Method for integrating quantum encryption communication into law enforcement recorder

Abstract

The invention provides a method for integrating quantum encryption communication into a law enforcement recorder, and the quantum encryption communication law enforcement recorder provides a password service calling interface for a terminal application through a terminal software development kit (SDK). Application programs of the mobile terminal and various Internet of Things terminals establish a security channel of a security medium and a quantum security service platform through a standard API interface program of a terminal software development kit (SDK), and identity authentication is carried out on a quantum security service mobile engine. The functions of high-definition video recording, audio capturing, data storage, remote transmission and the like of a traditional law enforcement recorder are combined, and meanwhile the quantum encryption communication technology is integrated, so that confidentiality, integrity and non-tampering performance of law enforcement data are ensured. The quantum security TF card is embedded in the terminal equipment through the password service platform, and a small amount of keys are updated, so that equipment upgrading is completed with lower cost, quantum secure communication is realized, and the security level of data transmission is remarkably improved.

Description

Technical Field

[0001] The present invention relates to the technical field of quantum encryption communication, and in particular to a method for integrating quantum encryption communication into a law enforcement recorder. Background Art

[0002] Law enforcement cameras provide law enforcement officers with valuable evidence resources by capturing video and audio in real time. These records play a key role in investigating crimes, handling disputes, and resolving disputes, helping to stabilize social order and calm public sentiment. However, although law enforcement cameras based on traditional communication encryption technology ensure the security of information to a certain extent, they are not invulnerable and still have the risk of being illegally accessed and cracked.

[0003] The encryption methods used in existing law enforcement recorders have limitations. These limitations are mainly reflected in the following aspects:

[0004] (1) Publicity of encryption algorithms: Since encryption algorithms are usually public, the overall security of the system is highly dependent on the confidentiality of the key. This means that once the key is leaked, the security of the entire system will be seriously threatened.

[0005] (2) Risk of key leakage: If the key is stolen during the transmission or storage of the key, the security of the entire communication process will be immediately destroyed. This will not only lead to the leakage of sensitive information, but may also cause a series of serious security consequences. Summary of the invention

[0006] In view of the shortcomings of the prior art, the purpose of the present invention is to provide a method of integrating quantum encryption communication into law enforcement recorders to solve the problems raised in the above-mentioned background technology. The present invention combines the high-definition video recording, audio capture, data storage and remote transmission functions of traditional law enforcement recorders, and incorporates quantum encryption communication technology to ensure the confidentiality, integrity and non-tamperability of law enforcement data.

[0007] In order to achieve the above-mentioned purpose, the present invention is implemented through the following technical scheme: a method of integrating quantum encryption communication into a law enforcement recorder, in which the quantum encryption communication law enforcement recorder provides a cryptographic service calling interface for terminal applications through a terminal software development kit SDK, and the application programs of mobile terminals and various Internet of Things terminals establish a secure channel with secure media and a quantum security service platform through the standard API interface program of the terminal software development kit SDK, and perform identity authentication in the quantum security service mobile engine.

[0008] Furthermore, the plaintext data generated by the terminal device enters the secure medium through the terminal software development kit SDK and is encrypted inside the secure terminal module.

[0009] Furthermore, it also includes a commercial key authentication TF card, and each TF card is bound to a quantum security law enforcement recorder. The quantum security TF card is bound to the quantum security law enforcement recorder according to the hardware feature code. At the same time, the quantum security secret service platform is used to pre-fill the quantum security TF card and quantum security U shield with the negotiated key.

[0010] Furthermore, it also includes data collection and encryption processing. The law enforcement recorder is equipped with a high-definition camera and a microphone to collect video and audio information on the scene. When the user inserts the quantum secure TF card into the law enforcement recorder, when the law enforcement recorder A sends a communication signal to the secret service platform to apply for communication with B, the secret service platform will encrypt the generated session key through the pre-injected negotiation key in A and B, and send the session key to A and B respectively.

[0011] Furthermore, an encryption method of "one industry, one key" is adopted, and the collected encrypted data is saved in the server at the same time.

[0012] Furthermore, it also includes secure processing of data transmission. During the data transmission process, all data exists in ciphertext form, and the "one-time one-key" method is used to ensure that even if the data is intercepted during the transmission process, it cannot be deciphered, thereby ensuring the absolute security of data transmission.

[0013] Furthermore, it also includes the background data processing and the information interaction process between the law enforcement recorder: after inserting the quantum security U shield, the background command center obtains the session key of the encrypted data through the secret service platform to decrypt the encrypted data, realizing real-time encryption and decryption of data, so that law enforcement personnel can view the on-site data in a timely manner.

[0014] Furthermore, it also includes a data storage and backup module. The law enforcement recorder has a built-in large-capacity storage space for recording law enforcement activities for a long time, and supports automatic data backup function to ensure that data will not be lost due to equipment failure.

[0015] Furthermore, it also includes a quantum security service platform and a quantum security service mobile engine. The quantum security service platform provides quantum key services for the entire system. The quantum security service mobile engine is the core control and management software of the entire quantum security service platform. It provides key services for mobile terminals and other devices based on quantum random numbers or quantum key distribution networks and key system exchange cipher machines, supporting users to achieve secure communications and other services.

[0016] Furthermore, when the law enforcement recorder sends a signal of "requesting to communicate with the background command center" to the quantum security service platform, the quantum security service platform will use the unique hardware feature code of the TF card and U shield to verify the identity of the person making the request.

[0017] Beneficial effects of the present invention:

[0018] 1. The method of integrating quantum encryption communication into law enforcement recorders embeds a quantum security TF card in the terminal device through a cryptographic service platform and performs a small amount of key updates. This can complete the equipment upgrade at a low cost, thereby realizing quantum secure communication.

[0019] 2. The method of integrating quantum encryption communication into law enforcement recorders combines the high-definition video recording, audio capture, data storage and remote transmission functions of traditional law enforcement recorders, and integrates quantum encryption communication technology to ensure the confidentiality, integrity and non-tamperability of law enforcement data. Security is significantly improved, and the integration of quantum communication technology has significantly improved the security level of data transmission.

[0020] 3. The method of integrating quantum encryption communication into law enforcement recorders does not interfere with the user experience. The usage of the upgraded device remains unchanged, and users can hardly feel any changes during use, achieving a seamless upgrade. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 This is a schematic diagram of the structure of the quantum security service platform in the present invention;

[0022] Figure 2 This is a flow chart of the quantum security service platform combined with the law enforcement recorder in the present invention. DETAILED DESCRIPTION

[0023] In order to make the technical means, creative features, objectives and effects achieved by the present invention easy to understand, the present invention is further explained below in conjunction with specific implementation methods.

[0024] See also Figure 1 to Figure 2 The present invention provides the following technical solutions: a method for integrating quantum encryption communication into a law enforcement recorder, which combines the high-definition video recording, audio capture, data storage and remote transmission functions of a traditional law enforcement recorder, and integrates quantum encryption communication technology to ensure the confidentiality, integrity and non-tamperability of law enforcement data, specifically including the following contents:

[0025] Commercial key certified TF card: "One card, one machine". The quantum security TF card is bound to the quantum security law enforcement recorder according to the hardware feature code. At the same time, the quantum security secret service platform is used to pre-fill the quantum security TF card and quantum security U shield with the negotiated key.

[0026] Data collection and encryption: The law enforcement recorder is equipped with a high-definition camera and microphone to collect video and audio information on the scene. When the user inserts the quantum secure TF card into the law enforcement recorder, when the law enforcement recorder A sends a signal to the secret service platform: "I want to communicate with B", the secret service platform will encrypt the generated session key through the pre-filled negotiation key in A and B, and send the session key to A and B respectively, realizing the "one industry, one key" encryption method, and save the collected encrypted data to the server at the same time.

[0027] Data transmission security: During the data transmission process, all data exists in ciphertext form, and the "one-time one-key" method is used to ensure that even if the data is intercepted during the transmission process, it cannot be deciphered, ensuring the absolute security of data transmission.

[0028] Information interaction between background data processing and law enforcement recorders: After inserting the quantum security U-shield, the background command center obtains the session key of the encrypted data through the secret service platform to decrypt the encrypted data, realizing real-time encryption and decryption of data, allowing law enforcement personnel to view on-site data in a timely manner.

[0029] Anti-interference and durability: The design of the quantum security law enforcement recorder takes into account the particularity of the law enforcement environment. It has anti-interference and durability, and can work stably in various harsh environments.

[0030] Data storage and backup: The law enforcement recorder has a large storage space and can record law enforcement activities for a long time. At the same time, it supports automatic data backup to ensure that data will not be lost due to equipment failure.

[0031] In this embodiment, the quantum encryption communication law enforcement recorder provides a cryptographic service call interface for terminal applications through the terminal software development kit SDK. The application programs of mobile terminals and various IoT terminals establish a secure channel with the secure medium and the quantum security service platform through the standard API interface program of the terminal software development kit SDK, and perform identity authentication in the quantum security service mobile engine. The plaintext data generated by the terminal device enters the secure medium through the terminal software development kit SDK and is encrypted inside the secure terminal module. Mobile communication scenarios, that is, the occasions of "calling" and "called". It is generally used for the needs of two terminals to share business keys, and can also be used for terminals and servers to share business keys. If it is between terminals, both parties can be callers and called. If the mobile communication scenario is used between the terminal and the server, the terminal must be the caller and the server must be the called. For the secret service platform, it must first receive the application of the calling end and then the application of the called end to ensure that the key distribution is successful. Therefore, the business side should synchronize itself to ensure this, and it cannot just let the calling end send an application to the secret service platform first, and the called end then send an application to the secret service platform. Due to the uncertainty of network conditions, if the application data of the called party arrives at the secret service platform first, the application will fail. Therefore, the user should ensure that the calling party has successfully obtained the session key before the called party initiates the session key application. The service type (businessType) of the calling and called parties should be the same. The main difference between Secret Talk (service type = 1) and Secret Letter (service type = 2) is that the platform has a shorter storage time for the service key of the Secret Talk service. If the calling party applies for the key but the called party does not apply for it, the secret service platform will destroy the stored session key after a period of time, and the called party will fail to apply again. The key of the Secret Letter service will be retained for a long time. If the session key needs to be shared between two terminals, only 1 or 2 can be selected for service type. When the terminal and the server use the mobile communication scenario, only VPN (service type = 3) mode can be selected. And the terminal must be the calling party and the server must be the called party, otherwise the application for the service key will fail. In VPN mode, the session key stored by the secret service platform will not be retained for a long time. The service session ID (appSessionID) is a string agreed upon by both parties and is used to distinguish each key sharing process between the two communicating parties. After receiving the application, the secret service platform determines that it is the same key application based on the same service session ID reported by the caller and the called party. Therefore, if you do not want to apply for the same key, the appSessionID should not be the same for each key application. If the service type is 2 (secret mode), the decryption end can deliberately use this feature to achieve the need to obtain the same session key multiple times through the same appSessionID. The following table describes the differences between the three service types:

[0032] Table 1: Differences between three different types of business

[0033]

[0034] In this embodiment, the secret service platform and SDK do not interfere with the negotiation and generation process of the appSessionID of the calling and called parties, which is a matter at the business level. The user can generate one party and send it to the other party, or agree to use the business session ID that comes with the current specific business (such as sip phone), but please note that the maximum length cannot exceed 32 characters. If the business key applied for is to be used directly to encrypt and decrypt business data, then please pass in 16 (unit: bytes) for the session key length applied. The peer account (peerAppInfo) passes in the information of the peer, including the app_type and account number of the peer, and cannot pass in the local account.

[0035] The basic principles and main features of the present invention and the advantages of the present invention are shown and described above. For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic characteristics of the present invention.

[0036] In addition, it should be understood that although the present specification is described according to implementation modes, not every implementation mode contains only one independent technical solution. This description of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment may also be appropriately combined to form other implementation modes that can be understood by those skilled in the art.

Claims

1. A method for integrating quantum encryption communication into a law enforcement recorder, characterized in that: The quantum encryption communication law enforcement recorder provides a cryptographic service calling interface for terminal applications through the terminal software development kit SDK. The applications of mobile terminals and various IoT terminals establish a secure channel with secure media and quantum security service platform through the standard API interface program of the terminal software development kit SDK, and perform identity authentication in the quantum security service mobile engine.

2. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: The plaintext data generated by the terminal device enters the secure medium through the terminal software development kit SDK and is encrypted inside the secure terminal module.

3. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: It also includes a commercial key certified TF card, and each TF card is bound to a quantum security law enforcement recorder. The quantum security TF card is bound to the quantum security law enforcement recorder according to the hardware feature code. At the same time, the quantum security secret service platform is used to pre-fill the quantum security TF card and quantum security U shield with the negotiated key.

4. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: It also includes data collection and encryption processing. The law enforcement recorder is equipped with a high-definition camera and a microphone to collect video and audio information on the scene. When the user inserts the quantum secure TF card into the law enforcement recorder, when the law enforcement recorder A sends a communication signal to the secret service platform to apply for communication with B, the secret service platform will encrypt the generated session key through the pre-filled negotiation key in A and B, and send the session key to A and B respectively.

5. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 2, characterized in that: The encryption method of "one industry, one key" is adopted, and the collected encrypted data is saved in the server.

6. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: It also includes data transmission security processing. During the data transmission process, all data exists in ciphertext form, and the "one-time one-key" method is used to ensure that even if the data is intercepted during the transmission process, it cannot be deciphered, thereby ensuring the absolute security of data transmission.

7. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: It also includes the background data processing and the information interaction process between the law enforcement recorders: after inserting the quantum security U shield, the background command center obtains the session key of the encrypted data through the secret service platform to decrypt the encrypted data, realizing real-time encryption and decryption of the data, so that law enforcement personnel can view the on-site data in a timely manner.

8. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: It also includes a data storage and backup module. The law enforcement recorder has a built-in large-capacity storage space for recording law enforcement activities for a long time, and supports automatic data backup function to ensure that data will not be lost due to equipment failure.

9. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 1, characterized in that: It also includes a quantum security service platform and a quantum security service mobile engine. The quantum security service platform provides quantum key services for the entire system. The quantum security service mobile engine is the core control and management software of the entire quantum security service platform. It provides key services for mobile terminals and other devices based on quantum random numbers or quantum key distribution networks and key system exchange cipher machines, supporting users to achieve secure communications and other services.

10. The method of integrating quantum encryption communication into a law enforcement recorder according to claim 9, characterized in that: When the law enforcement recorder sends a "request to communicate with the background command center" signal to the quantum security service platform, the quantum security service platform uses the unique hardware feature code of the TF card and U shield to verify the identity of the requester.

Images