Secure OTA upgrading method and system based on quantum random number

Abstract

The invention discloses a secure OTA upgrading method based on quantum random numbers. The secure OTA upgrading method comprises the following steps that S1, whether updating is needed or not is judged; s2, performing pretreatment; s3, the cloud performs encryption; s4, the user side decrypts to obtain a second quantum random number; s5, the user side generates a second pseudo-random number, mixes the second pseudo-random number with the second quantum random number and then transmits the mixture to the cloud S6, the cloud terminal obtains a second quantum random number through elimination; s7, judging whether the quantum random numbers are consistent or not; and S8, ending the execution. The invention further discloses a secure OTA upgrading system based on the quantum random number, and the secure OTA upgrading system is used for realizing the method. The invention discloses a secure OTA upgrading method and system based on a quantum random number, transmission data is encrypted by using the quantum random number, the sequence of the random number is disturbed in the process that a transmission channel is monitored, the bit error rate is increased, the transmission risk can be monitored, and the secrecy security is improved; and the communication security in the OTA upgrading process is effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of quantum network and data transmission security technology, and in particular to a secure OTA upgrade method and system based on quantum random numbers. Background Art

[0002] The application of quantum technology industry is one of the hot spots of global technology competition. Quantum Random Number Generator (QRNG) is a device that uses the principles of quantum mechanics to generate true random numbers. It is the only theoretically provable true random number generator so far and is a key technology for commercial cryptography and quantum key distribution system (Quantum Key Distribution, QKD).

[0003] OTA (Over-the-Air Technology) is a technology for remotely managing SIM card data and applications through the air interface of mobile communications (GSM or CDMA).

[0004] The application of OTA technology enables mobile communications to provide not only voice and data services, but also new business downloads. In this way, application and content service providers can be free from the limitations of the platform and continue to develop more personalized services that are close to user needs, such as information on demand, interactive entertainment, location services, and banking transactions. Whether it is an Android smart terminal or an IOS smart terminal, software upgrades or customized personalized services can be performed through OTA upgrades.

[0005] The existing OTA upgrade technology mainly updates and upgrades by downloading the OTA upgrade software package through the network. OTA upgrade is fast and has little impact on data, so OTA upgrade has become the main way to upgrade terminal functions. However, while enjoying the convenience, there are also security risks. For example, during the data transmission process, the transmission channel may be monitored by someone, or even the transmitted software content may be stolen, resulting in the leakage of upgrade data. Summary of the invention

[0006] In order to solve the problem that the existing OTA upgrade technology is not secure enough during data transmission, the present invention provides a secure OTA upgrade method and system based on quantum random numbers.

[0007] To achieve the above purpose, the technical solution adopted by the present invention is as follows:

[0008] A secure OTA upgrade method based on quantum random numbers, comprising the following steps:

[0009] S1: The user terminal communicates with the cloud to determine whether the user terminal needs to update the software version;

[0010] If yes, execute step S2;

[0011] If not, execute step S8;

[0012] S2: The cloud pre-processes the software package for updating;

[0013] S3: The cloud generates a first quantum random number and a first pseudo-random number, and uses the generated random number to encrypt the data pre-processed in step S2, and transmits the encrypted data to the user end;

[0014] S4: The user end decrypts the encrypted data to obtain a second quantum random number;

[0015] S5: The user terminal generates a second pseudo-random number, mixes the second quantum random number with the second pseudo-random number, and transmits the mixed number to the cloud;

[0016] S6: The cloud obtains a second quantum random number by eliminating the numbers in the pseudo-random number column of the second random number;

[0017] S7: Determine whether the first quantum random number and the second quantum random number are consistent;

[0018] If yes, continue to update and complete this OTA upgrade;

[0019] If not, stop updating and abandon this OTA upgrade;

[0020] S8: Execution ends.

[0021] In the above scheme, by using quantum random numbers to encrypt the transmitted data, the sequence of random numbers will be disturbed during the monitoring of the transmission channel, resulting in an increase in the bit error rate. The transmission risk can be monitored and the confidentiality and security can be improved; the communication security during the OTA upgrade process is effectively increased.

[0022] Preferably, the data obtained by preprocessing in step S2 is a digital signal.

[0023] Preferably, the user terminal and the cloud share their public keys in advance.

[0024] Preferably, in step S3, the cloud inserts the first quantum random number and the first pseudo-random number into the digital signal according to the user-side public key.

[0025] Preferably, in step S4, the user end uses its private key to decrypt the encrypted data to obtain a second quantum random number.

[0026] Preferably, in step S5, the user end mixes the second quantum random number and the second pseudo-random number according to the cloud public key.

[0027] Preferably, in step S6, the cloud removes the numbers in the pseudo-random number column in the second random number according to the cloud private key.

[0028] Preferably, in step S3, the cloud transmits the encrypted data to the user end through the first channel.

[0029] Preferably, in step S5, the user terminal transmits the mixed random number to the cloud via the second channel.

[0030] A secure OTA upgrade system based on quantum random numbers, used to implement a secure OTA upgrade method based on quantum random numbers, including a cloud and a user end; wherein,

[0031] The cloud comprises a cloud server, a quantum random number generator, a first pseudo-random number generator and a first processing module;

[0032] The cloud server is used to launch a new version of the software;

[0033] The quantum random number generator is used to generate a first quantum random number;

[0034] The first pseudo-random number generator is used to generate a first pseudo-random number;

[0035] The first processing module is used to determine whether the user terminal needs to update the software version according to the software version number, pre-process the software package for updating, and convert it into a digital signal; it is also used to insert the first quantum random number and the first pseudo-random number into the digital signal for encryption according to the public key of the user terminal, remove the numbers in the pseudo-random number column of the second random number according to the cloud private key, and determine whether the first quantum random number and the second quantum random number are consistent;

[0036] The user terminal includes a second pseudo-random number generator and a second processing module;

[0037] The second pseudo-random number generator is used to generate a second pseudo-random number;

[0038] The second processing module is used to decrypt the encrypted data according to the user-side private key to obtain a second quantum random number, and to mix the second quantum random number with the second pseudo-random number according to the cloud public key.

[0039] Beneficial technical effects of the present invention:

[0040] The present invention provides a secure OTA upgrade method and system based on quantum random numbers. By using quantum random numbers to encrypt transmission data, the sequence of random numbers will be disturbed during the monitoring of the transmission channel, resulting in an increase in the bit error rate. The transmission risk can be monitored and the confidentiality security can be improved, effectively increasing the communication security during the OTA upgrade process. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a flowchart of the implementation steps of the technical solution of the present invention;

[0042] Figure 2 It is a schematic diagram of module connection of the present invention. DETAILED DESCRIPTION

[0043] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with embodiments, but the scope of protection claimed in the present invention is not limited to the following specific embodiments.

[0044] Example 1

[0045] like Figure 1 As shown, a secure OTA upgrade method based on quantum random numbers includes the following steps:

[0046] S1: The user terminal communicates with the cloud to determine whether the user terminal needs to update the software version;

[0047] If yes, execute step S2;

[0048] If not, execute step S8;

[0049] S2: The cloud pre-processes the software package for updating;

[0050] S3: The cloud generates a first quantum random number and a first pseudo-random number, and uses the generated random number to encrypt the data pre-processed in step S2, and transmits the encrypted data to the user end;

[0051] S4: The user end decrypts the encrypted data to obtain a second quantum random number;

[0052] S5: The user terminal generates a second pseudo-random number, mixes the second quantum random number with the second pseudo-random number, and transmits the mixed number to the cloud;

[0053] S6: The cloud obtains a second quantum random number by eliminating the numbers in the pseudo-random number column of the second random number;

[0054] S7: Determine whether the first quantum random number and the second quantum random number are consistent;

[0055] If yes, continue to update and complete this OTA upgrade;

[0056] If not, stop updating and abandon this OTA upgrade;

[0057] S8: Execution ends.

[0058] In the specific implementation process, by using quantum random numbers to encrypt the transmitted data, the sequence of random numbers will be disturbed during the monitoring of the transmission channel, resulting in an increase in the bit error rate. The transmission risk can be monitored and the confidentiality and security can be improved; the communication security during the OTA upgrade process is effectively increased.

[0059] Example 2

[0060] A secure OTA upgrade method based on quantum random numbers, comprising the following steps:

[0061] S1: The user terminal communicates with the cloud to determine whether the user terminal needs to update the software version;

[0062] In actual implementation, the user end that needs software update sends the current software version number to the cloud, and the cloud compares the version number to determine whether the user end needs to update the software;

[0063] If yes, execute step S2;

[0064] If not, execute step S8;

[0065] More specifically, the client and the cloud share their public keys in advance.

[0066] S2: The cloud pre-processes the software package for updating;

[0067] More specifically, the data obtained by preprocessing in step S2 is a digital signal.

[0068] S3: The cloud generates a first quantum random number and a first pseudo-random number, and uses the generated random numbers to encrypt the digital signal, and transmits the encrypted data to the user end;

[0069] More specifically, in step S3, the cloud inserts the first quantum random number and the first pseudo-random number into the digital signal according to the user's public key.

[0070] More specifically, in step S3, the cloud transmits the encrypted data to the user end through the first channel.

[0071] S4: The user end decrypts the encrypted data to obtain a second quantum random number;

[0072] More specifically, in step S4, the user end uses its private key to decrypt the encrypted data to obtain a second quantum random number.

[0073] S5: The user terminal generates a second pseudo-random number, mixes the second quantum random number with the second pseudo-random number, and transmits the mixed number to the cloud;

[0074] More specifically, in step S5, the user end mixes the second quantum random number and the second pseudo-random number according to the cloud public key.

[0075] More specifically, in step S5, the user terminal transmits the mixed random number to the cloud through the second channel.

[0076] During the specific implementation process, the data is transmitted through two channels. While the cloud is transmitting data to the user end, a feedback signal from the user end can be obtained. If any risk is found, the data update will be stopped immediately to improve security.

[0077] S6: The cloud obtains a second quantum random number by eliminating the numbers in the pseudo-random number column of the second random number;

[0078] More specifically, in step S6, the cloud removes the numbers in the pseudo-random number column in the second random number according to the cloud private key.

[0079] S7: Determine whether the first quantum random number and the second quantum random number are consistent;

[0080] If yes, continue to update and complete this OTA upgrade;

[0081] If not, stop updating and abandon this OTA upgrade;

[0082] S8: Execution ends.

[0083] In the specific implementation process, after the data transmission is completed, it also includes: the user end converts the digital signal into a software package and installs it, thereby completing the OTA upgrade.

[0084] Example 3

[0085] like Figure 2 As shown, a secure OTA upgrade system based on quantum random numbers is used to implement the secure OTA upgrade method based on quantum random numbers, including a cloud and a user end; wherein,

[0086] The cloud comprises a cloud server, a quantum random number generator, a first pseudo-random number generator and a first processing module;

[0087] The cloud server is used to launch a new version of the software;

[0088] The quantum random number generator is used to generate a first quantum random number;

[0089] The first pseudo-random number generator is used to generate a first pseudo-random number;

[0090] The first processing module is used to determine whether the user terminal needs to update the software version according to the software version number, pre-process the software package for updating, and convert it into a digital signal; it is also used to insert the first quantum random number and the first pseudo-random number into the digital signal for encryption according to the public key of the user terminal, remove the numbers in the pseudo-random number column of the second random number according to the cloud private key, and determine whether the first quantum random number and the second quantum random number are consistent;

[0091] The user terminal includes a second pseudo-random number generator and a second processing module;

[0092] The second pseudo-random number generator is used to generate a second pseudo-random number;

[0093] The second processing module is used to decrypt the encrypted data according to the user-side private key to obtain a second quantum random number, and to mix the second quantum random number with the second pseudo-random number according to the cloud public key.

[0094] According to the disclosure and teaching of the above description, those skilled in the art to which the present invention belongs may also make changes and modifications to the above embodiments. Therefore, the present invention is not limited to the specific embodiments disclosed and described above, and some modifications and changes to the invention should also fall within the scope of protection of the claims of the present invention. In addition, although some specific terms are used in this specification, these terms are only for the convenience of description and do not constitute any limitation to the present invention.

Claims

1. A secure OTA upgrade method based on quantum random numbers, characterized in that: The following steps are involved: S1: The user terminal communicates with the cloud to determine whether the user terminal needs to update the software version; If yes, execute step S2; If not, execute step S8; S2: The cloud pre-processes the software package for updating; S3: The cloud generates a first quantum random number and a first pseudo-random number, and uses the generated random number to encrypt the data pre-processed in step S2, and transmits the encrypted data to the user end; S4: The user end decrypts the encrypted data to obtain a second quantum random number; S5: The user terminal generates a second pseudo-random number, mixes the second quantum random number with the second pseudo-random number, and transmits the mixed number to the cloud; S6: The cloud obtains a second quantum random number by eliminating the numbers in the pseudo-random number column of the second random number; S7: Determine whether the first quantum random number and the second quantum random number are consistent; If yes, continue to update and complete this OTA upgrade; If not, stop updating and abandon this OTA upgrade; S8: Execution ends.

2. A secure OTA upgrade method based on quantum random numbers according to claim 1, characterized in that: The data obtained by preprocessing in step S2 is a digital signal.

3. A secure OTA upgrade method based on quantum random numbers according to claim 2, characterized in that: The client and the cloud share their public keys in advance.

4. A secure OTA upgrade method based on quantum random numbers according to claim 3, characterized in that: In step S3, the cloud inserts the first quantum random number and the first pseudo-random number into the digital signal according to the user's public key.

5. A secure OTA upgrade method based on quantum random numbers according to claim 3, characterized in that: In step S4, the user end uses its private key to decrypt the encrypted data to obtain a second quantum random number.

6. A secure OTA upgrade method based on quantum random numbers according to claim 3, characterized in that: In step S5, the client mixes the second quantum random number and the second pseudo-random number according to the cloud public key.

7. A secure OTA upgrade method based on quantum random numbers according to claim 3, characterized in that: In step S6, the cloud removes the numbers in the pseudo-random number column of the second random number according to the cloud private key.

8. A secure OTA upgrade method based on quantum random numbers according to claim 1, characterized in that: In step S3, the cloud transmits the encrypted data to the user end through the first channel.

9. A secure OTA upgrade method based on quantum random numbers according to claim 1, characterized in that: In step S5, the user end transmits the mixed random number to the cloud via the second channel.

10. A secure OTA upgrade system based on quantum random numbers, characterized in that: Including the cloud and the user side; among them, The cloud comprises a cloud server, a quantum random number generator, a first pseudo-random number generator and a first processing module; The cloud server is used to launch a new version of the software; The quantum random number generator is used to generate a first quantum random number; The first pseudo-random number generator is used to generate a first pseudo-random number; The first processing module is used to determine whether the user terminal needs to update the software version according to the software version number, pre-process the software package for updating, and convert it into a digital signal; it is also used to insert the first quantum random number and the first pseudo-random number into the digital signal for encryption according to the public key of the user terminal, remove the numbers in the pseudo-random number column of the second random number according to the cloud private key, and determine whether the first quantum random number and the second quantum random number are consistent; The user terminal includes a second pseudo-random number generator and a second processing module; The second pseudo-random number generator is used to generate a second pseudo-random number; The second processing module is used to decrypt the encrypted data according to the user-side private key to obtain a second quantum random number, and to mix the second quantum random number with the second pseudo-random number according to the cloud public key.

Images