Methods and related devices for encrypted communication of walkie-talkies

Abstract

This invention discloses a method and related apparatus for encrypted communication in walkie-talkies, relating to the field of quantum encrypted communication technology. After determining the first data to be transmitted, the first data can be encrypted using a first quantum session key from a first quantum session key set, thereby obtaining first ciphertext. First transmission data can then be generated based on the identifier corresponding to the first quantum session key and the first ciphertext, and sent to the server. Since the first walkie-talkie includes multiple quantum session keys, and one quantum session key is selected for encryption, the encryption possesses randomness, thus increasing the difficulty of cracking and making the encrypted transmission process more secure.

Description

Technical Field

[0001] This invention belongs to the field of quantum encrypted communication technology, and in particular to a method and related device for encrypted communication of walkie-talkies. Background Technology

[0002] With the development of science and technology, users' lives have become richer and more diverse. For example, outdoor activities have become a popular choice for daily leisure. In some outdoor activities, users may be divided into groups for interactive games. Users within the same group may need to exchange information, and this information exchange is usually conducted using walkie-talkies, which are cheaper and more durable.

[0003] During communication via walkie-talkies, the walkie-talkie sends voice information to the server, which then forwards the voice information to other members of the same group. However, walkie-talkies typically have multiple preset channels, and users in the same group only need to set their walkie-talkies to the same channel (e.g., all to channel A). This allows the server to determine which walkie-talkies to forward the voice information to based on the channel information received. However, this method also means that if a walkie-talkie in another group switches to channel A, it can still receive the voice information sent by the server.

[0004] Therefore, existing walkie-talkie trunking systems face a significant risk of data leakage during information transmission. Summary of the Invention

[0005] The purpose of this invention is to provide a method and related apparatus for encrypted communication of walkie-talkies. The walkie-talkies are pre-grouped into communication clusters, and the quantum session key sets of different communication clusters are different. When the walkie-talkies need to send data, they can use a quantum session key from the pre-stored quantum session key set to encrypt the data to be sent, thereby obtaining ciphertext information. In this way, communication devices between different communication clusters cannot decrypt the encrypted ciphertext information, thereby ensuring the security of communication devices in the same communication cluster during information exchange.

[0006] In a first aspect, one embodiment of this application provides a method for encrypted communication of walkie-talkies, applied to a first walkie-talkie in a first communication cluster, wherein multiple walkie-talkies in the first communication cluster all include the same set of quantum session keys, walkie-talkies in different communication clusters include different sets of quantum session keys, each walkie-talkie is connected to a server for communication, and the method includes:

[0007] In response to receiving the first data to be transmitted, the first data is encrypted using the first quantum session key from the quantum session key set included in the first walkie-talkie to obtain the first ciphertext;

[0008] Based on the identifier corresponding to the first quantum session key and the first ciphertext, first transmission data is generated, and the first transmission data is sent to the server.

[0009] The aforementioned server is used to send the first transmitted data to the second walkie-talkie;

[0010] The second walkie-talkie mentioned above includes any of the following:

[0011] The walkie-talkies in the first communication cluster mentioned above, excluding the first walkie-talkie mentioned above;

[0012] A walkie-talkie that is on the same communication channel as the first walkie-talkie mentioned above.

[0013] Optionally, the first quantum session key may be used no more than a preset number of times.

[0014] Secondly, one embodiment of this application provides a method for encrypted communication of walkie-talkies, applied to a server. The server is communicatively connected to multiple walkie-talkies, which are divided into at least one communication cluster. Walkie-talkies belonging to the same communication cluster have the same set of quantum session keys, while walkie-talkies belonging to different communication clusters have different sets of quantum session keys. The method includes:

[0015] In response to receiving first transmission data sent by a first walkie-talkie in a first communication cluster, a second walkie-talkie is determined based on the first transmission channel used by the first walkie-talkie to send the first transmission data; wherein the first transmission data is generated by the first walkie-talkie in the following manner: encrypting the first data using a first quantum session key from the quantum session key set included in the first walkie-talkie to obtain a first ciphertext; generating the first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext;

[0016] The first transmission data is sent to the second walkie-talkie.

[0017] Optionally, a communication cluster corresponds to a transmission channel, and the determination of the second walkie-talkie based on the first transmission channel used by the first walkie-talkie to transmit the first transmission data includes:

[0018] If the transmission channel corresponding to the first communication cluster is the first transmission channel, then the walkie-talkie that is currently in the first transmission channel, excluding the first walkie-talkie, is identified as the second walkie-talkie.

[0019] Optionally, a communication cluster corresponds to a transmission channel, and the determination of the second walkie-talkie based on the first transmission channel used by the first walkie-talkie to transmit the first transmission data includes:

[0020] If the transmission channel corresponding to the first communication cluster is the second transmission channel, determine whether the first transmission data includes a predefined administrator identifier; wherein the administrator identifier is used to indicate that the walkie-talkie has cross-channel interaction permissions.

[0021] If the first transmitted data does not include the administrator identifier, then the walkie-talkies in the first communication cluster other than the first walkie-talkie are identified as the second walkie-talkies.

[0022] Optionally, the aforementioned server includes the set of quantum session keys included in any walkie-talkie; and the aforementioned method further includes:

[0023] If the first transmitted data includes a manager identifier, the walkie-talkie that is not the first walkie-talkie and is currently in the second transmission channel will be identified as the second walkie-talkie.

[0024] And, the aforementioned sending of the first transmission data to the second walkie-talkie includes:

[0025] The first ciphertext in the first transmitted data is decrypted using the first quantum session key to obtain the first data.

[0026] The second quantum session key is determined from the second quantum session set corresponding to the second transmission channel, and the first data is encrypted using the second quantum session key to obtain the second ciphertext;

[0027] Replace the first quantum session key identifier and the first ciphertext in the first transmitted data with the second quantum session key identifier and the second ciphertext; obtain the updated first transmitted data.

[0028] The updated first transmission data is sent to the aforementioned second walkie-talkie.

[0029] Thirdly, another embodiment of this application provides a device for encrypted communication of walkie-talkies, applied to a first walkie-talkie in a first communication cluster. Multiple walkie-talkies in the first communication cluster all include the same set of quantum session keys, while walkie-talkies in different communication clusters include different sets of quantum session keys. Each walkie-talkie is connected to a server for communication. The device includes:

[0030] An encryption unit is configured to, in response to receiving first data to be transmitted, encrypt the first data using a first quantum session key from the quantum session key set included in the first walkie-talkie, to obtain first ciphertext;

[0031] The generation unit is configured to generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and to send the first transmission data to the server.

[0032] The aforementioned server is used to send the first transmitted data to the second walkie-talkie;

[0033] The second walkie-talkie mentioned above includes any of the following:

[0034] The walkie-talkies in the first communication cluster mentioned above, excluding the first walkie-talkie mentioned above;

[0035] A walkie-talkie that is on the same communication channel as the first walkie-talkie mentioned above.

[0036] Fourthly, another embodiment of this application provides a device for encrypted communication of walkie-talkies, applied to a server. The server is communicatively connected to multiple walkie-talkies, which are divided into at least one communication cluster. Walkie-talkies belonging to the same communication cluster have the same set of quantum session keys, while walkie-talkies belonging to different communication clusters have different sets of quantum session keys. The device includes:

[0037] A determining unit is configured to, in response to receiving first transmission data sent by a first walkie-talkie in a first communication cluster, determine a second walkie-talkie based on a first transmission channel used by the first walkie-talkie to send the first transmission data; wherein the first transmission data is generated by the first walkie-talkie in the following manner: encrypting the first data using a first quantum session key from a set of quantum session keys included in the first walkie-talkie to obtain first ciphertext; and generating the first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext;

[0038] The transmitting unit is used to transmit the first transmission data to the second walkie-talkie.

[0039] Fifthly, another embodiment of this application provides a storage medium storing a computer program, wherein the computer program is configured to execute the above-described method for encrypted communication of a walkie-talkie when it is run.

[0040] In a sixth aspect, another embodiment of this application provides an electronic device, including a memory and a processor, wherein the memory stores a computer program and the processor is configured to run the computer program to perform the above-described method for encrypted communication of a walkie-talkie.

[0041] Compared with existing technologies, the present invention provides a method and related apparatus for encrypted communication of walkie-talkies. After determining the first data to be transmitted, the first walkie-talkie can encrypt the first data using a first quantum session key from a first quantum session key set, thereby obtaining first ciphertext. It can then generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to the server. Since the first walkie-talkie includes multiple quantum session keys and selects one from these for encryption, the selection of the quantum session key is randomized, thus increasing the difficulty of cracking and making the encrypted transmission process more secure. When the server sends the first transmission data to the second walkie-talkie, if the second walkie-talkie receiving the first transmission data is not pre-assigned to the same communication cluster as the first walkie-talkie, it will obviously be unable to obtain the first data due to the lack of the first quantum session key. Simultaneously, since the first ciphertext in the first transmission data is obtained by encrypting it with the first quantum session key, the first ciphertext is also very difficult to crack.

[0042] In other words, the method disclosed herein makes communication between walkie-talkies that use a server for network communication more secure. Attached Figure Description

[0043] Figure 1 A flowchart illustrating a method for encrypted communication via walkie-talkie provided in an embodiment of the present invention;

[0044] Figure 2 A flowchart illustrating another method for encrypted communication of a walkie-talkie provided in an embodiment of the present invention;

[0045] Figure 3 This is a schematic diagram illustrating the interaction between a walkie-talkie and a server, provided as an embodiment of the present invention.

[0046] Figure 4 A connection diagram of another walkie-talkie encrypted communication device provided in an embodiment of the present invention;

[0047] Figure 5 A connection diagram of a walkie-talkie encrypted communication device provided in an embodiment of the present invention;

[0048] Figure 6 A schematic diagram of the structure of a computer device provided in one embodiment of this application is shown. Detailed Implementation

[0049] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of this application.

[0050] As can be seen from the above background technology, walkie-talkies usually have multiple preset channels. In related technologies, walkie-talkies in the same communication cluster can be preset to use the same communication channel. In this way, when the server receives communication data, it can forward the communication data to the walkie-talkies in the same communication channel according to the communication channel, thereby realizing communication interaction between walkie-talkies in the same communication channel.

[0051] However, in some scenarios, it may be necessary for specific users to receive communication data, while other users may not need to receive it (i.e., it may be desirable for walkie-talkies within the same communication cluster to exchange information, while walkie-talkies outside the same cluster cannot exchange information). For example, during field training exercises, participants may be divided into groups, and it may be desired that users within the same group can communicate, while users in different groups do not wish to communicate with each other. In this case, the solutions in related technologies are difficult to implement. The reason is that the server determines the channel to which the received data should be sent, based on the channel corresponding to the data, so that walkie-talkies on the same channel can receive the information. In this case, if users in different groups, pre-set to tune their walkie-talkies to the same channel, can also receive the sent data.

[0052] For example, if Group A and Group B are conducting a field training competition, it is stipulated that members of Group A will use channel A to communicate when using walkie-talkies, while members of Group B will use channel B. If a member of Group A uses channel B when using a walkie-talkie, he / she may also receive communication data between members of Group B.

[0053] In other words, the communication methods in the relevant technologies cannot guarantee the security of communication between clusters.

[0054] In this embodiment of the disclosure, the walkie-talkie is pre-grouped into communication clusters. The quantum session key sets are different between different communication clusters. When the walkie-talkie needs to send data, it can use a quantum session key from the pre-stored quantum session key set to encrypt the data to be sent, thereby obtaining ciphertext information. In this way, the communication devices between different communication clusters cannot decrypt the encrypted ciphertext information, thereby ensuring the security of communication devices in the same group of communication clusters during the information exchange process.

[0055] See Figure 1 , Figure 1 This is a flowchart illustrating a method for encrypted communication of walkie-talkies provided in an embodiment of the present invention. This method can be applied to a first walkie-talkie in a first communication cluster. Multiple walkie-talkies in the first communication cluster include the same set of quantum session keys. Walkie-talkies in different communication clusters include different sets of quantum session keys. Each walkie-talkie is connected to a server for communication.

[0056] It should be noted that in actual use, there may be multiple communication clusters. This embodiment only describes the communication of one of the multiple communication clusters. The communication methods used by other communication clusters in the multiple communication clusters may be the same as the communication methods disclosed in this embodiment. Therefore, this disclosure selects the communication method of one of the communication clusters (the first communication cluster) for detailed description in order to facilitate understanding of the data transmission process of the walkie-talkies in the communication cluster of this disclosure.

[0057] It should be understood that the number of walkie-talkies in each communication cluster can be different, and the number of walkie-talkies in each communication cluster can be limited according to the actual situation.

[0058] It should be noted that the walkie-talkies in different communication clusters use different sets of quantum session keys. For example, communication cluster A includes walkie-talkies A1, A2, ..., An, while communication cluster B includes walkie-talkies B1, B2, ..., Bn. Walkie-talkies A1, A2, ..., An all use quantum session key set A, while walkie-talkies B1, B2, ..., Bn all use quantum session key set B. Quantum session key sets A and B can be different. This means that if data is encrypted using quantum session keys from quantum session key set A to obtain ciphertext A, it cannot be decrypted using quantum session keys from quantum session key set B. Conversely, ciphertext encrypted using quantum session keys from quantum session key set B cannot be decrypted using quantum session keys from quantum session key set A. This method prevents communication devices from interacting with each other between different communication clusters, thus ensuring the security of information exchange between walkie-talkies in the same communication cluster group.

[0059] like Figure 1 As shown, the method for encrypted communication via walkie-talkie may include the following steps:

[0060] Step 101: In response to receiving the first data to be sent, encrypt the first data using the first quantum session key in the quantum session key set included in the first walkie-talkie to obtain the first ciphertext;

[0061] Step 102: Based on the identifier corresponding to the first quantum session key and the first ciphertext, generate the first transmission data and send the first transmission data to the server.

[0062] Here, the server is used to send the first transmission data to the second walkie-talkie.

[0063] The second walkie-talkie includes any of the following:

[0064] Walkie-talkies in the first communication cluster, excluding the first walkie-talkie;

[0065] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0066] It should be understood that the server can predetermine the communication cluster where the first walkie-talkie is located, thereby enabling the targeted transmission of the first data to certain walkie-talkies. This method can avoid sending the first data to walkie-talkies that do not belong to the first communication cluster, and walkie-talkies in the same predefined communication cluster do not need to use the same communication channel to communicate.

[0067] As an example, since walkie-talkies within the same communication cluster should use the same channel after the communication cluster is pre-defined, the walkie-talkie on the same communication channel as the first walkie-talkie can be directly designated as the second walkie-talkie. This way, the server doesn't need to store the walkie-talkies corresponding to each communication cluster; it can simply send messages based on the communication channel. Furthermore, this method eliminates the need to notify the server each time the predefined communication cluster is changed; the server only needs to perform the corresponding forwarding work based on the communication channel, making the overall process simpler.

[0068] As an example, a quantum session key can be understood as a session key generated based on quantum random numbers and a quantum key distribution protocol. The ciphertext obtained by encrypting data using a quantum session key has a certain ability to resist cracking by a quantum computer, thus helping to make the ciphertext obtained by encrypting data using a quantum session key more secure.

[0069] As an example, a quantum session key set can include multiple quantum session keys. In this way, different quantum session keys can be used in each message transmission. As a result, the data in the interaction process may need to be cracked a large number of times. It can also be understood that since each message is encrypted with a different quantum session key, each ciphertext data needs to be cracked from scratch. This obviously greatly increases the difficulty of cracking, which helps to make the encrypted communication process more secure.

[0070] As an example, walkie-talkies in different communication clusters can use different sets of quantum session keys. This means that different sets of quantum session keys do not contain the same quantum session key. This prevents different communication clusters from decrypting each other.

[0071] As an example, the first walkie-talkie includes a set of quantum session keys. Therefore, since the first walkie-talkie includes multiple quantum session keys, a quantum session key can be determined from the set of quantum session keys and identified as the first quantum session key. The identifier corresponding to the first quantum session key and the first ciphertext can be merged and packaged to generate the first transmission data. In this way, after the server sends the first transmission data to the second walkie-talkie, the second walkie-talkie can efficiently determine the first quantum session key in the set of quantum session keys based on the identifier corresponding to the first quantum session key, thereby achieving efficient decryption of the first ciphertext.

[0072] As an example, the first walkie-talkie may have multiple transmission channels, and the first transmission channel can be a predefined transmission channel. Correspondingly, walkie-talkies located on the same transmission channel as the first walkie-talkie can be understood as belonging to the same communication cluster. These walkie-talkies share the same set of quantum session keys as the first walkie-talkie. Therefore, the server can send the first transmission data to walkie-talkies other than the first walkie-talkie that are located on the first transmission channel. The walkie-talkies other than the first walkie-talkie that are located on the first transmission channel can use the first quantum session key from the first set of quantum session keys to decrypt the first ciphertext, thereby obtaining the first data.

[0073] As can be seen, in this disclosure, after determining the first data to be transmitted, the first walkie-talkie can encrypt the first data using the first quantum session key from the first quantum session key set, thereby obtaining the first ciphertext. It can then generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and send the first transmission data to the server. Since the first walkie-talkie includes multiple quantum session keys and selects one from these for encryption, the selection of the quantum session key is randomized, thus increasing the difficulty of cracking and making the encrypted transmission process more secure. When the server sends the first transmission data to the second walkie-talkie, if the second walkie-talkie receiving the first transmission data is not pre-assigned to the same communication cluster as the first walkie-talkie, it will obviously be unable to obtain the first data due to the lack of the first quantum session key. Simultaneously, since the first ciphertext in the first transmission data is obtained by encrypting it with the first quantum session key, the first ciphertext is also very difficult to crack.

[0074] In other words, the method disclosed herein makes communication between walkie-talkies that use a server for network communication more secure.

[0075] In some embodiments, the first quantum session key is used no more than a preset number of times.

[0076] As an example, the default number can be 2 or 1. That is, it can be understood that the first quantum session key is only used a few times.

[0077] As an example, the number of times the first quantum session key is used as an encryption key can be understood as the number of times it is used for encryption or decryption. That is, during communication between walkie-talkies in a communication cluster, if one walkie-talkie uses a quantum session key for encryption, another walkie-talkie will use the same quantum session key for decryption. Therefore, the number of times a quantum session key is used can be understood as the number of times a walkie-talkie uses it for encryption or decryption. For example, when the preset number is 2, the first quantum session key is used at most twice for encryption or decryption, or it can be used for one encryption and one decryption. In this way, multiple different quantum session keys can be used during multiple data exchanges in the communication process, thereby increasing the difficulty of cracking the exchanged data.

[0078] As an example, the number of quantum session keys in the quantum session key set can be set according to the actual situation. For instance, in some scenarios, communication devices in a communication cluster may need to engage in frequent dialogues, so the number of quantum session keys in the quantum session key set can be set to be larger. Conversely, in cases where communication devices in a communication cluster have a lower dialogue frequency and only need to engage in dialogues for a short period of time, the number of quantum session keys in the quantum session key set can be set to be smaller.

[0079] It should be understood that a quantum session key set can be understood as a string consisting of a certain number of characters, while a quantum session key can be understood as a portion of that string. For example, a quantum session key set is a string consisting of 100,000 characters, and every 16 consecutive characters constitute a quantum session key.

[0080] See Figure 2 , Figure 2 This is a flowchart illustrating a method for encrypted communication of walkie-talkies provided in an embodiment of the present invention. The method is applied to a server, which communicates with multiple walkie-talkies. The multiple walkie-talkies are divided into at least one communication cluster. Walkie-talkies belonging to the same communication cluster have the same set of quantum session keys, while walkie-talkies belonging to different communication clusters have different sets of quantum session keys.

[0081] like Figure 2 As shown, the method for encrypted communication via walkie-talkie may include the following steps:

[0082] Step 201: In response to receiving the first transmission data sent by the first walkie-talkie in the first communication cluster, determine the second walkie-talkie based on the first transmission channel used by the first walkie-talkie to send the first transmission data;

[0083] Step 202: Send the first transmission data to the second walkie-talkie.

[0084] Here, the first transmission data is generated by the first walkie-talkie in the following manner: the first data is encrypted using the first quantum session key from the set of quantum session keys included in the first walkie-talkie to obtain the first ciphertext; the first transmission data is generated based on the identifier corresponding to the first quantum session key and the first ciphertext.

[0085] It should be understood that the process of generating the first transmission data by the first walkie-talkie has been described in detail in the above embodiments, and will not be repeated here for the sake of brevity.

[0086] As an example, the second walkie-talkie includes any of the following:

[0087] Walkie-talkies in the first communication cluster, excluding the first walkie-talkie;

[0088] A walkie-talkie that is on the same communication channel as the first walkie-talkie.

[0089] As an example, the server can pre-store the correspondence between communication clusters and walkie-talkies. In this case, walkie-talkies in the first communication cluster other than the first walkie-talkie can be identified as the second walkie-talkie. Alternatively, the server may not store the correspondence between communication clusters and walkie-talkies. In this case, walkie-talkies on the same communication channel as the first walkie-talkie can be identified as the second walkie-talkie.

[0090] As an example, because walkie-talkies are pre-divided into communication clusters, walkie-talkies within the same communication cluster have the same set of quantum session keys, while walkie-talkies in different communication clusters do not have the same quantum session keys. This ensures that only walkie-talkies predefined as belonging to the same communication cluster can communicate. In other words, even during the process of forwarding communication data using a server, communication security within the same communication cluster can be guaranteed.

[0091] In some embodiments, a communication cluster corresponds to a transmission channel, and step 201, "determining the second walkie-talkie based on the first transmission channel used by the first walkie-talkie to send the first transmission data," may specifically include:

[0092] If the transmission channel corresponding to the first communication cluster is the first transmission channel, then the walkie-talkie that is currently on the first transmission channel, excluding the first walkie-talkie, can be identified as the second walkie-talkie.

[0093] As an example, if the transmission channel corresponding to the first communication cluster is the first transmission channel, it can be characterized that the first transmission data sent by the first walkie-talkie is sent in the initially agreed transmission channel. In this case, the walkie-talkie other than the first walkie-talkie and currently in the first transmission channel can be identified as the second walkie-talkie.

[0094] As an example, this approach eliminates the need for the server to know which walkie-talkies were initially in the same communication cluster, which also improves the efficiency of identifying the second walkie-talkie, allowing the first transmission data to be sent to the second walkie-talkie more efficiently.

[0095] In some embodiments, a communication cluster corresponds to a transmission channel, and step 201, "determining the second walkie-talkie based on the first transmission channel used by the first walkie-talkie to send the first transmission data," may specifically include:

[0096] If the transmission channel corresponding to the first communication cluster is the first transmission channel, then the walkie-talkies in the first communication cluster other than the first walkie-talkie are identified as the second walkie-talkies.

[0097] As an example, this method requires the server to pre-store the walkie-talkies corresponding to each communication cluster. The advantage is that even if a walkie-talkie in the first communication cluster is not set to the first transmission channel as pre-agreed, it can still obtain the first transmission data sent by the first walkie-talkie in the first communication cluster.

[0098] In some embodiments, a communication cluster corresponds to a transmission channel, and step 201, "determining the second walkie-talkie based on the first transmission channel used by the first walkie-talkie to send the first transmission data," may specifically include:

[0099] If the transmission channel corresponding to the first communication cluster is the second transmission channel, determine whether the first transmission data includes a predefined administrator identifier; if the first transmission data does not include an administrator identifier, identify the walkie-talkies in the first communication cluster other than the first walkie-talkie as the second walkie-talkie.

[0100] Here, the administrator identifier is used to indicate that the walkie-talkie has cross-channel interaction permissions.

[0101] As an example, a walkie-talkie might be a master walkie-talkie, capable of communicating with other walkie-talkies. This master walkie-talkie is pre-assigned to the first communication cluster. Therefore, when the first transmitted data includes a manager identifier, it indicates that the first walkie-talkie might be the master walkie-talkie. Conversely, when the first transmitted data does not include a manager identifier, it indicates that the first walkie-talkie is not the master walkie-talkie; it simply means that the first walkie-talkie is not transmitting data according to a predefined transmission channel. In this case, the server can directly identify walkie-talkies other than the first walkie-talkie in the first communication cluster as second walkie-talkies, so that walkie-talkies initially identified as part of the first communication cluster can receive information sent by the first walkie-talkie.

[0102] In some embodiments, the server includes a set of quantum session keys included in any walkie-talkie; and the above method may further include: if the first transmission data includes a manager identifier, a walkie-talkie other than the first walkie-talkie and currently in the second transmission channel can be identified as the second walkie-talkie;

[0103] And, sending the first transmission data to the second walkie-talkie, including:

[0104] The first ciphertext in the first transmitted data is decrypted using the first quantum session key to obtain the first data;

[0105] Determine the second quantum session key from the second quantum session set corresponding to the second transmission channel, and encrypt the first data using the second quantum session key to obtain the second ciphertext;

[0106] Replace the first quantum session key identifier and the first ciphertext in the first transmitted data with the second quantum session key identifier and the second ciphertext; obtain the updated first transmitted data.

[0107] The updated first transmission data is sent to the second walkie-talkie.

[0108] As an example, when the first transmitted data includes a manager identifier, it can be characterized that the first walkie-talkie is the master walkie-talkie. In this case, it can be characterized that the master walkie-talkie may need to send information to walkie-talkies in other communication clusters.

[0109] As an example, the server can determine the second walkie-talkie to which the data needs to be sent based on the communication channel used by the main walkie-talkie.

[0110] As an example, since different communication clusters correspond to different quantum session keys, and each communication cluster corresponds to one transmission channel, each predefined transmission channel corresponds to one quantum session key, and different transmission channels correspond to different quantum session keys. For example, the first communication cluster corresponds to the first transmission channel and the first set of quantum session keys, while the second communication cluster can correspond to the second transmission channel and the second set of quantum session keys.

[0111] Therefore, when the first transmission data is directly sent to the second walkie-talkie in the second communication cluster, the second walkie-talkie cannot decrypt the first ciphertext information in the first transmission data.

[0112] As an example, the server can pre-store the set of quantum session keys included in each communication cluster. When the server determines that the first walkie-talkie is the master walkie-talkie and needs to send information to the second walkie-talkie in the second communication cluster, the server can decrypt the first ciphertext to obtain the first data, and can encrypt the first data using the second quantum session key to obtain the second ciphertext. The server can then replace the first quantum session key identifier and the first ciphertext in the first transmitted data with the second quantum session key identifier and the second ciphertext to obtain the updated first transmitted data. In this way, the updated first transmitted data is sent to the second walkie-talkie, and the second walkie-talkie can normally decrypt the second ciphertext information to obtain the first data.

[0113] As can be seen, in this disclosure, under normal circumstances, the server does not need to decrypt the first ciphertext information in the first transmitted data. Only when the first walkie-talkie is the master walkie-talkie and the transmission channel used by the first walkie-talkie is different from the transmission channel corresponding to the pre-allocated communication cluster, is it necessary to encrypt the first ciphertext in the first transmitted data and re-encrypt it using the second quantum session key (the quantum session key included by the receiver). In this way, not only is the security of the cluster communication protected, but the master walkie-talkie can also send information to different clusters separately, thus improving applicability.

[0114] In other words, under normal circumstances, only walkie-talkies within the same communication cluster can exchange information. However, when the master walkie-talkie needs to make a call, it can make calls across communication clusters, and the master walkie-talkie only needs to store the pre-assigned set of quantum session keys corresponding to the communication cluster. Therefore, the method disclosed in this paper greatly improves the security of cluster communication and ensures applicability.

[0115] It should be understood that the encryption algorithms used in the encryption process of this disclosure can all be hybrid algorithms, that is, hybrid algorithms of post-quantum algorithms and national cryptographic algorithms, or hybrid algorithms of post-quantum algorithms and international algorithms, which helps to make the encrypted ciphertext information more difficult to crack.

[0116] It should be understood that international algorithms generally refer to cryptographic algorithm standards developed by international standardization organizations (such as ISO (International Organization for Standardization), IEC (International Electrotechnical Commission), ITU (International Telecommunication Union), etc.) or industry alliances (such as IETF (Internet Engineering Task Force)). International algorithms can include, but are not limited to: symmetric cryptographic algorithms, asymmetric encryption algorithms, hash algorithms, digital signature algorithms, etc.

[0117] National cryptographic algorithms generally refer to a series of domestically developed cryptographic algorithm standards recognized and published by the State Cryptography Administration. National cryptographic algorithms may include, but are not limited to: symmetric encryption algorithms, asymmetric encryption algorithms based on elliptic curve cryptography, and block cipher algorithms.

[0118] Post-quantum cryptography (PQC) refers to encryption algorithms that remain secure even in the face of quantum computers. PQC algorithms can include, but are not limited to: (1) lattice-based cryptographic algorithms; (2) encoding-based cryptographic algorithms; (3) multivariate-based cryptographic algorithms; and (4) hash-based signature algorithms. Of course, the specific PQC algorithm chosen can be determined based on the actual situation.

[0119] The hybrid algorithm based on post-quantum and Chinese cryptographic algorithms can be understood as integrating a post-quantum key encapsulation algorithm onto the Chinese cryptographic algorithm to obtain the final session negotiation key. This hybrid method can significantly reduce potential risks, thus possessing a certain degree of resistance to key cracking capabilities achieved by quantum computers. Alternatively, in a double-signature method, the message is signed using a traditional public-key cryptography algorithm, and then the message (which may include the traditional cryptographic signature result) is signed again using a post-quantum public-key cryptography algorithm, outputting a combination of the two signature results. Or, the signing order can be reversed, performing the post-quantum public-key cryptography algorithm signature first, followed by the traditional public-key cryptography algorithm signature. Verification is considered successful only if both signature results are successfully verified. This method ensures that even if one algorithm is cracked, the other algorithm can still provide security guarantees.

[0120] Of course, hybrid encryption methods based on a combination of post-quantum algorithms and international algorithms, as well as hybrid encryption methods based on a combination of post-quantum algorithms, national cryptographic algorithms, and international algorithms, can all be similar to hybrid encryption methods based on post-quantum algorithms and national cryptographic algorithms; for the sake of brevity, they will not be elaborated here.

[0121] It should be understood that due to the development of quantum computing, existing conventional encryption methods are more likely to be cracked by quantum computers when used to encrypt data. Therefore, in this disclosure, a hybrid algorithm is used so that the encrypted ciphertext information can resist cracking by quantum computers. At the same time, the national cryptographic algorithm is also used so that it can resist cracking by classical computers.

[0122] Please see Figure 3 , Figure 3 This can be understood as a schematic diagram of the interaction between a walkie-talkie and a server. Figure 3 It is evident that walkie-talkies do not communicate directly with each other, but instead forward information through a server. This helps to increase the communication distance between communication clusters and makes communication more stable.

[0123] In some embodiments, a walkie-talkie may correspond to a secure digital storage card, which may be used to store a set of quantum session keys loaded by a key distribution terminal.

[0124] As an example, since the secure digital memory card can be inserted into a walkie-talkie, storing the quantum session key set on the secure digital memory card allows the key distribution terminal to simply distribute the quantum session key to the secure memory card. In actual use, simply inserting the secure digital memory card into the corresponding walkie-talkie is sufficient. This method makes it easier for walkie-talkies to obtain and update quantum session keys (e.g., by updating the secure digital memory card).

[0125] As an example, a secure digital storage card may include, but is not limited to, memory cards, SIM cards, etc.

[0126] It is also important to emphasize that quantum computers are physical devices that perform high-speed mathematical and logical operations, store and process quantum information in accordance with the laws of quantum mechanics. When a device processes and calculates quantum information and runs quantum algorithms, it is a quantum computer. Because of its ability to process mathematical problems more efficiently than ordinary computers—for example, reducing the time to crack RSA keys from hundreds of years to hours—quantum computers have become a key technology under research.

[0127] In other words, with the development of quantum technology, the effectiveness of existing protection measures in communication processes may not be ideal. That is, traditional protection measures in communication processes are difficult to resist attacks from quantum computers. In this disclosure, when encrypting data, the walkie-talkie uses a quantum session key and a hybrid encryption algorithm for encryption, which can resist quantum computer attacks to a certain extent and enhance the security of the communication process.

[0128] In some implementations, hybrid encryption algorithms can also be pre-stored on a secure digital memory card.

[0129] In some implementations, the application scenarios of this disclosure can be applied to military exercise scenarios. For example, in this case, it may be necessary to divide into multiple groups, where members of the same group can exchange information, but members of different groups cannot exchange information. The method disclosed herein can obviously meet this requirement.

[0130] See Figure 4 , Figure 4 This is a schematic diagram of a walkie-talkie encrypted communication device provided in an embodiment of the present invention. The walkie-talkie encrypted communication device 400 is applied to a first walkie-talkie in a first communication cluster. Multiple walkie-talkies in the first communication cluster all include the same set of quantum session keys. Walkie-talkies in different communication clusters include different sets of quantum session keys. Each walkie-talkie is connected to a server for communication. The device 400 includes:

[0131] The encryption unit 401 is used to encrypt the first data to be transmitted using a first quantum session key from the quantum session key set included in the first walkie-talkie, in response to receiving the first data to be transmitted, to obtain the first ciphertext;

[0132] The generation unit 402 is used to generate first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext, and to send the first transmission data to the server.

[0133] The aforementioned server is used to send the first transmitted data to the second walkie-talkie;

[0134] The second walkie-talkie mentioned above includes any of the following:

[0135] The walkie-talkies in the first communication cluster mentioned above, excluding the first walkie-talkie mentioned above;

[0136] A walkie-talkie that is on the same communication channel as the first walkie-talkie mentioned above.

[0137] In some embodiments, the first quantum session key is used no more than a preset number of times.

[0138] See Figure 5 , Figure 5 This is a schematic diagram of a walkie-talkie encrypted communication device provided in an embodiment of the present invention. The walkie-talkie encrypted communication device 500 is applied to a server, which is communicatively connected to multiple walkie-talkies. The multiple walkie-talkies are divided into at least one communication cluster. Walkie-talkies belonging to the same communication cluster have the same set of quantum session keys, while walkie-talkies belonging to different communication clusters have different sets of quantum session keys. The device 500 includes:

[0139] The determining unit 501 is configured to, in response to receiving first transmission data sent by a first walkie-talkie in a first communication cluster, determine a second walkie-talkie based on a first transmission channel used by the first walkie-talkie to send the first transmission data; wherein the first transmission data is generated by the first walkie-talkie in the following manner: encrypting the first data using a first quantum session key from a set of quantum session keys included in the first walkie-talkie to obtain first ciphertext; and generating the first transmission data based on the identifier corresponding to the first quantum session key and the first ciphertext;

[0140] The transmitting unit 502 is used to transmit the first transmission data to the second walkie-talkie.

[0141] In some embodiments, a communication cluster corresponds to a transmission channel, and the determining unit 501 is further configured to:

[0142] If the transmission channel corresponding to the first communication cluster is the first transmission channel, then the walkie-talkie that is currently in the first transmission channel, excluding the first walkie-talkie, is identified as the second walkie-talkie.

[0143] In some embodiments, a communication cluster corresponds to a transmission channel, and the determining unit 501 is further configured to:

[0144] If the transmission channel corresponding to the first communication cluster is the second transmission channel, determine whether the first transmission data includes a predefined administrator identifier; wherein the administrator identifier is used to indicate that the walkie-talkie has cross-channel interaction permissions.

[0145] If the first transmitted data does not include the administrator identifier, then the walkie-talkies in the first communication cluster other than the first walkie-talkie are identified as the second walkie-talkies.

[0146] In some embodiments, the server includes a set of quantum session keys included in any walkie-talkie; and the determining unit 501 is further configured to:

[0147] If the first transmitted data includes a manager identifier, the walkie-talkie that is not the first walkie-talkie and is currently in the second transmission channel will be identified as the second walkie-talkie.

[0148] And, the aforementioned sending of the first transmission data to the second walkie-talkie includes:

[0149] The first ciphertext in the first transmitted data is decrypted using the first quantum session key to obtain the first data.

[0150] The second quantum session key is determined from the second quantum session set corresponding to the second transmission channel, and the first data is encrypted using the second quantum session key to obtain the second ciphertext;

[0151] Replace the first quantum session key identifier and the first ciphertext in the first transmitted data with the second quantum session key identifier and the second ciphertext; obtain the updated first transmitted data.

[0152] The updated first transmission data is sent to the aforementioned second walkie-talkie.

[0153] Figure 6 A schematic diagram of the structure of a computer device provided in one embodiment of this application is shown, including a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the function of the computer system of the amplitude preparation circuit generation method in any of the above embodiments.

[0154] This application also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a computer, causes the computer to perform the functions of the computer system of the walkie-talkie encrypted communication method in any of the above embodiments.

[0155] This application also provides a computer program product containing instructions that, when executed by a computer, cause the computer to perform the functions of the computer system of the walkie-talkie encrypted communication method in any of the above embodiments.

[0156] It is understood that the specific examples in this application are only intended to help those skilled in the art better understand the implementation methods of this application, and are not intended to limit the scope of the invention.

[0157] It is understood that in the various embodiments of this application, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not limit the implementation process of the embodiments of this application in any way.

[0158] It is understood that the various implementation methods described in this application can be implemented individually or in combination, and the implementation methods in this application are not limited in this respect.

[0159] Unless otherwise stated, all technical and scientific terms used in the embodiments of this application have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to limit the scope of this application. The term "and / or" as used in this application includes any and all combinations of one or more of the associated listed items. The singular forms "a," "the," and "the" as used in the embodiments of this application and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise.

[0160] It is understood that the processor in the embodiments of this application can be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method embodiments can be completed by the integrated logic circuits in the processor's hardware or by instructions in software form. The processor can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules can be located in random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. This storage medium is located in memory; the processor reads information from the memory and, in conjunction with its hardware, completes the steps of the above method.

[0161] It is understood that the memory in the embodiments of this application may be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. Specifically, non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory may be random access memory (RAM). It should be noted that the memory in the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0162] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0163] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the aforementioned method implementations, and will not be repeated here.

[0164] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0165] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0166] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0167] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0168] The above are merely specific embodiments of this application, but the scope of protection of this invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this invention should be determined by the scope of the claims.

Claims

1. A method of encrypting communications for a walkie-talkie, characterized by, The application is applied to a server, the server is in communication connection with a plurality of intercoms, the plurality of intercoms are divided into at least one communication cluster, the intercoms belonging to the same communication cluster include the same quantum session key set, and the intercoms belonging to different communication clusters include different quantum session key sets; one intercom corresponds to one secure digital storage card, the secure digital storage card is used for storing the quantum session key set loaded by a key distribution terminal; wherein one communication cluster corresponds to one transmission channel, the server includes the quantum session key set included by any intercom; and the method comprises: In response to receiving first transmission data sent by a first intercom in a first communication cluster, if the transmission channel corresponding to the first communication cluster is a second transmission channel, determining whether the first transmission data includes a predefined manager identifier; wherein the manager identifier is used to indicate that the intercom has cross-channel interaction authority; the first communication cluster corresponds to a first transmission channel; If the first transmission data does not include the manager identifier, determining the intercoms in the first communication cluster except the first intercom as the second intercom; and if the first transmission data includes the manager identifier, determining the intercoms except the first intercom and currently in the second transmission channel as the second intercom; Sending the first transmission data to the second intercom; Wherein the first transmission data is used to be generated by the first intercom in the following way: using a first quantum session key in the quantum session key set included by the first intercom to encrypt first data, obtaining first ciphertext; based on the identifier corresponding to the first quantum session key and the first ciphertext, generating first transmission data.

2. The method of claim 1, wherein, The method further comprises: If the transmission channel corresponding to the first communication cluster is the first transmission channel, determining the intercoms except the first intercom and currently in the first transmission channel as the second intercom.

3. The method of claim 1, wherein, The sending of the first transmission data to the second intercom comprises: Using the first quantum session key to decrypt the first ciphertext in the first transmission data, obtaining first data; Determining a second quantum session key from a second quantum session set corresponding to the second transmission channel, and using the second quantum session key to encrypt the first data, obtaining second ciphertext; Using the second quantum session key identifier and the second ciphertext to replace the first quantum session key identifier and the first ciphertext in the first transmission data; obtaining updated first transmission data; Sending the updated first transmission data to the second intercom.

4. An apparatus for encrypting intercom communications, characterized by The application is applied to a server, the server is in communication connection with a plurality of intercoms, the plurality of intercoms are divided into at least one communication cluster, the intercoms belonging to the same communication cluster include the same quantum session key set, and the intercoms belonging to different communication clusters include different quantum session key sets; one intercom corresponds to one secure digital storage card, the secure digital storage card is used for storing the quantum session key set loaded by a key distribution terminal; wherein one communication cluster corresponds to one transmission channel, the server includes the quantum session key set included by any intercom; and the device includes: A determination unit is configured to, in response to receiving first transmission data sent by a first intercom in a first communication cluster, determine whether a predefined manager identifier is included in the first transmission data if a transmission channel corresponding to the first communication cluster is a second transmission channel; if the first transmission data does not include the manager identifier, determine the intercoms in the first communication cluster except the first intercom as the second intercom; and if the first transmission data includes the manager identifier, determine the intercoms except the first intercom and currently in the second transmission channel as the second intercom; wherein the manager identifier is used to indicate that the intercom has the cross-channel interaction authority; the first communication cluster corresponds to the first transmission channel; A sending unit is configured to send the first transmission data to the second intercom; Wherein the first transmission data is used to be generated by the first intercom in the following way: a first quantum session key in the quantum session key set included by the first intercom is used to encrypt first data, and first ciphertext is obtained; based on the identifier corresponding to the first quantum session key and the first ciphertext, the first transmission data is generated.

5. A storage medium, characterized by The storage medium has a computer program stored therein, wherein the computer program is set to execute the method in any one of claims 1-3 when running.

6. An electronic device comprising a memory and a processor, characterized in that The memory has a computer program stored therein, and the processor is set to execute the computer program to execute the method in any one of claims 1-3.

Images