Transaction security protection method and device between financial institutions, equipment and medium

Abstract

The invention discloses a transaction security protection method and device between financial institutions, equipment and a medium. The method comprises the following steps: after a transaction initiation request is detected, determining a random quantum key and a symmetric encryption key shared with a transaction response system according to a randomly generated quantum state, and performing identity verification and transaction data transmission according to the keys in a transaction process; and after a transaction response request is detected, determining a random quantum key and a symmetric encryption key shared with the transaction initiation system according to a randomly generated quantum state sent by the transaction initiation system, and performing identity verification and transaction data transmission according to the keys in the transaction process. According to the embodiment of the invention, identity verification and transaction data transmission can be carried out based on the shared random quantum key and the symmetric encryption key determined before the transaction begins, transaction security protection is effectively carried out on the transaction process between financial institutions, and the data confidentiality, integrity and real-time performance of the transaction process are improved.

Description

Technical Field

[0001] The present invention relates to the field of financial technology, and in particular to a method, device, equipment and medium for protecting transaction security between financial institutions. Background Art

[0002] When two financial institutions conduct transactions between their business systems, the business systems of the two financial institutions need to authenticate each other first. After the identity verification is passed, the business system of the financial institution that initiates the transaction sends the transaction data transmission to the business system of the financial institution that responds to the transaction. The business system of the financial institution that responds to the transaction receives the transaction data and interacts with the business system of the financial institution that initiates the transaction based on the transaction data. In order to ensure that the transaction process between financial institutions proceeds normally, the transaction process needs to be securely protected.

[0003] In the related art, the commonly used transaction security protection scheme is: in the process of transactions between financial institutions, identity authentication and transaction data transmission are performed based on the keys and related information generated by traditional encryption algorithms. The transaction security protection scheme in the related art is based on the keys and related information generated by traditional encryption algorithms for transaction security protection, which is easy to crack and has great security risks, resulting in the transaction process between financial institutions being easily leaked or interrupted due to abnormal events, and the data confidentiality, integrity and real-time performance of the transaction process between financial institutions are low. Summary of the invention

[0004] The present invention provides a transaction security protection method, device, equipment and medium between financial institutions to solve the problem that the transaction security protection scheme in the related art is based on the key and related information generated by the traditional encryption algorithm for transaction security protection, which is easy to crack and has a great security risk, resulting in the transaction process between financial institutions being easily leaked or interrupted due to abnormal events, and the data confidentiality, integrity and real-time performance of the transaction process between financial institutions are low.

[0005] According to one aspect of the present invention, there is provided a transaction security protection method between financial institutions, comprising:

[0006] After detecting the protection start information, enter the transaction security protection mode;

[0007] After detecting a transaction initiation request, determining a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, storing the random quantum key and the symmetric encryption key in a hardware security module, and performing identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction response system;

[0008] After detecting a transaction response request, a random quantum key and a symmetric encryption key shared with the transaction initiation system are determined according to a randomly generated quantum state sent by the transaction initiation system of the transaction response request, the random quantum key and the symmetric encryption key are stored in a hardware security module, and during a transaction with the transaction initiation system, identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key.

[0009] According to another aspect of the present invention, there is provided a transaction security protection device between financial institutions, comprising:

[0010] A mode entry module, used to enter a transaction security protection mode after detecting protection start information;

[0011] A first protection module is used to determine, after detecting a transaction initiation request, a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, store the random quantum key and the symmetric encryption key in a hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction response system;

[0012] The second protection module is used to determine, after detecting a transaction response request, a random quantum key and a symmetric encryption key shared with the transaction initiation system according to a randomly generated quantum state sent by the transaction initiation system of the transaction response request, store the random quantum key and the symmetric encryption key in a hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction initiation system.

[0013] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0014] at least one processor;

[0015] and a memory communicatively coupled to the at least one processor;

[0016] The memory stores a computer program executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the transaction security protection method between financial institutions described in any embodiment of the present invention.

[0017] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the transaction security protection method between financial institutions described in any embodiment of the present invention when executed.

[0018] According to another aspect of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the method for protecting transaction security between financial institutions described in any embodiment of the present invention is implemented.

[0019] The technical solution of the embodiment of the present invention enters a transaction security protection mode after detecting protection start information; after detecting a transaction initiation request, determines a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, stores the random quantum key and the symmetric encryption key in a hardware security module, and performs identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of conducting transactions with the transaction response system; after detecting a transaction response request, determines a random quantum key and a symmetric encryption key shared with a transaction initiation system according to a randomly generated quantum state sent by a transaction initiation system of the transaction response request, stores the random quantum key and the symmetric encryption key in a hardware security module, and performs identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of conducting transactions with the transaction initiation system, thereby solving the problem that the transaction security protection solution in the related art performs transaction security protection based on keys and related information generated by traditional encryption algorithms, which is easy to crack and has great security risks, resulting in the transaction process between financial institutions being easily leaked or The problems of low data confidentiality, integrity and real-time performance in the transaction process between financial institutions can be solved by, before the transaction process initiated or responded to by the business system of the financial institution begins, based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction, determining the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction, and securely storing the shared random quantum key and symmetric encryption key through a hardware security module; during the transaction process initiated or responded to by the business system of the financial institution, based on the shared random quantum key and symmetric encryption key determined before the transaction begins, identity authentication and transaction data transmission can be performed; the reliability of identity authentication can be improved based on the identity authentication method combined with quantum states; the security of transaction data transmission can be improved based on the encryption method combined with quantum keys and traditional encryption algorithms, thereby effectively performing transaction security protection on the transaction process initiated or responded to by the business system of the financial institution, avoiding leakage or interruption of the transaction process initiated or responded by the business system of the financial institution due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0020] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0022] Figure 1 This is a flow chart of a transaction security protection method between financial institutions provided in Example 1 of the present invention.

[0023] Figure 2 This is a flow chart of a transaction security protection method between financial institutions provided in Embodiment 2 of the present invention.

[0024] Figure 3 This is a flow chart of a transaction security protection method between financial institutions provided in Example 3 of the present invention.

[0025] Figure 4 A schematic diagram of the structure of a transaction security protection device between financial institutions provided in Embodiment 4 of the present invention.

[0026] Figure 5 A schematic diagram of the structure of an electronic device for implementing the transaction security protection method between financial institutions according to an embodiment of the present invention. DETAILED DESCRIPTION

[0027] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0028] It should be noted that the terms "target", "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "comprise", "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0029] It should be noted that the relevant information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for display, data for analysis, etc.) involved in this disclosure are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data comply with relevant laws, regulations and standards in relevant regions.

[0030] Embodiment 1

[0031] Figure 1 This is a flow chart of a transaction security protection method between financial institutions provided in the first embodiment of the present invention. This embodiment is applicable to the case of security protection of transaction processes between financial institutions. The method can be executed by a transaction security protection device between financial institutions, which can be implemented in the form of hardware and / or software, and can be configured in the business system of the financial institution. The business system of the financial institution can be a server set up in the financial institution for processing the business of the financial institution. Figure 1 As shown, the method includes:

[0032] Step 101: After detecting the protection start information, enter the transaction security protection mode.

[0033] Optionally, the transaction security protection mode may refer to a mode in which a random quantum key and a symmetric encryption key are determined after a transaction initiation request or a transaction response request is detected, and identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key during the transaction, thereby performing security protection in the process of transactions between financial institutions in the business system of the financial institution. The protection start information may be information received by the business system of the financial institution to indicate the entry into the transaction security protection mode. After the business system of the financial institution starts to run, the relevant information and data received and generated by the business system of the financial institution may be detected. It may be detected whether the business system of the financial institution has received the protection start information, and after detecting that the business system of the financial institution has received the protection start information, the transaction security protection mode is entered.

[0034] Step 102: After detecting a transaction initiation request, determine a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request based on a randomly generated quantum state, store the random quantum key and the symmetric encryption key in a hardware security module, and perform identity authentication and transaction data transmission based on the random quantum key and the symmetric encryption key during a transaction with the transaction response system.

[0035] Optionally, the transaction initiation request may be information received by a business system of a financial institution for instructing the business system of the financial institution to initiate a designated transaction to a business system of another financial institution. The business system of the other financial institution is a transaction response system of the transaction initiation request, that is, a business system of another financial institution that needs to respond to the designated transaction initiated by the business system of the financial institution and conduct the designated transaction with the business system of the financial institution. It is possible to detect whether the business system of the financial institution has received the transaction initiation request, and after detecting that the business system of the financial institution has received the transaction initiation request, determine the random quantum key and symmetric encryption key shared with the transaction response system of the transaction initiation request based on the randomly generated quantum state.

[0036] Optionally, the random quantum key shared by the business system of the financial institution and the transaction response system of the transaction initiation request may be a quantum key obtained based on a randomly generated quantum state that can be used jointly by the business system of the financial institution and the transaction response system of the transaction initiation request. Quantum state is an abstract mathematical concept that describes the state of a quantum system, such as the polarization state of a photon or the spin state of an electron. A quantum key is a completely random digital sequence generated by quantum state transmission and quantum state measurement. Quantum keys have the characteristics of randomness, non-replicability, security, and one-time use. The quantum state generated in the embodiment of the present invention may be a quantum bit that has been specifically prepared and has a certain polarization state or spin state. The test base is an algorithm for measuring and encoding quantum states. The random quantum key in the embodiment of the present invention may be a quantum key obtained by measuring and encoding a randomly generated quantum state through a test base.

[0037] Optionally, the symmetric encryption key shared with the transaction response system of the transaction initiation request may be a symmetric encryption key that can be used by the business system of the financial institution and the transaction response system of the transaction initiation request. Symmetric encryption keys include but are not limited to: Advanced Encryption Standard (AES) keys.

[0038] Optionally, the hardware security module (HSM) of the business system of the financial institution can be a physical device used to protect and manage digital keys, certificates and other important information used by the business system of the financial institution. The hardware security module is usually used for encryption and digital signature operations.

[0039] Optionally, determining a random quantum key and a symmetric encryption key shared with the transaction response system of the transaction initiation request based on the randomly generated quantum state includes: randomly generating a quantum state, and sending the quantum state to the transaction response system through a quantum communication channel between the transaction response system, so that the transaction response system measures and encodes the quantum state through a shared test basis to obtain a shared random quantum key, and feeds back the random quantum key; obtaining the random quantum key fed back by the transaction response system; generating a symmetric encryption key shared with the transaction response system, and encrypting the symmetric encryption key through the random quantum key; and sending the encrypted symmetric encryption key to the transaction response system through a classical communication channel between the transaction response system, so that the transaction response system decrypts the encrypted symmetric encryption key according to the random quantum key to obtain the symmetric encryption key.

[0040] Therefore, before the transaction process initiated by the business system of the financial institution begins, the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction can be determined based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction.

[0041] Optionally, quantum communication channels are pre-established between the business systems of various financial institutions. The quantum communication channel can be a communication line specifically used to transmit quantum-related data such as quantum states and quantum keys between the business systems of financial institutions to ensure the secure transmission of quantum-related data such as quantum states and quantum keys. The quantum communication channel can be implemented through optical fiber or free space transmission. The quantum communication channel between the transaction response system can be a pre-established communication line for transmitting quantum-related data such as quantum states and quantum keys between the business system of a financial institution and the transaction response system. A quantum state can be randomly generated, and the randomly generated quantum state can be sent to the transaction response system through the quantum communication channel between the transaction response system.

[0042] Optionally, the shared test base can be a pre-set test base for measuring and encoding quantum states that can be used by the business system of the financial institution and the transaction response system of the transaction initiation request. The transaction response system will receive the randomly generated quantum state, measure and encode the quantum state through the shared test base, and obtain a completely random digital sequence. The obtained digital sequence is determined as the random quantum key shared by the business system of the financial institution and the transaction response system of the transaction initiation request, and then the shared random quantum key is fed back to the business system of the financial institution through the quantum communication channel between the financial institution and the business system. The random quantum key fed back by the transaction response system can be obtained, thereby obtaining the random quantum key shared by the business system of the financial institution and the transaction response system of the transaction initiation request.

[0043] Optionally, a symmetric encryption key may be randomly generated as the symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request. Then, the symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request may be encrypted by a quantum key encryption algorithm using the random quantum key shared by the business system of the financial institution and the transaction response system of the transaction initiation request to obtain the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request. The quantum key encryption algorithm may be a pre-set algorithm for encrypting data using a quantum key to obtain encrypted data.

[0044] Optionally, a classical communication channel is pre-established between the business systems of various financial institutions. The classical communication channel may be a universal communication line for transmitting data between the business systems of financial institutions. The classical communication channel between the transaction response system may be a pre-established universal communication line for transmitting data between the business system of a financial institution and the transaction response system. The encrypted symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request may be sent to the transaction response system through the classical communication channel between the transaction response system. The transaction response system will use the quantum key decryption algorithm to decrypt the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request using the random quantum key shared by the business system of the financial institution and the transaction response system of the transaction initiation request, and obtain the original symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request. The quantum key decryption algorithm may be a pre-set algorithm for decrypting data encrypted based on quantum keys using quantum keys to obtain the original data before encryption. Data encrypted based on quantum keys is data encrypted using quantum keys.

[0045] Optionally, after determining the random quantum key and symmetric encryption key shared with the transaction response system of the transaction initiation request, the determined random quantum key and symmetric encryption key may be stored in the hardware security module of the business system of the financial institution. The transaction response system will store the determined random quantum key and symmetric encryption key in the hardware security module of the transaction response system.

[0046] Optionally, in the process of conducting transactions with the transaction response system, identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key, including: after detecting the identity authentication information of the transaction response system, authenticating the transaction response system according to the digital signature and the quantum state corresponding to the random quantum key; after detecting the transaction data corresponding to the transaction response system, encrypting the transaction data corresponding to the transaction response system by means of the symmetric encryption key, and sending the encrypted transaction data to the transaction response system through a secure network channel with the transaction response system, so that the transaction response system decrypts the encrypted transaction data according to the symmetric encryption key to obtain the transaction data.

[0047] Therefore, in the transaction process initiated by the business system of a financial institution, identity authentication and transaction data transmission can be performed based on the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction determined before the transaction begins. The reliability of identity authentication can be improved based on the identity authentication method combined with the quantum state, and the security of transaction data transmission can be improved based on the encryption method combining the quantum key and the traditional encryption algorithm, thereby effectively protecting the transaction process initiated by the business system of the financial institution, avoiding the leakage or interruption of the transaction process initiated by the business system of the financial institution due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0048] Optionally, the identity authentication information of the transaction response system may be information sent by the transaction response system for identity authentication. The identity authentication information of the transaction response system may include a digital signature of the transaction response system and a quantum state corresponding to the random quantum key. The identity authentication information of the transaction response system may also include biometric information. The digital signature of the transaction response system may be a digital signature generated by the transaction response system for uniquely identifying the transaction response system. The quantum state corresponding to the random quantum key refers to a randomly generated quantum state received by the transaction response system for determining a shared random quantum key. It is possible to detect whether the business system of the financial institution has received the identity authentication information of the transaction response system sent by the transaction response system. After detecting that the business system of the financial institution has received the identity authentication information of the transaction response system sent by the transaction response system, the transaction response system is authenticated according to the digital signature and the quantum state corresponding to the random quantum key.

[0049] Optionally, the transaction response system is authenticated according to the digital signature and the quantum state corresponding to the random quantum key, including: detecting whether the digital signature in the authentication information of the transaction response system is the same as the digital signature of the transaction response system stored in the business system of the financial institution, and whether the quantum state in the authentication information of the transaction response system is the same as the randomly generated quantum state sent to the transaction response system; if the digital signature in the authentication information of the transaction response system is the same as the digital signature of the transaction response system stored in the business system of the financial institution, and the quantum state in the authentication information of the transaction response system is the same as the randomly generated quantum state sent to the transaction response system, then it is determined that the transaction response system has passed the authentication, and the first authentication pass information is stored in the authentication result file; if the digital signature in the authentication information of the transaction response system is not the same as the digital signature of the transaction response system stored in the business system of the financial institution, or the quantum state in the authentication information of the transaction response system is not the same as the randomly generated quantum state sent to the transaction response system, then it is determined that the transaction response system has not passed the authentication, and the first identity authentication failure information is stored in the authentication result file. The first authentication pass information may be information used to characterize that the transaction response system has passed the authentication. The authentication result file may be a pre-set file for storing information used to characterize whether the authentication has passed. The business system of the financial institution may determine that the transaction response system has passed the identity authentication based on the first identity authentication passed information stored in the identity authentication result file, and start the transaction with the transaction response system. The first identity authentication failed information may be information used to characterize that the transaction response system has not passed the identity authentication. The business system of the financial institution may determine that the transaction response system has not passed the identity authentication based on the first identity authentication failed information stored in the identity authentication result file, and will not start the transaction with the transaction response system.

[0050] Optionally, the transaction data corresponding to the transaction response system may refer to data generated by the business system of the financial institution and need to be sent to the transaction response system and related to the transaction process between the business system of the financial institution and the transaction response system. It is possible to detect whether the business system of the financial institution generates the transaction data corresponding to the transaction response system, and after detecting that the business system of the financial institution generates the transaction data corresponding to the transaction response system, encrypt the transaction data corresponding to the transaction response system using the symmetric encryption key, and send the encrypted transaction data to the transaction response system through a secure network channel with the transaction response system.

[0051] Optionally, after detecting that the business system of the financial institution generates transaction data corresponding to the transaction response system, the transaction data corresponding to the transaction response system may be encrypted by a symmetric encryption algorithm using a symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request to obtain encrypted transaction data corresponding to the transaction response system. The symmetric encryption algorithm may be a pre-set algorithm for encrypting data using a symmetric encryption key to obtain encrypted data.

[0052] Optionally, a secure network channel is pre-established between the business systems of various financial institutions. The secure network channel may be a communication line for transmitting encrypted transaction data between the business systems of financial institutions. The secure network channel may be implemented through a secure network protocol. Secure network protocols include, but are not limited to, Transport Layer Security (TLS) and Internet Protocol Security (IPSec). The secure network channel between the transaction response system and the transaction response system may be a pre-established communication line for transmitting encrypted transaction data between the business system of the financial institution and the transaction response system. The encrypted transaction data corresponding to the transaction response system may be sent to the transaction response system through the secure network channel between the transaction response system and the transaction response system. The transaction response system will use a symmetric decryption algorithm to decrypt the encrypted transaction data corresponding to the transaction response system using a symmetric encryption key shared by the business system of the financial institution and the transaction response system of the transaction initiation request, and obtain the original transaction data corresponding to the transaction response system. The symmetric decryption algorithm may be a pre-set algorithm for decrypting data encrypted based on a symmetric encryption key using a symmetric encryption key to obtain the original data before encryption. Data encrypted based on a symmetric encryption key is data encrypted using a symmetric encryption key.

[0053] Step 103: After detecting a transaction response request, determine a random quantum key and a symmetric encryption key shared with the transaction initiation system according to a randomly generated quantum state sent by the transaction initiation system of the transaction response request, store the random quantum key and the symmetric encryption key in a hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction initiation system.

[0054] Optionally, the transaction response request may be information received by the business system of a financial institution for instructing the business system of the financial institution to respond to a designated transaction initiated by the business system of another financial institution. The business system of the other financial institution is the transaction initiating system of the transaction response request, that is, the business system of another financial institution that initiates the designated transaction to the business system of the financial institution and conducts the designated transaction with the business system of the financial institution. It is possible to detect whether the business system of the financial institution has received the transaction response request, and after detecting that the business system of the financial institution has received the transaction response request, determine the random quantum key and symmetric encryption key shared with the transaction initiating system according to the randomly generated quantum state sent by the transaction initiating system of the transaction response request.

[0055] Optionally, the random quantum key shared by the business system of the financial institution and the transaction initiation system of the transaction response request may be a quantum key obtained based on a randomly generated quantum state that can be used jointly by the business system of the financial institution and the transaction initiation system of the transaction response request.

[0056] Optionally, the symmetric encryption key shared with the transaction initiation system of the transaction response request may be a symmetric encryption key that can be used jointly by the business system of the financial institution and the transaction initiation system of the transaction response request. Symmetric encryption keys include but are not limited to: AES keys.

[0057] Optionally, determining a random quantum key and a symmetric encryption key shared with the transaction initiation system according to the randomly generated quantum state sent by the transaction initiation system of the transaction response request, including: measuring and encoding the randomly generated quantum state sent by the transaction initiation system of the transaction response request received through a shared test basis to obtain a random quantum key shared with the transaction initiation system, and feeding back the random quantum key to the transaction initiation system; receiving an encrypted symmetric encryption key shared with the transaction initiation system sent by the transaction initiation system; wherein the encrypted symmetric encryption key shared with the transaction initiation system is encrypted according to the random quantum key; and decrypting the encrypted symmetric encryption key shared with the transaction initiation system according to the random quantum key to obtain the symmetric encryption key shared with the transaction initiation system.

[0058] Therefore, before the transaction process responded by the business system of the financial institution begins, the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction can be determined based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction.

[0059] Optionally, the transaction initiation system of the transaction response request will randomly generate a quantum state, and send the randomly generated quantum state to the business system of the financial institution through the quantum communication channel between the business system of the financial institution. It can be detected whether the business system of the financial institution has received the randomly generated quantum state sent by the transaction initiation system of the transaction response request. After detecting that the business system of the financial institution has received the randomly generated quantum state sent by the transaction initiation system of the transaction response request, the randomly generated quantum state sent by the transaction initiation system of the transaction response request is measured and encoded through the shared test base to obtain a completely random digital sequence, and the obtained digital sequence is determined as the random quantum key shared by the business system of the financial institution and the transaction initiation system of the transaction response request, and then the shared random quantum key is fed back to the transaction initiation system through the quantum communication channel between the transaction initiation system. The shared test base can be a test base for measuring and encoding quantum states that can be used by the business system of the financial institution and the transaction initiation system of the transaction response request in advance.

[0060] Optionally, the transaction initiation system of the transaction response request can obtain the random quantum key fed back, thereby obtaining the random quantum key shared by the business system of the financial institution and the transaction initiation system of the transaction response request. Then the transaction initiation system of the transaction response request will randomly generate a symmetric encryption key as the symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request. The transaction initiation system of the transaction response request can use the random quantum key shared by the business system of the financial institution and the transaction initiation system of the transaction response request through a quantum key encryption algorithm to encrypt the symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request, and obtain the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request.

[0061] Optionally, the transaction initiation system of the transaction response request may send the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request to the business system of the financial institution through a classical communication channel between the business system of the financial institution and the transaction initiation system of the transaction response request. It may be detected whether the business system of the financial institution has received the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request sent by the transaction initiation system of the transaction response request. After detecting that the business system of the financial institution has received the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request sent by the transaction initiation system of the transaction response request, the encrypted symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request is decrypted by using a quantum key decryption algorithm and a random quantum key shared by the business system of the financial institution and the transaction initiation system of the transaction response request to obtain the original symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request.

[0062] Optionally, after determining the random quantum key and symmetric encryption key shared with the transaction initiation system of the transaction response request, the determined random quantum key and symmetric encryption key may be stored in the hardware security module of the business system of the financial institution. The transaction initiation system will store the determined random quantum key and symmetric encryption key in the hardware security module of the transaction initiation system.

[0063] Optionally, in the process of conducting transactions with the transaction initiation system, identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key, including: after detecting the identity authentication information of the transaction initiation system, authenticating the transaction initiation system according to the digital signature and the quantum state corresponding to the random quantum key; after detecting the encrypted transaction data sent by the transaction initiation system, decrypting the encrypted transaction data sent by the transaction initiation system by using the symmetric encryption key to obtain the transaction data; wherein the encrypted transaction data sent by the transaction initiation system is encrypted according to the symmetric encryption key.

[0064] Therefore, during the transaction process responded by the business system of the financial institution, identity authentication and transaction data transmission can be performed based on the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction and determined before the transaction begins. The reliability of identity authentication can be improved based on the identity authentication method combined with the quantum state, and the security of transaction data transmission can be improved based on the encryption method combining the quantum key and the traditional encryption algorithm, thereby effectively performing transaction security protection on the transaction process responded by the business system of the financial institution, avoiding the leakage or interruption of the transaction process responded by the business system of the financial institution due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0065] Optionally, the identity authentication information of the transaction initiation system may be information sent by the transaction initiation system for identity authentication. The identity authentication information of the transaction initiation system includes a digital signature of the transaction initiation system and a quantum state corresponding to the random quantum key. The identity authentication information of the transaction initiation system may also include biometric information. The digital signature of the transaction initiation system may be a digital signature generated by the transaction initiation system for uniquely identifying the transaction initiation system. The quantum state corresponding to the random quantum key refers to a randomly generated quantum state sent by the transaction initiation system for determining a shared random quantum key. It is possible to detect whether the business system of a financial institution has received the identity authentication information of the transaction initiation system sent by the transaction initiation system. After detecting that the business system of the financial institution has received the identity authentication information of the transaction initiation system sent by the transaction initiation system, the transaction initiation system is authenticated according to the digital signature and the quantum state corresponding to the random quantum key.

[0066] Optionally, the transaction initiation system is authenticated according to the digital signature and the quantum state corresponding to the random quantum key, including: detecting whether the digital signature in the identity authentication information of the transaction initiation system is the same as the digital signature of the transaction initiation system stored in the business system of the financial institution, and whether the quantum state in the identity authentication information of the transaction initiation system is the same as the randomly generated quantum state used to determine the shared random quantum key; if the digital signature in the identity authentication information of the transaction initiation system is the same as the digital signature of the transaction initiation system stored in the business system of the financial institution, and the quantum state in the identity authentication information of the transaction initiation system is the same as the randomly generated quantum state used to determine the shared random quantum key, then it is determined that the transaction initiation system passes the identity authentication, and the second identity authentication information is stored in the identity authentication result file; if the digital signature in the identity authentication information of the transaction initiation system is not the same as the digital signature of the transaction initiation system stored in the business system of the financial institution, or the quantum state in the identity authentication information of the transaction initiation system is not the same as the randomly generated quantum state used to determine the shared random quantum key, then it is determined that the transaction initiation system does not pass the identity authentication, and the second identity authentication information is stored in the identity authentication result file. The second identity authentication information can be information used to characterize that the transaction initiation system passes the identity authentication. The identity authentication result file can be a pre-set file for storing information used to characterize whether the identity authentication is passed. The business system of the financial institution can determine that the transaction initiation system has passed the identity authentication based on the second identity authentication passed information stored in the identity authentication result file, and start the transaction with the transaction initiation system. The second identity authentication failed information can be information used to characterize that the transaction initiation system has not passed the identity authentication. The business system of the financial institution can determine that the transaction initiation system has not passed the identity authentication based on the second identity authentication failed information stored in the identity authentication result file, and will not start the transaction with the transaction initiation system.

[0067] Optionally, the transaction data corresponding to the business system of the financial institution may refer to data generated by the transaction initiation system that needs to be sent to the business system of the financial institution and is related to the transaction process between the business system of the financial institution and the transaction initiation system. The transaction initiation system will encrypt the transaction data corresponding to the business system of the financial institution through a symmetric encryption algorithm using a symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request, and send the encrypted transaction data corresponding to the business system of the financial institution to the business system of the financial institution through a secure network channel between the business system of the financial institution and the business system of the financial institution.

[0068] Optionally, it is possible to detect whether the business system of the financial institution has received the encrypted transaction data corresponding to the business system of the financial institution sent by the transaction initiation system. After detecting that the business system of the financial institution has received the encrypted transaction data corresponding to the business system of the financial institution sent by the transaction initiation system, a symmetric decryption algorithm is used to decrypt the encrypted transaction data corresponding to the business system of the financial institution using the symmetric encryption key shared by the business system of the financial institution and the transaction initiation system of the transaction response request to obtain the original transaction data corresponding to the business system of the financial institution.

[0069] Optionally, it also includes: when an abnormal event is monitored, outputting alarm information and executing a processing operation corresponding to the abnormal event.

[0070] As a result, during the transaction process initiated or responded to by the financial institution's business system, it is possible to respond promptly to abnormal events monitored in real time to ensure the security and normal progress of the transaction.

[0071] Optionally, abnormal events include, but are not limited to, abnormal data received by the business system of a financial institution, abnormal data sent by the business system of a financial institution, failure of identity authentication in the transaction response system, failure of identity authentication in the transaction initiation system, and interference in the quantum communication channel. Whether abnormal events occur can be monitored during the operation of the business system of a financial institution. When abnormal events are detected, alarm information is output and processing operations corresponding to the abnormal events are performed.

[0072] Optionally, the alarm information may be pre-set information for prompting the occurrence of an abnormal event. Outputting the alarm information includes: sending the alarm information to a terminal device of a target user. The target user may be a technician responsible for maintaining the business system of a financial institution. The terminal device of the target user may be a terminal device used by the target user.

[0073] Optionally, executing processing operations corresponding to the abnormal event includes: controlling the business system of the financial institution to suspend transactions; or controlling the business system of the financial institution to re-authenticate; or updating the key shared by the business system of the financial institution and the transaction response system or the transaction initiation system.

[0074] The technical solution of the embodiment of the present invention enters a transaction security protection mode after detecting protection start information; after detecting a transaction initiation request, determines a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, stores the random quantum key and the symmetric encryption key in a hardware security module, and performs identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of conducting transactions with the transaction response system; after detecting a transaction response request, determines a random quantum key and a symmetric encryption key shared with a transaction initiation system according to a randomly generated quantum state sent by a transaction initiation system of the transaction response request, stores the random quantum key and the symmetric encryption key in a hardware security module, and performs identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of conducting transactions with the transaction initiation system, thereby solving the problem that the transaction security protection solution in the related art performs transaction security protection based on keys and related information generated by traditional encryption algorithms, which is easy to crack and has great security risks, resulting in the transaction process between financial institutions being easily leaked or The problems of low data confidentiality, integrity and real-time performance in the transaction process between financial institutions can be solved by, before the transaction process initiated or responded to by the business system of the financial institution begins, based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction, determining the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction, and securely storing the shared random quantum key and symmetric encryption key through a hardware security module; during the transaction process initiated or responded to by the business system of the financial institution, based on the shared random quantum key and symmetric encryption key determined before the transaction begins, identity authentication and transaction data transmission can be performed; the reliability of identity authentication can be improved based on the identity authentication method combined with quantum states; the security of transaction data transmission can be improved based on the encryption method combined with quantum keys and traditional encryption algorithms, thereby effectively performing transaction security protection on the transaction process initiated or responded to by the business system of the financial institution, avoiding leakage or interruption of the transaction process initiated or responded by the business system of the financial institution due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0075] Optionally, the quantum communication channels between the business systems of various financial institutions can be established by quantum key distribution hardware. Quantum key distribution hardware can be a hardware device used to establish multiple independent and reliable quantum communication links between the business systems of financial institutions, redundantly encode quantum signals (quantum error correction code Shor or quantum error correction code Steane code), increase signal robustness, and generate and transmit quantum keys. Quantum key distribution hardware can improve the robustness and security of the quantum key generation and transmission processes through redundant coding and multi-path transmission, especially in the face of quantum decoherence and potential quantum attacks. Quantum decoherence is a phenomenon in quantum mechanics that describes the process by which a quantum system loses its quantum properties (such as superposition and entanglement) due to interaction with its surrounding environment.

[0076] Optionally, a quantum detector can be used to receive quantum states transmitted by the business systems of various financial institutions through multiple quantum communication channels. The characteristics of redundant coding can be used to detect errors in the received quantum states. If an error is detected, the additional quantum bits in the redundant coding are used to correct the error. Error detection and error correction of the received quantum state is achieved through a quantum error correction algorithm, which can restore the original quantum state. After successfully correcting the error, the quantum information used to determine the quantum key can be extracted from the remaining quantum bits.

[0077] Optionally, a classical communication channel can be used to coordinate information in multi-path transmission. Symmetric encryption keys on different paths can be compared, and the symmetric encryption key with the highest consistency can be selected as the final symmetric encryption key.

[0078] Optionally, the hardware security modules of the business systems of various financial institutions can use the stored quantum keys as seeds or auxiliary information to generate symmetric encryption keys. The generated symmetric encryption keys are used for actual transaction encryption. The hardware security module securely stores quantum keys and symmetric encryption keys to ensure that quantum keys and symmetric encryption keys are not accessed by unauthorized persons. The life cycle of the hardware security module key includes generation, storage, use, update, and destruction. The hardware security module can monitor all key usage activities of the business systems of financial institutions and record detailed audit logs to facilitate detection and response to any abnormal behavior. The hardware security modules of the business systems of various financial institutions provide a secure environment to store and manage keys generated by quantum key distribution technology, while ensuring the security and integrity of the symmetric encryption keys used in the transaction process, which not only improves the security of inter-bank transactions, but also meets regulatory and compliance requirements.

[0079] Embodiment 2

[0080] Figure 2The flowchart of a transaction security protection method between financial institutions provided by the second embodiment of the present invention. The embodiment of the present invention can be combined with each optional solution in one or more of the above embodiments. Figure 2 As shown, the method includes:

[0081] Step 201: After detecting the protection start information, enter the transaction security protection mode.

[0082] Step 202: After detecting the transaction initiation request, randomly generate a quantum state, and send the quantum state to the transaction response system through the quantum communication channel between the transaction initiation request and the transaction response system, so that the transaction response system measures and encodes the quantum state through a shared test basis, obtains a shared random quantum key, and feeds back the random quantum key.

[0083] Step 203: Obtain the random quantum key fed back by the transaction response system.

[0084] Step 204: Generate a symmetric encryption key shared with the transaction response system, and encrypt the symmetric encryption key using the random quantum key.

[0085] Step 205: Send the encrypted symmetric encryption key to the transaction response system through the classical communication channel between the transaction response system and the transaction response system, so that the transaction response system decrypts the encrypted symmetric encryption key according to the random quantum key to obtain the symmetric encryption key.

[0086] Step 206: Store the random quantum key and the symmetric encryption key in a hardware security module.

[0087] Step 207: After detecting the identity authentication information of the transaction response system, authenticate the transaction response system according to the digital signature and the quantum state corresponding to the random quantum key.

[0088] Step 208: After detecting the transaction data corresponding to the transaction response system, encrypt the transaction data corresponding to the transaction response system by using the symmetric encryption key, and send the encrypted transaction data to the transaction response system through a secure network channel between the transaction response system and the transaction response system, so that the transaction response system decrypts the encrypted transaction data according to the symmetric encryption key to obtain the transaction data.

[0089] The technical solution of the embodiment of the present invention can determine the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction before the transaction process initiated by the business system of the financial institution begins, and securely store the shared random quantum key and symmetric encryption key through a hardware security module. During the transaction process initiated by the business system of the financial institution, identity authentication and transaction data transmission can be performed based on the shared random quantum key and symmetric encryption key determined before the transaction begins. The reliability of identity authentication can be improved based on the identity authentication method combined with the quantum state. The security of transaction data transmission can be improved based on the encryption method combined with the quantum key and the traditional encryption algorithm, thereby effectively performing transaction security protection on the transaction process initiated by the business system of the financial institution, avoiding the leakage or interruption of the transaction process initiated by the business system of the financial institution due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0090] Embodiment 3

[0091] Figure 3 The flowchart of a transaction security protection method between financial institutions provided by the third embodiment of the present invention. The embodiment of the present invention can be combined with each optional solution in one or more of the above embodiments. Figure 3 As shown, the method includes:

[0092] Step 301: After detecting the protection start information, enter the transaction security protection mode.

[0093] Step 302: After detecting the transaction response request, the randomly generated quantum state sent by the transaction initiation system of the received transaction response request is measured and encoded through a shared test basis to obtain a random quantum key shared with the transaction initiation system, and the random quantum key is fed back to the transaction initiation system.

[0094] Step 303: Receive the encrypted symmetric encryption key shared with the transaction initiating system and sent by the transaction initiating system.

[0095] The encrypted symmetric encryption key shared with the transaction initiation system is encrypted based on the random quantum key.

[0096] Step 304: Decrypt the encrypted symmetric encryption key shared with the transaction initiation system according to the random quantum key to obtain the symmetric encryption key shared with the transaction initiation system.

[0097] Step 305: Store the random quantum key and the symmetric encryption key in a hardware security module.

[0098] Step 306: After detecting the identity authentication information of the transaction initiating system, authenticate the transaction initiating system according to the digital signature and the quantum state corresponding to the random quantum key.

[0099] Step 307: After detecting the encrypted transaction data sent by the transaction initiation system, decrypt the encrypted transaction data sent by the transaction initiation system using the symmetric encryption key to obtain the transaction data.

[0100] The encrypted transaction data sent by the transaction initiation system is encrypted according to the symmetric encryption key.

[0101] The technical solution of the embodiment of the present invention can determine the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction before the transaction process to which the business system of the financial institution responds begins, and securely store the shared random quantum key and symmetric encryption key through a hardware security module. During the transaction process to which the business system of the financial institution responds, based on the shared random quantum key and symmetric encryption key determined before the transaction begins, identity authentication and transaction data transmission can be performed. The reliability of identity authentication can be improved based on the identity authentication method combined with the quantum state. The security of transaction data transmission can be improved based on the encryption method combined with the quantum key and the traditional encryption algorithm, thereby effectively performing transaction security protection on the transaction process to which the business system of the financial institution responds, avoiding leakage or interruption of the transaction process to which the business system of the financial institution responds due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0102] Embodiment 4

[0103] Figure 4 This is a schematic diagram of the structure of a transaction security protection device between financial institutions provided by the fourth embodiment of the present invention. The device can be configured in an electronic device. Figure 4 As shown, the device includes: a mode entry module 401 , a first protection module 402 and a second protection module 403 .

[0104] Among them, the mode entry module 401 is used to enter the transaction security protection mode after detecting the protection start information; the first protection module 402 is used to determine the random quantum key and the symmetric encryption key shared with the transaction response system of the transaction initiation request according to the randomly generated quantum state after detecting the transaction initiation request, store the random quantum key and the symmetric encryption key in the hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of trading with the transaction response system; the second protection module 403 is used to determine the random quantum key and the symmetric encryption key shared with the transaction initiation system according to the randomly generated quantum state sent by the transaction initiation system of the transaction response request after detecting the transaction response request, store the random quantum key and the symmetric encryption key in the hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of trading with the transaction initiation system.

[0105] The technical solution of the embodiment of the present invention enters a transaction security protection mode after detecting protection start information; after detecting a transaction initiation request, determines a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, stores the random quantum key and the symmetric encryption key in a hardware security module, and performs identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of conducting transactions with the transaction response system; after detecting a transaction response request, determines a random quantum key and a symmetric encryption key shared with a transaction initiation system according to a randomly generated quantum state sent by a transaction initiation system of the transaction response request, stores the random quantum key and the symmetric encryption key in a hardware security module, and performs identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key in the process of conducting transactions with the transaction initiation system, thereby solving the problem that the transaction security protection solution in the related art performs transaction security protection based on keys and related information generated by traditional encryption algorithms, which is easy to crack and has great security risks, resulting in the transaction process between financial institutions being easily leaked or The problems of low data confidentiality, integrity and real-time performance in the transaction process between financial institutions can be solved by, before the transaction process initiated or responded to by the business system of the financial institution begins, based on the randomly generated quantum state and the data interaction between the business systems of the two financial institutions conducting the transaction, determining the random quantum key and symmetric encryption key shared by the business systems of the two financial institutions conducting the transaction, and securely storing the shared random quantum key and symmetric encryption key through a hardware security module; during the transaction process initiated or responded to by the business system of the financial institution, based on the shared random quantum key and symmetric encryption key determined before the transaction begins, identity authentication and transaction data transmission can be performed; the reliability of identity authentication can be improved based on the identity authentication method combined with quantum states; the security of transaction data transmission can be improved based on the encryption method combined with quantum keys and traditional encryption algorithms, thereby effectively performing transaction security protection on the transaction process initiated or responded to by the business system of the financial institution, avoiding leakage or interruption of the transaction process initiated or responded by the business system of the financial institution due to abnormal events, and improving the data confidentiality, integrity and real-time performance of the transaction process between financial institutions.

[0106] In an optional implementation of the embodiment of the present invention, optionally, when the first protection module 402 performs the operation of determining the random quantum key and the symmetric encryption key shared with the transaction response system of the transaction initiation request according to the randomly generated quantum state, it is specifically used to: randomly generate a quantum state, and send the quantum state to the transaction response system through the quantum communication channel between the transaction response system, so that the transaction response system measures and encodes the quantum state through a shared test basis to obtain a shared random quantum key, and feeds back the random quantum key; obtains the random quantum key fed back by the transaction response system; generates a symmetric encryption key shared with the transaction response system, and encrypts the symmetric encryption key by the random quantum key; and sends the encrypted symmetric encryption key to the transaction response system through the classical communication channel between the transaction response system, so that the transaction response system decrypts the encrypted symmetric encryption key according to the random quantum key to obtain the symmetric encryption key.

[0107] In an optional implementation of an embodiment of the present invention, optionally, when the first protection module 402 performs the operation of identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction response system, it is specifically used to: after detecting the identity authentication information of the transaction response system, authenticate the transaction response system according to the digital signature and the quantum state corresponding to the random quantum key; after detecting the transaction data corresponding to the transaction response system, encrypt the transaction data corresponding to the transaction response system by means of the symmetric encryption key, and send the encrypted transaction data to the transaction response system through a secure network channel with the transaction response system, so that the transaction response system decrypts the encrypted transaction data according to the symmetric encryption key to obtain the transaction data.

[0108] In an optional implementation of an embodiment of the present invention, optionally, when the second protection module 403 performs the operation of determining the random quantum key and the symmetric encryption key shared with the transaction initiation system according to the randomly generated quantum state sent by the transaction initiation system of the transaction response request, it is specifically used to: measure and encode the randomly generated quantum state sent by the transaction initiation system of the transaction response request received through a shared test basis to obtain the random quantum key shared with the transaction initiation system, and feed back the random quantum key to the transaction initiation system; receive the encrypted symmetric encryption key shared with the transaction initiation system sent by the transaction initiation system; wherein the encrypted symmetric encryption key shared with the transaction initiation system is encrypted according to the random quantum key; and decrypt the encrypted symmetric encryption key shared with the transaction initiation system according to the random quantum key to obtain the symmetric encryption key shared with the transaction initiation system.

[0109] In an optional implementation of an embodiment of the present invention, optionally, when the second protection module 403 performs the operation of identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction initiation system, it is specifically used to: after detecting the identity authentication information of the transaction initiation system, authenticate the transaction initiation system according to the digital signature and the quantum state corresponding to the random quantum key; after detecting the encrypted transaction data sent by the transaction initiation system, decrypt the encrypted transaction data sent by the transaction initiation system by using the symmetric encryption key to obtain the transaction data; wherein the encrypted transaction data sent by the transaction initiation system is encrypted according to the symmetric encryption key.

[0110] In an optional implementation of an embodiment of the present invention, optionally, the transaction security protection device between financial institutions also includes: an exception processing module, which is used to output alarm information and execute processing operations corresponding to the abnormal event when an abnormal event is detected.

[0111] The transaction security protection device between financial institutions provided in the embodiment of the present invention can execute the transaction security protection method between financial institutions provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0112] Embodiment 5

[0113] Figure 5A schematic diagram of the structure of an electronic device 10 that can be used to implement the transaction security protection method between financial institutions of an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, electronic devices, blade electronic devices, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0114] like Figure 5 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0115] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0116] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a transaction security protection method between financial institutions.

[0117] In some embodiments, the transaction security protection method between financial institutions can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit. In some embodiments, part or all of the computer program can be loaded and / or installed on a heterogeneous hardware accelerator via a ROM and / or a communication unit. When the computer program is loaded into RAM and executed by a processor, one or more steps of the transaction security protection method between financial institutions described above can be performed. Alternatively, in other embodiments, the processor can be configured to execute the transaction security protection method between financial institutions by any other appropriate means (e.g., by means of firmware).

[0118] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0119] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or electronic device.

[0120] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0121] To provide interaction with a user, the systems and techniques described herein may be implemented on a heterogeneous hardware accelerator having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and pointing device (e.g., a mouse or trackball) through which a user can provide input to the heterogeneous hardware accelerator. Other types of devices may also be used to provide interaction with a user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0122] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data electronic device), or a computing system that includes middleware components (e.g., an application electronic device), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0123] The computing system may include a client and an electronic device. The client and the electronic device are generally remote from each other and usually interact through a communication network. The relationship between the client and the electronic device is generated by computer programs running on corresponding computers and having a client-electronic device relationship with each other. The electronic device may be a cloud electronic device, also known as a cloud computing electronic device or a cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0124] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0125] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A transaction security protection method between financial institutions, characterized in that: include: After detecting the protection start information, enter the transaction security protection mode; After detecting a transaction initiation request, determining a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, storing the random quantum key and the symmetric encryption key in a hardware security module, and performing identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction response system; After detecting a transaction response request, a random quantum key and a symmetric encryption key shared with the transaction initiation system are determined according to a randomly generated quantum state sent by the transaction initiation system of the transaction response request, the random quantum key and the symmetric encryption key are stored in a hardware security module, and during a transaction with the transaction initiation system, identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key.

2. The transaction security protection method between financial institutions according to claim 1, characterized in that: Determining a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to the randomly generated quantum state, including: Randomly generate a quantum state, and send the quantum state to the transaction response system through a quantum communication channel between the transaction response system and the transaction response system, so that the transaction response system measures and encodes the quantum state through a shared test basis to obtain a shared random quantum key, and feeds back the random quantum key; Acquire the random quantum key fed back by the transaction response system; generating a symmetric encryption key shared with the transaction response system, and encrypting the symmetric encryption key by using the random quantum key; The encrypted symmetric encryption key is sent to the transaction response system through a classical communication channel with the transaction response system, so that the transaction response system decrypts the encrypted symmetric encryption key according to the random quantum key to obtain the symmetric encryption key.

3. The transaction security protection method between financial institutions according to claim 2, characterized in that: In the process of conducting transactions with the transaction response system, identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key, including: After detecting the identity authentication information of the transaction response system, authenticating the transaction response system according to the digital signature and the quantum state corresponding to the random quantum key; After the transaction data corresponding to the transaction response system is detected, the transaction data corresponding to the transaction response system is encrypted by using the symmetric encryption key, and the encrypted transaction data is sent to the transaction response system through a secure network channel between the transaction response system and the transaction response system, so that the transaction response system decrypts the encrypted transaction data according to the symmetric encryption key to obtain the transaction data.

4. The transaction security protection method between financial institutions according to claim 1, characterized in that: Determining a random quantum key and a symmetric encryption key shared with the transaction initiation system according to a randomly generated quantum state sent by the transaction initiation system of the transaction response request, including: Measuring and encoding the randomly generated quantum state sent by the transaction initiation system of the received transaction response request through the shared test basis to obtain a random quantum key shared with the transaction initiation system, and feeding back the random quantum key to the transaction initiation system; Receiving the encrypted symmetric encryption key shared with the transaction initiation system sent by the transaction initiation system; wherein the encrypted symmetric encryption key shared with the transaction initiation system is encrypted according to the random quantum key; The encrypted symmetric encryption key shared with the transaction initiation system is decrypted according to the random quantum key to obtain the symmetric encryption key shared with the transaction initiation system.

5. The transaction security protection method between financial institutions according to claim 4 is characterized in that: In the process of conducting a transaction with the transaction initiation system, identity authentication and transaction data transmission are performed according to the random quantum key and the symmetric encryption key, including: After detecting the identity authentication information of the transaction initiation system, authenticating the transaction initiation system according to the digital signature and the quantum state corresponding to the random quantum key; After detecting the encrypted transaction data sent by the transaction initiation system, the encrypted transaction data sent by the transaction initiation system is decrypted by using the symmetric encryption key to obtain the transaction data; wherein the encrypted transaction data sent by the transaction initiation system is encrypted according to the symmetric encryption key.

6. The transaction security protection method between financial institutions according to claim 1, further comprising: When an abnormal event is detected, an alarm message is output and a processing operation corresponding to the abnormal event is performed.

7. A transaction security protection device between financial institutions, characterized in that: include: A mode entry module is used to enter a transaction security protection mode after detecting protection start information; A first protection module is used to determine, after detecting a transaction initiation request, a random quantum key and a symmetric encryption key shared with a transaction response system of the transaction initiation request according to a randomly generated quantum state, store the random quantum key and the symmetric encryption key in a hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction response system; The second protection module is used to determine, after detecting a transaction response request, a random quantum key and a symmetric encryption key shared with the transaction initiation system according to a randomly generated quantum state sent by the transaction initiation system of the transaction response request, store the random quantum key and the symmetric encryption key in a hardware security module, and perform identity authentication and transaction data transmission according to the random quantum key and the symmetric encryption key during a transaction with the transaction initiation system.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively coupled to the at least one processor; Wherein, the memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the transaction security protection method between financial institutions as described in any one of claims 1-6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the transaction security protection method between financial institutions according to any one of claims 1 to 6 when executed.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method for protecting transaction security between financial institutions according to any one of claims 1 to 6 is implemented.

Images