Data transmission method and device based on quantum technology and storage medium

Abstract

The invention relates to a data transmission method and device based on the quantum technology and a storage medium, and the method comprises the steps: obtaining a session description protocol of a client and a session description protocol of a monitoring terminal, the session description protocol of the client and the session description protocol of the monitoring terminal are obtained by encrypting a quantum key issued based on a quantum security shield service; exchanging the session description protocol of the client and the session description protocol of the monitoring terminal to obtain communication information of the client and communication information of the monitoring terminal; initiating a punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, and performing streaming media data message penetration; and after the message penetrates, the streaming media data of the monitoring terminal is transmitted to the client, and the streaming media data is the data encrypted by the quantum key issued by the quantum security shield service, so that the security of video stream transmission is improved.

Description

Technical Field

[0001] The present application relates to the field of streaming media, and in particular to a data transmission method, device and storage medium based on quantum technology. Background Art

[0003] On the technical level, traditional video stream encryption methods have obvious security risks. At present, the encryption key of the video stream is usually transmitted through the IP network. This IP network is open and can be easily exploited by hackers to capture the key in transmission by monitoring network traffic. If the key is transmitted in plain text, the attacker can directly capture the network data packet through the network packet capture tool to obtain the key. In addition, hackers can also use brute force cracking, protocol analysis and other means to steal the key. Once the key is stolen, the hacker can decrypt the video stream and obtain the video content, which poses a huge threat to the security of video data.

[0004] With regard to the problem of insecure video stream transmission in related technologies, no effective solution has been proposed yet. Summary of the invention

[0005] In this embodiment, a data transmission method, device and storage medium based on quantum technology are provided to solve the problem of insecure video stream transmission in related technologies.

[0006] In a first aspect, a data transmission method based on quantum technology is provided in this embodiment, including: Obtaining a session description protocol of the client and a session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted based on a quantum key issued by a quantum security shield service; The session description protocol of the client and the session description protocol of the monitoring terminal are exchanged, so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; Initiating a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal to perform streaming media data message penetration; After the streaming media data message penetrates, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service.

[0007] In some embodiments, the communication information of the client includes the internal and external network IP addresses and port information of the client; the communication information of the monitoring terminal includes the internal and external network IP addresses and port information of the monitoring terminal.

[0008] In some of the embodiments, before obtaining the session description protocol of the client and the session description protocol of the monitoring terminal, the method further includes: The client and the monitoring terminal are quantum initialized.

[0009] In some embodiments, the step of performing quantum initialization on the client and the monitoring terminal includes: Establishing a communication connection between the client and the quantum security shield service through quantum communication of the quantum SIM card configured by the client, so that the quantum security shield service performs network access authentication on the client, obtains the authentication result of the client, and completes the quantum initialization of the client; Through the quantum communication of the quantum SIM card configured in the monitoring terminal, a communication connection between the monitoring terminal and the quantum security shield service is established, so that the quantum security shield service performs network access authentication on the monitoring terminal, obtains the network access authentication result of the monitoring terminal, and completes the quantum initialization of the monitoring terminal.

[0010] In some of the embodiments, before obtaining the session description protocol of the client and the session description protocol of the monitoring terminal, the method further includes: According to data transmission requirements, target P2P service information is sent to the client and the monitoring terminal, so that the client and the monitoring terminal obtain corresponding external network IP addresses according to the target P2P service information and establish their own session description protocols.

[0011] In some embodiments, the basic information of the target P2P service includes the IP address, port number and node identification information of the target P2P service.

[0012] In some embodiments, the session description protocol of the client includes the video encoding supported by the client, the audio encoding of the client, the audio sampling rate of the client, the intranet IP of the client, the extranet IP of the client, and the port number of the client; the session description protocol of the monitoring terminal includes the video encoding supported by the monitoring terminal, the audio encoding of the monitoring terminal, the audio sampling rate of the monitoring terminal, the intranet IP of the monitoring terminal, the extranet IP of the monitoring terminal, and the port number of the monitoring terminal.

[0013] In a second aspect, a data transmission device based on quantum technology is provided in this embodiment, including: an acquisition module, an exchange module, a message penetration module and a data transmission module, wherein: The acquisition module is used to acquire the session description protocol of the client and the session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted with the key issued by the quantum security shield service; The exchange module is used to exchange the session description protocol of the client and the session description protocol of the monitoring terminal, so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; The message penetration module is used to initiate a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, so as to perform streaming media data message penetration; The data transmission module is used to transmit the streaming data of the monitoring terminal to the client after the streaming data message penetrates, wherein the streaming data is data encrypted by the key issued by the quantum security shield service.

[0014] In a third aspect, an electronic device is provided in this embodiment, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the data transmission method based on quantum technology described in the first aspect is implemented.

[0015] In a fourth aspect, a storage medium is provided in this embodiment, on which a computer program is stored, and when the program is executed by a processor, the data transmission method based on quantum technology described in the first aspect is implemented.

[0016] Compared with the related art, the data transmission based on quantum technology provided in this embodiment is obtained by obtaining the session description protocol of the client and the session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted based on the quantum key issued by the quantum security shield service; the session description protocol of the client and the session description protocol of the monitoring terminal are exchanged so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; according to the communication information of the client and the communication information of the monitoring terminal, a punching instruction is initiated to the client and the monitoring terminal to perform streaming media data message penetration; after the streaming media data message is penetrated, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service, which solves the problem of insecure video stream transmission and improves the security of video stream transmission.

[0017] Details of one or more embodiments of the present application are set forth in the following drawings and description to make other features, objects, and advantages of the present application more readily apparent. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 This is a hardware structure block diagram of a terminal of the data transmission method based on quantum technology in this embodiment.

[0019] Figure 2 It is a flow chart of the data transmission method based on quantum technology of this embodiment.

[0020] Figure 3 It is a flow chart of another data transmission method based on quantum technology in this embodiment.

[0021] Figure 4 This is a schematic diagram of quantum key initialization communication of the data transmission method based on quantum technology in this embodiment.

[0022] Figure 5 This is a schematic diagram of IPV4 / 6 service startup communication of the data transmission method based on quantum technology in this embodiment.

[0023] Figure 6 This is a schematic diagram of registration keep-alive communication of the data transmission method based on quantum technology in this embodiment.

[0024] Figure 7 This is a schematic diagram of SDP exchange communication of the data transmission method based on quantum technology in this embodiment.

[0025] Figure 8 This is a communication diagram of the data transmission method based on quantum technology in this embodiment, which uses quantum keys to encrypt and decrypt specific communication content.

[0026] Fig. 9 It is a structural block diagram of the data transmission device based on quantum technology in this embodiment. DETAILED DESCRIPTION

[0027] In order to more clearly understand the purpose, technical solutions and advantages of the present application, the present application is described and illustrated below in conjunction with the accompanying drawings and embodiments.

[0028] Unless otherwise defined, the technical terms or scientific terms involved in this application shall have the general meaning understood by people with general skills in the technical field to which this application belongs. The words "one", "a", "the", "these" and the like in this application do not indicate a quantitative limitation, and they may be singular or plural. The terms "include", "comprise", "have" and any variants thereof involved in this application are intended to cover non-exclusive inclusions; for example, a process, method and system, product or device comprising a series of steps or modules (units) is not limited to the listed steps or modules (units), but may include unlisted steps or modules (units), or may include other steps or modules (units) inherent to these processes, methods, products or devices. The words "connect", "connected", "coupled" and the like involved in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. The "multiple" involved in this application refers to two or more. "And / or" describes the association relationship of associated objects, indicating that there may be three relationships, for example, "A and / or B" may mean: A exists alone, A and B exist at the same time, and B exists alone. Generally, the character " / " indicates that the objects associated with each other are in an "or" relationship. The terms "first", "second", "third", etc. in this application are only used to distinguish similar objects and do not represent a specific ordering of the objects.

[0029] The method embodiment provided in this embodiment can be executed in a terminal, a computer or a similar computing device. For example, running on a terminal, Figure 1 is a hardware structure block diagram of a terminal of the data transmission method based on quantum technology in this embodiment. Figure 1 As shown, the terminal may include one or more ( Figure 1 Only one is shown in the figure) a processor 102 and a memory 104 for storing data, wherein the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA. The above terminal may also include a transmission device 106 and an input and output device 108 for communication functions. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above terminal. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations shown.

[0030] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the data transmission method based on quantum technology in this embodiment. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, to implement the above method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0031] The transmission device 106 is used to receive or send data via a network. The above network includes a wireless network provided by a communication provider of the terminal. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (Radio Frequency, referred to as RF) module, which is used to communicate with the Internet wirelessly.

[0032] In this embodiment, a data transmission method based on quantum technology is provided. Figure 2 is a flow chart of the data transmission method based on quantum technology in this embodiment. Figure 2 As shown, the process includes the following steps: Step S201, obtaining the session description protocol of the client and the session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted based on the quantum key issued by the quantum security shield service.

[0033] Specifically, the following are explanations of terms in this embodiment: Quantum: Quantum is an important concept in modern physics. If a physical quantity has a smallest indivisible basic unit, then this physical quantity is quantized, and the smallest unit is called a quantum.

[0034] Session Description Protocol (SDP): is a text protocol used to describe multimedia sessions. It is mainly used to transmit detailed information of sessions in multimedia communications, such as session name, media type, codec information, network address, etc. SDP itself is not a transmission protocol, but a format for describing session information. The content includes video encoding, frame rate, bit rate, audio encoding, audio sampling rate, channel type, application layer transmission protocol, encryption method and other information.

[0035] In view of the problem that the encryption key of the video stream in the prior art is mainly transmitted through the IP network, which makes it easy for hackers to intercept and steal the key through packet capture tools during the transmission process, thereby causing the video stream to be leaked after being decrypted, quantum communication is used in this embodiment to encrypt the transmission process of the video stream. Quantum communication is a communication technology based on the principles of quantum mechanics, which uses the characteristics of quantum states (such as quantum superposition, quantum entanglement and quantum non-cloning theorem) to achieve secure transmission of information. The core advantage of quantum communication lies in its unconditional security, that is, any eavesdropping on quantum signals will be detected by both parties to the communication, thereby ensuring the confidentiality and integrity of the communication. Among them, the quantum SIM card uses quantum key distribution (QKD) technology to establish a secure connection with the quantum security shield service through the quantum channel, securely distribute keys between the two parties to the communication, and transmit quantum bits through the quantum channel. The two parties to the communication can generate a shared random key, which is used to encrypt and decrypt communication data (such as AES encryption). The quantum non-cloning law makes the quantum state unable to be accurately copied, and any eavesdropping on the quantum signal will introduce disturbances, which will be detected by both parties to the communication, ensuring that the key in the communication process is not eavesdropped or tampered with. The quantum software development kit (APP SDK) of the quantum application will first perform identity authentication when communicating with the quantum security shield service. The quantum key built into the quantum SIM card is used to generate authentication information, and the quantum security shield service confirms the identity of the device by verifying this information. The uniqueness and randomness of the quantum key can ensure the high security of identity authentication. At the same time, the quantum security shield service will regularly update the quantum key and distribute the new key to the quantum SIM card through the quantum channel. The quantum APP SDK uses these keys to encrypt and decrypt data to ensure the security of communication data. The dynamic update and management of the key is uniformly controlled by the quantum security shield service, and the user does not need to intervene manually. Its dynamic key update mechanism can also further ensure the security of the key. Finally, after the identity authentication and key update are completed, the data transmission between the quantum APP SDK and the quantum security shield service is encrypted based on the quantum key. Even if the data is intercepted during transmission, it cannot be decrypted without the correct quantum key, thus ensuring the confidentiality and integrity of the data.

[0036] Therefore, in this embodiment, a shared random key is generated in the quantum security shield service through quantum communication, the APP uses the quantum APP SDK to obtain the APP quantum key from the quantum security shield service through the quantum channel, the quantum security shield service sends the random key to the APP, and the APP encrypts the SDP information of the APP through the random key sent; the camera uses the quantum embedded SDK to obtain the camera quantum key from the quantum security shield service through the quantum channel, the quantum security shield service sends the random key to the camera, and the camera encrypts the SDP information of the camera through the random key sent. Among them, the client can be various mobile terminal APPs, and the monitoring terminal can be various tools such as cameras that can shoot videos. Among them, when the APP needs to obtain the streaming media data of the camera, the data transmission platform first obtains the APP SDP information and the camera SDP information after quantum encryption, and then performs the next step of streaming media data interaction. Among them, the uniqueness, randomness and automatic dynamic update properties of the quantum key are used to encrypt the SDP information of the client and the SDP information of the monitoring terminal through the shared random key generated by quantum communication, thereby improving the security of data transmission.

[0037] Step S202: exchange the session description protocol of the client and the session description protocol of the monitoring terminal, so that the client and the monitoring terminal decrypt the received session description protocols to obtain the communication information of the client and the communication information of the monitoring terminal.

[0038] Through the signaling service, the APP SDP information and the camera SDP information encrypted by the quantum key are exchanged with each other. After the exchange, the APP and the camera decrypt the received encrypted SDP information through the shared key generated by the quantum channel. Both parties parse the decrypted SDP information and obtain the other party's communication information (such as codec, port information, etc.).

[0039] Step S203, initiating a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, and performing streaming media data message penetration; after the streaming media data message penetration, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service.

[0040] Specifically, after the client and the monitoring terminal exchange encrypted communication information (such as IP address, port, etc.) through the signaling service, in order to achieve the transmission of streaming media data, it is necessary to complete NAT penetration through the "hole punching" technology, thereby establishing a direct communication link between the client and the monitoring terminal. According to the communication information of each other, the client and the monitoring terminal send hole punching data packets to the public network address and port of the other party, and try to establish a direct connection to penetrate the streaming media data message. After the connection is established, the client and the monitoring terminal can directly transmit streaming media data. Among them, the streaming media data exchanged between the two parties is also encrypted by quantum keys to further provide data transmission security.

[0041] Through the above steps S201 to S203, the session description protocol of the client and the session description protocol of the monitoring terminal are obtained, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted based on the quantum key issued by the quantum security shield service; the session description protocol of the client and the session description protocol of the monitoring terminal are exchanged, so that the client and the monitoring terminal decrypt the session description protocols received by each other, and obtain the communication information of the client and the communication information of the monitoring terminal; according to the communication information of the client and the communication information of the monitoring terminal, a hole punching instruction is initiated to the client and the monitoring terminal to perform streaming media data message penetration; after the streaming media data message is penetrated, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service. Compared with the prior art in which the encryption key of the video stream is transmitted through the IP network, this embodiment is based on quantum communication, and the SDP information of the client and the monitoring terminal is encrypted based on the quantum key and then exchanged. The client and the monitoring terminal decrypt the received SDP information according to the issued quantum key to obtain the communication information of both parties, and perform a hole punching operation according to the decrypted communication information to achieve streaming media data message penetration, thereby achieving secure transmission of streaming media data. Among them, the SDP information and streaming media data of the client and the monitoring terminal are encrypted using quantum communication, which improves the security of streaming media data transmission.

[0042] In some of the embodiments, the communication information of the client includes the internal and external network IP addresses and port information of the client; the communication information of the monitoring terminal includes the internal and external network IP addresses and port information of the monitoring terminal.

[0043] Specifically, the client communication information and the monitoring terminal communication information are the basis for establishing streaming media communication. In this embodiment, the client communication information mainly includes the client's internal and external network IP addresses and port information. The client's internal network IP address is the client's IP address in the local network, the client's external network address is the client's public network IP address after NAT conversion, the client's port information is the port number (such as UDP port) used by the client to receive and send streaming media data, and the client information also includes supported protocols and codecs, that is, the streaming media protocols (such as RTP, RTMP) and codecs (such as H.264, Opus) supported by the client. The communication information of the monitoring terminal includes the monitoring terminal's internal and external network IP addresses and port information. Among them, the monitoring terminal's internal network IP address is the monitoring terminal's IP address in the local network, the monitoring terminal's external network IP address is the monitoring terminal's public network IP address after NAT conversion, the monitoring terminal's port information is the monitoring terminal's port number used to receive and send streaming media data, and the monitoring terminal communication information also includes supported protocols and codecs. The client and the monitoring terminal generate a shared key through the quantum channel, and use the shared key to encrypt and decrypt communication information. After exchanging communication information, the client and the monitoring terminal send hole punching data packets to each other's external network address and port according to each other's communication information to establish a mapping on the NAT device. After the hole punching is successful, the client and the monitoring terminal directly transmit streaming media data through UDP or TCP.

[0044] In another embodiment, before obtaining the session description protocol of the client and the session description protocol of the monitoring terminal, it also includes: performing quantum initialization on the client and the monitoring terminal.

[0045] Before data transmission based on quantum communication, the SDK of the client and monitoring terminal needs to be initialized, which mainly performs identity authentication, key distribution and ensures secure communication. This includes verifying the identity of the client and monitoring terminal, generating a shared password through quantum communication, which is used to encrypt subsequent communications and ensure the confidentiality, integrity and non-repudiation of communications.

[0046] In some of the embodiments, quantum initialization is performed on the client and the monitoring terminal, including: establishing a communication connection between the client and the quantum security shield service through quantum communication of the quantum SIM card configured by the client, so that the quantum security shield service performs network access authentication on the client, obtains the authentication result of the client, and completes the quantum initialization of the client; Through the quantum communication of the quantum SIM card configured in the monitoring terminal, a communication connection between the monitoring terminal and the quantum security shield service is established, so that the quantum security shield service can perform network authentication on the monitoring terminal, obtain the network authentication result of the monitoring terminal, and complete the quantum initialization of the monitoring terminal.

[0047] Specifically, the specific process of quantum initialization of the client and monitoring terminal is as follows: The client quantum initialization process includes: a. Insert the quantum SIM card into the client; b. The client calls the Quantum APP SDK to initialize the network authentication for the Quantum APP SDK; then the Quantum APP SDK is used to establish the communication connection between the quantum channel of the client's SIM card and the Quantum Security Shield service; c. The Quantum Security Shield service authenticates the client. After the authentication is passed, the authentication result is returned to the Quantum APP SDK through the quantum channel. The Quantum APP SDK returns the authentication result to the client to complete the client quantum initialization.

[0048] The monitoring terminal quantum initialization process includes: a. Insert the quantum SIM card into the monitoring terminal; b. The monitoring terminal calls the quantum embedded SDK to initialize the network authentication of the quantum embedded SDK; then the quantum embedded SDK is used to establish the communication connection between the quantum channel of the monitoring terminal's SIM card and the quantum security shield service; c. The quantum security shield service authenticates the monitoring terminal. After the authentication is passed, the authentication result is returned to the quantum embedded SDK through the quantum channel. The quantum embedded SDK returns the authentication result to the monitoring terminal to complete the quantum initialization of the monitoring terminal.

[0049] Among them, the quantum SIM card is the hardware foundation of quantum communication, supports quantum key distribution (QKD), provides quantum channel communication capabilities, and can also store quantum keys and authentication information. The quantum APP SDK provides APIs for application calls to complete quantum initialization and communication, manage the communication of the client's quantum SIM card, interact with the quantum security shield service, and complete identity authentication and key distribution. The quantum embedded SDK provides APIs for monitoring terminals to call, complete quantum initialization and communication, manage the communication of the quantum SIM card of the monitoring terminal, interact with the quantum security shield service, and complete identity authentication and key distribution. The quantum security shield service provides quantum communication services, authenticates the client and monitoring terminal, and distributes shared keys. After the quantum initialization is successful, the client and monitoring terminal can continue to the next step of SDP information exchange and other processes. Through the collaborative work of the quantum SIM card, quantum APP SDK, quantum embedded SDK, and quantum security shield service, the network access authentication, identity authentication, and key distribution of the client and monitoring terminal are completed, laying the foundation for subsequent SDP exchange and streaming media transmission, combining the unconditional security of quantum communication and the high efficiency of classical communication, and improving the security of data transmission.

[0050] In another embodiment, before obtaining the session description protocol of the client and the session description protocol of the monitoring terminal, it also includes: according to data transmission requirements, sending target P2P service information to the client and the monitoring terminal, so that the client and the monitoring terminal obtain the corresponding external network IP address according to the target P2P service information and establish their own session description protocols.

[0051] Specifically, before the client and the monitoring terminal establish their own session description protocols, they need to obtain the P2P service first, and send the obtained P2P service to the client and the monitoring terminal. The client and the monitoring terminal establish their own session description protocols according to the sent P2P service. First, the client sends a request to the signaling service according to the data transmission requirements to obtain the P2P service, and the request carries the monitoring terminal ID, informing the signaling service that it needs to establish communication with a specific monitoring terminal. Secondly, the signaling service forwards the request to the scheduling service, requesting to allocate the P2P service node with the smallest load to ensure that the selected P2P service node can efficiently support communication. The scheduling service selects an optimal P2P service node according to the current load situation, and returns the service information of the P2P service node to the signaling service. The signaling service returns the P2P service information to the client and allocates a session identifier (SID). The signaling service sends the same P2P service information and SID to the monitoring terminal to ensure that the monitoring terminal and the client use the same P2P service node for communication. Then, the client calls the quantum APP SDK to request a key from the Quantum Security Shield service through the quantum channel, and the monitoring terminal calls the quantum embedded SDK to request a key from the Quantum Security Shield service through the quantum channel. The client obtains its own external network IPV4 and IPV6 addresses through the P2P service. The monitoring terminal obtains its own external network IPV4 and IPV6 addresses through the P2P service. Finally, the client generates the client's SDP based on the obtained external network IP address, port information, and supported media protocols, and the monitoring terminal generates the SDP based on the obtained external network IP address, port information, and supported media protocols.

[0052] In some of the embodiments, the basic information of the target P2P service includes the IP address, port number and node identification information of the target P2P service.

[0053] Specifically, in the above-mentioned sending of the target P2P service to the client and the monitoring terminal, the basic information of the target P2P service mainly includes the IP, port and node of the target P2P service. Among them, the IP address of the target P2P service is a network layer identifier, which is used to uniquely identify a device in the network. In the P2P network, the IP address is used to locate the target P2P service node to ensure that data can be correctly transmitted in a complex network environment. The IP address types include IPV4 addresses and IPV6 addresses. The port number of the target P2P service is an identifier of the transport layer, which is used to distinguish different services under the same IP address. In the P2P network, the port number is used to specify the specific port that the target P2P service listens to, including TCP ports and UDP ports. The target P2P node identification information is used to uniquely identify each node in the P2P network. This information usually includes node ID, node type, node status, etc., wherein the node can be an ordinary node, a boot node or a super node. The IP address, port number and node identification information of the P2P service can quickly locate the target service, establish a connection, transmit data, and ensure the security and reliability of communication.

[0054] In another embodiment, the session description protocol of the client includes the video encoding supported by the client, the audio encoding of the client, the audio sampling rate of the client, the intranet IP of the client, the extranet IP of the client, and the port number of the client; the session description protocol of the monitoring terminal includes the video encoding supported by the monitoring terminal, the audio encoding of the monitoring terminal, the audio sampling rate of the monitoring terminal, the intranet IP of the monitoring terminal, the extranet IP of the monitoring terminal, and the port number of the monitoring terminal.

[0055] Specifically, in streaming media communication, the Session Description Protocol (SDP) between the client and the monitoring terminal is the key to negotiate communication parameters. SDP information describes the media capabilities and network information of both parties in detail, ensuring that both parties can establish a compatible communication link.

[0056] The client's session description protocol includes the video encoding supported by the client, the audio encoding of the client, the audio sampling rate of the client, the client's intranet IP, the client's external IP, and the client's port number. The video encoding format supported by the client determines the type of video streams it can receive and send. Common video encoding formats include H.264 / AVC, H.265 / HEVC, VP8 / VP9, AV1, etc. The audio encoding format supported by the client determines the type of audio streams it can process. Common audio encoding formats include Opus, AAC (Advanced Audio Coding), PCM (Pulse Code Modulation), G.711, etc. The audio sampling rate determines the frequency range and quality of the audio signal. Common sampling rates include 8kHz, 16kHz, 44.1kHz, 48kHz, etc. The client's intranet IP is the IP address of the client in the local network, which is usually used for communication within the LAN. The client's external IP is the public IP address of the client after NAT conversion, which is used for cross-network communication. The client's port information is the port number (such as UDP port) used by the client to receive and send streaming media data.

[0057] The session description protocol of the monitoring terminal includes the video encoding supported by the monitoring terminal, the audio encoding of the monitoring terminal, the audio sampling rate of the monitoring terminal, the intranet IP of the monitoring terminal, the extranet IP of the monitoring terminal, and the port number of the monitoring terminal. The video encoding format supported by the monitoring terminal determines the type of video stream it can send. Common video encoding formats include H.264 / AVC, H.265 / HEVC, MJPEG (Motion JPEG), etc. The audio encoding format supported by the monitoring terminal determines the type of audio stream it can send. Common audio encoding formats include Opus, G.711, AAC, etc. The audio sampling rate of the monitoring terminal determines the quality of its audio signal. Common sampling rates include 8kHz, 16kHz, 44.1kHz, etc. The intranet IP of the monitoring terminal is the IP address of the monitoring terminal in the local network, which is usually used for communication within the LAN. The extranet IP of the monitoring terminal is the public IP address of the monitoring terminal after NAT conversion, which is used for cross-network communication. The port information of the monitoring terminal is the port number used by the monitoring terminal to receive and send streaming media data. The client and the monitoring terminal negotiate the supported video and audio encoding formats through SDP information to ensure compatibility between the two parties. By exchanging the internal and external network IP addresses and port numbers, the two parties can establish a direct communication link and support NAT penetration.

[0058] This embodiment also provides a data transmission method based on quantum technology. Figure 3 is a flow chart of another data transmission method based on quantum technology in this embodiment. Figure 3As shown, the process includes the following steps: Step S301, the quantum SIM card configured on the client and the monitoring terminal respectively establishes a communication connection between the client and the monitoring terminal and the quantum security shield service through quantum communication of the quantum SIM card; Step S302: Perform network authentication on the client and monitoring terminal through the quantum security shield service to complete quantum initialization of the client and monitoring terminal; Step S303: The client uses the quantum APP SDK to obtain the quantum key from the Quantum Security Shield service through the quantum channel; the monitoring terminal uses the quantum embedded SDK to obtain the quantum key from the Quantum Security Shield service through the quantum channel; Step S304: According to the data transmission requirements, the client obtains the target P2P service information from the signaling service and requests to carry the monitoring terminal ID; Step S305, the signaling service sends the same target P2P service information to the monitoring terminal; Step S306, the client and the monitoring terminal obtain the corresponding external network IP address according to the target P2P service information, and establish their own session description protocols; Step S307, exchanging the session description protocol of the client and the session description protocol of the monitoring terminal through a signaling service; Step S308: The client uses the quantum key to decrypt the received session description protocol to obtain the client's communication information; the monitoring terminal uses the quantum key to decrypt the received session description protocol to obtain the monitoring terminal's communication information; Step S309, initiating a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, so as to perform streaming media data message penetration; Step S310, after the streaming media data message is penetrated, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service.

[0059] Through the above steps S301 to S310, compared with the prior art in which the encryption key of the video stream is transmitted through the IP network, this embodiment establishes a quantum channel by pre-arranging a quantum SIM card in the client and the monitoring terminal. When the client needs to obtain the streaming media data in the device, the client first obtains the P2P service information from the signaling service. At the same time, the signaling service sends the same P2P service information to the monitoring terminal. The client uses the quantum APP SDK to obtain the quantum key from the quantum security shield service through the quantum channel. The monitoring terminal uses the quantum embedded SDK to obtain the quantum key from the quantum security shield service through the quantum channel. The client establishes a client session description protocol according to the obtained P2P service information, and the monitoring terminal establishes a monitoring terminal session description protocol according to the received P2P service information. After encrypting their respective session description protocols with their respective quantum keys, they are exchanged through the signaling service, and then their respective quantum keys are used to decrypt the received session description protocol of the other party to obtain the other party's internal and external network IP. Based on the decrypted internal and external network IP, a hole punching instruction is initiated to the port of the other end to perform message penetration. After the penetration is successful, the message interaction is performed after encryption and decryption using the quantum key, so that the client obtains the streaming media data of the monitoring terminal. By combining quantum communication, quantum communication is used to encrypt the SDP information and streaming media data of the client and monitoring terminal, ensuring the security of streaming media data transmission.

[0060] In this embodiment, a communication process of a data transmission method based on quantum technology is also provided. The client takes an APP as an example, and the monitoring terminal takes a home camera as an example. The communication process of the data transmission method based on quantum technology includes quantum key initialization, IPV4 / 6 service startup, registration and keep alive, SDP exchange, and encryption and decryption of specific communication content using quantum keys.

[0061] Figure 4 Schematic diagram of quantum key initialization communication of the data transmission method based on quantum technology in this embodiment. Figure 4 As shown, the quantum key initialization process includes: 1. Perform local settings and monitoring on the APP; 2. APP calls the Quantum APP SDK; 3. The Quantum APP SDK establishes a communication connection with the Quantum Security Shield service through the quantum channel and performs network authentication; 4. After the quantum security shield service passes the authentication, the authentication result is returned to the quantum APP SDK through the quantum channel; 5. The Quantum APP SDK returns the initialization result to the APP; 6. Monitor home cameras with this shield; 7. The home camera calls the quantum embedded SDK; 8. The quantum embedded SDK establishes a communication connection with the quantum security shield service through the quantum channel and performs network access authentication; 9. After the quantum security shield service passes the authentication, the authentication result is returned to the quantum embedded SDK through the quantum channel; 10. The Quantum Embedded SDK returns the initialization result to the home camera.

[0062] In completion Figure 4 After the quantum key is initialized, the IPV4 / 6 service is started. Figure 5 : is a schematic diagram of IPv4 / 6 service startup communication of the data transmission method based on quantum technology in this embodiment, such as Figure 5 As shown, the IPV4 / 6 service startup process includes: 11. The signaling service starts the IPV4 / 6 monitoring service; 12.P2P service starts IPV4 / 6 monitoring service; 13. The scheduling service starts the IPV4 / 6 monitoring service.

[0063] In completion Figure 5 After the IPV4 / 6 service shown is started, registration and keep-alive are performed. Figure 6 : is a schematic diagram of registration keep-alive communication of the data transmission method based on quantum technology in this embodiment, such as Figure 6 As shown, the registration keep-alive process includes: 14. The home camera registers to keep alive with the signaling service; 15. The signaling service returns a registration keep-alive response to the home camera; 16. The P2P service registers to keep alive with the scheduling service; 17. The scheduling service returns a registration keep-alive response to the P2P service.

[0064] In completion Figure 6 After the registration and keep-alive shown, P2P live broadcast is performed based on IPV4 / 6, where: Figure 7 : is a schematic diagram of SDP exchange communication of the data transmission method based on quantum technology in this embodiment, such as Figure 7 As shown, the SDP exchange process includes: 18. The APP obtains P2P service from the signaling service, and the parameter includes the camera device number (ID); 19. The signaling service authenticates the APP; 20. The signaling service obtains the P2P service with the smallest load from the scheduling service; 21. The dispatch service returns P2P service information such as P2P service IP, port number, node, etc. to the signaling service; 22. The signaling service returns P2P service information and sid to the APP; 23. APP obtains quantum key from Quantum APP SDK through sid; 24. Quantum APP SDK obtains quantum keys from the Quantum Security Shield service through the quantum channel; 25. The Quantum Security Shield service returns the quantum key to the Quantum APP SDK; 26. The quantum APP SDK returns the quantum key to the APP; 27. The signaling service sends P2P service information and SID to the home camera; 28. The home camera obtains the quantum key from the quantum embedded SDK through SID; 29. Quantum Embedded SDK obtains quantum keys from the Quantum Security Shield service through the quantum channel; 30. The Quantum Security Shield service returns the quantum key to the Quantum Embedded SDK; 31. The quantum embedded SDK returns the quantum key to the home camera; 32. The home camera obtains the local IPV4 / 6 address from the P2P service; 33. The P2P service returns the IPV4 / 6 address to the home camera; 34. APP obtains the local IPV4 / 6 address from the P2P service; 35. The P2P service returns the IPV4 / 6 address to the APP; 36. The APP initiates SDP information exchange with the signaling service, where the quantum key is used to encrypt the parameters, including: device number, audio and video information, IPV4 / 6 address, etc. 37. The signaling service sends the APP’s SDP information to the home camera; 38. Home cameras use quantum keys for decryption; 39. The home camera returns a home camera SDP response to the signaling service based on the decryption result of the APP's SDP information, where the home camera SDP information uses a quantum key to encrypt parameters, including audio and video information, IPV4 / 6, etc. 40. The signaling service returns the home camera SDP information to the APP; 41. The APP uses quantum keys to decrypt the home camera SDP information.

[0065] In completion Figure 7 After the SDP exchange shown, the specific communication content is encrypted and decrypted using quantum keys, where: Figure 8 : is a communication diagram of the data transmission method based on quantum technology of this embodiment using quantum key to encrypt and decrypt specific communication content, such as Figure 8As shown, the process of using quantum keys to encrypt and decrypt specific communication content includes: 42. The APP sends P2P communication instructions to the home camera; 43. The home camera returns a P2P communication command response to the APP; 44. The home camera sends P2P communication instructions to the APP; 45. The APP returns a P2P communication command response to the home camera; 46. ​​The APP initiates a live broadcast command to the home camera; 47. The home camera sends audio and video streams to the APP.

[0066] pass Figure 4-Figure 8 The communication process of this embodiment is based on quantum communication. The SDP information of the client and the monitoring terminal is encrypted based on the quantum key and then exchanged. The client and the monitoring terminal decrypt the received SDP information according to the quantum key issued to obtain the communication information of both parties. The hole punching operation is performed according to the decrypted communication information to achieve the penetration of streaming media data messages, thereby achieving the secure transmission of streaming media data. Among them, the SDP information and streaming media data of the client and the monitoring terminal are encrypted by quantum communication, which improves the security of streaming media data transmission.

[0067] In this embodiment, a data transmission device based on quantum technology is also provided, which is used to implement the above embodiments and preferred implementation modes, and will not be repeated hereafter. The terms "module", "unit", "subunit", etc. used below may be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0068] Fig. 9 is a block diagram of the structure of the data transmission device based on quantum technology in this embodiment. Fig. 9 As shown, the device 90 includes: an acquisition module 91, an exchange module 92, a message penetration module 93 and a data transmission module 94, wherein: An acquisition module 91 is used to acquire a session description protocol of the client and a session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted with a key issued by the quantum security shield service; The exchange module 92 is used to exchange the session description protocol of the client and the session description protocol of the monitoring terminal, so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; The message penetration module 93 is used to initiate a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, so as to perform the message penetration of the streaming media data; The data transmission module 94 is used to transmit the streaming data of the monitoring terminal to the client after the streaming data and message are penetrated, wherein the streaming data is data encrypted by the key issued by the quantum security shield service.

[0069] It should be noted that the above modules can be functional modules or program modules, and can be implemented by software or hardware. For modules implemented by hardware, the above modules can be located in the same processor; or the above modules can be located in different processors in any combination.

[0070] In this embodiment, an electronic device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0071] Optionally, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0072] Optionally, in this embodiment, the processor may be configured to perform the following steps through a computer program: S1, obtaining a session description protocol of the client and a session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted based on the quantum key issued by the quantum security shield service; S2, exchanging the session description protocol of the client and the session description protocol of the monitoring terminal, so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; S3, initiating a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, so as to perform streaming media data message penetration; S4, after the streaming media data message penetrates, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service.

[0073] It should be noted that the specific examples in this embodiment can refer to the examples described in the above embodiments and optional implementation modes, and will not be repeated in this embodiment.

[0074] In addition, in combination with the data transmission method based on quantum technology provided in the above embodiments, a storage medium may also be provided in this embodiment to implement the method. The storage medium stores a computer program; when the computer program is executed by a processor, any one of the data transmission methods based on quantum technology in the above embodiments is implemented.

[0075] It should be understood that the specific embodiments described herein are only used to explain the application, rather than to limit it. Based on the embodiments provided in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the protection scope of this application.

[0076] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0077] Obviously, the drawings are only some examples or embodiments of the present application. For ordinary technicians in the field, the present application can also be applied to other similar situations based on these drawings without creative work. In addition, it is understandable that although the work done in this development process may be complicated and lengthy, for ordinary technicians in the field, certain changes in design, manufacturing or production based on the technical content disclosed in this application are only conventional technical means and should not be regarded as insufficient content disclosed in this application.

[0078] The term "embodiment" in this application refers to a specific feature, structure or characteristic described in conjunction with the embodiment that can be included in at least one embodiment of the present application. The appearance of this phrase in various locations in the specification does not necessarily mean the same embodiment, nor does it mean that it is mutually exclusive with other embodiments and is independent or optional. It is clearly or implicitly understood by those of ordinary skill in the art that the embodiments described in this application can be combined with other embodiments without conflict.

[0079] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0080] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of patent protection. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the scope of protection of the present application. Therefore, the scope of protection of the present application shall be subject to the attached claims.

Claims

1. A data transmission method based on quantum technology, characterized in that: include: Obtaining a session description protocol of the client and a session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted based on a quantum key issued by a quantum security shield service; The session description protocol of the client and the session description protocol of the monitoring terminal are exchanged, so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; Initiating a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal to perform streaming media data message penetration; After the streaming media data message penetrates, the streaming media data of the monitoring terminal is transmitted to the client, wherein the streaming media data is data encrypted by the quantum key issued by the quantum security shield service.

2. The data transmission method based on quantum technology according to claim 1, characterized in that: The communication information of the client includes the internal and external network IP addresses and port information of the client; the communication information of the monitoring terminal includes the internal and external network IP addresses and port information of the monitoring terminal.

3. The data transmission method based on quantum technology according to claim 1, characterized in that: Before acquiring the session description protocol of the client and the session description protocol of the monitoring terminal, the method further includes: The client and the monitoring terminal are quantum initialized.

4. The data transmission method based on quantum technology according to claim 3, characterized in that: The performing quantum initialization on the client and the monitoring terminal includes: Establishing a communication connection between the client and the quantum security shield service through quantum communication of the quantum SIM card configured by the client, so that the quantum security shield service performs network access authentication on the client, obtains the authentication result of the client, and completes the quantum initialization of the client; Through the quantum communication of the quantum SIM card configured in the monitoring terminal, a communication connection between the monitoring terminal and the quantum security shield service is established, so that the quantum security shield service performs network access authentication on the monitoring terminal, obtains the network access authentication result of the monitoring terminal, and completes the quantum initialization of the monitoring terminal.

5. The data transmission method based on quantum technology according to claim 1, characterized in that: Before acquiring the session description protocol of the client and the session description protocol of the monitoring terminal, the method further includes: According to data transmission requirements, target P2P service information is sent to the client and the monitoring terminal, so that the client and the monitoring terminal obtain corresponding external network IP addresses according to the target P2P service information and establish their own session description protocols.

6. The data transmission method based on quantum technology according to claim 5, characterized in that: The basic information of the target P2P service includes the IP address, port number and node identification information of the target P2P service.

7. The data transmission method based on quantum technology according to claim 1, characterized in that: The session description protocol of the client includes the video encoding supported by the client, the audio encoding of the client, the audio sampling rate of the client, the intranet IP of the client, the extranet IP of the client and the port number of the client; the session description protocol of the monitoring terminal includes the video encoding supported by the monitoring terminal, the audio encoding of the monitoring terminal, the audio sampling rate of the monitoring terminal, the intranet IP of the monitoring terminal, the extranet IP of the monitoring terminal and the port number of the monitoring terminal.

8. A data transmission device based on quantum technology, characterized in that: include: Acquisition module, exchange module, message penetration module and data transmission module, among which, The acquisition module is used to acquire the session description protocol of the client and the session description protocol of the monitoring terminal, wherein the session description protocol of the client and the session description protocol of the monitoring terminal are obtained after being encrypted with the key issued by the quantum security shield service; The exchange module is used to exchange the session description protocol of the client and the session description protocol of the monitoring terminal, so that the client and the monitoring terminal decrypt the session description protocols received by each other to obtain the communication information of the client and the communication information of the monitoring terminal; The message penetration module is used to initiate a hole punching instruction to the client and the monitoring terminal according to the communication information of the client and the communication information of the monitoring terminal, so as to perform streaming media data message penetration; The data transmission module is used to transmit the streaming data of the monitoring terminal to the client after the streaming data message penetrates, wherein the streaming data is data encrypted by the key issued by the quantum security shield service.

9. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to run the computer program to perform the data transmission method based on quantum technology according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the data transmission method based on quantum technology described in any one of claims 1 to 7 are implemented.

Images