Security communication method and system based on QRNG and beidou positioning terminal

Abstract

The application provides a secure communication method and system based on QRNG and Beidou positioning terminal. The sending end and the receiving end of the communication are pre-stored with a pre-shared initial key, and a space-time reference parameter group is obtained through Beidou positioning. A key encapsulation key is generated by using the SM4 algorithm of the national secret. The space-time parameter deviation in the communication process is monitored in real time, and the key update protocol is triggered when the threshold is exceeded. After the receiving end verifies the hash check value, the initial encryption key is decrypted to obtain the plaintext data. The system uses the generated true random number sequence as the encryption key, which fundamentally enhances the unpredictability and randomness of the key, effectively resisting quantum computing attacks and man-in-the-middle attacks. The use of pre-shared key mechanism and key encapsulation key improves the response speed and efficiency of the communication system. At the same time, the position parameter and the timestamp are deeply integrated into the key generation process, making it more difficult to fake space-time information and further improving the defense capability of the system.

Description

Technical Field

[0001] This application relates to the field of secure communication technology, and in particular to a secure communication method and system based on QRNG and Beidou positioning terminal. Background Technology

[0002] The BeiDou Navigation Satellite System (BDS), my country's independently developed global satellite navigation system, has been widely used in positioning, timing, and short message communication. However, with the rapid development of information technology, the importance of communication security has become increasingly prominent. Currently, traditional BeiDou communication relies on classic encryption algorithms such as AES and RSA, whose security is based on computational complexity. This makes BeiDou link data transmission lack quantum-level security protection, the key distribution process is highly vulnerable to eavesdropping, and it may also face man-in-the-middle attacks, making it difficult to meet the stringent requirements of high-security scenarios.

[0003] At the same time, the field of communication security is facing a severe dual challenge. From the perspective of encryption algorithms, Shor's algorithm in quantum computing can successfully break traditional public-key encryption systems such as RSA and ECC in polynomial time; while traditional pseudo-random number generators (PRNGs), due to the deterministic nature of their algorithms, suffer from predictability risks, seriously affecting the security of key generation. From the perspective of spatiotemporal information, in existing communication systems, spatiotemporal information such as timestamps and geographical locations are separated from the encryption process. This makes time synchronization susceptible to signal interruption or tampering, and location information is also easily forged. Faced with complex combined attacks, the defense capabilities of existing systems are severely inadequate. Summary of the Invention

[0004] To address the issues of low security and insufficient defense capabilities in existing key generation methods for communication security, this application provides a secure communication method based on QRNG and a BeiDou positioning terminal, comprising the following steps:

[0005] A secure communication method based on QRNG and a BeiDou positioning terminal includes the following steps:

[0006] The same pre-shared initial key is preset at both the sending and receiving ends of the communication;

[0007] The transmitting end obtains a set of spatiotemporal reference parameters, including timestamp, initial longitude, initial latitude and initial altitude, through BeiDou positioning;

[0008] An initial encryption key is randomly generated, and the initial encryption key is XORed with the pre-shared initial key and the spatiotemporal reference parameter group using the national cryptographic SM4 algorithm to generate a key encapsulation key.

[0009] Perform an initial encryption key XOR operation on the BeiDou short message text data to generate ciphertext data and a hash check value corresponding to the ciphertext data;

[0010] Real-time monitoring of spatiotemporal parameter deviations during communication, including time deviation and spatial displacement, triggering a key update protocol when the time deviation exceeds 50ms or the spatial displacement exceeds 1.389m.

[0011] The encrypted data packet is transmitted to the receiving end via the BeiDou communication link;

[0012] After verifying the hash check value, the receiving end uses the pre-shared initial key to decrypt and obtain the initial encryption key, and then decrypts and restores the plaintext data.

[0013] The key update protocol includes:

[0014] The receiving end randomly generates a new initial encryption key and obtains a new set of spatiotemporal reference parameters.

[0015] A new key encapsulation key is generated by performing an XOR operation on the new initial encryption key, the pre-shared initial key, and the new spatiotemporal reference parameter group using the national cryptographic SM4 algorithm.

[0016] The spatiotemporal parameter deviation during this communication process is monitored in real time until the spatiotemporal parameter deviation meets the threshold range.

[0017] In one feasible implementation, the calculation of the spatiotemporal parameter deviation includes:

[0018] Calculate the time deviation ΔT and the spatial displacement ΔS;

[0019] The time deviation ΔT = |T1 - T0|, where T1 is the current timestamp and T0 is the initial timestamp;

[0020] The spatial displacement;

[0021] In the formula, X1 is the real-time longitude, X0 is the initial longitude, Y1 is the real-time latitude, Y0 is the initial latitude, Z1 is the real-time altitude, and Z0 is the initial altitude;

[0022] The threshold value of 1.389m for spatial displacement is the maximum displacement over a 50ms time period based on a moving speed of 100km / h.

[0023] In one feasible implementation, the step of verifying the hash check value includes:

[0024] The receiving end calculates the SHA256 value of the obtained encrypted data;

[0025] When the calculation result is inconsistent with the hash check value in the encrypted data packet, communication is interrupted and an abnormal alarm is triggered.

[0026] In one feasible implementation, the step of using the pre-shared initial key to decrypt and obtain the initial encryption key, and then decrypting and restoring the original data, includes:

[0027] The receiving end uses the pre-shared initial key to perform SM4 decryption on the key encapsulation key, restoring the initial encryption key of the sending end;

[0028] The initial encryption key is used to perform an inverse XOR operation on the ciphertext data to obtain the plaintext data of the original BeiDou short message.

[0029] This application also provides a secure communication system based on QRNG and a Beidou positioning terminal, used to implement the secure communication method based on QRNG and a Beidou positioning terminal as described in any of the above claims, comprising: a quantum random number generation module, a Beidou positioning module, an encryption control module, a storage module, an interface module, and a power supply module; wherein the quantum random number generation module and the Beidou positioning module are integrated in the same hardware device;

[0030] The quantum random number generation module is used to generate a true random number sequence as the encryption key and the initial encryption key;

[0031] The BeiDou positioning module is used to acquire a set of spatiotemporal reference parameters in real time, including timestamp, initial longitude, initial latitude and initial altitude.

[0032] The encryption control module is used to execute the encryption algorithm and perform an XOR operation between the spatiotemporal reference parameter group and the random number sequence;

[0033] The encryption control module is also configured to trigger the key update protocol based on the spatiotemporal parameter deviation of the spatiotemporal reference parameter group.

[0034] The storage module is used to store the pre-shared initial key, the dynamic encryption key, and security policy parameters;

[0035] The interface module is used to send encapsulated encrypted data packets via BeiDou short message service.

[0036] The power supply module is electrically connected to the quantum random number generation module, the Beidou positioning module, the encryption control module, the storage module, and the interface module, and is used to supply power to the communication system.

[0037] In one feasible implementation, the pre-shared initial key is a reference random number sequence pre-allocated by the quantum random number generation module, and the sending end and the receiving end pre-set the same pre-shared initial key before communication.

[0038] In one feasible implementation, the spatiotemporal reference parameter set includes: initial timestamp, initial longitude, initial latitude, and initial altitude;

[0039] The initial timestamp is a nanosecond-level time stamp provided by the BeiDou time service system;

[0040] The initial longitude, initial latitude, and initial altitude are geographic coordinates obtained in real time by the BeiDou positioning module;

[0041] The encryption control module is also used to perform an XOR operation between the spatiotemporal reference parameter group and the pre-shared initial key to generate a key encapsulation key.

[0042] In one feasible implementation, the encryption control module is further configured as follows:

[0043] After performing a bitwise XOR operation between the initial encryption key generated by the quantum random number generation module and the pre-shared initial key and the spatiotemporal reference parameter group, a key encapsulation key is generated by the national cryptographic SM4 algorithm.

[0044] The initial encryption key is used to perform XOR encryption on the BeiDou short message text data to generate ciphertext data.

[0045] The SHA256 hash value of the encrypted data is calculated as the integrity verification value.

[0046] In one feasible implementation, the data packet structure sent by the communication module includes: a synchronization header, which is used to identify the start of a data frame;

[0047] And the encrypted spatiotemporal reference parameter set, key encapsulation key, ciphertext data, and hash check value;

[0048] The hash verification value is generated by performing a SHA256 operation on the ciphertext data.

[0049] As described above, this application provides a secure communication method and system based on a QRNG and a BeiDou positioning terminal. By integrating a quantum random number generator (QRNG) with a BeiDou positioning terminal, a highly secure spatiotemporal information binding secure communication system is constructed. This system achieves a complete security closed loop from the physical layer to the application layer, significantly improving the overall security and reliability of the communication system. The system utilizes a true random number sequence generated by the QRNG as the encryption key, fundamentally enhancing the unpredictability and randomness of the key, effectively resisting quantum computing attacks and man-in-the-middle attacks. The use of a pre-shared key mechanism and key encapsulation reduces the complexity of key management and improves the response speed and efficiency of the communication system. Simultaneously, through a spatiotemporal dynamic verification mechanism, location parameters and timestamps are deeply integrated into the key generation process, making it difficult for attackers to forge the spatiotemporal information of legitimate users, further improving the system's defense capabilities and providing effective security guarantees for scenarios such as IoT device authentication and critical infrastructure protection. Attached Figure Description

[0050] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the implementation of the invention and, together with the description, serve to explain the principles of the embodiments of the invention. It is obvious that the drawings described below are merely some embodiments of the invention, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0051] Figure 1 A schematic diagram illustrating secure communication between a QRNG-based QRNG and a BeiDou positioning terminal, which is an exemplary embodiment of this application;

[0052] Figure 2 A flowchart illustrating a secure communication method between a QRNG-based device and a BeiDou positioning terminal, which is an exemplary embodiment of this application;

[0053] Figure 3 A schematic diagram of a secure communication system structure based on QRNG and a Beidou positioning terminal, illustrating an exemplary embodiment of this application;

[0054] Figure 4 This is a schematic diagram illustrating a secure communication architecture based on QRNG and a Beidou positioning terminal, which is an exemplary embodiment of this application. Detailed Implementation

[0055] Exemplary embodiments will now be described more fully with reference to the accompanying drawings. However, these exemplary embodiments can be implemented in many forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the embodiments of the invention will be more comprehensive and complete, and will fully convey the concept of the exemplary embodiments to those skilled in the art. The described features, mechanisms, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided to give a full understanding of how embodiments of the invention are carried out.

[0056] The BeiDou Navigation Satellite System (BDS), my country's independently developed global satellite navigation system, has been widely used in positioning, timing, and short message communication. However, with the rapid development of information technology, the importance of communication security has become increasingly prominent. Currently, traditional BeiDou communication relies on classic encryption algorithms such as AES and RSA, whose security is based on computational complexity. This makes BeiDou link data transmission lack quantum-level security protection, the key distribution process is highly vulnerable to eavesdropping, and it may also face man-in-the-middle attacks, making it difficult to meet the stringent requirements of high-security scenarios.

[0057] Against this backdrop, traditional encryption systems face severe challenges from quantum fragility. Their core flaw lies in their reliance on pseudo-random number generators with high algorithmic complexity for key generation. Such generators suffer from inherently weak key strength due to statistical bias and residual predictability. Coupled with the proliferation of weak passwords and the continued existence of vulnerabilities like Heartbleed, attackers can exploit system vulnerabilities to directly intercept random number sequences. At the same time, mainstream public-key encryption algorithms (such as RSA-2048) cannot withstand quantum computing attacks, while new quantum-resistant cryptographic schemes based on lattice theory have not yet achieved large-scale replacement capabilities due to lagging standardization, high hardware and software adaptation costs, and insufficient ecosystem compatibility. This generational gap in technology exposes traditional encryption systems to the risk of structural failure in the era of quantum computing.

[0058] Meanwhile, the spatiotemporal information security system has multi-dimensional vulnerabilities. Its time synchronization mechanism relies excessively on vulnerable external sources (such as NTP protocols based on GPS or the Internet). Once interfered with or hijacked, it will trigger a systemic trust crisis. The location information verification link lacks effective protection. Attackers can induce objects to deviate from the preset path by forging GPS signals, or tamper with the physical coordinates of IoT devices to destroy the authentication mechanism. A deeper hidden danger is that existing security protocols (such as TLS) only establish a trust chain through timestamps, but do not deeply bind location parameters with the encryption process. This loose coupling of spatiotemporal correlation provides an opportunity for combined attacks of "location spoofing + time replay", causing traditional security protection systems to face a three-dimensional risk of failure in the spatiotemporal dimension.

[0059] Current positioning technology and cryptographic systems exhibit a significant systemic disconnect. BeiDou terminals still focus on basic navigation and positioning as well as emergency communication scenarios. Their spatiotemporal data and encryption systems lack a deep, end-to-end integration mechanism, preventing position parameters from being internalized into the key generation process. Meanwhile, quantum random number generation systems often operate as isolated modules, failing to establish real-time spatiotemporal associations with positioning terminals or map dynamic environmental variables such as location coordinates and timestamps to the key entropy source construction process. This disconnect between "key generation and spatiotemporal verification" severely restricts the implementation of the proactive defense model of "spatiotemporal dynamic binding + one-time key," exposing significant defense blind spots in scenarios such as IoT device authentication and critical infrastructure protection in the face of complex spatiotemporal attacks.

[0060] Traditional quantum key distribution (QKD) systems suffer from significant system implementation bottlenecks. Their physical devices often employ a chassis-based architecture, resulting in bulky size and high power consumption, which fundamentally contradicts the lightweight integration requirements of mobile terminals. Early quantum random number generators, due to their independent deployment characteristics, further exacerbated hardware redundancy. At the same time, quantum-resistant cryptographic algorithms have deep compatibility conflicts with existing communication protocols such as IPSec / SSL. Protocol stack modifications require the reconstruction of the network trust model, leading to a dual cost dilemma in the security upgrade process—it requires investment in the research and development of new cryptographic modules, as well as additional payments for cross-protocol compatibility testing and end-to-end device iteration. This superposition of technical debt severely delays the large-scale penetration of quantum security capabilities.

[0061] To address the aforementioned problems, the first aspect of this application provides a secure communication method for spatiotemporal information binding based on QRNG and a BeiDou positioning terminal, referring to... Figure 1 and Figure 2 As shown, the steps include:

[0062] S100: The same pre-shared initial key Q0 is preset at the sending and receiving ends of the communication.

[0063] The key consists of a 256-bit pre-generated sequence of truly random numbers from a quantum random number generator (QRNG), which is loaded into the storage modules of both the sending and receiving ends via a secure channel (such as offline key injection). This step ensures that both communicating parties have an initial trust anchor, providing a foundation for subsequent key negotiation.

[0064] S200: The transmitting end obtains a set of spatiotemporal reference parameters, including timestamp, initial longitude, initial latitude and initial altitude, through BeiDou positioning.

[0065] The spatiotemporal reference parameter set can be labeled as (T0, X0, Y0, Z0). Specifically, T0 is the nanosecond-level timestamp provided by the BeiDou time service system, with an accuracy better than ±10ns; X0 and Y0 are the initial latitude and longitude coordinates, with an accuracy better than ±0.1m; and Z0 is the altitude, with an accuracy better than ±0.5m. The spatiotemporal parameters can be obtained through dual-mode BeiDou RDSS (Radio Determination Service) and RNSS (Navigation Satellite Service) to ensure positioning reliability in complex electromagnetic environments.

[0066] S300: Randomly generate an initial encryption key, and use the national cryptographic SM4 algorithm to perform an XOR operation on the initial encryption key, the pre-shared initial key, and the spatiotemporal reference parameter group to generate a key encapsulation key;

[0067] The initial encryption key is denoted as K0, where K0 is a 256-bit truly random number sequence. The key encapsulation key is denoted as KEK, and the calculation formula is as follows:

[0068] KEK=SM4_Encrypt(K0⊕Q0⊕T0⊕X0⊕Y0⊕Z0, SM4_Key).

[0069] Here, SM4_Key is a fixed system parameter (such as the public key specified in national standards), and ⊕ represents a bitwise XOR operation. This step merges the pre-shared key, spatiotemporal parameters, and random key to generate a key encapsulation key KEK, enabling dynamic key binding.

[0070] S400: Perform an initial XOR operation on the BeiDou short message text data to generate ciphertext data and a hash check value corresponding to the ciphertext data.

[0071] In this case, the plaintext data of the Beidou short message service is marked as: D0 (plaintext data content is, for example: "Emergency rescue coordinates: X1, Y1, Z1"). This step specifically performs the following operations:

[0072] XOR encryption yields the ciphertext: C0 = D0⊕K0;

[0073] The hash value obtained by hash calculation is: H = SHA256(C0);

[0074] The encrypted data C0 is the ciphertext, and H is a 256-bit hash value used by the receiving end to verify data integrity.

[0075] S500: Real-time monitoring of spatiotemporal parameter deviations during communication, i.e., collecting real-time spatiotemporal parameters (T1, X1, Y1, Z1) once per second, and calculating spatiotemporal deviations, which include time deviation ΔT and spatial displacement ΔS.

[0076] When ΔT > 50ms or ΔS > 1.389m (corresponding to the maximum displacement of 50ms at a speed of 100km / h), the key update protocol is triggered. The threshold is set based on the BeiDou positioning error tolerance and the speed limit.

[0077] Specifically, the key update protocol includes the following steps:

[0078] S001: When ΔT or ΔS exceeds the limit, the receiver randomly generates a new initial encryption key K1 and obtains a new set of spatiotemporal reference parameters.

[0079] S002: Using the national cryptographic SM4 algorithm, the new initial encryption key K1 is XORed with the pre-shared initial key and the new spatiotemporal reference parameter group to generate a new key encapsulation key KEK.

[0080] S003: Monitor the spatiotemporal parameter deviation during this communication process in real time until the spatiotemporal parameter deviation meets the threshold range.

[0081] After verifying the validity of the initial encryption key K1 through hash chain verification, the receiving end uses the new initial encryption key K1 as the initial encryption key for the next communication.

[0082] The key update protocol is irrecoverable once the base key Q1 is destroyed. Even if the current session is compromised, historical data remains secure. It does not rely on an external key distribution center and is suitable for key updates in offline environments. Binding the new initial encryption key K1 to a spatiotemporal offset prevents attackers from replaying ciphertext generated by the old key.

[0083] S600: Transmit the encrypted data packet to the receiving end via the BeiDou communication link.

[0084] Under normal circumstances, BeiDou short messages support a maximum length of 1024 bytes, and the total length of the data packets in this application does not exceed 512 bytes, which can ensure transmission efficiency.

[0085] S700: After verifying the hash check value, the receiving end uses the pre-shared initial key to decrypt and obtain the initial encryption key, and then decrypts and restores the plaintext data.

[0086] Specifically, the receiving end performs the following operations:

[0087] Calculate the SHA256 value of the ciphertext C0' received by the receiving end and compare it with H. If they do not match, the communication is interrupted.

[0088] Use the pre-shared initial key Q0 to decrypt the key encapsulating the key KEK;

[0089] The restored initial encryption key is: K0' = SM4_Decrypt(KEK, SM4_Key) ⊕ Q0 ⊕ T0 ⊕ X0 ⊕ Y0 ⊕ Z0;

[0090] The restored BeiDou short message data is: D0'=C0⊕K0'.

[0091] The K0 generated in this embodiment has true randomness, and the cracking complexity reaches 2256, far exceeding the brute-force cracking difficulty of traditional AES-256. Moreover, the attacker needs to forge both the spatiotemporal parameters and the pre-shared initial key Q0 to generate a legitimate KEK. The pre-shared initial key Q0 is not transmitted online, which greatly increases the attack threshold. At the same time, the key update is automatically triggered by the ΔT / ΔS threshold, which solves the risk of leakage caused by the long-term use of static keys.

[0092] In some embodiments of this application, the time deviation is calculated as follows: the absolute difference between the timestamp T1 output by the BeiDou timing module read by the transmitting end and the initial timestamp T0 is calculated: ΔT = |T1 - T0|. For example:

[0093] The initial time is: T0 = 1625437200.123456789;

[0094] The current time is: T1 = 1625437201.456789123;

[0095] Then ΔT = 1.333332334 seconds → 1333.332334 ms, which exceeds the 50 ms threshold, triggering a key update.

[0096] Spatial displacement is calculated as follows: The Euclidean distance between the real-time coordinates (X1, Y1, Z1) output by the BeiDou positioning module at the transmitting end and the initial coordinates (X0, Y0, Z0) is calculated using the following formula:

[0097]

[0098] Take a specific coordinate data as an example:

[0099] Initial coordinates: X0 = 116.3974°, Y0 = 39.9093°, Z0 = 43m;

[0100] Coordinates after 50ms: X1 = 116.3975°, Y1 = 39.9094°, Z1 = 45m;

[0101] Converting latitude and longitude to displacement yields: Longitude difference: 0.0001°×111319×cos(39.9093°)≈8.45m, Latitude difference: From 1° latitude≈111.319km, we can get 0.0001°×111319≈11.13m.

[0102] but If the threshold of 1.389m is exceeded, a key update is triggered.

[0103] The threshold for time deviation in this application is set based on a time threshold of 50ms and a spatial threshold of 1.389m.

[0104] The time threshold of 50ms corresponds to the maximum time synchronization error of the BeiDou timing module under extreme electromagnetic interference; the spatial threshold of 1.389m is calculated by the formula v×t, where v=100km / h=27.778m / s, t=0.5ms, and the product is rounded down to get 1.389m.

[0105] In this embodiment, based on the threshold setting of the time deviation, the scheme execution has the following three results:

[0106] (1) ΔT=|T1-T0|≥50ms, the time information is deviated, the second spatiotemporal information data timed out, local alarm is triggered, timeout retransmission is performed, the key update protocol is executed and all the aforementioned steps are repeated.

[0107] (2) If spatial information deviates, data is abnormal, a local alarm is triggered and communication is interrupted. The system waits for the next communication cycle, executes the key update protocol, and repeats all the aforementioned steps.

[0108] (3) ΔT=|T1-T0|≤50ms, ΔS≤1.389m, then the spatiotemporal information deviation is within the allowable range, and the current communication continues.

[0109] This embodiment uses a dual threshold joint judgment to avoid misjudgment based on a single dimension. For example, a brief electromagnetic interference may cause ΔT to exceed the standard but ΔS to be normal. Furthermore, attackers need to control the spatiotemporal parameters simultaneously to bypass the detection. The Beidou military code signal has anti-interference capabilities, and civilian signals can also improve anti-spoofing performance through multi-frequency point combinations.

[0110] In some embodiments of this application, step S700 of verifying the hash check value includes:

[0111] S710: After the receiving end obtains the encrypted data packet, it extracts the ciphertext data C0 and calculates: hash check value H' = SHA256(C0).

[0112] S720: Compare the hash check value H' with the hash value H in the data packet bit by bit:

[0113] If H' = H, it means the data is complete and decryption can continue.

[0114] If H'≠H, it indicates that the data has been tampered with, interrupting communication and triggering an abnormal alarm.

[0115] When hash verification fails, the receiving end records the abnormal event (including time, the other party's ID, and the data packet digest), initiates the key update protocol, forces both parties to update the pre-shared key, and sends an alarm log to the security monitoring center.

[0116] This embodiment ensures that attackers cannot construct a valid H value through the collision resistance of SHA256; an alarm is triggered immediately when the hash verification fails, shortening the attack window period, and at the same time, abnormal records provide data support for security auditing.

[0117] In some embodiments of this application, step S700 further includes:

[0118] S701: The receiving end uses the pre-shared initial key Q0 to decrypt the key encapsulating the key KEK, obtaining the restored initial encryption key:

[0119] K0′=SM4_Decrypt(KEK, SM4_Key)⊕Q0⊕T0⊕X0⊕Y0⊕Z0.

[0120] S702: Perform an inverse XOR operation on C0 using K0' to obtain the restored BeiDou short message text data: D0'=C0⊕K0'.

[0121] The restored BeiDou short message text data D0' is format-checked (such as the field length and encoding rules specified in the BeiDou short message protocol). If the check fails, the data is discarded and an alarm is triggered.

[0122] This embodiment employs a dual decryption mechanism, namely, layered protection between the key encapsulation key KEK and the initial encryption key K0. Even if the key encapsulation key KEK is leaked, attackers still need to crack the BeiDou short message text data Q0 and spatiotemporal parameters to obtain the initial encryption key K0. It also prevents attackers from sending legitimately encrypted but forged messages.

[0123] Another aspect of this application provides a secure communication system based on QRNG and a BeiDou positioning terminal, the system being used to implement any of the aforementioned secure communication methods based on QRNG and a BeiDou positioning terminal.

[0124] Reference Figure 3 As shown, the system includes: a quantum random number generation module, a BeiDou positioning module, an encryption control module, a storage module, an interface module, and a power supply module. Among them, the quantum random number generation module, i.e., the QRNG chip, is integrated with the BeiDou positioning module in the same hardware device, and the data interaction between the quantum random number generation module and the BeiDou module is realized through the SPI bus. The quantum random number generation module and the BeiDou positioning module are directly connected, share power management and interface functions, and perform data interaction through the encryption control module.

[0125] The BeiDou positioning module is responsible for providing precise spatiotemporal information, including the current timestamp (T1) and coordinates (X1, Y1, Z1), which are indispensable spatiotemporal references in the encryption process. The quantum random number generation module is responsible for generating truly random number sequences, which are used as encryption keys and initial encryption keys, ensuring the randomness and unpredictability of the keys.

[0126] The encryption control module reads random numbers generated by QRNG and spatiotemporal information provided by BeiDou, and performs encryption operations. Using advanced encryption algorithms, it performs an XOR operation between the spatiotemporal reference parameter set and the random number sequence to generate a secure encryption key. Furthermore, the encryption control module is configured to trigger a key update protocol based on the spatiotemporal parameter deviation of the spatiotemporal reference parameter set, ensuring real-time key updates and security.

[0127] The storage module is responsible for storing keys and related data, including pre-shared keys, dynamic keys, and security policies. These keys and data are crucial to the security and reliability of the communication system. Through partitioned storage, the storage module can effectively manage different types of keys and data, ensuring both security and availability.

[0128] The interface module sends encapsulated encrypted data packets via BeiDou short message service. Utilizing the short message communication capability of the BeiDou system, the encrypted data packets are securely transmitted to the receiving end. This communication method not only offers high security but also enables communication even when traditional communication networks are unavailable.

[0129] The power supply module is electrically connected to the quantum random number generation module, BeiDou positioning module, encryption control module, storage module, and interface module, providing a stable power supply for the entire communication system. A distributed power supply method is adopted, providing an independent power domain for each module, reducing the risk of noise interference and power failure.

[0130] Specifically, the integrated architecture in this embodiment fully utilizes the spatiotemporal reference of BeiDou and the high security of QRNG, providing dual protection for the communication process. By dynamically monitoring spatiotemporal parameter deviations, this scheme can ensure the real-time nature and security of the key, effectively resisting key leakage and man-in-the-middle attacks. Simultaneously, the encryption control module can directly access the storage module, enabling rapid key loading and improving the response speed and security of the communication system.

[0131] In some embodiments of this application, the pre-shared initial key is a baseline random number sequence pre-allocated by the quantum random number generation module. The quantum random number generation module uses quantum mechanics principles to generate truly random numbers, ensuring that the generated key has a high degree of unpredictability and randomness. Before communication, the sending and receiving ends pre-set the same pre-shared initial key. This step ensures that both parties can use the same key for encryption and decryption operations during encrypted communication.

[0132] This pre-shared key mechanism not only improves the security of key transmission but also reduces the complexity of key management. Because the keys generated by the quantum random number generation module are unpredictable, attackers find it difficult to obtain them through guessing or cracking, thus enhancing communication security. Furthermore, since the sender and receiver have the same key pre-configured before communication, there is no need for frequent key updates and synchronization during communication, simplifying the key management process and reducing management costs. In addition, this mechanism has good compatibility and scalability, and can adapt to communication systems of different sizes and types.

[0133] Furthermore, this embodiment enhances communication security. By employing a key generated from quantum random numbers, the unpredictability and randomness of the key are improved, thereby enhancing communication security. It also simplifies the key management process. The use of a pre-shared key mechanism avoids the cumbersome operations of frequently updating and synchronizing keys during communication, reducing management costs. Simultaneously, it improves communication efficiency. Since frequent key updates are unnecessary, latency and overhead during communication are reduced, improving communication efficiency.

[0134] In some embodiments of this application, the spatiotemporal reference parameter set specifically includes four key parameters: initial timestamp, initial longitude, initial latitude, and initial altitude. These parameters are not preset values, but are collected and provided in real time by the BeiDou time service system and positioning module. The BeiDou time service system ensures the accuracy of the timestamp, while the positioning module provides accurate latitude and longitude information and altitude data. These real-time acquired spatiotemporal reference parameters provide an objective and reliable reference for the subsequent encryption process.

[0135] The encryption control module is responsible for managing and controlling the entire encryption process. It also performs an XOR operation between the aforementioned spatiotemporal reference parameters and the pre-shared initial key. XOR is a basic bitwise operation that compares two binary numbers bit by bit; if corresponding bits differ, the result is 1, and if they are the same, the result is 0. This operation combines the uniqueness of the spatiotemporal reference parameters with the confidentiality of the pre-shared key to generate a highly complex and random key encapsulation key, thereby effectively enhancing key security.

[0136] In some embodiments of this application, the functionality of the encryption control module has been further optimized and expanded. Specifically, the encryption control module is configured to perform the following operations:

[0137] First, the initial encryption key generated by the quantum random number generation module is XORed with the pre-shared initial key and the spatiotemporal reference parameter set. Quantum random numbers possess unpredictability and true randomness, which further enhances the complexity and security of the key. Then, the result is further processed using the national cryptographic SM4 algorithm to generate the final key encapsulation key.

[0138] Among them, the SM4 algorithm, a national standard encryption algorithm, is a symmetric encryption algorithm characterized by high efficiency and security, suitable for scenarios such as key encapsulation. Furthermore, the encryption control module uses the initial encryption key to perform XOR encryption on the BeiDou short message text data, generating ciphertext data, and calculates the SHA256 hash value of the ciphertext data as an integrity verification value. SHA256 is a widely used hash function that can generate fixed-length hash values ​​used to verify the integrity and authenticity of data.

[0139] The combination of the above encryption and verification mechanisms ensures the integrity and security of data during transmission. XOR encryption and SHA256 hash verification provide means for data confidentiality and integrity verification, effectively preventing data from being tampered with or intercepted during transmission.

[0140] In some embodiments of this application, the data packet structure sent by the communication module includes a synchronization header, an encrypted spatiotemporal reference parameter group, a key encapsulation key, ciphertext data, and a hash check value.

[0141] Specifically, the synchronization header identifies the start of the data frame, facilitating correct parsing of the data packet by the receiving end. The encrypted spatiotemporal reference parameter group, key encapsulation key, ciphertext data, and hash checksum provide spatiotemporal reference information, key information, encrypted data, and data integrity verification methods, respectively. This data packet structure not only ensures data security but also improves the reliability and stability of the communication system. By ensuring the integrity and authenticity of the data packets, it reduces the error rate and packet loss rate during data transmission, thereby improving the overall performance of the communication system.

[0142] In summary, referring to Figure 4 As shown, this application presents a BeiDou spatiotemporally enhanced quantum-secure communication architecture. By deeply coupling the spatiotemporal reference of the BeiDou satellite navigation system with its quantum security characteristics, a protection system with a physical layer security foundation is constructed. The architecture adopts a three-layer collaborative protection design:

[0143] The lightweight quantum random number generator (QRNG) chip and the BeiDou positioning module are integrated at the physical layer. The real spatiotemporal entropy source is captured by utilizing the satellite signal propagation characteristics. The quantum random process ensures that the entropy source cannot be replicated, and the BeiDou spatiotemporal reference ensures that the geographical coordinates cannot be forged.

[0144] An innovative spatiotemporal-key bidirectional binding protocol was developed at the protocol layer, mapping the three-dimensional geographic coordinates of the terminal device and nanosecond-level timestamps to the key generation matrix, forming dynamically evolving encryption parameters. A dynamic evolution mechanism for the key generation matrix was established, giving the encryption parameters spatiotemporal uniqueness and instantaneous characteristics.

[0145] An intelligent security policy engine is deployed at the application layer to make risk decisions based on real-time calculated spatiotemporal offsets, establishing a security closed loop from the physical layer to the application layer.

[0146] This application constructs a progressive protection logic of "spatiotemporal entropy source → dynamic key → intelligent closed loop," deeply coupling quantum physical security with the trustworthiness of the spatiotemporal benchmark to form a secure communication system that combines physical layer unbreakability with protocol layer dynamic adaptability. Through the synergistic effect of the three layers, both the physical security of key generation and the adaptive protection capability of the communication process are guaranteed.

[0147] As described in the above embodiments, this application constructs a highly secure spatiotemporal information binding secure communication system by integrating a quantum random number generator (QRNG) with a BeiDou positioning terminal. This system achieves a complete security closed loop from the physical layer to the application layer, significantly improving the overall security and reliability of the communication system.

[0148] The system utilizes a truly random number sequence generated by QRNG as the encryption key, fundamentally enhancing the unpredictability and randomness of the key and effectively resisting quantum computing attacks and man-in-the-middle attacks. Simultaneously, through a spatiotemporal dynamic verification mechanism, location parameters and timestamps are deeply integrated into the key generation process, making it difficult for attackers to forge the spatiotemporal information of legitimate users, further improving the system's defense capabilities.

[0149] Furthermore, the system employs a dynamic key update mechanism, which monitors spatiotemporal parameter deviations in real time based on preset security thresholds and communication conditions. Once a specific condition is triggered, a key update operation is immediately executed, ensuring the real-time nature and security of the key. In addition, the system verifies the integrity of data transmission through hash verification and anomaly alarm mechanisms, promptly detecting and handling potential security threats. Efficient data encryption and transmission are achieved through optimized design of the encryption control module and interface module. Simultaneously, the use of a pre-shared key mechanism and key encapsulation reduces the complexity of key management and improves the response speed and efficiency of the communication system.

[0150] In summary, this application constructs a highly secure and reliable spatiotemporal information binding secure communication system through the deep integration of QRNG and Beidou positioning terminal, providing effective security guarantees for scenarios such as IoT device authentication and critical infrastructure protection.

[0151] Other embodiments of this disclosure will be readily apparent to those skilled in the art upon consideration of the disclosure in the specification and examples. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the following claims.

Claims

1. A secure communication method based on QRNG and a Beidou positioning terminal, characterized in that, Includes the following steps: The same pre-shared initial key is preset at both the sending and receiving ends of the communication; The transmitting end obtains a set of spatiotemporal reference parameters, including timestamp, initial longitude, initial latitude and initial altitude, through BeiDou positioning; An initial encryption key is randomly generated, and the initial encryption key is XORed with the pre-shared initial key and the spatiotemporal reference parameter group using the national cryptographic SM4 algorithm to generate a key encapsulation key; Perform an initial encryption key XOR operation on the BeiDou short message text data to generate ciphertext data and a hash check value corresponding to the ciphertext data; Real-time monitoring of spatiotemporal parameter deviations during communication, including time deviation and spatial displacement, triggering a key update protocol when the time deviation exceeds 50ms or the spatial displacement exceeds 1.389m. The encrypted data packet is transmitted to the receiving end via the BeiDou communication link; After verifying the hash check value, the receiving end uses the pre-shared initial key to decrypt and obtain the initial encryption key, and then decrypts and restores the plaintext data. The key update protocol includes: The receiving end randomly generates a new initial encryption key and obtains a new set of spatiotemporal reference parameters. A new key encapsulation key is generated by performing an XOR operation on the new initial encryption key, the pre-shared initial key, and the new spatiotemporal reference parameter group using the national cryptographic SM4 algorithm. The spatiotemporal parameter deviation during this communication process is monitored in real time until the spatiotemporal parameter deviation meets the threshold range; The steps of using the pre-shared initial key to decrypt and obtain the initial encryption key, and then decrypting and restoring the original data, include: The receiving end uses the pre-shared initial key to perform SM4 decryption on the key encapsulation key, restoring the initial encryption key of the sending end; The ciphertext data is subjected to an inverse XOR operation using the initial encryption key to obtain the plaintext data of the original BeiDou short message; The calculation of the spatiotemporal parameter deviation includes: Calculate the time deviation ΔT and the spatial displacement ΔS; The time deviation ΔT = |T1 - T0|, where T1 is the current timestamp and T0 is the initial timestamp; The spatial displacement; In the formula, X1 is the real-time longitude, X0 is the initial longitude, Y1 is the real-time latitude, Y0 is the initial latitude, Z1 is the real-time altitude, and Z0 is the initial altitude; The threshold value of 1.389m for spatial displacement is the maximum displacement over a 50ms time period based on a moving speed of 100km / h.

2. The secure communication method based on QRNG and Beidou positioning terminal according to claim 1, characterized in that, The steps for verifying the hash check value include: The receiving end calculates the SHA256 value of the obtained encrypted data; When the calculation result is inconsistent with the hash check value in the encrypted data packet, communication is interrupted and an abnormal alarm is triggered.

3. A secure communication system based on QRNG and a Beidou positioning terminal, characterized in that, The secure communication method based on QRNG and BeiDou positioning terminal for implementing any one of claims 1-2 includes: a quantum random number generation module, a BeiDou positioning module, an encryption control module, a storage module, an interface module, and a power supply module; wherein the quantum random number generation module and the BeiDou positioning module are integrated in the same hardware device. The quantum random number generation module is used to generate a true random number sequence as the encryption key and the initial encryption key; The BeiDou positioning module is used to acquire a set of spatiotemporal reference parameters in real time, including timestamp, initial longitude, initial latitude and initial altitude. The encryption control module is used to execute the encryption algorithm and perform an XOR operation between the spatiotemporal reference parameter group and the random number sequence; The encryption control module is also configured to trigger the key update protocol based on the spatiotemporal parameter deviation of the spatiotemporal reference parameter group. The storage module is used to store the pre-shared initial key, the dynamic encryption key, and security policy parameters; The interface module is used to send encapsulated encrypted data packets via BeiDou short message service. The power supply module is electrically connected to the quantum random number generation module, the Beidou positioning module, the encryption control module, the storage module, and the interface module, and is used to supply power to the communication system.

4. The secure communication system based on QRNG and Beidou positioning terminal according to claim 3, characterized in that, The pre-shared initial key is a reference random number sequence pre-allocated by the quantum random number generation module, and the sending end and the receiving end pre-set the same pre-shared initial key before communication.

5. The secure communication system based on QRNG and Beidou positioning terminal according to claim 3, characterized in that, The spatiotemporal reference parameter set includes: initial timestamp, initial longitude, initial latitude, and initial altitude; The initial timestamp is a nanosecond-level time stamp provided by the BeiDou time service system; The initial longitude, initial latitude, and initial altitude are geographic coordinates obtained in real time by the BeiDou positioning module; The encryption control module is also used to perform an XOR operation between the spatiotemporal reference parameter group and the pre-shared initial key to generate a key encapsulation key.

6. The secure communication system based on QRNG and Beidou positioning terminal according to claim 5, characterized in that, The encryption control module is also configured to: After performing a bitwise XOR operation between the initial encryption key generated by the quantum random number generation module and the pre-shared initial key and the spatiotemporal reference parameter group, a key encapsulation key is generated by the national cryptographic SM4 algorithm. The initial encryption key is used to perform XOR encryption on the BeiDou short message text data to generate ciphertext data. The SHA256 hash value of the encrypted data is calculated as the integrity verification value.

7. The secure communication system based on QRNG and Beidou positioning terminal according to claim 6, characterized in that, It also includes a communication module, the data packet structure sent by the communication module includes: a synchronization header, which is used to identify the start of a data frame; And the encrypted spatiotemporal reference parameter set, key encapsulation key, ciphertext data, and hash check value; The hash verification value is generated by performing a SHA256 operation on the ciphertext data.

Images