Quantum security desktop client software upgrading method and related device thereof

Abstract

The invention discloses a quantum security desktop client software upgrading method and a related device thereof, and the method comprises the steps that after a desktop client inserts a quantum security medium into a computer, key information of the quantum security medium is set, and the key information is initialized; the quantum security service platform is accessed to apply for a session key ID, and the quantum security service platform adopts the session key ID to encrypt the software version information to obtain first ciphertext data; applying for a service platform interface through the first ciphertext data and the session key ID, calling a quantum security service platform for decryption, judging whether software needs to be upgraded or not according to software version information obtained through decryption, and if yes, calling the quantum security service platform to encrypt an upgrade downloading address to obtain response data; and the desktop client decrypts the response data by calling the quantum security service platform to obtain the upgrading downloading address so as to download the data packet to upgrade the software of the desktop client. According to the method, the upgrading security of the desktop client software is improved.

Description

Technical Field

[0001] The present application relates to the field of software upgrade technology, and in particular to a quantum-safe desktop client software upgrade method and related devices. Background Art

[0002] With the development of computer technology and the continuous business development of desktop client software, desktop client software upgrades have become more and more frequent, and users have higher and higher requirements for the upgrade speed and security level of desktop client software. In the Windows operating system, desktop client software upgrades are prone to malicious modification, virus injection, Trojans and other remote control viruses, which in turn affect the user's computer security. Therefore, the upgrade and update security of desktop client software is extremely important.

[0003] In the existing technical solutions, the desktop client software upgrade is mainly completed by downloading the new version installation package to overwrite the installation update. This upgrade method can be fully compatible with the user's computer environment, avoiding abnormal situations such as the loss of the original installation content causing the software to be unavailable, but there will also be certain security risks, such as the installation package being tampered with, or maliciously injected with Trojan viruses, etc., which threatens the user's computer security and may cause property losses to the user's computer in serious cases. In the current desktop client software upgrade solution, the security measures adopted include using asymmetric encryption to obtain the HTTPS download address of the installation package resource pool through HTTPS requests for software version information, version number, etc. With the development of computer technology, the download address is at risk of being intercepted and tampered. Once the download address is tampered with, it will affect the content security of the upgrade software installation package. Summary of the invention

[0004] The present application provides a quantum-safe desktop client software upgrade method and related devices, which are used to improve the upgrade security of desktop client software.

[0005] In view of this, the first aspect of the present application provides a quantum-safe desktop client software upgrade method, comprising:

[0006] After the computer inserts the quantum secure medium, the desktop client sets the key information in the quantum secure medium and initializes the quantum secure medium;

[0007] The desktop client accesses the quantum security service platform to apply for a session key ID, and the quantum security service platform uses the session key ID to perform quantum security data encryption on the software version information to obtain first ciphertext data;

[0008] The desktop client uses the first ciphertext data and the session key ID as interface request information to request the service platform interface, so that the service platform sends the interface request information to the quantum security service platform for quantum security data decryption, and determines whether the software needs to be upgraded according to the software version information obtained by decryption. If so, the service platform accesses the quantum security service platform through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and returns the response data to the desktop client;

[0009] The desktop client accesses the quantum security service platform through the session key ID to perform quantum security data decryption on the response data, obtains the upgrade download address, accesses the upgrade download address to download the data packet, and upgrades the desktop client software according to the downloaded data packet.

[0010] Optionally, during the quantum-safe encryption process, the quantum-safe service platform uses a quantum-safe encryption method that combines SM4 and CBC to encrypt key software version information.

[0011] Optionally, the desktop client uses the first ciphertext data and the session key ID as interface request information to request a service platform interface, which also includes:

[0012] The desktop client encrypts the first ciphertext data using AES symmetric encryption to obtain second ciphertext data;

[0013] The desktop client uses the first ciphertext data and the session key ID as interface request information to request a service platform interface, so that the service platform sends the interface request information to the quantum security service platform for quantum security data decryption, including:

[0014] The desktop client uses the second ciphertext data and the session key ID as interface request information, and uses HTTPS and POST to request the business platform interface, so that the business platform decrypts the second ciphertext data to obtain the first ciphertext data, and sends the first ciphertext data and the session key ID to the quantum security service platform for quantum security data decryption.

[0015] Optionally, the service platform returns the response data to the desktop client, before which the process further includes:

[0016] The service platform encrypts the response data using AES symmetric encryption to obtain encrypted response data;

[0017] The desktop client accesses the quantum security service platform through the session key ID to perform quantum security data decryption on the response data and obtain the upgrade download address, which also includes:

[0018] The desktop client decrypts the received encrypted response data to obtain the response data.

[0019] Optionally, the method further includes:

[0020] When downloading a data packet, the desktop client monitors the insertion status of the quantum secure medium in real time, and interrupts the downloading of the data packet when it is detected that the quantum secure medium is unplugged.

[0021] Optionally, the quantum secure medium is initialized, and then the method further includes:

[0022] The quantum secure medium matches the login account information of the desktop client software with the login account information of the quantum secure medium to achieve identity authentication.

[0023] The second aspect of the present application provides a quantum-safe desktop client software upgrade system, including:

[0024] The desktop client is used to set the key information in the quantum secure medium and initialize the quantum secure medium after the quantum secure medium is inserted into the computer; apply for a session key ID by accessing the quantum secure service platform and send the software version information to the quantum secure service platform;

[0025] The quantum security service platform is used to perform quantum security data encryption on the software version information using the session key ID to obtain first ciphertext data, and return the first ciphertext data to the desktop client;

[0026] The desktop client is further used to request a service platform interface using the first ciphertext data and the session key ID as interface request information;

[0027] The business platform is used to send the interface request information to the quantum security service platform for quantum security data decryption, and determine whether the software needs to be upgraded according to the software version information obtained by decryption. If so, the business platform accesses the quantum security service platform through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and returns the response data to the desktop client;

[0028] The desktop client is also used to access the quantum security service platform through the session key ID to perform quantum security data decryption on the response data, obtain an upgrade download address, access the upgrade download address to download data packets, and upgrade the desktop client software according to the downloaded data packets.

[0029] Optionally, the desktop client is further used to encrypt the first ciphertext data using AES symmetric encryption to obtain second ciphertext data; use the second ciphertext data and the session key ID as interface request information, and use HTTPS and POST to request the service platform interface;

[0030] The business platform is also used to decrypt the second ciphertext data to obtain the first ciphertext data.

[0031] A third aspect of the present application provides an electronic device, the device comprising a processor and a memory;

[0032] The memory is used to store program code and transmit the program code to the processor;

[0033] The processor is used to execute the quantum-secure desktop client software upgrade method described in any one of the first aspects according to the instructions in the program code.

[0034] In a fourth aspect, the present application provides a computer-readable storage medium, which is used to store program code. When the program code is executed by a processor, the quantum-secure desktop client software upgrade method described in any one of the first aspects is implemented.

[0035] It can be seen from the above technical solutions that this application has the following advantages:

[0036] The quantum-secure desktop client software upgrade method provided in this application uses a security key and quantum-secure media to encrypt and protect the software version information and upgrade download address during the software upgrade process, and finally completes quantum-secure encryption and decryption to obtain the data packet for software update and upgrade, thereby improving the security of data transmission during the desktop client software upgrade process, and thereby improving the upgrade security of the desktop client software. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0038] Figure 1A flowchart of a quantum-safe desktop client software upgrade method provided in an embodiment of the present application;

[0039] Figure 2 A timing diagram of a quantum-secure desktop client software upgrade method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0040] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0041] For easier understanding, please refer to Figure 1 , the embodiment of the present application provides a quantum-safe desktop client software upgrade method, comprising:

[0042] Step 110: After the computer inserts the quantum secure medium, the desktop client sets the key information in the quantum secure medium and initializes the quantum secure medium.

[0043] Insert the quantum secure medium (physical U shield) into the user's computer, then start the desktop client software, log in the user account information, and after the desktop client software recognizes the quantum secure medium, set the key information in the quantum secure medium. The key information includes application code, application name, identity authentication platform URL address, etc.

[0044] After setting the quantum secure medium initialization information, the desktop client can access the quantum secure service platform to obtain the key information filled in the quantum secure medium, and the key information includes the login account information of the desktop client software. After setting the quantum secure medium initialization information, the desktop client initializes the quantum secure medium. Furthermore, after initialization, the quantum secure medium matches the login account information of the desktop client software with the login account information of the quantum secure medium to achieve identity authentication.

[0045] Step 120: The desktop client applies for a session key ID by accessing the quantum security service platform. The quantum security service platform uses the session key ID to perform quantum security data encryption on the software version information to obtain the first ciphertext data.

[0046] After the desktop client completes the initialization of the quantum secure medium, it accesses the quantum secure service platform and applies for a session key ID. After obtaining the session key ID, it sends the software version information and the session key ID to the quantum secure service platform, which uses the session key ID to perform quantum secure encryption on the software version information, obtains the first ciphertext data, and returns the first ciphertext data to the desktop client. The software version information includes the version number, version serial number, software name and other information.

[0047] Furthermore, in the process of quantum security encryption, the quantum security service platform uses a quantum security encryption method combining SM4 and CBC to encrypt the key version information of the software. The quantum security encryption method combining SM4 and CBC belongs to the prior art, and its specific encryption process will not be described here.

[0048] Step 130: The desktop client uses the first ciphertext data and the session key ID as interface request information to request the business platform interface, so that the business platform sends the interface request information to the quantum security service platform for quantum security data decryption, and determines whether the software needs to be upgraded based on the software version information obtained by decryption. If so, the quantum security service platform is accessed through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and the response data is returned to the desktop client.

[0049] In one embodiment, after obtaining the first ciphertext data, the desktop client uses the first ciphertext data and the session key ID as interface request information to request the software upgrade judgment interface of the business platform. After receiving the interface request information, the business platform sends it to the quantum security service platform for quantum security data decryption, and determines whether the software needs to be upgraded based on the decrypted software version information. If it is determined that a new version of the software exists and needs to be upgraded, the software version upgrade data is obtained, and for the upgrade download address in the software version upgrade data, the quantum security service platform is accessed through the session key ID to perform quantum security data encryption on the upgrade download address, obtain response data, and return the response data to the desktop client.

[0050] In another embodiment, after obtaining the first ciphertext data, the desktop client can perform secondary encryption on the first ciphertext data by AES symmetric encryption to obtain the second ciphertext data; the desktop client uses the second ciphertext data and the session key ID as the interface request information, and uses HTTPS and POST to request the service platform interface. After receiving the interface request information, the service platform decrypts the second ciphertext data to obtain the first ciphertext data; sends the first ciphertext data and the session key ID to the quantum security service platform, and the quantum security service platform decrypts the first ciphertext data according to the session key ID to obtain the software version information; the service platform determines the software version according to the software version information, and if it is determined that a new version of the software exists and needs to be upgraded, the software version upgrade data is obtained, and the quantum security service platform is accessed through the session key ID to perform quantum security data encryption on the upgrade download address in the software version upgrade data to obtain the response data.

[0051] Furthermore, the business platform may also encrypt the response data using AES symmetric encryption to obtain encrypted response data, and then return the encrypted response data to the desktop client.

[0052] Step 140: The desktop client accesses the quantum security service platform through the session key ID to perform quantum security data decryption on the response data, obtains the upgrade download address, accesses the upgrade download address to download the data packet, and upgrades the desktop client software according to the downloaded data packet.

[0053] In one embodiment, after receiving the response data, the desktop client accesses the quantum security service platform through the session key ID to decrypt the response data and obtain the upgrade download address. Then, the upgrade download address is accessed to download the data packet, and the desktop client software is upgraded according to the downloaded data packet.

[0054] In another embodiment, after receiving the encrypted response data, the desktop client decrypts the received encrypted response data to obtain the response data; accesses the quantum security service platform through the session key ID to perform quantum security data decryption on the response data to obtain the upgrade download address. Then, the upgrade download address is accessed to download the data packet, and the desktop client software is upgraded according to the downloaded data packet. A timing diagram of the desktop client software upgrade method provided in 2 can be referred to.

[0055] Furthermore, when downloading the data packet, the desktop client monitors the insertion status of the quantum secure medium in real time, and when it detects that the quantum secure medium is unplugged, the download of the data packet is interrupted, the quantum secure medium needs to be reinserted, and the process returns to step 110.

[0056] The embodiment of the present application adopts quantum secure media to perform upgrade security authentication of user desktop client software, applies for a session key ID through the quantum secure media, and uses the applied session key ID to complete a quantum encryption and decryption operation, which is equivalent to adopting a hardware + software upgrade authentication verification method, effectively avoiding the threat of computer software technology or network security being cracked. Compared with ordinary U-shield authentication, the quantum secure media with quantum characteristics increases the security level of the software upgrade process.

[0057] Furthermore, the SM4+CBC quantum encryption method is adopted to perform a second encryption on the data after quantum secure encryption using AES symmetric encryption, and both the HTTPS+POST interface request data and the response data are encrypted again. Compared with the conventional symmetric encryption method, the encryption method of the present application is to perform quantum secure encryption on both the HTTPS+POST request and response data, and the key has quantum characteristics, which increases the difficulty of key cracking and the security of software information data.

[0058] The above is an embodiment of a quantum-secure desktop client software upgrade method provided by the present application. The following is an embodiment of a quantum-secure desktop client software upgrade system provided by the present application.

[0059] The quantum-safe desktop client software upgrade system provided in the embodiment of the present application includes:

[0060] Desktop client, which is used to set the key information in the quantum secure medium and initialize the quantum secure medium after the quantum secure medium is inserted into the computer; apply for the session key ID by accessing the quantum secure service platform and send the software version information to the quantum secure service platform;

[0061] The quantum security service platform is used to perform quantum security data encryption on the software version information using the session key ID to obtain first ciphertext data, and return the first ciphertext data to the desktop client;

[0062] The desktop client is further used to request the service platform interface by using the first ciphertext data and the session key ID as interface request information;

[0063] The business platform is used to send the interface request information to the quantum security service platform for quantum security data decryption, and determine whether the software needs to be upgraded based on the software version information obtained by decryption. If so, the business platform accesses the quantum security service platform through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and returns the response data to the desktop client;

[0064] The desktop client is also used to access the quantum security service platform through the session key ID to decrypt the response data, obtain the upgrade download address, access the upgrade download address to download the data packet, and upgrade the desktop client software according to the downloaded data packet.

[0065] In an embodiment of the present application, after inserting the quantum secure medium (physical U shield) into the user's computer and starting the desktop client software, the user account information is logged in. After the desktop client software recognizes the quantum secure medium, the key information in the quantum secure medium is set. The key information includes application code, application name, identity authentication platform URL address, etc.

[0066] After setting the quantum secure medium initialization information, the desktop client can access the quantum secure service platform to obtain the key information filled in the quantum secure medium, and the key information includes the login account information of the desktop client software. After setting the quantum secure medium initialization information, the desktop client initializes the quantum secure medium. Furthermore, after initialization, the quantum secure medium matches the login account information of the desktop client software with the login account information of the quantum secure medium to achieve identity authentication.

[0067] After the desktop client completes the initialization of the quantum secure medium, it accesses the quantum secure service platform and applies for a session key ID. After obtaining the session key ID, it sends the software version information and the session key ID to the quantum secure service platform, which uses the session key ID to perform quantum secure encryption on the software version information, obtains the first ciphertext data, and returns the first ciphertext data to the desktop client. The software version information includes the version number, version serial number, software name and other information.

[0068] Furthermore, in the process of quantum security encryption, the quantum security service platform uses a quantum security encryption method combining SM4 and CBC to encrypt the key version information of the software. The quantum security encryption method combining SM4 and CBC belongs to the prior art, and its specific encryption process will not be described here.

[0069] Furthermore, the desktop client is also used to encrypt the first ciphertext data using AES symmetric encryption to obtain second ciphertext data; use the second ciphertext data and the session key ID as interface request information, and use HTTPS and POST to request the business platform interface;

[0070] The business platform is also used to decrypt the second ciphertext data to obtain the first ciphertext data.

[0071] After the business platform decrypts and obtains the first ciphertext data, it sends the first ciphertext data and the session key ID to the quantum security service platform for quantum security data decryption, and determines whether the software needs to be upgraded based on the software version information obtained by decryption. If so, it accesses the quantum security service platform through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and returns the response data to the desktop client.

[0072] Furthermore, the business platform is also used to encrypt the response data using AES symmetric encryption to obtain encrypted response data;

[0073] Furthermore, the desktop client is also used to decrypt the received encrypted response data to obtain the response data.

[0074] The desktop client accesses the quantum security service platform through the session key ID to decrypt the response data and obtain the upgrade download address. Then, the upgrade download address is accessed to download the data package, and the desktop client software is upgraded according to the downloaded data package.

[0075] Furthermore, when downloading a data packet, the desktop client is also used to monitor the insertion status of the quantum secure medium in real time, and when it is detected that the quantum secure medium is unplugged, the downloading of the data packet is interrupted.

[0076] The embodiment of the present application adopts quantum secure media to perform upgrade security authentication of user desktop client software, applies for a session key ID through the quantum secure media, and uses the applied session key ID to complete a quantum encryption and decryption operation, which is equivalent to adopting a hardware + software upgrade authentication verification method, effectively avoiding the threat of computer software technology or network security being cracked. Compared with ordinary U-shield authentication, the quantum secure media with quantum characteristics increases the security level of the software upgrade process.

[0077] Furthermore, the SM4+CBC quantum encryption method is adopted to perform a second encryption on the data after quantum secure encryption using AES symmetric encryption, and both the HTTPS+POST interface request data and the response data are encrypted again. Compared with the conventional symmetric encryption method, the encryption method of the present application is to perform quantum secure encryption on both the HTTPS+POST request and response data, and the key has quantum characteristics, which increases the difficulty of key cracking and the security of software information data.

[0078] The embodiment of the present application also provides an electronic device, the device comprising a processor and a memory;

[0079] The memory is used to store the program code and transmit the program code to the processor;

[0080] The processor is used to execute the quantum-secure desktop client software upgrade method in the aforementioned method embodiment according to the instructions in the program code.

[0081] The embodiment of the present application also provides a computer-readable storage medium, which is used to store program code. When the program code is executed by a processor, the quantum-safe desktop client software upgrade method in the aforementioned method embodiment is implemented.

[0082] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0083] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of this application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0084] It should be understood that in this application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0085] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0086] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0087] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0088] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including a number of instructions for executing all or part of the steps of the method described in each embodiment of the present application through a computer device (which can be a personal computer, server, or network device, etc.). The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (full name in English: Read-Only Memory, English abbreviation: ROM), random access memory (full name in English: Random Access Memory, English abbreviation: RAM), disk or optical disk and other media that can store program codes.

[0089] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A quantum-safe desktop client software upgrade method, characterized in that: include: After the computer inserts the quantum secure medium, the desktop client sets the key information in the quantum secure medium and initializes the quantum secure medium; The desktop client accesses the quantum security service platform to apply for a session key ID, and the quantum security service platform uses the session key ID to perform quantum security data encryption on the software version information to obtain first ciphertext data; The desktop client uses the first ciphertext data and the session key ID as interface request information to request the service platform interface, so that the service platform sends the interface request information to the quantum security service platform for quantum security data decryption, and determines whether the software needs to be upgraded according to the software version information obtained by decryption. If so, the service platform accesses the quantum security service platform through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and returns the response data to the desktop client; The desktop client accesses the quantum security service platform through the session key ID to perform quantum security data decryption on the response data, obtains the upgrade download address, accesses the upgrade download address to download the data packet, and upgrades the desktop client software according to the downloaded data packet.

2. The quantum-safe desktop client software upgrade method according to claim 1, characterized in that: During the quantum-safe encryption process, the quantum-safe service platform uses a quantum-safe encryption method that combines SM4 and CBC to encrypt key software version information.

3. The quantum-safe desktop client software upgrade method according to claim 1, characterized in that: The desktop client uses the first ciphertext data and the session key ID as interface request information to request a service platform interface, and the method also includes: The desktop client encrypts the first ciphertext data using AES symmetric encryption to obtain second ciphertext data; The desktop client uses the first ciphertext data and the session key ID as interface request information to request a service platform interface, so that the service platform sends the interface request information to the quantum security service platform for quantum security data decryption, including: The desktop client uses the second ciphertext data and the session key ID as interface request information, and uses HTTPS and POST to request the business platform interface, so that the business platform decrypts the second ciphertext data to obtain the first ciphertext data, and sends the first ciphertext data and the session key ID to the quantum security service platform for quantum security data decryption.

4. The quantum-safe desktop client software upgrade method according to claim 1, characterized in that: The service platform returns the response data to the desktop client, which also includes: The service platform encrypts the response data using AES symmetric encryption to obtain encrypted response data; The desktop client accesses the quantum security service platform through the session key ID to perform quantum security data decryption on the response data and obtain the upgrade download address, which also includes: The desktop client decrypts the received encrypted response data to obtain the response data.

5. The quantum-safe desktop client software upgrade method according to claim 1, characterized in that: The method further comprises: When downloading a data packet, the desktop client monitors the insertion status of the quantum secure medium in real time, and interrupts the downloading of the data packet when it is detected that the quantum secure medium is unplugged.

6. The quantum-safe desktop client software upgrade method according to claim 1, characterized in that: Initializing the quantum secure medium, and then further comprising: The quantum secure medium matches the login account information of the desktop client software with the login account information of the quantum secure medium to achieve identity authentication.

7. A quantum-safe desktop client software upgrade system, characterized in that: include: A desktop client is used to set key information in the quantum secure medium and initialize the quantum secure medium after the quantum secure medium is inserted into the computer; Apply for a session key ID by accessing the quantum security service platform and sending the software version information to the quantum security service platform; The quantum security service platform is used to perform quantum security data encryption on the software version information using the session key ID to obtain first ciphertext data, and return the first ciphertext data to the desktop client; The desktop client is further used to request a service platform interface using the first ciphertext data and the session key ID as interface request information; The business platform is used to send the interface request information to the quantum security service platform for quantum security data decryption, and determine whether the software needs to be upgraded according to the software version information obtained by decryption. If so, the business platform accesses the quantum security service platform through the session key ID to perform quantum security data encryption on the upgrade download address to obtain response data, and returns the response data to the desktop client; The desktop client is also used to access the quantum security service platform through the session key ID to perform quantum security data decryption on the response data, obtain an upgrade download address, access the upgrade download address to download data packets, and upgrade the desktop client software according to the downloaded data packets.

8. The quantum-safe desktop client software upgrade system according to claim 7, characterized in that: The desktop client is further used to encrypt the first ciphertext data using AES symmetric encryption to obtain second ciphertext data; use the second ciphertext data and the session key ID as interface request information, and use HTTPS and POST to request the service platform interface; The business platform is also used to decrypt the second ciphertext data to obtain the first ciphertext data.

9. An electronic device, characterized in that: The device comprises a processor and a memory; The memory is used to store program code and transmit the program code to the processor; The processor is used to execute the quantum-safe desktop client software upgrade method described in any one of claims 1-6 according to the instructions in the program code.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium is used to store program code, and when the program code is executed by a processor, the quantum-safe desktop client software upgrade method according to any one of claims 1 to 6 is implemented.

Images