Method for realizing encryption and decryption of network data message by quantum distribution key

Abstract

The invention relates to the technical field of network security, and discloses a method for realizing encryption and decryption of a network data message through a quantum distribution key, and the method comprises the following steps: sharing a quantum entanglement state between a sender and a receiver through a quantum communication channel, and generating a shared quantum key through quantum measurement; in a shared quantum key generation process, a quantum entanglement swapping method is used to ensure that a consistent key is generated between a sender and a receiver; the quantum bits are coded through a quantum time coding method, and the measurement time sequence of the quantum bits is adjusted; and the sender encrypts the network data message to be transmitted according to the generated quantum key. According to the technical scheme, quantum key distribution and a classic encryption algorithm are combined, the efficiency of encryption and decryption processes is improved while the key generation safety is guaranteed, potential safety hazards possibly existing in the aspect of key management of a classic encryption method are solved, and higher confidentiality of data transmission is guaranteed.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a method for implementing encryption and decryption of network data messages using quantum distributed keys. Background Art

[0002] With the continuous development of information technology, data encryption and transmission security have become core issues in various communication systems; especially when it comes to the transmission of sensitive data, how to ensure that the data is not stolen or tampered with has always been a difficult problem faced by the field of network security; existing encryption methods mainly rely on classical encryption algorithms, such as AES, DES, etc. These methods have advantages in encryption and decryption efficiency, but there are still major loopholes in key management and security. In addition, with the continuous development of quantum computing, quantum key distribution (QKD) technology has gradually been proposed and applied to solve the key transmission security problems existing in classical encryption algorithms.

[0003] Traditional encryption methods rely on symmetric key encryption algorithms (such as AES and DES). Although the encryption efficiency is high, there are obvious loopholes in key management and distribution. Traditional key exchange protocols, such as RSA and Diffie-Hellman, are vulnerable to man-in-the-middle attacks and cannot ensure the security of keys during transmission. Even with the use of quantum key distribution technology, the existing quantum communication system has failed to effectively integrate the generation of quantum keys with classical encryption algorithms, lacking efficient application and key consistency guarantee in actual data transmission. Although quantum communication can provide anti-eavesdropping capabilities, the existing technology still cannot solve the noise attenuation problem of quantum channels when facing long-term and large-scale data transmission, and anti-eavesdropping measures cannot fully cope with complex attack scenarios; in addition, the existing quantum key distribution scheme has deficiencies in the collaborative work of encryption and decryption and key verification. The disconnection between key generation and encryption and decryption processes makes the key verification link vulnerable to attacks, especially in multi-party communications, where key consistency and security cannot be effectively guaranteed. Although the existing technology uses classical channels for key verification, it lacks effective security protocols to ensure the seamless connection of key management and encryption and decryption operations of the entire system, increasing the risk of data leakage. For this reason, those skilled in the art propose a method for quantum distribution of keys to achieve encryption and decryption of network data messages to solve the above problems. Summary of the invention

[0004] In view of the shortcomings of the prior art, the present invention provides a method for realizing encryption and decryption of network data messages by using quantum distributed keys, aiming to solve the problems that the prior art has major defects in the collaborative work between key management, anti-eavesdropping and encryption and decryption verification.

[0005] To achieve the above objectives, the present invention is implemented through the following technical solutions: A method for encrypting and decrypting network data messages using quantum distributed keys, comprising the following steps: Sharing quantum entangled states between sender and receiver through a quantum communication channel, and generating a shared quantum key through quantum measurement; In the process of generating shared quantum keys, the quantum entanglement exchange method is used to ensure that consistent keys are generated between the sender and the receiver; Encode qubits through quantum time coding and adjust the measurement timing of qubits to enhance anti-eavesdropping performance; The sender encrypts the network data message to be transmitted according to the generated quantum key; The receiver uses the shared quantum key to decrypt the encrypted network data message and restore the original data message.

[0006] Preferably, the quantum entangled state is a Bell state, expressed as: ; in: and is the ground state of the quantum bit.

[0007] Preferably, during the generation of the quantum key, the sender and the receiver respectively measure the quantum bits to generate measurement results.

[0008] Preferably, the encryption process is performed using a classical symmetric encryption algorithm, specifically, using a shared key generated by a quantum key to encrypt data to generate a ciphertext.

[0009] Preferably, the classical symmetric encryption algorithm is an AES algorithm, and the generated shared key is used to encrypt data, and the generated ciphertext is transmitted through a quantum channel; The encryption process includes: Input: data to be encrypted With shared key ; Operation: Use AES-256 to encrypt data Encryption is performed, where as encryption keys; Output: Encrypted ciphertext .

[0010] Preferably, the quantum time coding method sets the measurement time window of the quantum bit according to the quantum time uncertainty principle.

[0011] Preferably, the quantum entanglement exchange method in the quantum key generation process includes exchanging quantum entangled states through a quantum channel and exchanging measurement results through a classical communication channel to generate a consistent key.

[0012] Preferably, the verification process after the key generation includes: Exchange measurement base information through classical communication to verify key consistency; If the verification is inconsistent, the partial key is discarded and the key is regenerated.

[0013] Preferably, the process of decrypting the network data message uses the same shared key as the encryption process, and restores the original data message before encryption through a classic symmetric decryption algorithm.

[0014] A system for implementing network data message encryption and decryption by quantum distributed keys, comprising: A quantum key distribution module, used to generate and distribute shared quantum keys through a quantum communication channel; A key verification module, used to verify and ensure the consistency of the shared key between the sender and the receiver through the quantum entanglement exchange method; An anti-eavesdropping module is used to adjust the measurement timing of quantum bits using quantum time coding to prevent eavesdroppers from obtaining valid key information; An encryption module, used to encrypt network data messages according to the shared quantum key; A decryption module is used to decrypt the encrypted data message according to the shared quantum key and restore the original data The present invention provides a method for implementing encryption and decryption of network data messages by using quantum distributed keys. It has the following beneficial effects: 1. The present invention adopts a technical solution that combines quantum key distribution with classical encryption algorithms, which ensures the security of key generation while improving the efficiency of the encryption and decryption process. Compared with the single classical encryption scheme in the prior art, the present invention solves the potential security risks of classical encryption methods in key management by introducing a mechanism of quantum key generation and distribution, thereby ensuring higher confidentiality of data transmission.

[0015] 2. The present invention introduces quantum time coding method and randomly adjusts the measurement time window of quantum bits, which effectively prevents eavesdroppers from obtaining key information through synchronous measurement. Compared with the relatively fixed schemes for measuring quantum states in the prior art, the present invention solves the problem of eavesdroppers being able to accurately synchronize measurements and obtain information by increasing the uncertainty in time, further enhancing the system's anti-eavesdropping capability.

[0016] 3. The present invention adopts a key verification module and uses a quantum entanglement exchange method to ensure the consistency of the shared key between the sender and the receiver, thereby improving the security of the system; compared with the key exchange mechanism that relies on trust in the prior art, the present invention effectively prevents eavesdropping or key tampering through quantum entanglement exchange, solves the key consistency problem that may exist in traditional solutions, and ensures that the keys of the communicating parties are absolutely consistent.

[0017] 4. The present invention improves the overall security and reliability of the system through the collaborative work of multiple system modules, including quantum key distribution, anti-eavesdropping, encryption, decryption and key update modules; compared with the single encryption or key management system solutions in the prior art, the present invention solves the problem of lack of flexibility and scalability of traditional technologies in practical applications through modular design, ensuring the long-term security of quantum network data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 It is a schematic diagram of the method flow of the present invention; Figure 2 It is a schematic diagram of the system architecture of the present invention. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the specification of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] Please see attached Figure 1 The embodiment of the present invention provides a method for encrypting and decrypting network data messages using quantum distributed keys, comprising the following steps: S1. Share quantum entangled states between sender and receiver through quantum communication channels, and generate shared quantum keys through quantum measurements; Specifically, step S1 is the first step in the quantum key distribution method. Through the quantum communication channel, the sender and the receiver share the quantum entangled state and generate a shared quantum key through quantum measurement. This process provides a basic guarantee for subsequent key exchange and data encryption, ensuring the security of information during transmission.

[0021] The sender and receiver first transmit quantum bits through a quantum communication channel to form a quantum entangled state. Quantum entanglement is a quantum physical phenomenon in which two or more quantum bits are separated in space, but their states are interrelated. Even if these quantum bits are separated to very far places, changing the state of one of the quantum bits will also cause the state of the other quantum bit to change accordingly. The application of this property in quantum key distribution greatly enhances the security of the system and avoids the risk of eavesdropping faced by traditional encryption technology.

[0022] The quantum entangled state is usually realized by Bell state, which is defined as: ; in: and is the ground state of the quantum bit, and the two quantum bits are in a common quantum state through entanglement.

[0023] In the quantum entangled state shared by the sender and receiver, when either party measures the quantum bit, the measurement result will be immediately reflected in the other party's quantum bit. This feature is an indispensable foundation in quantum key distribution.

[0024] Quantum communication channels are used to transmit these quantum bits, ensuring the generation and transmission of quantum entangled states. Quantum communication channels can be carried out through media such as optical fibers and free space. Unlike traditional communication channels, information in quantum channels is transmitted through quantum states, which has the characteristics of unconditional security. This is because, according to the principles of quantum mechanics, any eavesdropper's observation of the quantum state will interfere with its state, thereby exposing the eavesdropper's behavior. This property ensures that no external eavesdropper will successfully obtain key information during the quantum key distribution process.

[0025] To ensure the efficiency and stability of quantum communication channels, single-photon source technology can be used to generate quantum bits and transmit them through optical channels. The generation of quantum entanglement usually relies on nonlinear optical processes, such as parametric down-conversion. In this process, a beam of high-energy light can generate a pair of entangled photons when passing through a nonlinear crystal. Through a suitable optical system, the sender and receiver respectively receive these entangled photons.

[0026] After the quantum entangled state is generated, the sender and receiver extract the shared quantum key through quantum measurement. Quantum measurement is usually performed using two bases: standard computing base and diagonal basis When making a measurement, the sender and receiver will respectively select their own measurement basis and make independent measurements. The measurement results are transmitted through the classical communication channel. By comparing the results, both parties can extract a consistent key from the quantum bits.

[0027] During this process, each time the sender and the receiver measure a quantum bit, the measurement result is random. Through a large number of measurements, the sender and the receiver can remove the differences caused by different measurement bases based on the exchange of classical communication, and finally obtain a set of shared quantum keys. In order to improve the quality of the generated keys, certain screening and error correction processes are usually carried out.

[0028] In practical applications, quantum measurements can use different quantum coding methods such as polarization coding and time coding. The specific choice can be determined based on the actual communication environment, channel quality and the implemented equipment. These choices can be optimized by adjusting the experimental setup or the conditions of the quantum communication channel.

[0029] In addition to using traditional fiber optic transmission, quantum communication channels can also choose free-space optical communication, which is particularly advantageous in long-distance quantum communication. Free-space optical communication can realize the propagation of quantum bits in the atmosphere, not just limited to fiber optic networks, thereby greatly expanding the coverage of quantum communication networks.

[0030] The generation of quantum entanglement is not limited to two-photon entangled pairs. Multi-photon entangled states can also be used to further improve the security of the system and the key generation rate. The technology for generating multi-photon quantum entangled states is constantly developing and can provide higher robustness and efficiency for quantum key distribution systems.

[0031] S2. In the process of generating shared quantum keys, the quantum entanglement exchange method is used to ensure that the sender and the receiver generate the same key. Specifically, in step S1, the sender and receiver have shared the quantum entangled state through the quantum communication channel and generated a preliminary quantum key using quantum measurement. However, in order to ensure that both parties use the same key and improve security, step S2 needs to be executed, that is, to ensure the key consistency between the sender and the receiver through the quantum entanglement exchange method. This step is a key link in ensuring the reliability and consistency of the key.

[0032] The quantum entanglement exchange method is used to further confirm that the quantum keys obtained by the sender and the receiver during the key generation process are the same. Quantum entanglement exchange involves the exchange of information between the sender and the receiver through a quantum channel, and data comparison through a classical communication channel to ensure key consistency. In this process, the quantum entanglement exchange method not only ensures the security of the key, but also further improves the reliability of key distribution by comparing and verifying the measurement results.

[0033] In the process of quantum entanglement exchange, the sender and receiver will each measure the shared quantum bit. In order to ensure the correctness of the measurement, the sender and receiver must agree on the measurement basis in advance. The choice of measurement basis is usually divided into standard calculation basis and diagonal basis ,These measurement bases define the possible results obtained during ,measurement and also affect the consistency of the shared key.

[0034] The sender and receiver each select a basis and measure their quantum bits. They then exchange their measurement results through a classical communication channel. The purpose of this process is to determine whether a consistent key has been obtained by comparing the measurement results. If the keys are found to be inconsistent during the exchange, both parties will discard some of the inconsistent measurement results and process the remaining results.

[0035] During the quantum entanglement exchange process, both parties can adopt the so-called "implicit comparison method", that is, to enhance the consistency of the key by measuring different quantum basis combinations. Although this method increases the complexity of the calculation, it can significantly improve the system's anti-interference ability, especially when the channel quality is poor.

[0036] Quantum entanglement exchange usually relies on the superposition state of quantum bits and the principle of quantum measurement. Assuming that the sender and the receiver each hold a pair of entangled quantum bits, the results of measuring these quantum bits will directly affect the keys generated by both parties. When the sender and the receiver perform measurements, it is assumed that the sender's measurement result is , the receiving quantum bit is immediately in the quantum state associated with it , similarly, the measurement results are When , the receiving quantum bit will be in In this way, both parties ensure that they get the same key by comparing the measurement results.

[0037] The quantum entanglement exchange process may also involve an error correction mechanism for the quantum state. Since quantum bits may be affected by noise and interference during transmission, some measurement results may be biased. In order to deal with this situation, quantum error correction codes (such as Shor codes or Steane codes) are usually used to correct the errors of the exchanged quantum bits, thereby improving the consistency and correctness of the final generated key.

[0038] In the process of quantum entanglement exchange, the two parties exchange measurement results through the classical communication channel to verify the consistency of the obtained key. Assume that the result measured by the sender is , the measurement result of the receiver is , then the key generation process of both parties can be expressed as: ; in: is a function that decides whether to accept the measurement results of the sender and receiver as valid keys; if and If they are consistent, both parties can confirm that the keys are consistent. It can continue to be used as a shared key; if it is inconsistent, the results are discarded and the key generation process is restarted.

[0039] In order to improve the security of the system, the sender and receiver may also apply a quantum key redistribution mechanism. The redistribution mechanism includes dynamically updating the key through additional quantum entanglement exchange and classical communication channels. In this way, even after the key is generated, the system can regularly confirm the consistency of the key, further ensuring the security and confidentiality of the key.

[0040] Quantum entanglement exchange can also be combined with quantum state interference technology to enhance the security of the key exchange process. Through quantum state interference, the measurement accuracy of quantum bits can be improved, thereby ensuring the key consistency of the exchange process. This method is particularly suitable for high-noise environments or long-distance quantum communications, and can effectively reduce the generation of errors.

[0041] S3, encode the quantum bits through quantum time coding method, and adjust the measurement timing of the quantum bits to enhance the anti-eavesdropping performance; Specifically, in the aforementioned steps S1 and S2, the sender and the receiver successfully shared the quantum entangled state and ensured the consistency of the key through quantum entanglement exchange. In order to further enhance the security of the system and prevent potential eavesdroppers from intercepting key information through the quantum communication channel, the present invention introduced the quantum time coding method in step S3. This method mainly adjusts the measurement timing of quantum bits and utilizes the principle of quantum time uncertainty to ensure that even if an eavesdropper attempts to interfere with the communication process, he cannot obtain valid information.

[0042] The core idea of ​​quantum time coding is to increase the difficulty for eavesdroppers to obtain effective information through the measurement time window of quantum bits. The quantum time uncertainty principle shows that certain physical quantities in quantum systems (such as time and energy) have measurement uncertainties, which means that if eavesdroppers try to measure quantum bits at a specific point in time, they will be subject to unpredictable interference. Therefore, when measuring quantum bits, the sender and receiver will not choose a fixed time point, but randomly select a measurement time window, making it impossible for any eavesdropper to synchronize their measurement timing.

[0043] Quantum time coding achieves this by encoding qubits in time. By setting a time window, the sender and receiver can measure qubits at random time intervals instead of relying on a fixed time point. This randomness greatly increases the challenge for eavesdroppers because they cannot measure at the right time point and thus cannot obtain accurate information.

[0044] Quantum time coding can be achieved by encoding the phase of the qubit. The sender can adjust the phase of the qubit according to a preset protocol, and the receiver measures it within a random time window. When the phase of the qubit changes during the measurement, the eavesdropper will not be able to accurately determine the state of the qubit. Therefore, the security of the qubit is further enhanced.

[0045] Quantum time coding can also be used in combination with quantum timers with higher time resolution. Quantum timers can measure the phase changes of quantum bits with high precision and ensure the randomness and uncertainty of the measurement time window. This method is suitable for quantum communication systems that require higher precision, especially when the quantum communication distance is long or the channel quality is poor, and can effectively prevent eavesdropping.

[0046] The key to quantum time coding lies in the random selection of time windows. In quantum systems, the time uncertainty principle can be expressed as: ; in: represents the uncertainty of energy; Indicates uncertainty in time; is Planck's constant; when an eavesdropper tries to obtain information by measuring quantum bits, the measurement results will be disturbed due to the uncertainty of time, resulting in the eavesdropper being unable to obtain valid information.

[0047] The quantum time coding method uses this principle to set a random time window. The sender and receiver will select a measurement time window through negotiation and adjust the measurement timing of the quantum bit according to this window; for example, when the sender selects the measurement time of the quantum bit, it will not be fixed at a precise time point, but will be selected based on a certain randomness. The receiver will randomly select a measurement time after receiving the quantum bit to ensure that their measurement results will not be interfered with by potential eavesdroppers.

[0048] The sender and receiver can also impose a pseudo-random phase on the qubit to further increase the difficulty for an eavesdropper to successfully obtain the key. The random change in phase makes the measurement of the qubit more complicated, making it difficult for an eavesdropper to track the changes in the quantum state.

[0049] Quantum time coding can not only enhance the system's anti-eavesdropping ability, but can also be combined with other quantum encryption technologies to further improve the security of the key. For example, it can be combined with quantum teleportation technology to make the measurement of quantum bits more difficult to track. Through quantum teleportation, the state of quantum bits can be transmitted over long distances between the sender and the receiver without being exposed in the middle, which can effectively prevent eavesdroppers from intercepting the key.

[0050] Quantum time coding can also be used in combination with quantum error correction codes, which can effectively detect and correct quantum bit errors caused by eavesdropping or channel noise, thereby further improving the reliability and security of the system.

[0051] S4. The sender encrypts the network data message to be transmitted according to the generated quantum key; Specifically, in the aforementioned steps S1, S2 and S3, the sender and receiver have successfully shared the quantum key and ensured the consistency and security of the key through quantum entanglement exchange and quantum time coding. The next step is that the sender will encrypt the network data message to be transmitted based on the generated shared quantum key. This encryption process relies on the classical symmetric encryption algorithm to ensure the confidentiality and integrity of the data during transmission.

[0052] The sender uses the shared quantum key generated from quantum key distribution in combination with a classical symmetric encryption algorithm (such as the AES algorithm) to encrypt the data to be transmitted. The role of the quantum key is to provide key input for the classical encryption algorithm, thereby increasing the quantum security feature in the encryption process. Typically, AES (Advanced Encryption Standard) is selected as one of the encryption algorithms because it achieves a good balance between computational efficiency and encryption strength.

[0053] In this step, the sender first obtains the quantum key and encrypts the data to be transmitted based on the key. AES is a symmetric key encryption algorithm, which means that the encryption and decryption processes use the same key. During the encryption process, the sender uses an AES key length of 256 bits (ie, AES-256) to provide stronger encryption strength.

[0054] During the encryption process, the sender regards the network data message to be encrypted as a series of binary data blocks, and uses the shared quantum key as the input key of the AES algorithm. Through the encryption processing of the AES algorithm, the sender generates the encrypted ciphertext.

[0055] AES-256 encrypts data using the following steps: Input: data to be encrypted With shared key ; Operation: Data AES-256 encryption is performed, where As the encryption key; the process involves multiple encryption rounds, each of which replaces, shifts, and mixes the data block, enhancing the complexity of the ciphertext.

[0056] Output: Encrypted ciphertext , whose contents can be decrypted only if the recipient has the correct key.

[0057] The working principle of AES-256 can be explained through multiple rounds of processing. Each data block undergoes byte replacement, row shift, column mixing and round key addition operations in each round of encryption. These operations can ensure the complexity and strength of the encryption process.

[0058] In AES encryption, data is first divided into fixed-size blocks (128 bits) and multiple round keys are generated through key expansion. For AES-256, the key expansion process generates 14 round keys. Then, the data block undergoes 14 rounds of encryption. Each round of operations includes byte replacement, row shift, column mixing and round key addition operations. The goal of each round is to increase the difficulty of encryption, thereby improving the security of the system.

[0059] The byte replacement step replaces each byte in the data block with the corresponding byte in the S-box, which is a pre-calculated replacement table used to disrupt the structure of the data. The row shift increases the complexity of the ciphertext by cyclically shifting the rows in the data block. The column mixing mixes the data in each column through mathematical operations to weaken the correlation of the data. Finally, the round key addition step performs an XOR operation on the round key and the data block to further increase the encryption strength.

[0060] The implementation of the AES algorithm can be completed through hardware acceleration (such as the AES-NI instruction set) or a software-based encryption algorithm library. Hardware acceleration can significantly increase the speed of encryption, and in practical applications, hardware modules are often used to perform these encryption tasks.

[0061] In addition to the AES algorithm, other symmetric encryption algorithms such as DES (Data Encryption Standard) or TripleDES can also be used. The specific choice can be optimized based on the security requirements of the data and the system performance. As an option, the sender can also combine the quantum key with other randomly generated keys to further enhance the strength and flexibility of the encryption.

[0062] The quantum key can be combined with a randomly generated classical key before the encryption process to form a composite key. This method increases the scope of application of quantum keys and also improves the diversity of keys. Through this encryption method, it can be ensured that the key of each data packet in the encryption process is unique, thereby reducing the risk of being cracked.

[0063] The application of quantum keys is not limited to encryption operations, but can also be used to establish key exchange protocols. Through quantum keys, the sender and receiver can negotiate an encryption key and use the key to protect the confidentiality of the data in subsequent data transmission. This method makes the quantum communication network more flexible and adaptable, and can meet different security requirements.

[0064] S5. The receiver uses the shared quantum key to decrypt the encrypted network data message and restore the original data message.

[0065] Specifically, in the foregoing steps S1 to S4, the sender and the receiver have completed the steps of quantum key generation, quantum entanglement swapping, quantum time encoding method to enhance anti-eavesdropping, and data encryption. The next step is for the receiver to use the shared quantum key to decrypt the encrypted network data packet and restore the original data packet. This decryption process depends on the key shared between the sender and the receiver through quantum key distribution, combined with a classical symmetric decryption algorithm (such as AES), to ensure the confidentiality and integrity of the data during transmission.

[0066] The receiver uses the shared quantum key generated in steps S1 and S2, combined with a classical symmetric decryption algorithm (such as the AES algorithm), to decrypt the received ciphertext. Since the same key is used in the encryption and decryption processes, in the AES algorithm, the receiver can perform reverse operations on the ciphertext using the same key to restore the original plaintext data.

[0067] The decryption process is symmetric to the encryption process. The receiver first uses the shared quantum key (obtained through quantum entanglement swapping in step S2) as the key for the AES decryption algorithm to perform the data decryption operation. In AES decryption, the receiver first performs reverse operations on the ciphertext, specifically including steps such as byte substitution, row shift, column mixing, and round key addition. Through these steps, the receiver can restore the data packet before encryption.

[0068] The AES-256 decryption process has the same structure as the encryption process but in reverse order. In the decryption process, according to the design of the AES algorithm, the receiver first performs the reverse round key addition operation on the ciphertext, followed by reverse column mixing, reverse row shift, and reverse byte substitution operations. Through these steps, the ciphertext is gradually transformed into plaintext, thus restoring the original network data.

[0069] The AES-256 decryption process includes the following steps: Input: Ciphertext And the shared key (the same as when encrypting); Operation: Use the AES-256 decryption algorithm, where As the decryption key, in the decryption process, first perform round key addition, then reverse row shift, reverse column mixing, and finally reverse byte substitution; Output: Restored original data packet , and this data packet is the same as the data before encryption by the sender.

[0070] The AES decryption process relies on the same algorithm and key length as encryption, so symmetry is maintained throughout the process. This symmetry guarantees the uniqueness of the key and ensures that both parties can perform encryption and decryption operations based on the same key, thereby effectively ensuring the security and integrity of the data.

[0071] Similar to the encryption process, the key to the decryption process lies in the correct application of the key and the round-by-round processing of the data block. Each round in the AES-256 algorithm performs a series of substitutions, shifts, and mixing operations to increase the complexity of the decryption process. In contrast to the order of the encryption process, the decryption process first applies the round key plus operation, and then performs the reverse operation to gradually restore the original data. Through this process, the receiver can recover the original data message from the encrypted ciphertext.

[0072] The decryption operation may involve more optimization, especially when processing large-scale data. In order to improve the decryption speed and efficiency, the receiver may use a hardware acceleration module (such as the AES-NI instruction set) to accelerate the decryption process of the AES algorithm. Hardware acceleration can significantly reduce the decryption time, thereby improving the overall system performance.

[0073] The decryption operation is not limited to the AES algorithm, but can also be combined with other symmetric encryption algorithms such as DES or TripleDES. The selection of these algorithms depends on the encryption requirements of the data and the system performance requirements. In this case, the key management and decryption operations will be different, but the basic principle is still to reverse the ciphertext through the shared key to restore the original data.

[0074] The AES decryption and encryption processes are symmetrical in theory, but in actual applications, they can be optimized in many ways. For example, the key management strategy, the selection of hardware acceleration modules during decryption, and the adaptation between different encryption algorithms will all affect the efficiency and security of decryption. Through proper selection and configuration, the system can adapt to the encryption and decryption needs of data of different sizes and types.

[0075] For quantum key distribution systems, the key to decryption operations is to ensure that the sender and receiver use completely consistent keys for encryption and decryption operations. To this end, the receiver may periodically verify the shared key through a classical communication channel to ensure that the key has not been tampered with or leaked. This verification mechanism can further improve the security of data transmission.

[0076] The system for implementing network data message encryption and decryption by using quantum distributed keys described below and the method for implementing network data message encryption and decryption by using quantum distributed keys described above can be referenced to each other.

[0077] Please see attached Figure 2, a system for quantum distributed key encryption and decryption of network data messages, comprising: A quantum key distribution module, used to generate and distribute shared quantum keys through a quantum communication channel; A key verification module, used to verify and ensure the consistency of the shared key between the sender and the receiver through the quantum entanglement exchange method; An anti-eavesdropping module is used to adjust the measurement timing of quantum bits using quantum time coding to prevent eavesdroppers from obtaining valid key information; An encryption module, used to encrypt network data messages according to the shared quantum key; A decryption module is used to decrypt the encrypted data message according to the shared quantum key and restore the original data.

[0078] Specifically, quantum key distribution module: The quantum key distribution module is responsible for generating and distributing shared quantum keys through quantum communication channels. The module uses quantum entanglement and quantum measurement technology to transmit quantum bits to the receiver through quantum communication channels, and ensures that the shared key is consistent between the sender and the receiver. The quantum key distribution module can be expanded as needed to support multiple quantum protocols, such as BB84, E91 protocols, etc., to meet different security requirements.

[0079] This module can adopt a photon-based quantum communication system, use quantum entanglement to generate quantum keys, and transmit quantum bits through optical fiber or free space channels. The system embeds the entire process of quantum key generation, transmission and reception.

[0080] Key verification module: The function of the key verification module is to verify and ensure that a consistent shared key is generated between the sender and the receiver through the quantum entanglement exchange method. The module uses a classical communication channel to compare the quantum measurement results. If they are consistent, the validity of the key is confirmed; if they are inconsistent, the key is discarded and regenerated. This process can effectively avoid interference from eavesdroppers and ensure the security of the key.

[0081] This module realizes the exchange and comparison of quantum measurement results. Through the classical channel, the sender and receiver exchange measurement basis information and measurement results, use error detection and correction mechanisms (such as hash algorithms) to verify key consistency, and resend the key according to the protocol.

[0082] Anti-eavesdropping module: The anti-eavesdropping module adjusts the measurement timing of quantum bits through quantum time coding to prevent eavesdroppers from obtaining valid key information. The quantum time coding method uses the principle of quantum time uncertainty to set a random time window for the measurement of each quantum bit to prevent eavesdroppers from accurately synchronizing their measurement time, thereby ensuring the security of quantum keys.

[0083] The module controls the measurement time of quantum bits through a quantum timer and a random time window generation mechanism, making it more difficult for eavesdroppers to interfere. It also enhances the anti-eavesdropping capability in the quantum key distribution process through the randomness of quantum bit phase encoding and quantum noise.

[0084] Encryption module: The encryption module uses a shared quantum key to encrypt network data messages to ensure that the data remains confidential during transmission. The encryption process is based on classical symmetric encryption algorithms (such as AES) and uses quantum keys as encryption keys. The module can support different encryption algorithms, such as AES, DES or triple DES. The specific selection can be adjusted according to security requirements and data types.

[0085] The module divides the received network data packets into data blocks of fixed size, encrypts each data block using a quantum-generated shared key, and uses encryption algorithms such as AES-256 to increase the encryption strength, ensuring that the data is difficult to crack during transmission.

[0086] Decryption module: The decryption module decrypts the encrypted data message according to the shared quantum key to restore the original data. The decryption process is symmetrical to the encryption process, using the same quantum key and applying symmetric decryption methods such as the AES decryption algorithm.

[0087] The decryption module receives encrypted data from the network and decrypts it using the same shared quantum key as used for encryption. Standard decryption algorithms such as AES-256 are used during the decryption process to ensure the accuracy and integrity of data recovery.

[0088] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A method for implementing network data message encryption and decryption using quantum distributed keys, characterized in that: The following steps are involved: Sharing quantum entangled states between sender and receiver through a quantum communication channel, and generating a shared quantum key through quantum measurement; In the process of generating shared quantum keys, the quantum entanglement exchange method is used to ensure that consistent keys are generated between the sender and the receiver; Encode the quantum bits through the quantum time coding method and adjust the measurement timing of the quantum bits; The sender encrypts the network data message to be transmitted according to the generated quantum key; The receiver uses the shared quantum key to decrypt the encrypted network data message and restore the original data message.

2. According to claim 1, a method for realizing network data message encryption and decryption by quantum distributed key, characterized in that: The quantum entangled state is a Bell state, which is expressed as: ； in: and is the ground state of the quantum bit.

3. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 1, characterized in that: During the generation process of the quantum key, the sender and the receiver respectively measure the quantum bits to generate measurement results.

4. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 1, characterized in that: The encryption process is performed using a classical symmetric encryption algorithm, specifically, using a shared key generated by a quantum key to encrypt data and generate a ciphertext.

5. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 4 is characterized in that: The classical symmetric encryption algorithm is the AES algorithm, which uses the generated shared key to encrypt data, and the generated ciphertext is transmitted through the quantum channel; The encryption process includes: Input: data to be encrypted With shared key ; Operation: Use AES-256 to encrypt data Encryption is performed, where as encryption keys; Output: Encrypted ciphertext .

6. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 1, characterized in that: The quantum time coding method sets the measurement time window of the quantum bit according to the quantum time uncertainty principle.

7. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 1, characterized in that: The quantum entanglement exchange method in the quantum key generation process includes exchanging quantum entangled states through a quantum channel and exchanging measurement results through a classical communication channel to generate a consistent key.

8. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 1, characterized in that: The verification process after the key generation includes: Exchange measurement base information through classical communication to verify key consistency; If the verification is inconsistent, the partial key is discarded and the key is regenerated.

9. The method for realizing network data message encryption and decryption by quantum distributed key according to claim 1, characterized in that: The process of decrypting the network data message uses the same shared key as the encryption process, and restores the original data message before encryption through a classic symmetric decryption algorithm.

10. A system for implementing network data message encryption and decryption using quantum distributed keys, applied to a method for implementing network data message encryption and decryption using quantum distributed keys as described in any one of claims 1 to 9, characterized in that: include: A quantum key distribution module, used to generate and distribute shared quantum keys through a quantum communication channel; A key verification module, used to verify and ensure the consistency of the shared key between the sender and the receiver through the quantum entanglement exchange method; An anti-eavesdropping module, used to adjust the measurement timing of quantum bits using quantum time coding method; An encryption module, used to encrypt network data messages according to the shared quantum key; A decryption module is used to decrypt the encrypted data message according to the shared quantum key and restore the original data.

Images