Scheduling terminal system based on quantum encryption communication

Abstract

The invention discloses a scheduling terminal system based on quantum encryption communication. The scheduling terminal system comprises a first scheduling infield, a plurality of first scheduling outfields and a quantum key system which are connected in a first networking mode, the first scheduling infield comprises a first switch, a first quantum VPN gateway device, a second switch and an IMS core server which are connected in sequence, and the first scheduling outfield comprises a second scheduling station terminal, a second quantum VPN gateway device and a third switch which are connected in sequence; the quantum key system comprises a quantum key distribution module and a quantum key management module. According to the scheme, the power dispatching communication system is constructed by combining the dispatching communication network with the related technology of quantum secret communication, the safety protection capability of the power dispatching communication system is improved, reliable quantum key distribution and dynamic key pool management are established, the applicability in a power dispatching scene is enhanced, the efficiency of quantum satellite communication is improved, and the power dispatching communication system is suitable for being popularized and applied. And the stability of an optical fiber transmission environment is improved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a scheduling terminal system based on quantum encryption communication. Background Art

[0002] In order to cope with the increasingly complex challenges of power grids and potential cyber attack threats, quantum security technology is increasingly being used in the field of power security. The power dispatching system follows the principles of "security partitioning, network dedicating, horizontal isolation, and vertical authentication" of the power information business system. The deep integration of the power dispatching system and quantum security QKD (quantum key distribution) technology has greatly enhanced the security of power dispatching data business transmission.

[0003] Document 1, "Research on Resource Management Technology of Power Communication Network Based on Quantum Security", proposes that the design of quantum secure power communication network must deploy QKD on the premise of meeting the security, reliability, bandwidth and other requirements of existing power services. In addition, there are many network architectures of power communication network, and the types and characteristics of services carried on different types of networks are different. The design of quantum secure power communication network must also analyze the characteristics of each network and the characteristics of the services carried by the network, and deploy QKD in the power communication network according to the characteristics of each network.

[0004] Document 2 "A high-speed railway dispatching communication system based on quantum secure communication" discloses a high-speed railway dispatching communication system based on quantum secure communication, including a site, a quantum satellite, a quantum satellite ground station, a train, a quantum key management server and a QKD network, wherein the quantum satellite is provided with a QKD module 1, and the quantum key management server is connected to the QKD network. The site includes a FAS subsystem, a QKD module 2, a dispatching desk and a dispatching telephone, the quantum satellite ground station includes a QKD module 3 and a telescope module, the train includes a train control console, a QKD module 4, a quantum satellite transceiver unit and a wireless transceiver unit. The utility model uses quantum communication technology to perform quantum secure communication on dispatching instructions, thereby increasing the confidentiality level.

[0005] However, the scale of the power dispatching communication network is getting larger and larger, the number of services it carries is increasing, and the security risks it faces are also increasing. One of the main reasons that currently limits the widespread application of quantum security technology is its technical complexity and high cost. The integration of quantum security technology into the infrastructure of the power dispatching communication network, the deployment and maintenance of quantum communication equipment require a lot of capital and human resources. For example, the quantum satellite mentioned in Reference 2 is expensive, and quantum satellite communication and ground telescopes are affected by factors such as space environment interference and the position and speed errors of moving satellites, resulting in low efficiency of quantum satellite communication.

[0006] Document 1 mentions that QKD should be deployed in the power communication network according to the characteristics of the actual power dispatching communication network and the characteristics of the services carried by the network. Since quantum states have superposition and sensitivity to interference environments, it is also necessary to consider a stable optical fiber transmission environment in actual engineering construction to maintain accurate transmission of quantum states.

[0007] Therefore, how to build a power dispatching communication system based on actual application scenarios to improve the efficiency of quantum satellite communications and improve the stability of the optical fiber transmission environment is a problem that needs to be solved urgently. Summary of the invention

[0008] The present invention aims to at least solve the technical problems existing in the prior art. To this end, the first aspect of the present invention provides a scheduling terminal system based on quantum encryption communication, the system comprising a first scheduling inner field, a plurality of first scheduling outer fields and a quantum key system connected in a first networking mode;

[0009] The first dispatching inner field includes a first switch, a first quantum VPN gateway device, a second switch and an IMS core server connected in sequence, the IMS core server is also connected to a dispatching service server and a plurality of first dispatching terminals, and the dispatching service server is also connected to a dispatching service display screen;

[0010] The first dispatching outfield includes a second dispatching terminal, a second quantum VPN gateway device and a third switch connected in sequence; there are multiple second dispatching terminals;

[0011] The quantum key system includes a quantum key distribution module and a quantum key management module, and the quantum key system is respectively connected with the scheduling inner field and the scheduling outer field through a quantum negotiation channel;

[0012] The first switch is communicatively connected with the third switch;

[0013] The first quantum VPN gateway device is used to perform quantum key encryption and decryption on multimedia data transmitted by the first dispatching terminal; the second quantum VPN gateway device is used to perform quantum key encryption and decryption on data transmitted by the second dispatching terminal; the IMS core server is used to transmit the multimedia data sent by the first dispatching terminal to the dispatching service server, so that the multimedia data is displayed on the dispatching service display screen;

[0014] The quantum key system is used to update the quantum key storage pools of the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel.

[0015] Optionally, the system further comprises a second scheduling inner field, a plurality of second scheduling outer fields and a quantum key system connected in a second networking mode;

[0016] The second dispatching inner field includes a fourth switch, an IMS core server and a plurality of first quantum key dispatching station terminals connected in sequence, the IMS core server is also connected to a dispatching service server, and the dispatching service server is connected to a dispatching service display screen;

[0017] The second dispatching outfield includes a fifth switch and a plurality of second quantum key dispatching station terminals in communication connection;

[0018] The fourth switch is communicatively connected with the fifth switch;

[0019] The first quantum key dispatching terminal and the second quantum key dispatching terminal are both integrated by a dispatching terminal, a quantum key production device and a quantum key management terminal;

[0020] The first quantum key dispatching station terminal is used to perform quantum key encryption and decryption on multimedia data transmitted by the first dispatching station terminal; the second quantum key dispatching station terminal is used to perform quantum key encryption and decryption on data transmitted by the second dispatching station terminal;

[0021] The quantum key system is used to update the quantum key storage pools of the first quantum key dispatch station terminal and the second quantum key dispatch station terminal through the quantum negotiation channel.

[0022] Optionally, the first quantum key dispatch station terminal and the second quantum key dispatch station terminal are both integrated with a dispatch station terminal and a quantum TF super card.

[0023] Optionally, the quantum key system includes a quantum key distribution module and a quantum key management module, the quantum key distribution module is used for quantum key generation and distribution, the quantum key management module is used for quantum key storage, filling, negotiation, and quantum key update of the key pool; the quantum key management module is used to manage the generated quantum key.

[0024] Optionally, the quantum key system is responsible for the authentication and access of the quantum VPN gateway device, and distributes signature certificates to the first quantum VPN gateway device and the second quantum VPN gateway device that have passed the authentication;

[0025] The quantum key system transmits the generated quantum key to the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel, and the first quantum VPN gateway device and the second quantum VPN gateway device store the quantum key to form a quantum key pool.

[0026] Optionally, the quantum key system is responsible for the authentication and access of the quantum key dispatch station terminal, and distributes signature certificates to the first quantum key dispatch station terminal and the second quantum key dispatch station terminal that have passed the authentication;

[0027] The quantum key system transmits the generated quantum key to the first quantum key dispatch station terminal and the second quantum key dispatch station terminal through the quantum negotiation channel. The first quantum key dispatch station terminal and the second quantum key dispatch station terminal store the quantum key to form a quantum key pool.

[0028] An embodiment of the present invention further provides a quantum encryption communication method, which is applied to a scheduling terminal system for quantum encryption communication. The method includes:

[0029] The calling quantum encryption dispatching station terminal initiates a communication request to the called quantum encryption dispatching station terminal through the IMS core server; the calling quantum encryption dispatching station terminal and the called quantum encryption dispatching station terminal are any two of the first dispatching station terminal, the second dispatching station terminal, the first quantum encryption dispatching station terminal, and the second quantum encryption dispatching station terminal;

[0030] The called quantum encryption dispatching station terminal establishes a communication connection with the calling quantum encryption dispatching station terminal according to the communication request;

[0031] The calling quantum encryption dispatch station terminal and the called quantum encryption dispatch station terminal initiate a quantum encryption negotiation request to the quantum encryption management system, and after receiving a key negotiation response from the key management system, the calling quantum encryption dispatch station terminal and the called quantum encryption dispatch station terminal generate a first quantum session key according to the key negotiation response;

[0032] The calling quantum encryption dispatching terminal encrypts the target multimedia data to be transmitted according to the first quantum session key and the SM4 algorithm, and uses the SM3 algorithm to perform digital signature to obtain encrypted multimedia data;

[0033] The calling quantum encryption dispatching terminal sends the encrypted multimedia data to the second quantum encryption dispatching terminal using the RTP protocol or the RTCP protocol;

[0034] The second quantum encryption dispatch station decrypts the encrypted multimedia data using the first quantum session key and the SM4 algorithm to obtain the target multimedia data.

[0035] Optionally, after obtaining the multimedia data content, the method further includes:

[0036] The first quantum encryption dispatch station and the second quantum encryption dispatch station delete the first quantum session key and update the key count of the quantum key pool;

[0037] The quantum encryption management system stores the first quantum session key.

[0038] Optionally, after updating the key count of the quantum key pool, the method further includes:

[0039] The calling quantum encryption dispatching terminal obtains the remaining number of quantum keys in the quantum key pool;

[0040] The calling quantum encryption dispatching terminal predicts the number of quantum keys to be consumed per unit time in the future;

[0041] The calling quantum encryption dispatching terminal determines the predicted duration of the remaining quantum key number according to the remaining quantum key number and the quantum key number to be consumed within the unit time;

[0042] If the predicted duration is less than the preset duration, the calling quantum encryption dispatch station terminal requests the quantum key system to inject a new key.

[0043] Optionally, the method further comprises:

[0044] The calling quantum encryption dispatching terminal initiates a communication request for a non-quantum encryption dispatching terminal to the IMS core server through the first quantum proxy switch; the non-quantum encryption dispatching terminal is a dispatching terminal that does not use quantum security encryption technology;

[0045] The IMS core server transmits the communication request to the non-quantum encryption dispatch terminal through the second quantum proxy switch;

[0046] The non-quantum encryption dispatch station terminal establishes a communication connection with the first quantum encryption dispatch station according to the communication request;

[0047] The calling quantum encryption dispatch terminal initiates a first quantum encryption negotiation request to the quantum encryption management system through the first quantum proxy switch, and the non-quantum encryption dispatch terminal initiates a second quantum encryption negotiation request to the quantum encryption management system through the second quantum proxy switch;

[0048] After receiving the key negotiation response from the key management system, the calling quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal generate a second quantum session key according to the key negotiation response;

[0049] The calling quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal perform quantum encryption communication according to the second quantum session key.

[0050] The embodiments of the present invention have the following beneficial effects:

[0051] The dispatch terminal system based on quantum encryption communication provided by the embodiment of the present invention comprises a first dispatch inner field, a plurality of first dispatch outer fields and a quantum key system connected in a first networking mode; the first dispatch inner field comprises a first switch, a first quantum VPN gateway device, a second switch and an IMS core server connected in sequence, the IMS core server is also connected to a dispatch service server and a plurality of first dispatch desk terminals, the dispatch service server is also connected to a dispatch service display screen; the first dispatch outer field comprises a second dispatch desk terminal, a second quantum VPN gateway device and a third switch connected in sequence; there are a plurality of second dispatch desk terminals; the quantum key system comprises a quantum key distribution module and a quantum key management module, the quantum key system is respectively connected to the The dispatching inner field and the dispatching outer field are connected through a quantum negotiation channel; the first switch is connected to the third switch in communication; the first quantum VPN gateway device is used to perform quantum key encryption and decryption on the multimedia data transmitted by the first dispatching terminal; the second quantum VPN gateway device is used to perform quantum key encryption and decryption on the data transmitted by the second dispatching terminal; the IMS core server is used to transmit the multimedia data sent by the first dispatching terminal to the dispatching service server, so that the multimedia data can be displayed on the large screen of the dispatching service display; the quantum key system is used to update the quantum key storage pool of the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel. This solution combines the dispatching communication network with the relevant technologies of quantum secure communication to construct a power dispatching communication system, improves the security protection capability of the power dispatching communication system, and establishes reliable quantum key distribution and dynamic key pool management, enhances the applicability in the power dispatching scenario, improves the efficiency of quantum satellite communication, and improves the stability of the optical fiber transmission environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 It is one of the schematic diagrams of a scheduling terminal system based on quantum encryption communication provided by an embodiment of the present invention;

[0053] Figure 2 This is a second schematic diagram of a scheduling terminal system based on quantum encryption communication provided by an embodiment of the present invention;

[0054] Figure 3 It is one of the schematic diagrams of a quantum encryption communication method provided by an embodiment of the present invention;

[0055] Figure 4 This is the second schematic diagram of a quantum encryption communication method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0056] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0057] In the following, the terms "first" and "second" are used for descriptive purposes only and are not to be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the embodiments of the present disclosure, unless otherwise specified, "multiple" means two or more. In addition, the use of "based on" or "according to" means openness and inclusiveness, because the process, steps, calculations or other actions "based on" or "according to" one or more of the conditions or values ​​may be based on additional conditions or values ​​beyond the described values ​​in practice.

[0058] According to the actual situation of the construction and transformation of the five-level dispatch center, computer room, optical fiber resources and other infrastructure in the actual power dispatch system scenario, combined with the different ways of quantum key distribution and use, the power dispatch communication terminal system based on quantum encryption communication has two networking modes. The first networking mode is the online distribution of quantum keys. Through the quantum key negotiation channel, the quantum key is directly distributed to the quantum VPN (Virtual Private Network) gateway device. The quantum VPN gateway is responsible for quantum encryption and quantum decryption of the information transmitted by the dispatch terminal in the system. The second networking mode is a combination of online and offline quantum key distribution. The quantum key is distributed to the quantum key dispatch terminal through the quantum key negotiation channel.

[0059] Figure 1 This is one of the schematic diagrams of a scheduling terminal system based on quantum encryption communication provided by an embodiment of the present invention.

[0060] Figure 1 The dispatch terminal system in is connected in the first networking mode, such as Figure 1 As shown, the system includes: a first scheduling inner field, multiple first scheduling outer fields and a quantum key system.

[0061] The first dispatching inner field includes a first switch, a first quantum VPN (Virtual Private Network) gateway device, a second switch and an IMS (IP Multimedia Subsystem) core server which are connected in sequence. The IMS core server is also connected to a dispatching service server and a plurality of first dispatching terminal terminals. The dispatching service server is also connected to a large-screen dispatching service display.

[0062] The first dispatching outfield includes a second dispatching desk terminal, a second quantum VPN gateway device and a third switch connected in sequence; there are multiple second dispatching desk terminals.

[0063] The quantum key system includes a quantum key distribution system and a quantum key management system. The quantum key system is connected to the dispatching inner field and the dispatching outer field through a quantum negotiation channel respectively.

[0064] The first switch is communicatively connected with the third switch;

[0065] The first quantum VPN gateway device is used to perform quantum key encryption and decryption on multimedia data transmitted by the first dispatching terminal; the second quantum VPN gateway device is used to perform quantum key encryption and decryption on data transmitted by the second dispatching terminal; the IMS core server is used to transmit the multimedia data sent by the first dispatching terminal to the dispatching service server, so that the multimedia data can be displayed on the dispatching service display screen;

[0066] The quantum key system is used to update the quantum key storage pools of the first quantum VPN gateway device and the second quantum VPN gateway device through a quantum negotiation channel.

[0067] Specifically, the dispatching field refers to the provincial / municipal dispatching hall of the power system, where IMS core servers, dispatching business servers, engine capability servers, dispatching field dispatching desks, etc. are deployed.

[0068] The dispatching field generally refers to the power distribution network side and other fields without fixed communication equipment. Base stations, dispatching terminals, individual soldiers, cameras, etc. need to be deployed. Depending on the scale and needs of the field, CPE equipment (Customer premises equipment) can also be deployed to facilitate the access of WIFI or 4G / 5G terminals.

[0069] Among them, the IMS core server has IMS core processing capabilities and supports standard IMS protocols; the IMS core server can be connected to the circuit switching system deployed in the power system through the SIP (Session Initialization Protocol) relay method to ensure full accessibility of the communication channel.

[0070] The dispatching business server can provide Web business functions, which include two categories. One category is used for the dispatcher to log in with his own account (or dispatching number) and present relevant information handled by the individual, realizing statistics and search functions in various dimensions; the other category is customized large-screen information output, presenting statistical information of local area power dispatching and some real-time dispatching information.

[0071] The large screen for displaying dispatching services is deployed in the dispatching hall, which can display high-definition images of the outdoor area, thus realizing a reliable high-definition video dispatching scenario.

[0072] The first switch and the second switch are used to connect multiple computers or other network devices in the local area network to achieve high-speed data transmission and sharing and improve network security.

[0073] The dispatch desk terminal includes various fixed or mobile dispatch desk terminals in the dispatch field and dispatch field. It is the control and display equipment for the dispatch personnel and can display various dispatch information in real time.

[0074] The quantum VPN gateway device establishes an IPsec VPN security channel for quantum key encryption through the quantum gateway VPN, and is used to encrypt and decrypt data, voice, and video information transmitted by the dispatch desk terminals in the dispatch field and the dispatch field through quantum keys.

[0075] The dispatch terminal provides audio and video interaction functions.

[0076] In the first networking mode, various dispatch desk terminals (1…n) located in the dispatch field are connected to the switch through the quantum VPN gateway device. The communication process between the dispatch field and the dispatch field is connected through the switch. The data, voice, and video information transmitted by the dispatch desk terminals in the dispatch field and the dispatch field are encrypted and decrypted by the quantum VPN gateway device. The IMS core server uses IMS as the core exchange to realize the integration of multiple communication networks between dispatch desk terminals, integrate multiple audio and video transmissions and multiple services, and display the dispatch service on the large screen in the dispatch field. The quantum key system timely updates the quantum key storage pool of the quantum VPN gateway device through the quantum negotiation channel.

[0077] The dispatch terminal system based on quantum encryption communication provided by the embodiment of the present invention comprises a first dispatch inner field, a plurality of first dispatch outer fields and a quantum key system connected in a first networking mode; the first dispatch inner field comprises a first switch, a first quantum VPN gateway device, a second switch and an IMS core server connected in sequence, the IMS core server is also connected to a dispatch service server and a plurality of first dispatch desk terminals, the dispatch service server is also connected to a dispatch service display screen; the first dispatch outer field comprises a second dispatch desk terminal, a second quantum VPN gateway device and a third switch connected in sequence; there are a plurality of second dispatch desk terminals; the quantum key system comprises a quantum key distribution module and a quantum key management module, the quantum key system is respectively connected to the The dispatching inner field and the dispatching outer field are connected through a quantum negotiation channel; the first switch is connected to the third switch in communication; the first quantum VPN gateway device is used to perform quantum key encryption and decryption on the multimedia data transmitted by the first dispatching terminal; the second quantum VPN gateway device is used to perform quantum key encryption and decryption on the data transmitted by the second dispatching terminal; the IMS core server is used to transmit the multimedia data sent by the first dispatching terminal to the dispatching service server, so that the multimedia data can be displayed on the large screen of the dispatching service display; the quantum key system is used to update the quantum key storage pool of the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel. This solution combines the dispatching communication network with the relevant technologies of quantum secure communication to construct a power dispatching communication system, improves the security protection capability of the power dispatching communication system, and establishes reliable quantum key distribution and dynamic key pool management, enhances the applicability in the power dispatching scenario, improves the efficiency of quantum satellite communication, and improves the stability of the optical fiber transmission environment.

[0078] Figure 2 This is the second schematic diagram of a scheduling terminal system based on quantum encryption communication provided by an embodiment of the present invention.

[0079] Figure 2 The dispatch terminal system in is connected in the second networking mode, such as Figure 2 As shown, the system includes: a second scheduling inner field, a plurality of second scheduling outer fields and a quantum key system;

[0080] The second dispatching inner field includes a fourth switch, an IMS core server and a plurality of first quantum key dispatching terminal terminals connected in sequence, the IMS core server is also connected to a dispatching service server, and the dispatching service server is connected to a dispatching service display screen;

[0081] The second dispatching outfield includes a fifth switch and a plurality of second quantum key dispatching station terminals in communication connection;

[0082] The fourth switch is communicatively connected with the fifth switch;

[0083] The first quantum key dispatching terminal and the second quantum key dispatching terminal are both integrated with a dispatching terminal, a quantum key production device and a quantum key management terminal;

[0084] The first quantum key dispatching station terminal is used to perform quantum key encryption and decryption on multimedia data transmitted by the first dispatching station terminal; the second quantum key dispatching station terminal is used to perform quantum key encryption and decryption on data transmitted by the second dispatching station terminal;

[0085] The quantum key system is used to update the quantum key storage pools of the first quantum key dispatching terminal and the second quantum key dispatching terminal through a quantum negotiation channel.

[0086] The second networking mode is different from the first networking mode in that the dispatching desk terminals are all quantum key dispatching desk terminals, which are integrated with the quantum key production equipment and the quantum key management terminal. Various dispatching field quantum key dispatching desk terminals (1…n) are connected through switches, and the communication process between the dispatching field and the dispatching field is connected through switches. The data, voice, and video information transmitted by the quantum key dispatching desk terminals of the dispatching field and the dispatching field are quantum key encrypted and decrypted by the quantum key dispatching desk terminals. The quantum key system timely updates the quantum key storage pool of the quantum key dispatching desk terminal through the quantum negotiation channel.

[0087] The IMS core server uses IMS as the core exchange to realize the integration of multiple communication networks between dispatch desk terminals, integrate the transmitted audio and video and multiple services, and display the dispatch services on the large screen in the dispatch field.

[0088] Optionally, the first quantum key dispatch station terminal and the second quantum key dispatch station terminal are both integrated with a quantum TF super card.

[0089] In an embodiment of the present invention, the quantum key dispatching terminal can also be integrated with the dispatching terminal and the quantum TF super card. Among them, the quantum TF super card is a storage card combined with quantum encryption technology, which is mainly used in mobile smart devices to provide high-level security services. The quantum TF super card is completely consistent with the ordinary TF super card in physical appearance, interface and standard, but it uses a low-power high-speed dedicated security processing chip inside, combined with the latest quantum security service mobile engine, which can realize the application of quantum keys on mobile terminals.

[0090] In an optional embodiment, the quantum key system includes a quantum key distribution module and a quantum key management module, the quantum key distribution module is used for quantum key generation and distribution, the quantum key management module is used for quantum key storage, filling, negotiation, and quantum key update of the key pool; the quantum key management module is used to manage the generated quantum key.

[0091] Specifically, the generation of quantum keys uses the quantum random number generator (QRNG) of the quantum key system to generate quantum random numbers based on the intrinsic randomness of quantum mechanics. The quantum signals generated by the QRNG are collected and converted into digital signals, and combined with the cryptographic algorithm to generate a one-time quantum password. The quantum keys can also be stored and transmitted, and the quantum keys are used to encrypt / decrypt data services transmitted by the scheduling communication system, which can ensure the security of information transmission.

[0092] In an optional embodiment, the quantum key system is responsible for the authentication and access of the quantum VPN gateway device, and distributes signature certificates to the first quantum VPN gateway device and the second quantum VPN gateway device that have passed the authentication;

[0093] The quantum key system transmits the generated quantum key to the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel, and the first quantum VPN gateway device and the second quantum VPN gateway device store the quantum key to form a quantum key pool.

[0094] In an optional implementation, the quantum key system is responsible for the authentication and access of the quantum key dispatch station terminal, and distributes signature certificates to the first quantum key dispatch station terminal and the second quantum key dispatch station terminal that have passed the authentication;

[0095] The quantum key system transmits the generated quantum key to the first quantum key dispatch station terminal and the second quantum key dispatch station terminal through the quantum negotiation channel. The first quantum key dispatch station terminal and the second quantum key dispatch station terminal store the quantum key to form a quantum key pool.

[0096] Specifically, the quantum key distribution process needs to be combined with identity authentication to ensure the security and reliability of the identity of the quantum VPN gateway in the first networking mode or the quantum key dispatching terminal in the second networking mode. The quantum key management module is responsible for the authentication and access of the quantum VPN gateway or quantum key dispatching terminal, and distributes a signature certificate to each quantum VPN gateway or quantum key dispatching terminal connected through the certificate center of the quantum key management module.

[0097] In the first networking mode, the quantum key distribution module transmits the generated quantum key to the quantum VPN gateway device through the quantum key negotiation channel, stores the quantum key, and forms a quantum key pool.

[0098] In the second networking mode, the quantum key distribution module transmits the generated quantum key to the quantum key dispatch terminal through the quantum key negotiation channel, stores the quantum key, and forms a quantum key pool.

[0099] The quantum key distribution process includes centralized and distributed schemes.

[0100] The centralized solution uses a trusted third party in the quantum key system to establish a quantum negotiation channel with the quantum VPN gateway or quantum key dispatch terminal, conduct point-to-point quantum key negotiation and generate a consistent key group.

[0101] The distributed solution uses the established quantum key negotiation channel to schedule the quantum VPN gateway or quantum key dispatch terminal in the communication system to agree on the method of generating a key group, thereby obtaining a consistent key group within the scheduling communication system.

[0102] The electric power dispatching terminal communication system based on quantum encryption communication first ensures that the quantum security key can be distributed and injected into the quantum VPN gateway or quantum key dispatching terminal key pool through the quantum negotiation channel, so as to realize the rapid acquisition of quantum security keys during the secure communication process of the dispatching communication system and enhance the security protection capability of the dispatching communication system.

[0103] In actual power dispatching scenarios, due to the difficulty in renovating the dispatching field room and insufficient fiber core capacity, there is a possibility that quantum VPN gateways or quantum key dispatching terminals cannot be deployed in the dispatching field. Therefore, when the power dispatching secure communication system based on quantum encryption communication communicates, there are two situations: quantum encryption dispatching terminal communicates with quantum encryption dispatching terminal, and quantum encryption dispatching terminal communicates with non-quantum encryption dispatching terminal.

[0104] Among them, the quantum encryption dispatch terminal refers to: the dispatch terminal that uses quantum keys in the first networking mode and the second networking mode.

[0105] A non-quantum encryption dispatch terminal refers to an ordinary dispatch terminal that does not use quantum encryption technology in the first networking mode and the second networking mode.

[0106] The following is an explanation of the encrypted communication between the quantum encryption dispatch terminal and the quantum encryption dispatch terminal:

[0107] Figure 3This is one of the schematic diagrams of a quantum encryption communication method provided by an embodiment of the present invention.

[0108] This method is applied to the scheduling terminal system of quantum encryption communication, such as Figure 3 As shown, the method comprises the following steps:

[0109] Step 101: The calling quantum key dispatching station terminal initiates a communication request to the called quantum key dispatching station terminal through the IMS core server; the calling quantum key dispatching station terminal and the called quantum key dispatching station terminal are any two of the first dispatching station terminal, the second dispatching station terminal, the first quantum key dispatching station terminal, and the second quantum key dispatching station terminal;

[0110] Step 102: The called quantum key dispatching station terminal establishes a communication connection with the calling quantum key dispatching station terminal according to the communication request;

[0111] Step 103: the calling quantum key dispatching station terminal and the called quantum key dispatching station terminal initiate a quantum key negotiation request to the quantum key management system. After receiving a key negotiation response from the key management system, the calling quantum key dispatching station terminal and the called quantum key dispatching station terminal generate a first quantum session key according to the key negotiation response.

[0112] Step 104: the calling quantum key dispatching station terminal encrypts the target multimedia data to be transmitted according to the first quantum session key and the SM4 algorithm, and uses the SM3 algorithm to perform digital signature to obtain encrypted multimedia data;

[0113] Step 105: the calling quantum key dispatching station terminal sends the encrypted multimedia data to the second quantum key dispatching station using the RTP protocol or the RTCP protocol;

[0114] Step 106: The called quantum key dispatching station terminal uses the first quantum session key and the SM4 algorithm to decrypt the encrypted multimedia data to obtain the target multimedia data.

[0115] In steps 101 to 106, the calling quantum encryption dispatch station terminal and the called quantum encryption dispatch station terminal are any two of the first dispatch station terminal, the second dispatch station terminal, the first quantum encryption dispatch station terminal, and the second quantum encryption dispatch station terminal.

[0116] For the calling quantum encryption dispatching terminal and the called quantum encryption dispatching terminal, both parties of the communication use quantum security encryption technology, and the communication process is as follows:

[0117] The calling quantum encryption dispatching terminal initiates a communication session and requests to establish a communication connection with the called quantum encryption dispatching terminal through the IMS core server. The calling quantum encryption dispatching terminal and the called quantum encryption dispatching terminal respectively negotiate quantum keys with the quantum key management system to generate quantum session keys.

[0118] The calling quantum encryption dispatch terminal and the called quantum encryption dispatch terminal use quantum session keys and SM4 algorithms to encrypt and decrypt multimedia data, use SM3 to protect the integrity of business data, and use RTP (Real-time Transport Protocol) and RTCP (Real-time Transport Control Protocol) to transmit standard data packet formats of audio and video on the dispatch communication network, so as to achieve efficient and accurate real-time secure calls.

[0119] The following is an explanation of the encrypted communication between the quantum encryption dispatch terminal and the non-quantum encryption dispatch terminal:

[0120] Figure 4 The second schematic diagram of a quantum encryption communication method provided by an embodiment of the present invention.

[0121] like Figure 4 As shown, for the calling quantum encryption dispatching terminal using quantum security encryption technology and the non-quantum encryption dispatching terminal not using quantum security encryption technology, the communication process is as follows:

[0122] Step 201: The calling quantum encryption dispatching terminal initiates a communication request for a non-quantum encryption dispatching terminal to the IMS core server through the first quantum proxy switch; the non-quantum encryption dispatching terminal is a dispatching terminal that does not use quantum security encryption technology;

[0123] Step 202: The IMS core server transmits the communication request to the non-quantum encryption dispatch terminal through the second quantum proxy switch;

[0124] Step 203: the non-quantum encryption dispatch station terminal establishes a communication connection with the first quantum encryption dispatch station according to the communication request;

[0125] Step 204: the calling quantum encryption dispatching terminal initiates a first quantum encryption negotiation request to the quantum encryption management system through the first quantum proxy switch, and the non-quantum encryption dispatching terminal initiates a second quantum encryption negotiation request to the quantum encryption management system through the second quantum proxy switch;

[0126] Step 205: After receiving the key negotiation response from the key management system, the calling quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal generate a second quantum session key according to the key negotiation response;

[0127] Step 206: The calling quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal perform quantum encryption communication according to the second quantum session key.

[0128] In steps 201 to 206, in the encrypted communication between the quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal, the quantum encryption dispatch station terminal can act as a caller or a called party. Steps 201 to 206 are explained by assuming that the quantum encryption dispatch station terminal can act as a caller. When the quantum encryption dispatch station terminal acts as a called party, the communication process is similar to steps 201 to 206.

[0129] For dispatch desk terminals that do not use quantum security encryption technology, a quantum security proxy IP PBX (Private Branch Exchange) method is adopted, based on the TCP / IP protocol, integrating the corresponding SDK, supporting identity authentication, providing voice encryption / decryption functions, and supporting encryption capability negotiation.

[0130] The calling quantum encryption dispatch terminal initiates a communication session and requests to establish a connection with the non-quantum encryption dispatch terminal through the IMS core server. For the non-quantum encryption dispatch terminal, it is necessary to first access the quantum security proxy PBX to encrypt / decrypt the communication process. The subsequent process is the same as the encrypted communication between the quantum encryption dispatch terminal and the quantum encryption dispatch terminal.

[0131] As an optional embodiment, after step 106, the method further includes:

[0132] Step 107: The first quantum encryption dispatch station and the second quantum encryption dispatch station delete the first quantum session key and update the key count of the quantum key pool;

[0133] Step 108: The quantum encryption management system saves the first quantum session key.

[0134] In step 107-step 108, after the session process ends, the two parties terminate the session, the calling quantum encryption dispatch station terminal and the called quantum encryption dispatch station terminal delete the quantum session key of this session in their respective key pools, do not reuse the quantum key, and update the key count in the key pool. The quantum key management system saves the session key.

[0135] As an optional embodiment, after step 107, the method further includes:

[0136] Step 301: The calling quantum encryption dispatching terminal obtains the number of remaining quantum keys in the quantum key pool;

[0137] Step 302: The calling quantum encryption dispatching terminal predicts the number of quantum keys to be consumed per unit time in the future;

[0138] Step 303: The calling quantum encryption dispatching terminal determines the predicted duration of the remaining quantum key number based on the remaining quantum key number and the quantum key number to be consumed per unit time;

[0139] Step 304: If the predicted duration is less than the preset duration, the calling quantum encryption dispatch station terminal requests a new key from the quantum key system.

[0140] In step 301-step 304, during the service transmission process, the dispatching communication system reduces the keys in the key pool of the quantum VPN gateway or the quantum key dispatching terminal due to the encryption and decryption process of the service; at the same time, the existing keys in the key pool are used to encrypt the key filling process to ensure the security of the quantum key distribution process, which will also consume certain keys.

[0141] Since the transmission business process and the key distribution process require the consumption of keys, and the consumption of different business keys is different, the key pool has different demand for keys in different time periods. It is necessary to judge the capacity of the key pool in a timely manner to determine whether it is necessary to supplement keys to meet the needs of subsequent business.

[0142] The calling quantum encryption dispatching terminal and / or the called quantum encryption dispatching terminal first obtains the number M of quantum keys remaining in the key pool, predicts the number m of quantum keys to be consumed per unit time in the future according to future business conditions, and then calculates the predicted duration T=M / m that the remaining number of quantum keys can maintain.

[0143] The preset duration is set to t. If T < t, it means that the remaining quantum keys cannot maintain the service usage for the preset duration. At this time, the calling quantum encryption dispatching terminal and / or the called quantum encryption dispatching terminal requests the quantum key system to inject new keys.

[0144] Specifically, when the quantum VPN gateway or quantum key dispatching terminal determines that the number of quantum keys in the key pool is insufficient, it interacts with the quantum key management module and requests quantum key filling. After both parties confirm the legitimacy of their identities, the quantum key management module encrypts the generated key and returns it to the quantum VPN gateway or quantum key dispatching terminal.

[0145] The quantum VPN gateway or quantum key dispatch terminal will store the received keys to ensure that the quantum VPN gateway or quantum key dispatch system has sufficient quantum keys to ensure the confidentiality and security of the business transmission process.

[0146] In summary, this scheme innovatively designs two efficient and secure quantum-secure dispatching communication system topologies suitable for actual power dispatching scenarios, making full use of the technical advantages of quantum encryption security to achieve stable, reliable and secure transmission of power dispatching information.

[0147] For quantum key distribution in two networking modes, a dynamic key pool management mechanism is developed to adjust the key update frequency and distribution strategy in real time to ensure that the key quantity always meets the requirements of scheduling business transmission.

[0148] A quantum-security-based proxy IP PBX method is adopted to support the end-to-end secure communication process between power dispatching terminals that use quantum security technology and dispatching terminals that do not use quantum security technology.

[0149] This solution combines the dispatching communication network with relevant technologies of quantum secure communication to build a power dispatching communication system, which improves the security protection capability of the power dispatching communication system, establishes reliable quantum key distribution and dynamic key pool management, enhances the applicability in power dispatching scenarios, improves the efficiency of quantum satellite communications, and improves the stability of the optical fiber transmission environment.

[0150] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0151] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that comply with the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0152] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A scheduling terminal system based on quantum encryption communication, characterized in that: The system includes a first scheduling inner field, a plurality of first scheduling outer fields and a quantum key system connected in a first networking mode; The first dispatching inner field includes a first switch, a first quantum VPN gateway device, a second switch and an IMS core server connected in sequence, the IMS core server is also connected to a dispatching service server and a plurality of first dispatching terminals, and the dispatching service server is also connected to a dispatching service display screen; The first dispatching outfield includes a second dispatching terminal, a second quantum VPN gateway device and a third switch connected in sequence; there are multiple second dispatching terminals; The quantum key system includes a quantum key distribution module and a quantum key management module, and the quantum key system is respectively connected with the scheduling inner field and the scheduling outer field through a quantum negotiation channel; The first switch is communicatively connected with the third switch; The first quantum VPN gateway device is used to perform quantum key encryption and decryption on multimedia data transmitted by the first dispatching terminal; the second quantum VPN gateway device is used to perform quantum key encryption and decryption on data transmitted by the second dispatching terminal; The IMS core server is used to transmit the multimedia data sent by the first dispatching terminal to the dispatching service server, so that the multimedia data is displayed on the dispatching service display screen; The quantum key system is used to update the quantum key storage pools of the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel.

2. The system according to claim 1, characterized in that The system also includes a second scheduling inner field, a plurality of second scheduling outer fields and a quantum key system connected in a second networking mode; The second dispatching inner field includes a fourth switch, an IMS core server and a plurality of first quantum key dispatching station terminals connected in sequence, the IMS core server is also connected to a dispatching service server, and the dispatching service server is connected to a dispatching service display screen; The second dispatching outfield includes a fifth switch and a plurality of second quantum key dispatching station terminals in communication connection; The fourth switch is communicatively connected with the fifth switch; The first quantum key dispatching terminal and the second quantum key dispatching terminal are both integrated by a dispatching terminal, a quantum key production device and a quantum key management terminal; The first quantum key dispatching station terminal is used to perform quantum key encryption and decryption on multimedia data transmitted by the first dispatching station terminal; the second quantum key dispatching station terminal is used to perform quantum key encryption and decryption on data transmitted by the second dispatching station terminal; The quantum key system is used to update the quantum key storage pools of the first quantum key dispatch station terminal and the second quantum key dispatch station terminal through the quantum negotiation channel.

3. The system according to claim 2, characterized in that The first quantum key dispatch station terminal and the second quantum key dispatch station terminal are both integrated with a dispatch station terminal and a quantum TF super card.

4. The system according to claim 1, characterized in that The quantum key system includes a quantum key distribution module and a quantum key management module. The quantum key distribution module is used for quantum key generation and distribution. The quantum key management module is used for quantum key storage, filling, negotiation, and quantum key update of the key pool. The quantum key management module is used for managing the generated quantum keys.

5. The system according to claim 1, characterized in that The quantum key system is responsible for the authentication and access of quantum VPN gateway devices, and distributes signature certificates to the first quantum VPN gateway device and the second quantum VPN gateway device that have passed the authentication; The quantum key system transmits the generated quantum key to the first quantum VPN gateway device and the second quantum VPN gateway device through the quantum negotiation channel, and the first quantum VPN gateway device and the second quantum VPN gateway device store the quantum key to form a quantum key pool.

6. The system according to claim 2, characterized in that The quantum key system is responsible for the authentication and access of the quantum key dispatching station terminal, and distributes signature certificates to the first quantum key dispatching station terminal and the second quantum key dispatching station terminal that have passed the authentication; The quantum key system transmits the generated quantum key to the first quantum key dispatch station terminal and the second quantum key dispatch station terminal through the quantum negotiation channel. The first quantum key dispatch station terminal and the second quantum key dispatch station terminal store the quantum key to form a quantum key pool.

7. A quantum encryption communication method, characterized in that: Applied to the dispatch terminal system according to any one of claims 1 to 6, the method comprises: The calling quantum encryption dispatching station terminal initiates a communication request to the called quantum encryption dispatching station terminal through the IMS core server; the calling quantum encryption dispatching station terminal and the called quantum encryption dispatching station terminal are any two of the first dispatching station terminal, the second dispatching station terminal, the first quantum encryption dispatching station terminal, and the second quantum encryption dispatching station terminal; The called quantum encryption dispatching station terminal establishes a communication connection with the calling quantum encryption dispatching station terminal according to the communication request; The calling quantum encryption dispatch station terminal and the called quantum encryption dispatch station terminal initiate a quantum encryption negotiation request to the quantum encryption management system, and after receiving a key negotiation response from the key management system, the calling quantum encryption dispatch station terminal and the called quantum encryption dispatch station terminal generate a first quantum session key according to the key negotiation response; The calling quantum encryption dispatching terminal encrypts the target multimedia data to be transmitted according to the first quantum session key and the SM4 algorithm, and uses the SM3 algorithm to perform digital signature to obtain encrypted multimedia data; The calling quantum encryption dispatching terminal sends the encrypted multimedia data to the second quantum encryption dispatching terminal using the RTP protocol or the RTCP protocol; The second quantum encryption dispatch station decrypts the encrypted multimedia data using the first quantum session key and the SM4 algorithm to obtain the target multimedia data.

8. The method according to claim 7, characterized in that After obtaining the multimedia data content, it also includes: The first quantum encryption dispatch station and the second quantum encryption dispatch station delete the first quantum session key and update the key count of the quantum key pool; The quantum encryption management system stores the first quantum session key.

9. The method according to claim 8, characterized in that After updating the key count of the quantum key pool, also include: The calling quantum encryption dispatching terminal obtains the remaining number of quantum keys in the quantum key pool; The calling quantum encryption dispatching terminal predicts the number of quantum keys to be consumed per unit time in the future; The calling quantum encryption dispatching terminal determines the predicted duration of the remaining quantum key number according to the remaining quantum key number and the quantum key number to be consumed within the unit time; If the predicted duration is less than the preset duration, the calling quantum encryption dispatch station terminal requests the quantum key system to inject a new key.

10. The method according to claim 7, characterized in that The method further comprises: The calling quantum encryption dispatching terminal initiates a communication request for a non-quantum encryption dispatching terminal to the IMS core server through the first quantum proxy switch; the non-quantum encryption dispatching terminal is a dispatching terminal that does not use quantum security encryption technology; The IMS core server transmits the communication request to the non-quantum encryption dispatch terminal through the second quantum proxy switch; The non-quantum encryption dispatch station terminal establishes a communication connection with the first quantum encryption dispatch station according to the communication request; The calling quantum encryption dispatch terminal initiates a first quantum encryption negotiation request to the quantum encryption management system through the first quantum proxy switch, and the non-quantum encryption dispatch terminal initiates a second quantum encryption negotiation request to the quantum encryption management system through the second quantum proxy switch; After receiving the key negotiation response from the key management system, the calling quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal generate a second quantum session key according to the key negotiation response; The calling quantum encryption dispatch station terminal and the non-quantum encryption dispatch station terminal perform quantum encryption communication according to the second quantum session key.

Images