Interphone encryption communication method and related device

Abstract

The invention discloses an interphone encryption communication method and a related device, and relates to the technical field of quantum encryption communication, after to-be-sent first data is determined, the first data can be encrypted by using a first quantum session key in a first quantum session key set so as to obtain a first ciphertext; and generating first transmission data according to the identifier corresponding to the first quantum session key and the first ciphertext, and sending the first transmission data to the server. The first interphone comprises a plurality of quantum session keys, and one quantum session key is selected from the plurality of quantum session keys for encryption, so that the encryption has randomness, the cracking difficulty can be increased, and the encryption transmission process can be safer.

Description

Technical Field

[0001] The invention belongs to the technical field of quantum encryption communication, and in particular to a method for encrypted communication of an intercom and a related device. Background Art

[0002] With the development of science and technology, users' lives have become more diverse. For example, outdoor activities have become a daily pastime for users. In some outdoor activities, users may be divided into groups and then interact with each other through games. Users in the same group may need to exchange information, and in the process of information interaction, they usually use walkie-talkies that are cheaper and more durable.

[0003] During the information exchange process between walkie-talkies, the walkie-talkies send voice messages to the server, and the server can forward the voice messages to other members of the same group. However, walkie-talkies usually have multiple preset channels, and users in the same group only need to set the walkie-talkies to the same channel (for example, all set to channel A). In this way, the server can also determine which walkie-talkies to forward the voice messages to based on the channel information corresponding to the received voice messages. However, in this way, when a walkie-talkie in another group adjusts the channel to channel A, it can also receive the voice messages sent by the server.

[0004] Therefore, during information transmission in the existing intercom cluster, the risk of data being leaked is relatively high. Summary of the invention

[0005] The purpose of the present invention is to provide a method and related devices for encrypted communication of walkie-talkies. The walkie-talkies are pre-grouped into communication clusters, and the quantum session key sets between different communication clusters are different. When the walkie-talkies need to send data, a quantum session key in the pre-stored quantum session key set can be used to encrypt the data to be sent, thereby obtaining ciphertext information. In this way, communication devices between different communication clusters cannot decrypt the encrypted ciphertext information, thereby ensuring the security of the communication devices between the same communication clusters during the information interaction process.

[0006] In a first aspect, an embodiment of the present application provides a method for encrypted communication of a walkie-talkie, which is applied to a first walkie-talkie in a first communication cluster, wherein the multiple walkie-talkies in the first communication cluster all include the same set of quantum session keys, and the walkie-talkies in different communication clusters include different sets of quantum session keys, and each walkie-talkie is connected to a server for communication, and the method includes:

[0007] In response to receiving the first data to be sent, encrypting the first data using a first quantum session key in the quantum session key set included in the first intercom to obtain a first ciphertext;

[0008] Based on the identifier corresponding to the first quantum session key and the first ciphertext, generate first transmission data, and send the first transmission data to the server;

[0009] Wherein, the server is used to send the first transmission data to the second intercom;

[0010] The second intercom includes any of the following:

[0011] Intercoms other than the first intercom in the first communication cluster;

[0012] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0013] Optionally, the first quantum session key is used no more than a preset number of times.

[0014] In a second aspect, an embodiment of the present application provides a method for encrypted communication of a walkie-talkie, which is applied to a server, wherein the server is connected to a plurality of walkie-talkies for communication, and the plurality of walkie-talkies are divided into at least one communication cluster, and walkie-talkies belonging to the same communication cluster include the same set of quantum session keys, and walkie-talkies belonging to different communication clusters include different sets of quantum session keys; and the method includes:

[0015] In response to receiving first transmission data sent by a first intercom in a first communication cluster, a second intercom is determined based on a first transmission channel used by the first intercom to send the first transmission data; wherein the first transmission data is used to be generated by the first intercom in the following manner: encrypting the first data using a first quantum session key in a quantum session key set included in the first intercom to obtain a first ciphertext; generating the first transmission data based on an identifier corresponding to the first quantum session key and the first ciphertext;

[0016] The first transmission data is sent to the second intercom.

[0017] Optionally, one communication cluster corresponds to one transmission channel, and the determining of the second intercom based on the first transmission channel used by the first intercom to send the first transmission data includes:

[0018] If the transmission channel corresponding to the first communication cluster is the first transmission channel, the intercom other than the first intercom and currently in the first transmission channel is determined as the second intercom.

[0019] Optionally, one communication cluster corresponds to one transmission channel, and the determining of the second intercom based on the first transmission channel used by the first intercom to send the first transmission data includes:

[0020] If the transmission channel corresponding to the first communication cluster is the second transmission channel, determining whether the first transmission data includes a predefined administrator identifier; wherein the administrator identifier is used to indicate that the intercom has cross-channel interaction authority;

[0021] If the first transmission data does not include the administrator identification, the intercom other than the first intercom in the first communication cluster is determined as the second intercom.

[0022] Optionally, the server includes a set of quantum session keys included in any intercom; and the method further includes:

[0023] If the first transmission data includes an administrator identifier, a walkie-talkie other than the first walkie-talkie currently in the second transmission channel is determined as the second walkie-talkie;

[0024] And, sending the first transmission data to the second intercom includes:

[0025] Decrypting the first ciphertext in the first transmission data using the first quantum session key to obtain first data;

[0026] Determine a second quantum session key from the second quantum session set corresponding to the second transmission channel, and encrypt the first data using the second quantum session key to obtain a second ciphertext;

[0027] Replacing the first quantum session key identifier and the first ciphertext in the first transmission data with the second quantum session key identifier and the second ciphertext to obtain updated first transmission data;

[0028] The updated first transmission data is sent to the second intercom.

[0029] In a third aspect, another embodiment of the present application provides a device for encrypted communication of a walkie-talkie, which is applied to a first walkie-talkie in a first communication cluster, wherein the multiple walkie-talkies in the first communication cluster all include the same set of quantum session keys, and the walkie-talkies in different communication clusters include different sets of quantum session keys, and each walkie-talkie is connected to the server for communication, and the device includes:

[0030] an encryption unit, configured to, in response to receiving first data to be sent, encrypt the first data using a first quantum session key in the quantum session key set included in the first intercom to obtain a first ciphertext;

[0031] A generating unit, configured to generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to the server;

[0032] Wherein, the server is used to send the first transmission data to the second intercom;

[0033] The second intercom includes any of the following:

[0034] Intercoms other than the first intercom in the first communication cluster;

[0035] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0036] In a fourth aspect, another embodiment of the present application provides a device for encrypted communication of a walkie-talkie, which is applied to a server, wherein the server is connected to a plurality of walkie-talkies for communication, and the plurality of walkie-talkies are divided into at least one communication cluster, and the walkie-talkies belonging to the same communication cluster include the same set of quantum session keys, and the walkie-talkies belonging to different communication clusters include different sets of quantum session keys; and the device includes:

[0037] A determination unit, configured to determine a second intercom based on a first transmission channel used by the first intercom to send the first transmission data in response to receiving first transmission data sent by a first intercom in a first communication cluster; wherein the first transmission data is used to be generated by the first intercom in the following manner: encrypting the first data using a first quantum session key in a quantum session key set included in the first intercom to obtain a first ciphertext; generating the first transmission data based on an identifier corresponding to the first quantum session key and the first ciphertext;

[0038] A sending unit is used to send the first transmission data to the second intercom.

[0039] In a fifth aspect, another embodiment of the present application provides a storage medium, in which a computer program is stored, wherein the computer program is configured to execute the above-mentioned walkie-talkie encrypted communication method when running.

[0040] In the sixth aspect, another embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the above-mentioned walkie-talkie encrypted communication method.

[0041] Compared with the prior art, the present invention provides a method and related device for encrypted communication of walkie-talkies. After determining the first data to be sent, the first walkie-talkie can encrypt the first data using the first quantum session key in the first quantum session key set, thereby obtaining the first ciphertext; and can generate the first transmission data according to the identifier corresponding to the first quantum session key and the first ciphertext, and can send the first transmission data to the server. Since the first walkie-talkie includes multiple quantum session keys, and selects a quantum session key from the multiple quantum session keys for encryption, the selection of the quantum session key is random, which helps to increase the difficulty of cracking and make the encrypted transmission process safer. The server sends the first transmission data to the second walkie-talkie. If the second walkie-talkie that receives the first transmission data is not divided into the same communication cluster as the first walkie-talkie in advance, it is obvious that the first data cannot be obtained due to the lack of the first quantum session key. At the same time, since the first ciphertext in the first transmission data is obtained by encrypting the first quantum session key, the first ciphertext is also difficult to crack.

[0042] That is, the method disclosed in the present invention makes the communication interaction between walkie-talkies using the server for network communication more secure. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 A schematic flow chart of a method for encrypted communication of an intercom provided by an embodiment of the present invention;

[0044] Figure 2 A flowchart of another method for encrypted communication of an intercom provided by an embodiment of the present invention;

[0045] Figure 3 A schematic diagram of interaction between a walkie-talkie and a server provided in an embodiment of the present invention;

[0046] Figure 4 A connection diagram of another intercom encryption communication device provided by an embodiment of the present invention;

[0047] Figure 5 A connection diagram of a device for encrypted communication of an intercom provided by an embodiment of the present invention;

[0048] Figure 6 A schematic diagram of the structure of a computer device provided in one embodiment of the present application is shown. DETAILED DESCRIPTION

[0049] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0050] It can be seen from the records of the above background technology that walkie-talkies usually have multiple preset channels. In related technologies, walkie-talkies in the same communication cluster can be pre-set to use the same communication channel. In this way, when the server receives the communication data, it can forward the communication data to the walkie-talkies in the same communication channel according to the communication channel, thereby realizing communication interaction between walkie-talkies on the same communication channel.

[0051] However, in some scenarios, it may be necessary for only specific users to receive communication data, while other users do not need to receive communication data (that is, it may be necessary for only walkie-talkies in the same communication cluster to be able to exchange information, while walkie-talkies in different communication clusters cannot exchange information). For example, in a field training activity, the trainees may be grouped, and it is hoped that users in the group can communicate with each other, while users in different groups do not want to communicate with each other. In this case, the solutions in the relevant technology are difficult to implement. The reason is that the server determines to send the data on the corresponding channel based on the channel corresponding to the received data, so that walkie-talkies on the same channel can receive the information. At this time, when users who are preset to different groups adjust the walkie-talkies to the same channel, they can also receive the sent data.

[0052] For example, when Group A and Group B are conducting a field training competition, it is stipulated that when members of Group A use walkie-talkies, they use Channel A for communication, and when members of Group B use walkie-talkies, they use Channel B for communication. If a member of Group A uses Channel B when using a walkie-talkie, he or she may also receive the communication data between members of Group B.

[0053] That is, the communication method in the related technology cannot guarantee the security of communication between clusters.

[0054] In the disclosed embodiment, the walkie-talkie is pre-grouped into communication clusters, and different communication clusters have different quantum session key sets. When the walkie-talkie needs to send data, it can use a quantum session key in the pre-stored quantum session key set to encrypt the data to be sent, thereby obtaining ciphertext information. In this way, the communication devices between different communication clusters cannot decrypt the encrypted ciphertext information, thereby ensuring the security of the information interaction process between the communication devices in the same group of communication clusters.

[0055] See also Figure 1 , Figure 1 A flow chart of a method for encrypted communication of a walkie-talkie provided in an embodiment of the present invention. The method for encrypted communication of a walkie-talkie can be applied to a first walkie-talkie in a first communication cluster. Multiple walkie-talkies in the first communication cluster all include the same set of quantum session keys, and walkie-talkies in different communication clusters include different sets of quantum session keys. Each walkie-talkie is connected to a server for communication.

[0056] It should be noted that, in actual use, there may be multiple communication clusters. This embodiment only describes the communication of one of the multiple communication clusters, and the communication methods adopted by other communication clusters in the multiple communication clusters may be the same as the communication method disclosed in this embodiment. Therefore, the present disclosure selects the communication method of one of the communication clusters (the first communication cluster) for detailed description, so as to understand the data transmission process of the walkie-talkies in the communication cluster of the present disclosure.

[0057] It should be understood that the number of intercoms in each communication cluster may be different, and the number of intercoms in each communication cluster may be limited according to actual conditions.

[0058] It should be noted that the quantum session key sets included in the intercoms in different communication clusters are different. For example, communication cluster A includes intercom A1, intercom A2...intercom An, and communication cluster B includes intercom B1, intercom B2...intercom Bn. Among them, intercom A1, intercom A2...intercom An all use quantum session key set A, and intercom B1, intercom B2...intercom Bn all use quantum session key set B, and quantum session key set A and quantum session key set B can be different. In this way, after the quantum session key in quantum session key set A is used to encrypt the data to obtain the ciphertext information A, the quantum session key in quantum session key set B cannot be used to decrypt the ciphertext information A. Correspondingly, the ciphertext information encrypted using the quantum session key in quantum session key set B cannot be decrypted by the quantum session key in quantum session key set A. This method prevents communication devices between different communication clusters from interacting, thereby ensuring the security of information interaction between intercoms in the same pre-set communication cluster.

[0059] like Figure 1 As shown, the method for encrypted communication of the intercom may include the following steps:

[0060] Step 101, in response to receiving first data to be sent, encrypting the first data using a first quantum session key in a quantum session key set included in a first intercom to obtain a first ciphertext;

[0061] Step 102: Generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to the server.

[0062] Here, the server is used to send the first transmission data to the second intercom.

[0063] The second intercom includes any of the following:

[0064] Intercoms other than the first intercom in the first communication cluster;

[0065] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0066] It should be understood that the server can predetermine the communication cluster in which the first walkie-talkie is located, so as to send the first transmission data to certain walkie-talkies in a targeted manner. This method can avoid sending the first transmission data to walkie-talkies that do not belong to the first communication cluster, and walkie-talkies in the same predefined communication cluster do not need to use the same communication channel to communicate.

[0067] As an example, after the communication cluster is determined in advance, the intercoms in the same communication cluster should use the same channel. Therefore, the intercom in the same communication channel as the first intercom can be directly determined as the second intercom. In this way, the server does not need to save the intercom corresponding to each communication cluster, but can directly send according to the communication channel. At the same time, this method also makes it unnecessary to notify the server each time the predefined communication cluster is changed. The server only needs to perform the corresponding forwarding work according to the communication channel, making the overall process simpler.

[0068] As an example, a quantum session key can be understood as a session key generated based on quantum random numbers and a quantum key distribution protocol. The ciphertext obtained after encrypting data using the quantum session key enables the ciphertext to have a certain ability to resist cracking by quantum computers, thereby helping to make the ciphertext obtained after encrypting data using the quantum session key more secure.

[0069] As an example, a quantum session key set may include multiple quantum session keys. In this way, a different quantum session key can be used in each information sending process. In this way, the data of the interaction process may need to be cracked a large number of times. It can also be understood that since each piece of information is encrypted with a different quantum session key, each ciphertext data needs to be cracked from scratch, which will obviously greatly increase the difficulty of cracking, and help make the encrypted communication process more secure.

[0070] As an example, the quantum session key sets included in the intercoms in different communication clusters may be different, which means that different quantum session key sets do not include the same quantum session key. In this way, different communication clusters cannot decrypt each other.

[0071] As an example, the first walkie-talkie includes a quantum session key set. Therefore, the first walkie-talkie includes multiple quantum session keys. Then, a quantum session key can be determined from the quantum session key set and determined as the first quantum session key. The identifier corresponding to the first quantum session key and the first ciphertext can be combined and packaged to generate the first transmission data. In this way, after the server sends the first transmission data to the second walkie-talkie, the second walkie-talkie can efficiently determine the first quantum session key in the first quantum session key set according to the identifier corresponding to the first quantum session key, thereby realizing efficient decryption of the first ciphertext.

[0072] As an example, the first intercom may have multiple transmission channels, and the first transmission channel may be a predefined transmission channel. Accordingly, the intercoms in the same transmission channel as the first intercom can be understood as the same communication cluster, and these intercoms have the same quantum session key set as the first intercom, so the server can send the first transmission data to the intercoms other than the first intercom and in the first transmission channel, and the intercoms other than the first intercom and in the first transmission channel can use the first quantum session key in the first quantum session key set to decrypt the first ciphertext, thereby obtaining the first data.

[0073] It can be seen that in the present disclosure, after determining the first data to be sent, the first intercom can use the first quantum session key in the first quantum session key set to encrypt the first data, thereby obtaining the first ciphertext; and can generate the first transmission data according to the identifier corresponding to the first quantum session key and the first ciphertext, and can send the first transmission data to the server. Since the first intercom includes multiple quantum session keys, and selects a quantum session key from the multiple quantum session keys for encryption, the selection of the quantum session key is random, which helps to increase the difficulty of cracking and make the encrypted transmission process more secure. The server sends the first transmission data to the second intercom. If the second intercom that receives the first transmission data is not divided into the same communication cluster as the first intercom in advance, it is obvious that the first data cannot be obtained due to the lack of the first quantum session key. At the same time, since the first ciphertext in the first transmission data is obtained by encrypting the first quantum session key, the first ciphertext is also difficult to crack.

[0074] That is, the method disclosed in the present invention makes the communication interaction between walkie-talkies using the server for network communication more secure.

[0075] In some embodiments, the first quantum session key is used no more than a preset number of times.

[0076] As an example, the preset number may be 2 or 1. That is, it can be understood that the first quantum session key is only used a few times.

[0077] As an example, the number of times the first quantum session key is used as an encryption key can be understood as the number of times the first quantum session key is used for encryption or decryption. That is, during the communication process of each walkie-talkie in the communication cluster, one walkie-talkie uses a quantum session key for encryption, and the other walkie-talkie uses the quantum session key for decryption. Therefore, the number of times the quantum session key is used can be understood as the number of times the quantum session key is used for encryption or decryption by one walkie-talkie. For example, when the preset number is 2, the first quantum session key is used at most twice for encryption or decryption, or is used for encryption once and decryption once. In this way, in multiple data interactions in the communication process, multiple different quantum session keys can be used, thereby increasing the difficulty of cracking the interactive data.

[0078] As an example, the number of quantum session keys in the quantum session key set can be set according to actual conditions. For example, in some scenarios, the communication devices in the communication cluster may need to communicate frequently, so the number of quantum session keys in the quantum session key set can be set to be larger. Correspondingly, if the communication devices in the communication cluster have a low frequency of conversation and only need to communicate for a short time, the number of quantum session keys in the quantum session key set can be set to be smaller.

[0079] It should be understood that the quantum session key set can be understood as a string composed of a certain number of characters, and the quantum session key can be understood as a partial string in the composed string. For example, the quantum session key set is a string composed of 100,000 characters, and every 16 consecutive characters constitute a quantum session key.

[0080] See also Figure 2 , Figure 2 A flow chart of a method for encrypted communication of a walkie-talkie provided in an embodiment of the present invention is applied to a server, the server is connected to multiple walkie-talkies for communication, the multiple walkie-talkies are divided into at least one communication cluster, the walkie-talkies belonging to the same communication cluster include the same set of quantum session keys, and the walkie-talkies belonging to different communication clusters include different sets of quantum session keys.

[0081] like Figure 2 As shown, the method for encrypted communication of the intercom may include the following steps:

[0082] Step 201, in response to receiving first transmission data sent by a first intercom in a first communication cluster, determining a second intercom based on a first transmission channel used by the first intercom to send the first transmission data;

[0083] Step 202: Send the first transmission data to the second intercom.

[0084] Here, the first transmission data is used to be generated by the first walkie-talkie in the following manner: the first data is encrypting by using the first quantum session key in the quantum session key set included in the first walkie-talkie to obtain the first ciphertext; and the first transmission data is generated based on the identifier corresponding to the first quantum session key and the first ciphertext.

[0085] It should be understood that the process of generating the first transmission data by the first intercom has been described in detail in the above embodiment, and for the sake of brevity of the specification, it will not be repeated here.

[0086] As an example, the second intercom includes any of the following:

[0087] Intercoms other than the first intercom in the first communication cluster;

[0088] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0089] As an example, the server may pre-store the correspondence between the communication cluster and the intercom, in which case the intercoms other than the first intercom in the first communication cluster may be determined as the second intercom. The server may not store the correspondence between the communication cluster and the intercom, in which case the intercom in the same communication channel as the first intercom may be determined as the second intercom.

[0090] As an example, since the intercoms are pre-divided into communication clusters, the intercoms in the same communication cluster have the same set of quantum session keys, while the intercoms in different communication clusters do not have the same quantum session keys, so that only the intercoms pre-defined as the same communication cluster can communicate. That is, in the process of forwarding communication data using the server, the communication security of the same communication cluster can also be guaranteed.

[0091] In some embodiments, one communication cluster corresponds to one transmission channel, and the step 201 of “determining the second intercom based on the first transmission channel used by the first intercom to send the first transmission data” may specifically include:

[0092] If the transmission channel corresponding to the first communication cluster is the first transmission channel, then the intercom other than the first intercom and currently in the first transmission channel may be determined as the second intercom.

[0093] As an example, if the transmission channel corresponding to the first communication cluster is the first transmission channel, the first transmission data sent by the first walkie-talkie using the initially agreed transmission channel can be represented. At this time, the walkie-talkie other than the first walkie-talkie and currently in the first transmission channel can be determined as the second walkie-talkie.

[0094] As an example, this approach does not require the server to pay attention to which intercoms are initially in the same communication cluster, and this can also improve the efficiency of determining the second intercom, so that the first transmission data can be sent to the second intercom more efficiently.

[0095] In some embodiments, one communication cluster corresponds to one transmission channel, and the step 201 of “determining the second intercom based on the first transmission channel used by the first intercom to send the first transmission data” may specifically include:

[0096] If the transmission channel corresponding to the first communication cluster is the first transmission channel, the intercoms other than the first intercom in the first communication cluster are determined as second intercoms.

[0097] As an example, this method requires the server to pre-store the intercoms corresponding to each communication cluster. The advantage is that when a intercom in the first communication cluster is not set to the first transmission channel as pre-agreed, the first transmission data sent by the first intercom in the first communication cluster can also be obtained.

[0098] In some embodiments, one communication cluster corresponds to one transmission channel, and the step 201 of “determining the second intercom based on the first transmission channel used by the first intercom to send the first transmission data” may specifically include:

[0099] If the transmission channel corresponding to the first communication cluster is the second transmission channel, determine whether the first transmission data includes a predefined administrator identifier; if the first transmission data does not include the administrator identifier, determine the intercoms other than the first intercom in the first communication cluster as second intercoms.

[0100] Here, the administrator ID is used to indicate that the intercom has cross-channel interaction permissions.

[0101] As an example, a certain intercom may belong to the master intercom, and the master intercom can communicate with each intercom, and the master intercom is only pre-divided into the first communication cluster. Therefore, when the first transmission data includes the administrator identifier, it can be characterized that the first intercom may be the master intercom. Correspondingly, when the first transmission data does not include the administrator identifier, it can be characterized that the first intercom is not the master intercom, but at this time the first intercom does not transmit data according to the predefined transmission channel. At this time, the server can also directly determine the intercoms other than the first intercom in the first communication cluster as the second intercom, so that the intercoms initially determined as in the first communication cluster can receive the information sent by the first intercom.

[0102] In some embodiments, the server includes a set of quantum session keys included in any intercom; and the method may further include: if the first transmission data includes an administrator identifier, an intercom other than the first intercom and currently in the second transmission channel may be determined as the second intercom;

[0103] And, sending the first transmission data to the second intercom, comprising:

[0104] Decrypting the first ciphertext in the first transmission data using the first quantum session key to obtain the first data;

[0105] Determine a second quantum session key from a second quantum session set corresponding to the second transmission channel, and encrypt the first data using the second quantum session key to obtain a second ciphertext;

[0106] Replacing the first quantum session key identifier and the first ciphertext in the first transmission data with the second quantum session key identifier and the second ciphertext to obtain updated first transmission data;

[0107] The updated first transmission data is sent to the second intercom.

[0108] As an example, when the first transmission data includes the manager identification, it can be indicated that the first intercom is a master intercom. At this time, it can be indicated that the master intercom may need to send information to intercoms in other communication clusters.

[0109] As an example, the server may determine the second intercom to which the data needs to be sent based on the communication channel used by the main intercom.

[0110] As an example, since different communication clusters correspond to different quantum session keys, and one communication cluster corresponds to one transmission channel, a predefined transmission channel corresponds to one quantum session key, and different transmission channels correspond to different quantum session keys. For example, a first communication cluster corresponds to a first transmission channel and a first set of quantum session keys, and a second communication cluster may correspond to a second transmission channel and a second set of quantum session keys.

[0111] Therefore, when the first transmission data is directly sent to the second intercom in the second communication cluster, the second intercom cannot decrypt the first ciphertext information in the first transmission data.

[0112] As an example, the server can pre-store the quantum session key sets included in each communication cluster. When the server determines that the first walkie-talkie is the main walkie-talkie and needs to send information to the second walkie-talkie in the second communication cluster, the server can decrypt the first ciphertext to obtain the first data, and can use the second quantum session key to encrypt the first data to obtain the second ciphertext, and can use the second quantum session key identifier and the second ciphertext to replace the first quantum session key identifier and the first ciphertext in the first transmission data; obtain the updated first transmission data; in this way, the updated first transmission data is sent to the second walkie-talkie, and the second walkie-talkie can normally decrypt the second ciphertext information to obtain the first data.

[0113] It can be seen that in the present disclosure, under normal circumstances, the server does not need to decrypt the first ciphertext information in the first transmission data. Only when the first walkie-talkie is the master walkie-talkie and the transmission channel used by the first walkie-talkie is different from the transmission channel corresponding to the pre-assigned communication cluster, it is necessary to encrypt the first ciphertext in the first transmission data and re-encrypt it using the second quantum session key (the quantum session key included by the receiver). In this way, not only the security of cluster communication is protected, but also the master walkie-talkie can send information to different clusters separately, thereby improving applicability.

[0114] That is, under normal circumstances, only intercoms in the same communication cluster can exchange information, but when a master intercom needs to make a call, it can make a call across communication clusters, and the master intercom only needs to store the pre-assigned quantum session key set corresponding to the communication cluster. That is, the method disclosed in this disclosure greatly improves the security between cluster communications and ensures applicability.

[0115] It should be understood that the encryption algorithms used in the encryption process of the present invention can all be hybrid algorithms, that is, hybrid algorithms of post-quantum algorithms and national encryption algorithms, or hybrid algorithms of post-quantum algorithms and international algorithms, which helps to make the encrypted ciphertext information more difficult to crack.

[0116] It should be understood that international algorithms usually refer to cryptographic algorithm standards formulated by international standardization organizations (such as ISO (International Organization for Standardization), IEC (International Electrotechnical Commission), ITU (International Telecommunication Union), etc.) or industry alliances (such as IETF (Internet Engineering Task Force)). International algorithms may include but are not limited to: symmetric cryptographic algorithms, asymmetric encryption algorithms, digest algorithms, digital signature algorithms, etc.

[0117] National cryptographic algorithms usually refer to a series of domestic cryptographic algorithm standards recognized and announced by the National Cryptography Administration. National cryptographic algorithms may include but are not limited to: symmetric encryption algorithms, asymmetric encryption algorithms based on elliptic curve cryptography, and block cipher algorithms.

[0118] Post-quantum algorithms, also known as post-quantum cryptography (PQC), refer to encryption algorithms that can remain secure even in the presence of quantum computers. Post-quantum algorithms may include but are not limited to: (1) lattice-based cryptographic algorithms; (2) coding-based cryptographic algorithms; (3) multivariate-based cryptographic algorithms; (4) hash-based signature algorithms. Of course, the specific post-quantum cryptographic algorithm to be used can be limited according to actual conditions.

[0119] The hybrid algorithm based on the post-quantum algorithm and the national secret algorithm can be understood as integrating the post-quantum key encapsulation algorithm on the basis of the national secret algorithm to obtain the final session negotiation key. This hybrid method can significantly reduce potential risks, and thus have the ability to resist key cracking by quantum computers to a certain extent. It can also be a double signature method, in which the message is signed using the traditional public key cryptography algorithm, and then the message (which may include the traditional cryptographic signature result) is signed using the post-quantum public key cryptography algorithm, and the combination of the two signature results is output. Or the order of signatures can be swapped, and the post-quantum public key cryptography algorithm is signed first, and then the traditional public key cryptography algorithm is signed. During verification, only when both signature results are successfully verified, the verification is considered successful. This method ensures that even if one of the algorithms is cracked, the other algorithm can still provide security.

[0120] Of course, the hybrid encryption method based on a hybrid algorithm of post-quantum algorithm and international algorithm, and the hybrid encryption method based on a hybrid algorithm of post-quantum algorithm, national secret algorithm and international algorithm can be similar to the hybrid encryption method based on post-quantum algorithm and national secret algorithm; for the sake of brevity of the specification, they will not be repeated here.

[0121] It should be understood that due to the development of quantum computing, the existing conventional encryption methods are more likely to be cracked by quantum computers when performing data encryption. Therefore, in the present disclosure, a hybrid algorithm is adopted so that the encrypted ciphertext information can resist cracking by quantum computers. At the same time, a national secret algorithm is also adopted, which can also resist cracking by classical computers.

[0122] See also Figure 3 , Figure 3 It can be understood as a schematic diagram of the interaction between the intercom and the server. Figure 3 It can be seen that the intercoms do not communicate directly with each other, but forward information through the server. This helps to increase the communication distance between communication clusters and helps to make the communication more stable.

[0123] In some embodiments, one walkie-talkie may correspond to one secure digital storage card, and the secure digital storage card may be used to store a quantum session key set loaded by a key distribution terminal.

[0124] As an example, since the secure digital memory card can be inserted into a walkie-talkie, the quantum session key set is stored in the secure digital memory card, so that the key distribution terminal only needs to distribute the quantum session key to the secure memory card. In actual use, it is only necessary to insert the secure digital memory card into the corresponding walkie-talkie. This method can make it easier for the walkie-talkie to obtain the quantum session key and update the quantum session key (for example, by updating the secure digital memory card).

[0125] As an example, the secure digital storage card may include, but is not limited to: a memory card, a SIM card, etc.

[0126] It is also important to emphasize that a quantum computer is a physical device that follows the laws of quantum mechanics to perform high-speed mathematical and logical operations, store and process quantum information. When a device processes and calculates quantum information and runs quantum algorithms, it is a quantum computer. Quantum computers have become a key technology under research because they have the ability to process mathematical problems more efficiently than ordinary computers. For example, they can speed up the time it takes to crack an RSA key from hundreds of years to a few hours.

[0127] That is, with the development of quantum technology, the protection measures in the existing communication process may not be ideal, that is, the protection measures in the traditional communication process are difficult to resist the attack of quantum computers. In the present disclosure, when encrypting data, the walkie-talkie uses a quantum session key and utilizes a hybrid encryption algorithm for encryption, which can resist quantum computer attacks to a certain extent and enhance the security of the communication process.

[0128] In some implementations, the hybrid encryption algorithm may also be pre-stored in a secure digital memory card.

[0129] In some implementations, the application scenario of the present disclosure can be applied to military exercise scenarios. For example, at this time, it may be necessary to divide into multiple groups, and information can be exchanged between members of the same group, but information cannot be exchanged between members of different groups. The method of the present disclosure can obviously meet this demand.

[0130] See also Figure 4 , Figure 4 A schematic diagram of the structure of a walkie-talkie encryption communication device provided by an embodiment of the present invention, wherein the walkie-talkie encryption communication device 400 is applied to a first walkie-talkie in a first communication cluster, wherein multiple walkie-talkies in the first communication cluster all include the same quantum session key set, and walkie-talkies in different communication clusters include different quantum session key sets, and each walkie-talkie is connected to a server for communication, and the device 400 includes:

[0131] The encryption unit 401 is used for, in response to receiving the first data to be sent, encrypting the first data using the first quantum session key in the quantum session key set included in the first intercom to obtain a first ciphertext;

[0132] A generating unit 402 is used to generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to the server;

[0133] Wherein, the server is used to send the first transmission data to the second intercom;

[0134] The second intercom includes any of the following:

[0135] Intercoms other than the first intercom in the first communication cluster;

[0136] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0137] In some embodiments, the first quantum session key is used no more than a preset number of times.

[0138] See also Figure 5 , Figure 5 A schematic diagram of the structure of a walkie-talkie encryption communication device provided by an embodiment of the present invention, wherein the walkie-talkie encryption communication device 500 is applied to a server, the server is connected to multiple walkie-talkies for communication, the multiple walkie-talkies are divided into at least one communication cluster, the walkie-talkies belonging to the same communication cluster include the same set of quantum session keys, and the walkie-talkies belonging to different communication clusters include different sets of quantum session keys; and the device 500 includes:

[0139] The determination unit 501 is used to determine the second intercom based on the first transmission channel used by the first intercom to send the first transmission data in response to receiving the first transmission data sent by the first intercom in the first communication cluster; wherein the first transmission data is used to be generated by the first intercom in the following manner: encrypting the first data using the first quantum session key in the quantum session key set included in the first intercom to obtain a first ciphertext; generating the first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext;

[0140] The sending unit 502 is used to send the first transmission data to the second intercom.

[0141] In some embodiments, one communication cluster corresponds to one transmission channel, and the determination unit 501 is further configured to:

[0142] If the transmission channel corresponding to the first communication cluster is the first transmission channel, the intercom other than the first intercom and currently in the first transmission channel is determined as the second intercom.

[0143] In some embodiments, one communication cluster corresponds to one transmission channel, and the determination unit 501 is further configured to:

[0144] If the transmission channel corresponding to the first communication cluster is the second transmission channel, determining whether the first transmission data includes a predefined administrator identifier; wherein the administrator identifier is used to indicate that the intercom has cross-channel interaction authority;

[0145] If the first transmission data does not include the administrator identification, the intercom other than the first intercom in the first communication cluster is determined as the second intercom.

[0146] In some embodiments, the server includes a set of quantum session keys included in any walkie-talkie; and the determination unit 501 is further specifically used for:

[0147] If the first transmission data includes an administrator identifier, a walkie-talkie other than the first walkie-talkie currently in the second transmission channel is determined as the second walkie-talkie;

[0148] And, sending the first transmission data to the second intercom includes:

[0149] Decrypting the first ciphertext in the first transmission data using the first quantum session key to obtain first data;

[0150] Determine a second quantum session key from the second quantum session set corresponding to the second transmission channel, and encrypt the first data using the second quantum session key to obtain a second ciphertext;

[0151] Replacing the first quantum session key identifier and the first ciphertext in the first transmission data with the second quantum session key identifier and the second ciphertext to obtain updated first transmission data;

[0152] The updated first transmission data is sent to the second intercom.

[0153] Figure 6 A schematic diagram of the structure of a computer device provided in one embodiment of the present application is shown, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the functions of a computer system for implementing the method for generating an amplitude preparation circuit in any of the above-mentioned embodiments are realized.

[0154] The embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a computer, the computer executes the functions of the computer system of the method for encrypted communication of walkie-talkies in any of the above embodiments.

[0155] The embodiments of the present application also provide a computer program product including instructions, which, when executed by a computer, enables the computer to perform the functions of the computer system of the method for encrypted communication of an intercom in any of the above embodiments.

[0156] It should be understood that the specific examples in this application are only intended to help those skilled in the art to better understand the embodiments of the present application, rather than to limit the scope of the present invention.

[0157] It can be understood that in the various implementations of the present application, the size of the serial number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the implementation methods of the present application.

[0158] It can be understood that the various embodiments described in this application can be implemented individually or in combination, and the embodiments of this application are not limited to this.

[0159] Unless otherwise stated, all technical and scientific terms used in the embodiments of the present application have the same meaning as those generally understood by those skilled in the art of the technical field of the present application. The terms used in the present application are only for the purpose of describing specific embodiments and are not intended to limit the scope of the present application. The term "and / or" used in the present application includes any and all combinations of one or more related listed items. The singular forms of "a kind of", "above" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.

[0160] It can be understood that the processor of the embodiment of the present application can be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method implementation can be completed by the hardware integrated logic circuit or software instructions in the processor. The above processor can be a general processor, a digital signal processor (DigitalSignal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiment of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present application can be directly embodied as a hardware decoding processor to perform, or the hardware and software modules in the decoding processor are combined and executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0161] It is understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (programmable ROM, PROM), an erasable programmable read-only memory (erasable PROM, EPROM), an electrically erasable programmable read-only memory (EEPROM) or a flash memory. The volatile memory may be a random access memory (RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0162] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0163] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method implementation methods and will not be repeated here.

[0164] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device implementation described above is only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0165] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0166] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0167] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of each implementation method of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program codes.

[0168] The above are only specific embodiments of the present application, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A method for encrypted communication of an intercom, characterized in that: Applied to a first intercom in a first communication cluster, multiple intercoms in the first communication cluster all include the same set of quantum session keys, intercoms in different communication clusters include different sets of quantum session keys, each intercom is connected to a server for communication, and the method includes: In response to receiving first data to be sent, encrypting the first data using a first quantum session key in the quantum session key set included in the first intercom to obtain a first ciphertext; Generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to the server; Wherein, the server is used to send the first transmission data to the second intercom; Wherein, the second intercom includes any one of the following: intercoms other than the first intercom in the first communication cluster; A walkie-talkie that is in the same communication channel as the first walkie-talkie.

2. The method according to claim 1, characterized in that: The first quantum session key is used no more than a preset number of times.

3. A method for encrypted communication of an intercom, characterized in that: Applied to a server, the server is connected to multiple walkie-talkies in communication, the multiple walkie-talkies are divided into at least one communication cluster, walkie-talkies belonging to the same communication cluster include the same set of quantum session keys, and walkie-talkies belonging to different communication clusters include different sets of quantum session keys; And, the method comprises: In response to receiving first transmission data sent by a first intercom in a first communication cluster, a second intercom is determined based on a first transmission channel used by the first intercom to send the first transmission data; wherein the first transmission data is used to be generated by the first intercom in the following manner: encrypting the first data using a first quantum session key in a quantum session key set included in the first intercom to obtain a first ciphertext; generating the first transmission data based on an identifier corresponding to the first quantum session key and the first ciphertext; The first transmission data is sent to the second intercom.

4. The method according to claim 3, characterized in that One communication cluster corresponds to one transmission channel, and the determining the second intercom based on the first transmission channel used by the first intercom to send the first transmission data includes: If the transmission channel corresponding to the first communication cluster is the first transmission channel, a walkie-talkie other than the first walkie-talkie currently in the first transmission channel is determined as the second walkie-talkie.

5. The method according to claim 3, characterized in that: One communication cluster corresponds to one transmission channel, and the determining the second intercom based on the first transmission channel used by the first intercom to send the first transmission data includes: If the transmission channel corresponding to the first communication cluster is the second transmission channel, determining whether the first transmission data includes a predefined administrator identifier; wherein the administrator identifier is used to indicate that the intercom has cross-channel interaction authority; If the first transmission data does not include an administrator identifier, the intercom other than the first intercom in the first communication cluster is determined as the second intercom.

6. The method according to claim 5, characterized in that The server includes a set of quantum session keys included in any intercom; and the method further includes: If the first transmission data includes an administrator identifier, determining a walkie-talkie other than the first walkie-talkie and currently in the second transmission channel as the second walkie-talkie; And, sending the first transmission data to the second intercom includes: decrypting the first ciphertext in the first transmission data using the first quantum session key to obtain first data; Determine a second quantum session key from a second quantum session set corresponding to the second transmission channel, and encrypt the first data using the second quantum session key to obtain a second ciphertext; Replacing the first quantum session key identifier and the first ciphertext in the first transmission data with the second quantum session key identifier and the second ciphertext to obtain updated first transmission data; The updated first transmission data is sent to the second intercom.

7. A device for encrypted communication of an intercom, characterized in that: Applied to a first intercom in a first communication cluster, multiple intercoms in the first communication cluster all include the same quantum session key set, intercoms in different communication clusters include different quantum session key sets, each intercom is connected to a server for communication, and the device includes: an encryption unit, configured to, in response to receiving first data to be sent, encrypt the first data using a first quantum session key in a quantum session key set included in the first intercom to obtain a first ciphertext; A generating unit, configured to generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to a server; Wherein, the server is used to send the first transmission data to the second intercom; Wherein, the second intercom includes any one of the following: intercoms other than the first intercom in the first communication cluster; A walkie-talkie that is in the same communication channel as the first walkie-talkie.

8. A device for encrypted communication of an intercom, characterized in that: Applied to a server, the server is connected to multiple walkie-talkies in communication, the multiple walkie-talkies are divided into at least one communication cluster, walkie-talkies belonging to the same communication cluster include the same set of quantum session keys, and walkie-talkies belonging to different communication clusters include different sets of quantum session keys; And, the device comprises: A determination unit, configured to determine a second intercom based on a first transmission channel used by the first intercom to send the first transmission data in response to receiving first transmission data sent by a first intercom in a first communication cluster; wherein the first transmission data is used to be generated by the first intercom in the following manner: encrypting the first data using a first quantum session key in a quantum session key set included in the first intercom to obtain a first ciphertext; generating the first transmission data based on an identifier corresponding to the first quantum session key and the first ciphertext; A sending unit is used to send the first transmission data to the second intercom.

9. A storage medium, characterized in that: The storage medium stores a computer program, wherein the computer program is configured to execute the method described in any one of claims 1 to 2, or the method described in any one of claims 3 to 6 when running.

10. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to run the computer program to execute the method described in any one of claims 2 or 3 to 6.

Images