantum key application request, sending a quantum key to the target terminal through the quantum key channel. The method is used for quantum key transmission, and solves the problems of low efficiency and low security in quantum key transmission through manual intervention.

Description

Technical Field

[0001] The present application belongs to the field of communications, and specifically relates to a method for transmitting quantum keys, an electronic device, and a computer-readable storage medium. Background Art

[0002] With the continuous maturity and widespread application of quantum communication technology, quantum keys have become popular in the field of communication security due to their unparalleled security and efficiency.

[0003] At present, human intervention is required to complete the physical transfer process of quantum keys from the quantum key management center to each terminal device. Specifically, the existing offline quantum key filling technology solution mainly includes the following steps: first, pre-generate quantum key data packets in a highly secure environment; second, use dedicated and secure channels, such as secure containers or special delivery, to store these keys in terminal carriers such as smart cards or customized security modules; finally, distribute the terminal devices carrying quantum keys to users for subsequent use.

[0004] Although this manual intervention method ensures a certain degree of security, its limitations are also obvious. For example, the manual operation process is inefficient, and there is a risk of unauthorized access or theft of keys during the circulation process, which is not very secure. Summary of the invention

[0005] The embodiments of the present application provide a method for transmitting a quantum key, an electronic device, and a computer-readable storage medium, which can solve the problem that manual intervention in quantum key transmission has low efficiency and low security.

[0006] In a first aspect, an embodiment of the present application provides a method for transmitting a quantum key, which is applied to a quantum service platform, comprising: Sending link building information to the target terminal via the SMS gateway, the link building information including: URL link building link, mobile phone number and quantum key characteristics, the link building information is used to establish a quantum key channel; After a quantum key channel has been established between the target terminal and the quantum service platform, receiving a quantum key application request sent by the target terminal through the quantum key channel; In response to the quantum key application request, a quantum key is sent to the target terminal through the quantum key channel.

[0007] In a second aspect, an embodiment of the present application provides a method for transmitting a quantum key, which is applied to a target terminal, comprising: Receive the link establishment information sent by the quantum service platform via the SMS gateway, the link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics, the link establishment information is used to establish the quantum key channel; After a quantum key channel has been established between the target terminal and the quantum service platform, sending a quantum key application request to the quantum service platform through the quantum key channel; The quantum key sent by the quantum service platform is received through the quantum key channel.

[0008] In a third aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method described in the first aspect or the second aspect are implemented.

[0009] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed, the steps of the method described in the first aspect or the second aspect are implemented.

[0010] In a fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the method described in the first aspect or the second aspect.

[0011] At least one of the above technical solutions provided in the embodiments of the present application can achieve the following technical effects: In the embodiment of the present application, link building information is sent to the target terminal via a short message gateway, and the link building information includes: URL link building link, mobile phone number and quantum key characteristics, and the link building information is used to establish a quantum key channel; after the quantum key channel has been established between the target terminal and the quantum service platform, a quantum key application request sent by the target terminal through the quantum key channel is received; in response to the quantum key application request, a quantum key is sent to the target terminal through the quantum key channel. In this way, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal, and no human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention quantum key transmission; at the same time, the link building information including the URL link building link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention quantum key transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0013] Figure 1 It is a schematic diagram of the overall architecture of the method for transmitting quantum keys provided in an embodiment of the present application; Figure 2 is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application; Figure 3 is a flow chart of another method for transmitting quantum keys provided in an embodiment of the present application; Figure 4 is a flow chart of another method for transmitting quantum keys provided in an embodiment of the present application; Figure 5 is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application; Figure 6 is a flow chart of another method for transmitting quantum keys provided in an embodiment of the present application; Figure 7-1 It is a schematic diagram of the downlink SMS structure provided in an embodiment of the present application; Figure 7-2 It is a schematic diagram of the structure of the application command message provided in the embodiment of the present application; Figure 7-3 is a schematic diagram of link establishment request information provided in an embodiment of the present application; Figure 7-4 is a schematic diagram of manually entering information in an embodiment of the present application; Figure 8 It is a structural block diagram of a device for transmitting quantum keys provided in an embodiment of the present application; Fig. 9 It is a structural block diagram of another device for transmitting quantum keys provided in an embodiment of the present application; Fig.10 It is a structural block diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0014] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0015] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0016] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0017] At present, quantum key transmission usually adopts offline filling, which generates a certain number of quantum keys in advance, stores these keys on terminal security media through secure channels, and then distributes them to users offline. This method is not only inefficient, but also costly and faces high security risks. Because the offline filling process requires manual operation, the quantum key data packet may be threatened by unauthorized access, tampering or loss, and the security of data transmission cannot be guaranteed. In addition, the offline filling method is limited by time and place, lacks flexibility, has high implementation costs, and is difficult to meet the needs of modern communication systems.

[0018] Therefore, developing a method to inject quantum keys online, efficiently and securely has become an urgent issue to be solved.

[0019] The method for transmitting quantum keys provided in the embodiment of the present application is to complete quantum key transmission by the interaction between the quantum service platform and the target terminal. No human intervention is required in the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention in quantum key transmission; at the same time, the chain information including the uniform resource locator (URL) chain link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention in quantum key transmission. In addition, the entire quantum key transmission process can be completed online, not limited to time and place, with strong flexibility and low implementation cost, which can fully meet the needs of modern communication systems.

[0020] The method for transmitting quantum keys provided in the embodiments of the present application can be applied to the situation of quantum key transmission.

[0021] The method for transmitting quantum keys provided in the embodiment of the present application involves a quantum service platform, a short message gateway and a target terminal. The quantum service platform actively initiates the establishment of a quantum key tunnel link, and sends the link establishment information to the subscriber identity module (SIM) card on the terminal through the short message gateway. The SIM card and the quantum service platform establish a quantum key security channel to complete the quantum key online charging process. In this process, based on the SIM card hardware, the short message sending module and the link establishment technology, the quantum service platform is coordinated to realize the ability of online quantum key charging.

[0022] Among them, the quantum service platform can be a server, such as an independent physical server, a server cluster composed of multiple servers, and a cloud server capable of cloud computing. In the case where the method for transmitting quantum keys provided in an embodiment of the present application is performed by a quantum service platform including multiple servers, these multiple servers can form a service cluster, and they cooperate with each other to complete each step. The target terminal can be a terminal device. The target terminal can be a mobile terminal, and a SIM card with a storage function can be set on the target terminal, that is, this SIM card has storage space. Such SIM cards are, for example, super SIM cards. The SIM card can also have built-in card applications, such as quantum key communication applications.

[0023] Figure 1 Schematic diagram of the overall architecture of the method for transmitting quantum keys provided in the embodiment of the present application. Figure 1 As shown, in a specific embodiment, the quantum service platform can send link establishment information to the SMS gateway, and the SMS gateway can forward the link establishment information to the target terminal. After the target terminal receives the link establishment information, it can establish a quantum key channel with the quantum service platform accordingly. After the quantum key channel is established, the target terminal can send a quantum key application request to the quantum service platform. After receiving the quantum key application request, the quantum service platform can respond to the quantum key application request and send a quantum key to the target terminal through the quantum key channel. After the target terminal receives the transmitted quantum key, it can store the quantum key.

[0024] The quantum service platform, SMS gateway, quantum key communication application, target terminal, and SIM card involved in the embodiments of this application are further explained below.

[0025] Quantum service platform: actively sends the public key to the SIM card on the target terminal. After receiving the SIM card key application request and performing data verification, it generates the quantum key and sends the quantum key through the quantum key distribution protocol.

[0026] SMS Gateway: The SMS Gateway receives the chain establishment information sent by the quantum service platform for establishing the quantum key channel and forwards it to the target terminal.

[0027] Target terminal: Receives information from the SMS gateway and interacts with the quantum service platform and the built-in SIM card. It is the data "transfer station" between the quantum service platform and the SIM card.

[0028] SIM card: Apply for quantum key from the quantum service platform through the SIM card application, and parse, verify and store the issued quantum key information.

[0029] Quantum key communication application: The quantum key communication application establishes a quantum key channel with the quantum service platform based on the chain establishment information sent by the SMS gateway to securely download the quantum key.

[0030] The following is a detailed description of the method for transmitting quantum keys provided in the embodiments of the present application through specific embodiments and their application scenarios in conjunction with the accompanying drawings.

[0031] Figure 2 This is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application. Figure 2 The method for transmitting quantum keys shown in FIG. 1 can be executed by a quantum service platform. Figure 2 As shown, the method comprises the following steps: Step 210: Send link establishment information to the target terminal via the SMS gateway. The link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics. The link establishment information is used to establish a quantum key channel.

[0032] In an embodiment of the present application, the link establishment information sent by the SMS gateway may be in the form of a text message. The structure of the text message includes: a text message header, an application command message, and signature information. The application command message includes a command type, a command length, the mobile phone number, the length of the mobile phone number, the quantum key feature, and the link establishment link.

[0033] In the embodiment of the present application, the quantum service platform can send the link building information to the target terminal via the SMS gateway. That is, the link building information is first sent by the quantum service platform to the SMS gateway, and then the SMS gateway sends the link building information to the target terminal. In addition, the quantum service platform can also send the public key used by the quantum service platform to the target terminal. For example, the link building information sent by the quantum service platform may include the public key used by the quantum service platform in addition to the URL link building link, mobile phone number and quantum key characteristics.

[0034] Step 220, after a quantum key channel has been established between the target terminal and the quantum service platform, receiving a quantum key application request sent by the target terminal through the quantum key channel; The quantum key application request includes the following information: the mobile phone number, International Mobile Equipment Identity (IMEI), Integrated Circuit Card Identity (ICCID), quantum key type, and quantum key storage space size. Among them, IMEI is used to identify each independent mobile phone and other mobile communication devices in the mobile phone network. IMEI can be the mobile phone serial number, which is equivalent to the ID card of the mobile phone. ICCID is the SIM card number, which is equivalent to the ID card of the mobile phone card. IMEI is the IMEI of the target terminal, and ICCID is the ICCID of the SIM card on the target terminal. Quantum key types may include the following types: quantum key user key, quantum key device key, quantum key application key, and quantum key session key. Among them, different types of quantum keys can be indicated by different identifiers. For example, 0 can indicate all quantum key types, 1 can indicate quantum key user key, 2 can indicate quantum key device key, 3 can indicate quantum key application key, and 4 can indicate quantum key session key. The quantum key storage space size can indicate the maximum storage space supported by the quantum key. For example, if the quantum key storage space size is 8M, the size of the quantum key cannot exceed 8M.

[0035] In a specific embodiment, the quantum key application request includes: request ID, SEID (Security Element Identifier), mobile phone number, IMEI, ICCID, quantum key type and quantum key storage space size. Among them, SEID is the unique identifier of the SIM card, which can be the SIM card serial number.

[0036] Step 230: In response to the quantum key application request, send the quantum key to the target terminal through the quantum key channel.

[0037] In the embodiment of the present application, link building information is sent to the target terminal via a short message gateway, and the link building information includes: URL link building link, mobile phone number and quantum key characteristics, and the link building information is used to establish a quantum key channel; after the quantum key channel has been established between the target terminal and the quantum service platform, a quantum key application request sent by the target terminal through the quantum key channel is received; in response to the quantum key application request, a quantum key is sent to the target terminal through the quantum key channel. In this way, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal, and no human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention quantum key transmission; at the same time, the link building information including the URL link building link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention quantum key transmission.

[0038] Figure 3 This is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application. Figure 3 The method for transmitting quantum keys shown in FIG. 1 can be executed by a quantum service platform. Figure 3 As shown, the method comprises the following steps: Step 310: Send link establishment information to the target terminal via the SMS gateway. The link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics. The link establishment information is used to establish a quantum key channel.

[0039] In this step, the quantum service platform can send the link building information to the target terminal via the SMS gateway. In other words, the link building information is first sent from the quantum service platform to the SMS gateway, and then the SMS gateway sends the link building information to the target terminal.

[0040] Among them, the chain building information sent by the quantum service platform can include not only the URL chain building link, mobile phone number and quantum key characteristics, but also the public key.

[0041] Step 320, receiving link establishment request information sent by the target terminal, wherein the link establishment request information is obtained based on the link establishment information; In an embodiment of the present application, after receiving the link establishment information, the target terminal may obtain at least part of the information from the link establishment information to obtain the link establishment request information. That is, at least part of the content in the link establishment information may be extracted as the link establishment request information. The link establishment request information is used to request to establish a quantum key channel between the target terminal and the quantum service platform. The link establishment request information may include: the quantum key feature, the mobile phone number, the public key, the IMEI and the ICCID.

[0042] Step 330, verifying the link establishment request information; After receiving the link building request information from the quantum key communication application, the quantum service platform will perform multiple verifications to ensure the integrity, correctness and authenticity of the information. In this step, the quantum service platform verifies the link building request information, which may include: verifying the quantum key feature, the mobile phone number, the public key, the IMEI and the ICCID contained in the link building request information. In a specific embodiment, the quantum service platform can perform four verifications on the link building request information. In the first verification, the quantum service platform verifies the link building request through the public key uploaded by the super SIM to verify the identity of the sender. In the second verification, the quantum service platform parses the link building request, compares the obtained hash value with the hash value issued by the quantum service platform, and verifies that the sender is a valid target user. In the third verification, the user's real mobile phone number is obtained through the telecommunications operator network, and compared with the user's mobile phone number parameter of the link building URL to verify the authenticity of the sender. In the fourth verification, the quantum service platform obtains the parsed information and compares the common fields of the manually entered information to verify the legitimacy of the sender.

[0043] Step 340: after the link establishment request information is verified, a quantum key channel is established between the target terminal and the quantum service platform.

[0044] Step 350, after a quantum key channel has been established between the target terminal and the quantum service platform, receiving a quantum key application request sent by the target terminal through the quantum key channel; Step 360: In response to the quantum key application request, send the quantum key to the target terminal through the quantum key channel.

[0045] In the embodiment of the present application, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal. No human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention in quantum key transmission; at the same time, the link establishment information including the URL link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention in quantum key transmission. In addition, after the quantum service platform receives the link establishment request information from the quantum key communication application, it will perform multiple verifications to ensure the integrity, correctness and authenticity of the information, thus further improving the security of quantum key transmission.

[0046] Figure 4This is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application. Figure 4 The method for transmitting quantum keys shown in FIG. 1 can be executed by a quantum service platform. Figure 4 As shown, the method comprises the following steps: Step 410, generating a quantum key based on the user identity information; Among them, user identity information may include name, ID card, mobile phone number, department, etc.

[0047] Step 420, obtaining a quantum key feature based on the quantum key; The quantum key feature may include a quantum key hash value; the quantum key hash value is obtained by performing a hash calculation on the quantum key. Of course, in addition to the quantum key hash value, the quantum key feature may also be other values ​​obtained by performing a target calculation on the quantum key, and the target calculation may include one or more operations or transformations.

[0048] Step 430, determining a URL link based on the quantum key characteristics; The URL link can be obtained based on the quantum key hash value and the mobile phone number. In other words, the URL link can be determined based on the quantum key hash value and the mobile phone number.

[0049] Step 440: Send link establishment information to the target terminal via the SMS gateway. The link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics. The link establishment information is used to establish a quantum key channel.

[0050] In this step, the quantum service platform can send the link building information to the target terminal via the SMS gateway. In other words, the link building information is first sent from the quantum service platform to the SMS gateway, and then the SMS gateway sends the link building information to the target terminal.

[0051] Among them, the chain building information sent by the quantum service platform can include not only the URL chain building link, mobile phone number and quantum key characteristics, but also the public key.

[0052] Step 450, receiving link establishment request information sent by the target terminal, wherein the link establishment request information is obtained based on the link establishment information; Step 460, verifying the link establishment request information; Step 470, after the link establishment request information is verified, a quantum key channel is established between the target terminal and the quantum service platform; Step 480, after a quantum key channel has been established between the target terminal and the quantum service platform, receiving a quantum key application request sent by the target terminal through the quantum key channel; The quantum key application request may include the following information: request ID, SEID, mobile phone number, IMEI, ICCID, quantum key type and quantum key storage space size.

[0053] Step 490: In response to the quantum key application request, send the quantum key to the target terminal through the quantum key channel.

[0054] In the embodiment of the present application, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal. No human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention in quantum key transmission; at the same time, the link building information including the URL link building link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention in quantum key transmission. In addition, based on the user identity information, the quantum key characteristics and URL link building link can be easily obtained, and then the quantum key channel can be easily established between the target terminal and the quantum service platform.

[0055] It is important to understand that Figures 2 to 4 The explanations of the same or corresponding steps in the above may refer to each other. For example, Figure 2 The explanation of step 210 in Figure 3 Step 310 in , and Figure 4 Step 440 in .

[0056] Figure 5 This is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application. Figure 5 The method for transmitting quantum keys shown in FIG. 1 can be executed by a target terminal. Figure 5 As shown, the method comprises the following steps: Step 510, receiving the link establishment information sent by the quantum service platform via the SMS gateway, wherein the link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics, and the link establishment information is used to establish a quantum key channel.

[0057] In this step, the quantum service platform can send the chain building information to the target terminal via the SMS gateway. That is to say, the chain building information is first sent by the quantum service platform to the SMS gateway, and then the SMS gateway sends the chain building information to the target terminal. In this way, the target terminal can receive the chain building information sent by the quantum service platform via the SMS gateway. It should be understood that the chain building information sent by the SMS gateway can be in the form of SMS. The structure of the SMS includes: SMS message header, application command message and signature information. The application command message includes command type, command length, mobile phone number, length of mobile phone number, quantum key characteristics and chain building link.

[0058] The quantum key feature may include a quantum key hash value; the quantum key hash value is obtained by performing a hash calculation on the quantum key. The URL link may be obtained based on the quantum key hash value and the mobile phone number.

[0059] Moreover, the link building information in the embodiment of the present application may include the public key of the quantum service platform in addition to the URL link building link, mobile phone number and quantum key characteristics.

[0060] Step 520, after a quantum key channel has been established between the target terminal and the quantum service platform, a quantum key application request is sent to the quantum service platform through the quantum key channel; The quantum key application request may include the following information: request ID, SEID, mobile phone number, IMEI, ICCID, quantum key type and quantum key storage space size.

[0061] Among them, IMEI is used to identify each independent mobile phone and other mobile communication devices in the mobile phone network. IMEI can be the serial number of the mobile phone, which is equivalent to the ID card of the mobile phone. ICCID is the SIM card number, which is equivalent to the ID card of the mobile phone card. IMEI is the IMEI of the target terminal, and ICCID is the ICCID of the SIM card on the target terminal. SEID can be the unique identifier of the SIM card. Quantum key types may include the following types: quantum key user key, quantum key device key, quantum key application key and quantum key session key. Among them, different types of quantum keys can be indicated by different identifiers. For example, 0 can indicate all quantum key types, 1 can indicate quantum key user key, 2 can indicate quantum key device key, 3 can indicate quantum key application key, and 4 can indicate quantum key session key. The size of the quantum key storage space can indicate the maximum storage space supported by the quantum key. For example, if the quantum key storage space size is 8M, the size of the quantum key cannot exceed 8M.

[0062] Step 530: receiving the quantum key sent by the quantum service platform through the quantum key channel.

[0063] In the embodiment of the present application, link building information is sent to the target terminal via a short message gateway, and the link building information includes: URL link building link, mobile phone number and quantum key characteristics, and the link building information is used to establish a quantum key channel; after the quantum key channel has been established between the target terminal and the quantum service platform, a quantum key application request sent by the target terminal through the quantum key channel is received; in response to the quantum key application request, a quantum key is sent to the target terminal through the quantum key channel. In this way, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal, and no human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention quantum key transmission; at the same time, the link building information including the URL link building link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention quantum key transmission.

[0064] Figure 6 This is a flow chart of a method for transmitting quantum keys provided in an embodiment of the present application. Figure 6 The method for transmitting quantum keys shown in FIG. 1 can be executed by a target terminal. Figure 6 As shown, the method comprises the following steps: Step 610, receiving the link establishment information sent by the quantum service platform via the SMS gateway, the link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics, and the link establishment information is used to establish a quantum key channel.

[0065] In this step, the quantum service platform can send the link building information to the target terminal via the SMS gateway. That is, the link building information is first sent from the quantum service platform to the SMS gateway, and then the SMS gateway sends the link building information to the target terminal. In this way, the target terminal can receive the link building information sent by the quantum service platform via the SMS gateway.

[0066] Among them, the chain building information includes not only the URL chain building link, mobile phone number and quantum key characteristics, but also the public key of the quantum service platform.

[0067] Step 620, sending a link establishment request message to the quantum service platform, where the link establishment request message is generated based on the link establishment information; In an embodiment of the present application, after receiving the link establishment information, the target terminal may obtain at least part of the information from the link establishment information to obtain the link establishment request information. That is, at least part of the content in the link establishment information may be extracted as the link establishment request information. Among them, the link establishment request information is used to request to establish a quantum key channel between the target terminal and the quantum service platform. The link establishment request information may include: the quantum key feature, the mobile phone number, the public key, the IMEI and the ICCID. The link establishment request information is for verification by the quantum service platform.

[0068] Step 630, after the link establishment request information is verified, establishing the quantum key channel between the target terminal and the quantum service platform; Step 640, after a quantum key channel has been established between the target terminal and the quantum service platform, a quantum key application request is sent to the quantum service platform through the quantum key channel; The quantum key application request may include the following information: request ID, SIM card serial number, mobile phone number, IMEI, ICCID, quantum key type and quantum key storage space size.

[0069] The SIM card serial number may be a SEID (Security Element Identifier), and the SEID may be a unique identifier of the SIM card. The quantum key type may include the following types: quantum key user key, quantum key device key, quantum key application key, and quantum key session key. Different types of quantum keys may be indicated by different identifiers. For example, 0 may indicate all quantum key types, 1 may indicate a quantum key user key, 2 may indicate a quantum key device key, 3 may indicate a quantum key application key, and 4 may indicate a quantum key session key. The quantum key storage space size may indicate the maximum storage space supported by the quantum key. For example, if the quantum key storage space size is 8M, the size of the quantum key cannot exceed 8M.

[0070] Step 650: receiving the quantum key sent by the quantum service platform through the quantum key channel.

[0071] In the embodiment of the present application, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal. No human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of manual intervention in quantum key transmission; at the same time, the link establishment information including the URL link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of manual intervention in quantum key transmission. In addition, the link establishment request information sent by the target terminal will establish the quantum key channel between the target terminal and the quantum service platform only after verification, which further improves the security of quantum key transmission.

[0072] It is important to understand that Figures 5 and 6 The explanations of the same or corresponding steps in the specification can be referenced to each other.

[0073] The specific process of the method for transmitting quantum keys provided in the embodiment of the present application is further explained below. It should be understood that the SIM card in the embodiment of the present application can be a super SIM card.

[0074] Step 1: The quantum service platform sends the chain building information to the SIM card on the target terminal through the SMS gateway. The specific process is as follows: The quantum service platform can receive input information. The input information may include personnel information and device information. Personnel information may include: name, ID card, mobile phone number, department and other identity information. Device information may include: IMEI, IMSI, ICCID, etc. The quantum service platform generates the user's quantum key through the user's information identification, and performs hash calculation on the generated quantum key to obtain the quantum key hash value. Then, the URL link is customized according to the user's quantum key hash value and the user's mobile phone number.

[0075] The quantum service platform sends the mobile phone number, user quantum key hash value, URL link and other chain building information to the SIM card on the target terminal through the SMS gateway. During the sending process, the quantum service platform will interact securely with the SMS gateway to ensure the security and reliability of the chain building information during transmission. The structure of the downlink SMS is as follows: Figure 7-1 As shown, it may include a short message header, an application command message, and signature information. Among them, the application command message is as follows: Figure 7-2 As shown, it may include the main version number (MAIN_VER), flag (FLAG), data content (APP_DATA) and media access control (Media Access Control, MAC).

[0076] The data content of the downlink SMS application command message may include the following fields: Tag, length, mobile phone number length, mobile phone number, hash value, and URL. The specific explanation of each field is shown in the following table.

[0077]

[0078] Step 2: The SIM card on the target terminal receives the link establishment SMS and parses it. The quantum key communication application built into the SIM completes the establishment of a quantum key secure channel with the quantum service platform through the link establishment information. The specific process is as follows: The SIM card receives the chain building information and parses and verifies it. After obtaining the hash value and URL chain building link, the quantum key communication application generates a chain building request information, signs it based on the private key built into the SIM card, and then sends the public key to the quantum service platform.

[0079] In a specific embodiment, the link establishment request information is as follows: Figure 7-3 The information shown may include: SEID, mobile phone number, IMEI, ICCID, hash value, signature information, and signature information public key.

[0080] The explanation of each field in the link establishment request information is as shown in the following table:

[0081] After the quantum service platform receives the chain establishment request information from the quantum key communication application, it will perform multiple verifications to ensure the integrity, correctness and authenticity of the information. In the first verification, the quantum service platform verifies the chain establishment request through the public key uploaded by the SIM card to verify the identity of the sender. In the second verification, the quantum service platform parses the chain establishment request and compares the obtained hash value with the hash value issued by the quantum service platform to verify that the sender is a valid target user. In the third verification, the user’s real mobile phone number is obtained through the telecommunications operator network, and compared with the user’s mobile phone number parameter of the chain establishment link URL to verify the authenticity of the sender. In the fourth verification, the quantum service platform obtains the parsed information and compares it with the following information: Figure 7-4 The common fields of the manually entered information shown are compared and analyzed to verify the legitimacy of the sender. Among them, the common fields may include mobile phone number, IMEI and ICCID fields.

[0082] After completing the information verification, the SIM card application on the target terminal establishes a quantum key security channel with the quantum service platform, and subsequent information interaction is carried out directly through the channel.

[0083] Step 3: The SIM card application initiates a quantum key application request to the quantum service platform through the quantum key secure channel. The specific process is as follows: After the SIM card starts the communication connection with the quantum service platform through the built-in quantum key secure channel communication module, the SIM card will send a quantum key application request to the quantum service platform. The request contains the mobile phone number, terminal information (such as IMEI) and SIM card information (such as SEID and ICCID), etc., and can use the session key and the public key of the quantum service platform to encrypt and sign the information carried in the quantum key application request to ensure the confidentiality and integrity of the application request during transmission. Among them, the session key can be generated by the SIM card, and the session key can be used to encrypt the information carried in the quantum key application request. At the same time, the public key of the quantum service platform can also be used to encrypt the session key.

[0084] The explanation of each field in the quantum key application request can be shown in the following table:

[0085] Step 4: After receiving the quantum key application request, the quantum service platform generates the quantum key and responds. The specific process is as follows: After receiving the quantum key application request from the SIM card application, the quantum service platform will first start the built-in key generation module. During the key generation process, the quantum service platform will ensure the randomness and unpredictability of the key to avoid any form of patterned attacks. Once the quantum key generation is completed, the quantum service platform will immediately start the response mechanism. Through the quantum key security channel, the quantum service platform will securely send the generated quantum key to the SIM card on the target terminal. During the response process, the quantum service platform will use the session key and private key to encrypt and sign the response information to ensure the confidentiality and integrity of the key during transmission.

[0086] Among them, the explanation of each field in the quantum key response information of the quantum service platform can be shown in the following table:

[0087] Among them, in the example in the above table, four key types are carried: quantum key user key, quantum key device key, quantum key application key and quantum key session key. In fact, the quantum key response information only needs to carry at least one of the four key types.

[0088] Step 5: The SIM card receives the quantum key response information, parses the information to obtain the quantum key and stores it. The specific process is as follows: When the SIM card receives the response message containing the quantum key, it will use the built-in decryption algorithm to decrypt and store the response message to obtain a new quantum key. Subsequently, users can use different types of quantum keys for encryption, decryption or authentication according to different scenarios.

[0089] The method for transmitting quantum keys provided in the embodiments of the present application realizes online charging of quantum keys by integrating SIM cards, SMS gateways and establishing link channels, which is an innovation in the current field of communication security. The traditional key charging method requires users to go to a specific location in person or operate through complex processes. However, with the online charging method based on SIM cards, SMS gateways and establishing link channels, users can complete key charging with simple operations, which greatly improves the efficiency of quantum key charging and saves costs.

[0090] Figure 8 is a structural block diagram of a device for transmitting quantum keys provided in an embodiment of the present application. Figure 8 , the device 800 for transmitting a quantum key provided in the embodiment of the present application may include: a sending module 810 and a receiving module 820. Among them: A sending module 810 is used to send link establishment information to a target terminal via a short message gateway, wherein the link establishment information includes: a URL link, a mobile phone number and a quantum key feature, and the link establishment information is used to establish a quantum key channel; A receiving module 820 is configured to receive a quantum key application request sent by the target terminal through the quantum key channel after a quantum key channel has been established between the target terminal and the quantum service platform; The sending module 810 is further configured to send the quantum key to the target terminal through the quantum key channel in response to the quantum key application request.

[0091] In the device for transmitting quantum keys provided in the embodiment of the present application, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal. No human intervention is required in the entire quantum key transmission process, which solves the problem of low efficiency of quantum key transmission with human intervention. At the same time, link building information including URL link building link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of quantum key transmission with human intervention.

[0092] The device for transmitting quantum keys provided in the embodiment of the present application can implement each process of the above method embodiment. The specific content of each module implementation can refer to the description of the method part above, and will not be repeated here to avoid repetition.

[0093] Fig. 9 is a structural block diagram of a device for transmitting quantum keys provided in an embodiment of the present application. Fig. 9 , the device 900 for transmitting a quantum key provided in an embodiment of the present application may include: a receiving module 910 and a sending module 920. Among them: A receiving module 910 is used to receive the link establishment information sent by the quantum service platform via the SMS gateway, wherein the link establishment information includes: a URL link, a mobile phone number and a quantum key feature, and the link establishment information is used to establish a quantum key channel; A sending module 920 is used to send a quantum key application request to the quantum service platform through the quantum key channel after a quantum key channel has been established between the target terminal and the quantum service platform; The receiving module 910 is also used to receive the quantum key sent by the quantum service platform through the quantum key channel.

[0094] In the device for transmitting quantum keys provided in the embodiment of the present application, quantum key transmission is completed by the interaction between the quantum service platform and the target terminal. No human intervention is required in the entire quantum key transmission process, which solves the problem of low efficiency of quantum key transmission with human intervention. At the same time, link building information including URL link building link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of quantum key transmission with human intervention.

[0095] The device for transmitting quantum keys provided in the embodiment of the present application can implement each process of the above method embodiment. The specific content of each module implementation can refer to the description of the method part above, and will not be repeated here to avoid repetition.

[0096] like Fig.10As shown, an embodiment of the present application also provides an electronic device 1000. The electronic device 1000 includes: a processor 1010 and a memory 1020, and the memory 1020 stores a program or instruction, and the program or instruction is executed by the processor 1010 to implement the steps of any of the methods described above. For example, when the program is executed by the processor 1010, the following process is implemented: sending link establishment information to the target terminal via a short message gateway, the link establishment information includes: URL link establishment link, mobile phone number and quantum key characteristics, and the link establishment information is used to establish a quantum key channel; after the quantum key channel has been established between the target terminal and the quantum service platform, receiving the quantum key application request sent by the target terminal through the quantum key channel; in response to the quantum key application request, sending the quantum key to the target terminal through the quantum key channel. In this way, no human intervention is required during the entire quantum key transmission process, which solves the problem of low efficiency of quantum key transmission with human intervention. At the same time, the link establishment information including the URL link, mobile phone number and quantum key characteristics is used to establish a quantum key channel, and the quantum key application request and quantum key are transmitted through the quantum key channel, which can greatly improve the security of quantum key transmission and solve the problem of low security of quantum key transmission with human intervention.

[0097] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of each embodiment of the method for transmitting a quantum key are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0098] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0099] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0100] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0101] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0102] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0103] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A method for transmitting a quantum key, characterized in that: Applied to quantum service platform, including: Sending link building information to the target terminal via the SMS gateway, the link building information including: a link building URL, a mobile phone number and a quantum key feature, the link building information is used to establish a quantum key channel; After a quantum key channel has been established between the target terminal and the quantum service platform, receiving a quantum key application request sent by the target terminal through the quantum key channel; In response to the quantum key application request, a quantum key is sent to the target terminal through the quantum key channel.

2. The method according to claim 1, characterized in that Before sending the link establishment information to the target terminal via the SMS gateway, the method further includes: Generate quantum key based on user identity information; Based on the quantum key, obtaining a quantum key characteristic; Based on the quantum key characteristics, determine the URL link.

3. The method according to claim 2, characterized in that The quantum key feature includes a quantum key hash value; the quantum key hash value is obtained by performing a hash calculation on the quantum key.

4. The method according to claim 3, characterized in that The URL link is obtained based on the quantum key hash value and the mobile phone number.

5. The method according to claim 1, characterized in that in, The quantum key application request includes the following information: the mobile phone number, the international mobile equipment identity code IMEI, the integrated circuit card identification code ICCID, the quantum key type and the quantum key storage space size.

6. The method according to any one of claims 1 to 5, characterized in that: The link establishment information is sent in the form of a text message; the structure of the text message includes: a text message header, an application command message and signature information.

7. The method according to claim 6, characterized in that The application command message includes the command type, the command length, the mobile phone number, the length of the mobile phone number, the quantum key feature and the chain establishment link.

8. A method for transmitting a quantum key, characterized in that: Applied to target terminals, including: Receiving the link establishment information sent by the quantum service platform via the SMS gateway, the link establishment information includes: a uniform resource locator URL link establishment link, a mobile phone number and a quantum key feature, and the link establishment information is used to establish a quantum key channel; After a quantum key channel has been established between the target terminal and the quantum service platform, sending a quantum key application request to the quantum service platform through the quantum key channel; The quantum key sent by the quantum service platform is received through the quantum key channel.

9. The method according to claim 8, characterized in that After receiving the link establishment information sent by the quantum service platform via the SMS gateway, the method further includes: Sending a chain establishment request message to the quantum service platform, where the chain establishment request message is generated based on the chain establishment information; After the link establishment request information is verified, the quantum key channel is established between the target terminal and the quantum service platform.

10. The method according to claim 9, characterized in that The chain establishment request information includes: the quantum key characteristics, the mobile phone number, the public key, the international mobile equipment identity code IMEI and the integrated circuit card identification code ICCID; the chain establishment request information is for verification by the quantum service platform.

11. The method according to claim 8, characterized in that The quantum key feature includes a quantum key hash value; the quantum key hash value is obtained by performing a hash calculation on the quantum key.

12. The method according to claim 11, characterized in that The URL link is obtained based on the quantum key hash value and the mobile phone number.

13. The method according to claim 8, characterized in that in, The quantum key application request includes the following information: the mobile phone number, IMEI, ICCID, quantum key type and quantum key storage space size.

14. The method according to any one of claims 8 to 13, characterized in that: The link establishment information is sent in the form of a text message; the structure of the text message includes: a text message header, an application command message and signature information.

15. The method according to claim 14, characterized in that The application command message includes the command type, the command length, the mobile phone number, the length of the mobile phone number, the quantum key feature and the chain establishment link.

16. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory stores a program or instruction running on the processor, and when the program or instruction is executed by the processor, the steps of the method according to any one of claims 1 to 15 are implemented.

17. A computer-readable storage medium, characterized in that: The medium stores a program or an instruction, and when the program or the instruction is executed, the steps of the method according to any one of claims 1 to 15 are implemented.

18. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 15 when executed by a processor.

Images