Interphone communication method and system based on quantum encryption

Abstract

The invention relates to the technical field of information security, in particular to an interphone communication method and system based on quantum encryption. According to the scheme of the invention, quantum security transformation is carried out on the basis of an existing interphone system, the high cost of completely reconstructing the system is avoided, an economical and feasible upgrading scheme is provided, the usability of the system is kept, and the influence on the operation of a terminal user is minimized. The key and encryption process is managed by using the centralized quantum security server, so that the requirement of terminal equipment is simplified, large-scale deployment of the system is facilitated, flexible key management and update strategies are supported, and maintenance and upgrade of the system are facilitated. The key pool mapping is carried out by using the network session identifier, so that the method can adapt to a complex network topology structure, supports cross-network segment and cross-domain secure communication, is convenient to integrate with the existing network infrastructure, and reduces the deployment difficulty.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a walkie-talkie communication method and system based on quantum encryption. Background Art

[0002] With the rapid development of communication technology, walkie-talkie systems have been widely used in many fields, such as emergency communication, engineering construction, security, etc. Traditional walkie-talkie systems usually include walkie-talkie terminals and server systems, in which the data center of the server system distributes messages to each walkie-talkie terminal in the same group through communication networks such as 4G. However, with the advancement of quantum computing technology, traditional encryption methods are at risk of being cracked, which poses a potential threat to walkie-talkie systems that rely on secure communications.

[0003] The existing intercom system mainly has the following problems:

[0004] 1. Insufficient security: Traditional encryption methods may not be able to withstand attacks from future quantum computers, resulting in the risk of communication content being leaked.

[0005] 2. Weak terminal authentication mechanism: The lack of a strong terminal identity authentication mechanism may allow unauthorized devices to access the system, threatening communication security.

[0006] 3. Insufficient security of group communication: In group communication scenarios, it is difficult to ensure that communications between each group member can be effectively protected by end-to-end encryption.

[0007] In order to solve the above problems, the industry has begun to explore the application of quantum cryptography technology in communication systems. Quantum cryptography technology uses the principles of quantum mechanics and can provide a theoretically unconditionally secure key distribution method. However, how to effectively integrate quantum cryptography technology into existing walkie-talkie systems and maintain the ease of use and scalability of the system while ensuring high security remains an important research topic.

[0008] Some existing technologies attempt to introduce quantum key distribution (QKD) devices into communication systems, but these solutions usually require dedicated quantum communication links, which are expensive to deploy and difficult to promote in large-scale walkie-talkie systems. Other solutions propose the use of software-based post-quantum cryptographic algorithms, but the security of these algorithms has not been fully verified and may significantly increase the computational burden of terminal devices.

[0009] Therefore, there is an urgent need for a new technical solution that can achieve quantum security transformation based on the existing walkie-talkie system, provide a high degree of communication security, while maintaining the ease of use and scalability of the system. Summary of the invention

[0010] In order to solve the above problems, the present invention discloses a quantum secure intercom system and a communication method thereof.

[0011] In one aspect, the present application discloses a walkie-talkie communication method based on quantum encryption, characterized in that the method specifically includes:

[0012] The terminal quantum security module uses the quantum encryption key to encrypt the data to form a quantum security data packet, which is then sent to the quantum security server through a quantum security transmission channel.

[0013] The quantum security server uses the corresponding quantum decryption key to decrypt the quantum security data packet and restore the original communication data; and forwards the original communication data to the data center;

[0014] When the data center needs to send data to the intercom segment, the quantum security server matches the corresponding quantum key pool from the established key pool mapping relationship according to the network session identifier; uses the key in this quantum key pool to perform quantum encryption on the data to be sent; and then sends the encrypted data to the corresponding intercom terminal; the network session identifier includes the source IP address, source port number, destination IP address and destination port number;

[0015] The terminal quantum security module uses the corresponding quantum decryption key to decrypt to obtain the original communication data content from the data center.

[0016] Among them, the method for establishing a quantum secure transmission channel between the intercom end and the data center end includes:

[0017] After the intercom is started, it sends a startup notification containing its own identity ID to the terminal quantum security module;

[0018] The terminal quantum security module initiates an authentication request to the quantum security server and carries the identity ID;

[0019] The quantum security server receives the authentication request and verifies the legitimacy of the identity ID; after the verification is passed, the intercom is allowed to transmit quantum security data with the data center.

[0020] The key pool mapping relationship establishment process includes:

[0021] The quantum security server obtains a network session identifier of the current communication session, where the network session identifier includes a source IP address, a source port number, a destination IP address, and a destination port number;

[0022] The quantum security server allocates a quantum key pool for the network session identifier and establishes this mapping relationship.

[0023] The terminal quantum security module communicates with the quantum security server through the communication module on the intercom end, and the communication module establishes communication with the quantum security server using the communication network of the original communication module and the data center.

[0024] On the other hand, the present application also discloses a walkie-talkie communication system based on quantum encryption, comprising:

[0025] The terminal quantum security module deployed on the intercom side is used to receive the original communication data generated by the intercom side and encrypt the data using the quantum encryption key to form a quantum security data packet;

[0026] The quantum security server deployed at the data center is connected to the terminal quantum security module through a quantum security transmission channel to receive quantum security data packets, decrypt the quantum security data packets using the corresponding quantum decryption key, restore the original communication data, and forward the original communication data to the data center;

[0027] Among them, when the data center needs to send data to the intercom end, the quantum security service end uses the currently established network session identifier to match the established key pool mapping relationship to find the corresponding quantum key pool, obtains the quantum encryption key from the matching quantum key pool, and uses the quantum encryption key to perform quantum encryption processing on the data to be sent, and then sends the encrypted data to the corresponding intercom terminal; the network session identifier includes the source IP address, source port number, destination IP address and destination port number; the terminal quantum security module uses the corresponding quantum decryption key to decrypt the quantum security data packet to obtain the original communication data from the data center.

[0028] The system further includes a subsystem for establishing a quantum secure transmission channel, the subsystem comprising:

[0029] The intercom end is used to send a startup notification containing its own identity ID to the terminal quantum security module after startup;

[0030] The terminal quantum security module is used to receive the startup notification and initiate an authentication request with the identity ID to the quantum security server;

[0031] The quantum security server is used to receive authentication requests and verify the legitimacy of the identity ID, and allow the walkie-talkie to transmit quantum secure data with the data center after the verification is passed.

[0032] The system also includes a key pool mapping relationship establishment subsystem, including:

[0033] The quantum security server is used to obtain the network session identifier of the current communication session, allocate a quantum key pool according to the network session identifier, and establish a key pool mapping relationship; wherein the network session identifier includes the source IP address, source port number, destination IP address and destination port number.

[0034] Among them, the quantum security server further includes a quantum key management module, which is used to generate, store and manage quantum encryption keys and quantum decryption keys.

[0035] The terminal quantum security module further includes a quantum encryption processing unit for encrypting the original communication data using a quantum encryption key.

[0036] The data center includes data storage and processing modules for storing and forwarding original communication data.

[0037] The solution of this application performs quantum security transformation on the basis of the existing intercom system, avoiding the high cost of completely rebuilding the system, providing an economically feasible upgrade solution, maintaining the ease of use of the system, and minimizing the impact on end-user operations. The use of a centralized quantum security server to manage keys and encryption processes simplifies the requirements for terminal devices, facilitates large-scale deployment of the system, supports flexible key management and update strategies, and facilitates system maintenance and upgrades. The use of network session identifiers (including IP addresses and port numbers) for key pool mapping can adapt to complex network topologies, support cross-segment and cross-domain secure communications, facilitate integration with existing network infrastructure, and reduce deployment difficulty. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 This is a schematic diagram of the architecture of the intercom communication system in the embodiment of the present application;

[0039] Figure 2 This is a schematic diagram of the architecture of the intercom end of the embodiment of the present application;

[0040] Figure 3 A schematic diagram of a method flow for establishing a quantum secure transmission channel between a walkie-talkie end and a data center end in Example 1 of the present application;

[0041] Figure 4 This is a flow chart of the method for establishing a key pool mapping relationship in Example 1 of the present application. DETAILED DESCRIPTION

[0042] In order to make the purpose, features and advantages of the present invention more obvious and easy to understand, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described below are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. The principles and features of the present invention are described below in conjunction with the drawings. The examples are only used to explain the present invention and are not used to limit the scope of the present invention.

[0043] The terms "including" and other expressions with similar meanings in the specification or claims of the present invention and the above-mentioned drawings are intended to cover non-exclusive inclusions, such as a process, method or system, or device comprising a series of steps or units is not limited to the listed steps or units.

[0044] Embodiment 1: A walkie-talkie communication method based on quantum encryption, specifically comprising:

[0045] Deploy terminal quantum security modules on the intercom side, deploy quantum security servers on the data center side, and establish quantum security transmission channels between the terminal quantum security modules and the quantum security servers;

[0046] During the communication process, the original communication data generated by the intercom is sent to the terminal quantum security module;

[0047] The terminal quantum security module uses the quantum encryption key to encrypt the data to form a quantum security data packet, which is then sent to the quantum security server through the quantum security transmission channel.

[0048] The quantum security server uses the corresponding quantum decryption key to decrypt the quantum security data packet and restore the original communication data; and forwards the original communication data to the data center;

[0049] When the data center needs to send data to the intercom segment, the quantum security service end uses the currently established network session identifier to match the established key pool mapping relationship to find the corresponding quantum key pool; obtains the quantum encryption key from the matching quantum key pool; uses the quantum encryption subkey to perform quantum encryption processing on the data to be sent; and then sends the encrypted data to the corresponding intercom terminal; the network session identifier includes the source IP address, source port number, destination IP address and destination port number;

[0050] The terminal quantum security module uses the corresponding quantum decryption key to decrypt to obtain the original communication data content from the data center.

[0051] In this embodiment, the process of sending data by the intercom includes:

[0052] a. The intercom generates raw communication data;

[0053] b. Data is transmitted to the terminal quantum security module;

[0054] c. The terminal module encrypts data using quantum encryption keys;

[0055] d. The encrypted quantum-safe data packet is sent to the server through a quantum-safe channel;

[0056] e. The server decrypts the data packet using the corresponding quantum decryption key;

[0057] f. The restored original data is forwarded to the data center;

[0058] The data center sends data process including:

[0059] a. The quantum security server matches the key pool based on the network session identifier

[0060] b. Obtain quantum encryption key from the matching key pool

[0061] c. Use this key to perform quantum encryption on the data to be sent

[0062] d. Encrypted data is sent to the corresponding intercom terminal

[0063] e. The terminal quantum security module uses the corresponding decryption key to decrypt the data

[0064] In the above process, data is encrypted at the sending end and decrypted at the receiving end, and the data remains encrypted during the transmission process; thus, man-in-the-middle attacks can be prevented and the security of data during transmission can be protected. Encryption using quantum keys can provide a theoretically unbreakable encryption method, greatly improving communication security. Using network session identifiers to match the key pool and use different keys for different sessions can increase the flexibility and security of the system and reduce the risk of key cracking. Modularizing quantum security functions and integrating them into existing intercom systems can facilitate system upgrades and maintenance, and improve compatibility and scalability.

[0065] Among them, Figure 3 As shown, the method for establishing a quantum secure transmission channel between the intercom end and the data center end includes:

[0066] S101: After the intercom is started, it sends a startup notification containing its own identity ID to the terminal quantum security module;

[0067] S102: The terminal quantum security module initiates an authentication request to the quantum security server and carries the identity ID;

[0068] S103: The quantum security service end receives the authentication request and verifies the legitimacy of the identity ID; and after the verification is passed, the intercom end is allowed to perform quantum security data transmission with the data center end.

[0069] Exemplarily, the above process specifically includes:

[0070] Intercom initialization (S101):

[0071] A unique identity ID is pre-stored in the walkie-talkie hardware; when the walkie-talkie is started, the stored identity ID is automatically read to generate a startup notification data packet containing the identity ID; the startup notification is sent to the terminal quantum security module through the internal interface;

[0072] Terminal quantum security module processing (S102):

[0073] Receive the startup notification from the intercom, parse the notification, and extract the identity ID; construct an authentication request data packet, including: identity ID, timestamp, random number (to prevent replay attacks); encrypt the authentication request using a pre-shared key; send the encrypted authentication request to the quantum security server through a secure network channel;

[0074] Quantum security server verification (S103):

[0075] Receive the encrypted authentication request and decrypt the request using the pre-shared key; verify the timestamp and random number to prevent replay attacks; query the identity ID in the identity database to verify its legitimacy:

[0076] If the verification is successful, a session key is generated, a quantum key pool is created, network resources are allocated, and a verification response is sent to the terminal quantum security module. The response specifically includes: session key and quantum key pool initialization information; the intercom terminal is allowed to establish a quantum secure data transmission channel with the data center;

[0077] Establishing quantum secure transmission channels:

[0078] The terminal quantum security module receives the verification response and initializes the secure channel using the session key and quantum key pool; the intercom and data center start using quantum encryption for data transmission. Session key exchange:

[0079] In a possible implementation, the step of initializing a secure channel using a session key and a quantum key pool includes:

[0080] The quantum security server generates a unique session key; the session key is securely transmitted to the terminal quantum security module; both parties verify the integrity and consistency of the session key;

[0081] Quantum key pool initialization: The server generates a series of random keys using a quantum random number generator (QRNG); organizes these random keys into a key pool; assigns a unique index to each key in the key pool; encrypts the entire key pool using the session key; transmits the encrypted key pool information to the terminal quantum security module;

[0082] Terminal reception and processing:

[0083] The terminal quantum security module receives the encrypted key pool information; decrypts the key pool information using the session key; and stores the decrypted key pool in a secure memory.

[0084] Secure channel parameter setting: Both parties negotiate encryption algorithms (such as AES, ChaCha20, etc.);

[0085] Set the key update frequency and strategy; define the order in which keys are used (e.g., sequential use or random selection);

[0086] Channel activation: Both parties exchange confirmation information of initialization completion; start using the keys in the key pool to encrypt and decrypt data.

[0087] By pre-assigning a set of keys, the need for real-time key generation can be reduced, communication latency can be reduced, and system response speed can be improved. The key pool allows dynamic selection and update of keys, which can increase the flexibility of the system and adapt to different security requirements.

[0088] like Figure 4 As shown, in the above scheme, the key pool mapping relationship establishment process includes:

[0089] S111: The quantum security server obtains a network session identifier of the current communication session, where the network session identifier includes a source IP address, a source port number, a destination IP address, and a destination port number;

[0090] S112: The quantum security server allocates a quantum key pool for the network session identifier and establishes this mapping relationship.

[0091] In a possible implementation, Figure 1-2 As shown, the intercom communication system includes:

[0092] 1. Intercom terminal:

[0093] a) Application processing module: responsible for application layer functions such as user interface interaction and audio processing.

[0094] b) Communication processing module: responsible for processing wireless communication protocols such as 4G / 5G.

[0095] c) Terminal quantum security module: located between the application processing module and the communication processing module, responsible for quantum encryption and decryption of data.

[0096] d) Unique ID: A unique identifier for each terminal, used for identity authentication and key management.

[0097] e) Quantum key pool: stores pre-distributed quantum random number keys.

[0098] 2. Data center: stores business data such as user information and group information.

[0099] 3. Quantum security server:

[0100] Access base station: responsible for terminal identity authentication and network access;

[0101] Key center: generate and distribute quantum random number keys;

[0102] Quantum security server: manages key pools, processes encryption and decryption requests, and forwards data.

[0103] The quantum security server is specifically used for:

[0104] Terminal identity authentication:

[0105] When a walkie-talkie terminal accesses the network, the access base station uses a quantum-secure identity authentication protocol to verify the terminal's identity. This ensures that only legitimate terminals can access the system, improving system security;

[0106] Quantum key generation and distribution:

[0107] The key center uses a quantum random number generator (QRNG) to generate true random numbers as keys. These keys are distributed to each terminal and quantum security server through a secure channel. The key pool is updated regularly to maintain long-term security;

[0108] Key Management:

[0109] The quantum security server maintains a mapping table that associates the identity ID of each terminal with its corresponding quantum key pool; centralized management facilitates key synchronization and updating.

[0110] The specific data encryption communication process includes:

[0111] S121: The application processing module of the sending terminal generates communication data;

[0112] S122: Data is transmitted to the terminal quantum security module and encrypted using the key in the quantum key pool;

[0113] S123: The encrypted data is sent to the quantum security server through the communication processing module;

[0114] S124: The server finds the corresponding key according to the sender ID and decrypts the data;

[0115] S125: The server queries the recipient information and re-encrypts the data using the recipient's key;

[0116] S126: The encrypted data is sent to the receiving terminal;

[0117] S127: The receiver decrypts the data using its own quantum key.

[0118] The terminal quantum security module communicates with the quantum security server through the communication module on the intercom end, and the communication module establishes communication with the quantum security server using the communication network of the original communication module and the data center.

[0119] Example 2: Figure 1-2 As shown, a walkie-talkie communication system based on quantum encryption includes:

[0120] The terminal quantum security module deployed on the intercom side is used to receive the original communication data generated by the intercom side and encrypt the data using the quantum encryption key to form a quantum security data packet;

[0121] The quantum security server deployed at the data center is connected to the terminal quantum security module through a quantum security transmission channel to receive quantum security data packets, decrypt the quantum security data packets using the corresponding quantum decryption key, restore the original communication data, and forward the original communication data to the data center;

[0122] Among them, when the data center needs to send data to the intercom end, the quantum security service end uses the currently established network session identifier to match the established key pool mapping relationship to find the corresponding quantum key pool, obtains the quantum encryption key from the matching quantum key pool, and uses the quantum encryption key to perform quantum encryption processing on the data to be sent, and then sends the encrypted data to the corresponding intercom terminal; the network session identifier includes the source IP address, source port number, destination IP address and destination port number; the terminal quantum security module uses the corresponding quantum decryption key to decrypt the quantum security data packet to obtain the original communication data from the data center.

[0123] The data center sends data in the following process:

[0124] The data center generates data to be sent, and the quantum security server receives the data to be sent, uses the network session identifier (source IP, source port, destination IP, destination port) to match the key pool, obtains the encryption key from the matching quantum key pool, encrypts the data using the quantum encryption algorithm, generates a quantum security data packet, and sends it to the corresponding intercom terminal through the quantum security transmission channel;

[0125] Walkie-talkie receiving data process:

[0126] The terminal quantum security module receives the quantum security data packet, parses the data packet, extracts the session information, searches for the corresponding quantum decryption key based on the session information, uses the quantum decryption algorithm to restore the original communication data, and transmits the decrypted data to the intercom for processing or display.

[0127] By allocating an independent key pool to each session and updating it dynamically, the security of the system can be increased, and the leakage of a single key will not affect the overall security. At the same time, it supports high-frequency communication needs, reduces key distribution delays, and helps improve the scalability of the system, thereby adapting to large-scale deployment scenarios.

[0128] Use network session identifiers (IP addresses and port numbers) to match key pools. Different communication sessions can be accurately identified and managed, supporting secure communication for multiple users and multiple devices at the same time, improving system flexibility and management efficiency.

[0129] The system further includes a subsystem for establishing a quantum secure transmission channel, the subsystem comprising:

[0130] The intercom end is used to send a startup notification containing its own identity ID to the terminal quantum security module after startup;

[0131] The terminal quantum security module is used to receive the startup notification and initiate an authentication request with the identity ID to the quantum security server;

[0132] The quantum security server is used to receive authentication requests and verify the legitimacy of the identity ID, and allow the walkie-talkie to transmit quantum secure data with the data center after the verification is passed.

[0133] The system also includes a key pool mapping relationship establishment subsystem, including:

[0134] The quantum security server is used to obtain the network session identifier of the current communication session, allocate a quantum key pool according to the network session identifier, and establish a key pool mapping relationship; wherein the network session identifier includes the source IP address, source port number, destination IP address and destination port number.

[0135] Among them, the quantum security server further includes a quantum key management module, which is used to generate, store and manage quantum encryption keys and quantum decryption keys.

[0136] The terminal quantum security module further includes a quantum encryption processing unit for encrypting the original communication data using a quantum encryption key.

[0137] The data center includes data storage and processing modules for storing and forwarding original communication data.

[0138] In a specific implementation scheme, the quantum security service further includes:

[0139] A network session identification module is used to monitor network traffic in real time and extract the network session identifier (source IP, source port, destination IP, destination port) of each communication session;

[0140] Quantum key management module, integrating quantum random number generator (QRNG) to realize key lifecycle management function;

[0141] A key pool allocation module, used to allocate an independent quantum key pool to each new network session and maintain a mapping relationship between the network session identifier and the key pool (e.g., using a high-performance database);

[0142] The synchronization management module keeps key information synchronized with the terminal quantum security module to implement a secure key distribution protocol.

[0143] The terminal quantum security module includes:

[0144] Quantum encryption processing unit, used to implement quantum encryption algorithms (such as AES based on quantum keys or other post-quantum cryptographic algorithms).

[0145] In this embodiment, the design of the key pool mapping relationship establishment subsystem realizes a highly secure, flexible and scalable communication security architecture by combining dynamic session management, quantum key generation and distributed key management. It can not only effectively defend against current network threats, but also lay the foundation for responding to future quantum computing attacks.

[0146] The technical means disclosed in the scheme of the present invention are not limited to the technical means disclosed in the above-mentioned implementation mode, but also include technical schemes composed of any combination of the above-mentioned technical features. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications are also regarded as the protection scope of the present invention.

Claims

1. A walkie-talkie communication method based on quantum encryption, characterized in that: include: The terminal quantum security module uses the quantum encryption key to encrypt the data to form a quantum security data packet; Then it is sent to the quantum security server through the quantum security transmission channel; The quantum security server uses the corresponding quantum decryption key to decrypt the quantum security data packet and restore the original communication data; and forwards the original communication data to the data center; When the data center needs to send data to the intercom segment, the quantum security server matches the corresponding quantum key pool from the established key pool mapping relationship according to the network session identifier; uses the key in this quantum key pool to perform quantum encryption on the data to be sent; and then sends the encrypted data to the corresponding intercom terminal; the network session identifier includes the source IP address, source port number, destination IP address and destination port number; The terminal quantum security module uses the corresponding quantum decryption key to decrypt to obtain the original communication data content from the data center.

2. The communication method according to claim 1, characterized in that: The method of establishing a quantum secure transmission channel between the intercom end and the data center end includes: After the intercom is started, it sends a startup notification containing its own identity ID to the terminal quantum security module; The terminal quantum security module initiates an authentication request to the quantum security server and carries the identity ID; The quantum security server receives the authentication request and verifies the legitimacy of the identity ID; after the verification is passed, the intercom is allowed to transmit quantum security data with the data center.

3. The communication method according to claim 2, characterized in that: The key pool mapping relationship establishment process includes: The quantum security server obtains a network session identifier of the current communication session, where the network session identifier includes a source IP address, a source port number, a destination IP address, and a destination port number; The quantum security server allocates a quantum key pool for the network session identifier and establishes this mapping relationship.

4. The communication method according to claim 2, characterized in that: The terminal quantum security module communicates with the quantum security server through the communication module on the intercom end, and the communication module establishes communication with the quantum security server using the communication network of the original communication module and the data center.

5. A walkie-talkie communication system based on quantum encryption, characterized in that: include: The terminal quantum security module deployed on the intercom side is used to receive the original communication data generated by the intercom side and encrypt the data using the quantum encryption key to form a quantum security data packet; The quantum security server deployed at the data center is connected to the terminal quantum security module through a quantum security transmission channel to receive quantum security data packets, decrypt the quantum security data packets using the corresponding quantum decryption key, restore the original communication data, and forward the original communication data to the data center; Among them, when the data center needs to send data to the intercom terminal, the quantum security service end uses the currently established network session identifier to match the established key pool mapping relationship to find the corresponding quantum key pool, obtains the quantum encryption key from the matching quantum key pool, uses the quantum encryption key to perform quantum encryption processing on the data to be sent, and then sends the encrypted data to the corresponding intercom terminal; the network session identifier includes the source IP address, source port number, destination IP address and destination port number; The terminal quantum security module uses the corresponding quantum decryption key to decrypt the quantum security data packet to obtain the original communication data from the data center.

6. The communication system according to claim 5, characterized in that: The system further includes a subsystem for establishing a quantum secure transmission channel, the subsystem comprising: The intercom end is used to send a startup notification containing its own identity ID to the terminal quantum security module after startup; The terminal quantum security module is used to receive the startup notification and initiate an authentication request with the identity ID to the quantum security server; The quantum security server is used to receive authentication requests and verify the legitimacy of the identity ID, and allow the intercom to transmit quantum secure data with the data center after the verification is passed.

7. The communication system according to claim 6, characterized in that: The quantum security server is also used to obtain a network session identifier of the current communication session, and allocate a quantum key pool according to the network session identifier to establish a key pool mapping relationship; wherein the network session identifier includes a source IP address, a source port number, a destination IP address and a destination port number.

8. The communication system according to claim 5, characterized in that: The quantum security server further includes a quantum key management module, which is used to generate, store and manage quantum encryption keys and quantum decryption keys.

9. The communication system according to claim 5, characterized in that: The terminal quantum security module further includes a quantum encryption processing unit, which is used to encrypt the original communication data using a quantum encryption key.

10. The communication system according to claim 5, characterized in that: The data center includes a data storage and processing module for storing and forwarding original communication data.

Images