Network data encryption method and system based on quantum communication

Abstract

The invention relates to the technical field of network data encryption, and discloses a network data encryption method and system based on quantum communication, and the method comprises the steps: obtaining real-time channel transmission characteristic data and real-time network load change data, carrying out the multi-dimensional feature extraction, and obtaining a channel-load comprehensive real-time state; performing association analysis according to the channel-load comprehensive real-time state to obtain real-time abnormal mode distribution characteristics; performing comprehensive comparative analysis according to the real-time abnormal mode distribution characteristics to obtain a key generation step length adjustment range; performing adaptation analysis according to the key generation step length adjustment range and the real-time network load change data, and determining a preliminary configuration scheme; performing a simulation encryption test according to the preliminary configuration scheme, and generating an encryption test evaluation report; and performing real-time encryption adaptation optimization according to the encryption test evaluation report to obtain a final key configuration scheme. According to the method, dynamic key generation with long-term security can be realized.

Description

Technical Field

[0001] The present invention relates to the technical field of network data encryption, and in particular to a network data encryption method and system based on quantum communication. Background Art

[0002] Quantum communication, a core area of ​​next-generation communications technology, demonstrates significant advantages in network data encryption due to its high security and anti-eavesdropping properties based on the principles of quantum mechanics. This holds particular promise for widespread application in scenarios requiring high confidentiality, such as financial transactions, military communications, and government data protection. Quantum communication leverages the non-cloning and measurement collapse properties of quantum states to achieve theoretically unconditionally secure key distribution, thus providing a new level of security for network data encryption. Compared to traditional classical encryption methods, quantum communication not only enhances the security of data transmission but also offers a more reliable solution to addressing increasingly sophisticated cyberattacks.

[0003] In one existing technology, network data encryption based on quantum communication primarily relies on the quantum key distribution protocol, which achieves theoretically unconditionally secure key distribution through the non-cloning and measurement collapse properties of quantum states. Fixed key generation parameters are used to generate keys using a preset step size configuration, and network data is encrypted and protected in combination with classical encryption algorithms. For example, by periodically updating the key and making simple adjustments based on channel transmission characteristics, changes in the network environment can be addressed. However, in practical applications, due to reliance on static or semi-static step size configurations, it is difficult to effectively adapt to dynamically changing network environments, such as channel attenuation, noise interference, or unpredictable fluctuations in network load. This makes it difficult to simultaneously achieve both key generation efficiency and security in complex network scenarios. In particular, fixed parameter configurations can easily lead to increased bit error rates during peak loads or when the channel fluctuates significantly.

[0004] In summary, the existing technology has the problem of difficulty in achieving dynamic key generation with long-term security. Summary of the Invention

[0005] The present invention provides a network data encryption method and system based on quantum communication to achieve dynamic key generation with long-term security.

[0006] In a first aspect, in order to solve the above technical problems, the present invention provides a network data encryption method based on quantum communication, comprising: Acquire real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time channel-load status; Based on the comprehensive real-time channel-load status, a channel transmission-network fluctuation correlation analysis is performed to obtain a real-time abnormal pattern distribution feature; A comprehensive comparative analysis is performed based on the real-time abnormal pattern distribution characteristics and the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain a key generation step size adjustment range; Performing correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution; Conduct a simulated encryption test based on the preliminary configuration plan, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report; According to the encryption test evaluation report and the channel-load comprehensive real-time status, real-time encryption adaptation optimization is performed to obtain a real-time final key configuration solution.

[0007] In an optional embodiment, the step of acquiring real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, performing multi-dimensional feature extraction, and obtaining a comprehensive real-time channel-load state includes: Obtain real-time channel transmission characteristic data and real-time network load change data in quantum communication networks; The real-time channel transmission characteristic data includes key generation step length, real-time channel attenuation and real-time noise interference; Performing preliminary screening and classification based on the real-time channel transmission characteristic data and the real-time network load change data to obtain a preliminary channel-load data set; Based on the preliminary channel-load data set, multi-dimensional feature refinement is performed to obtain a comprehensive real-time status of the channel-load.

[0008] In an optional embodiment, the channel transmission-network fluctuation correlation analysis is performed based on the channel-load comprehensive real-time status to obtain real-time abnormal pattern distribution characteristics, and feature 3 is obtained, including: Classify and sort the channel-load comprehensive real-time status to obtain preliminary status description data; Perform abnormal fluctuation analysis based on the preliminary state description data to obtain a fluctuation trend feature set; Based on the fluctuation trend feature set, a channel transmission-network fluctuation correlation analysis is performed to obtain real-time abnormal pattern distribution features.

[0009] In an optional embodiment, performing a comprehensive comparative analysis based on the real-time abnormal pattern distribution characteristics in combination with the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain a key generation step size adjustment range includes: Extracting and summarizing the key generation step lengths based on the real-time channel transmission characteristic data to obtain a key generation step length configuration record; performing a deviation calculation based on the key generation step configuration record and combining the real-time channel attenuation and the real-time noise interference in the real-time channel transmission characteristic data to obtain an initial step configuration deviation value; Perform parameter calibration based on the initial step size configuration deviation value to obtain a step size adjustment reference range; According to the real-time abnormal pattern distribution characteristics and the step adjustment reference range, an association mapping analysis is performed to obtain the key generation step adjustment range. In an optional implementation, performing correlation adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution includes: Perform hierarchical dynamic correction according to the key generation step adjustment range to obtain a correction step parameter; Based on the modified step size parameter, a quantum bit error rate-transmission quality correlation analysis is performed to obtain a feasible range of the preliminary configuration scheme; According to the feasible range of the preliminary configuration scheme and the real-time network load change data, real-time adaptation is performed to obtain a preliminary configuration scheme.

[0010] In an optional embodiment, performing a simulated encryption test according to the preliminary configuration scheme, analyzing the encryption performance and transmission efficiency of the test feedback, and generating an encryption test evaluation report includes: Conduct a simulated encryption test based on the preliminary configuration plan to obtain encryption performance and transmission efficiency feedback from the test; Performing coupling analysis based on the encryption performance and the transmission efficiency to obtain a simulation effect feature set; Based on the simulation effect feature set and in combination with a preset simulation effect evaluation table, correlation analysis is performed to generate an encryption test evaluation report.

[0011] In an optional embodiment, performing real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load integrated real-time status to obtain a real-time final key configuration solution includes: Performing adaptation analysis based on the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a step size configuration real-time deviation value; Performing dynamic optimization of the step size according to the step size configuration real-time deviation value and the channel-load comprehensive real-time status to obtain a real-time optimized step size parameter; According to the real-time optimization step size parameter, an overall solution is generated to obtain a real-time final key configuration solution.

[0012] In a second aspect, the present invention provides a network data encryption system based on quantum communication, comprising: The data acquisition module is used to obtain real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time channel-load status; An anomaly analysis module, configured to perform a channel transmission-network fluctuation correlation analysis based on the comprehensive real-time channel-load status to obtain a real-time anomaly pattern distribution feature; A comprehensive comparison module is configured to perform a comprehensive comparison and analysis based on the real-time abnormal pattern distribution characteristics, combined with the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data, to obtain a key generation step size adjustment range; A preliminary configuration module, configured to perform correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution; An encryption test module is used to perform a simulated encryption test according to the preliminary configuration plan, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report; The result output module is used to perform real-time encryption adaptation optimization according to the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration solution.

[0013] In a third aspect, the present invention also provides an electronic device comprising a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, it implements any one of the above-mentioned network data encryption methods based on quantum communication.

[0014] In a fourth aspect, the present invention also provides a computer-readable storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the above-mentioned quantum communication-based network data encryption methods.

[0015] Compared with the prior art, the present invention has the following beneficial effects: (1) The present invention obtains real-time channel transmission characteristic data and real-time network load change data in the quantum communication network and performs multi-dimensional feature extraction to obtain the comprehensive real-time state of the channel-load, which can effectively improve the computing efficiency. The preliminary screening and classification of data and the multi-dimensional feature refinement in the process can remove redundant information and focus on key features such as key generation step, channel attenuation and noise interference, thereby reducing the amount of data to be processed subsequently and speeding up data processing. At the same time, the multi-dimensional feature extraction of real-time data enhances the comprehensiveness of the channel and load state, thereby indirectly improving the security of the encryption process and reducing potential security vulnerabilities caused by data loss. The comprehensive real-time state of the channel-load generated in this step provides an accurate basis for subsequent analysis and improves the overall efficiency of data processing.

[0016] (2) Based on the comprehensive real-time channel-load status, the present invention performs a correlation analysis of channel transmission and network fluctuations to obtain real-time abnormal pattern distribution characteristics. By classifying and organizing preliminary state description data and performing abnormal fluctuation analysis, it is possible to promptly identify abnormal trends in channel transmission and network load, generate a fluctuation trend feature set, and then perform correlation analysis to reveal the distribution characteristics of abnormal patterns. This allows for rapid detection of potential interference or abnormal situations, thereby effectively reducing security risks during the encryption process. In addition, the real-time nature of this step optimizes the response speed of abnormal pattern identification, indirectly improving computational efficiency and avoiding resource waste due to delayed analysis.

[0017] (3) The present invention conducts a comprehensive comparative analysis based on the distribution characteristics of the real-time abnormal pattern and the key generation step, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain the key generation step adjustment range. By collating and summarizing the key generation step configuration records and performing deviation calculation based on real-time channel attenuation and noise interference, the deviation of the step configuration can be accurately located, and then the adjustment range is generated through parameter calibration and association mapping analysis. This targeted adjustment reduces redundant iterative calculations and optimizes the execution efficiency of the step configuration process. At the same time, this step enhances the adaptability to abnormal patterns through comprehensive comparative analysis, thereby improving the security of key generation and reducing the encryption risk caused by parameter mismatch.

[0018] (4) The present invention performs an associated adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration scheme. During the process, the step parameters are dynamically modified in a hierarchical manner and combined with the quantum bit error rate-transmission quality correlation analysis to quickly screen out a feasible step range. Subsequently, the preliminary configuration scheme is further accurately located through real-time adaptation. This step-by-step optimization reduces redundant steps in the calculation process and speeds up the scheme generation speed. In addition, the adaptation analysis combined with the real-time network load change data enhances the matching degree between the configuration scheme and the actual environment, thereby improving the security of the encryption process and reducing potential security risks caused by environmental changes.

[0019] (5) The present invention conducts simulated encryption testing based on the preliminary configuration scheme, analyzes the encryption performance and transmission efficiency feedback from the test, and generates an encryption test evaluation report. Feedback data on encryption performance and transmission efficiency is obtained through simulated encryption testing, and coupled analysis is performed to generate a simulation effect feature set, which can comprehensively evaluate the performance of the preliminary configuration scheme under different conditions. This test-feedback-analysis process can promptly discover potential security weaknesses and further verify the reliability of the scheme through correlation analysis, thereby enhancing the overall security of key generation. At the same time, this step optimizes resource utilization through a structured testing process, indirectly improving computing efficiency.

[0020] (6) The present invention performs real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration scheme. The real-time deviation value of the step configuration is extracted through adaptation analysis, and the step size is dynamically optimized in combination with the channel-load comprehensive real-time status. The parameters can be quickly adjusted to generate real-time optimized step size parameters, and then the final configuration is determined through the overall solution generation. This closed-loop process of real-time optimization reduces the overhead of repeated calculations and significantly improves the execution speed of the configuration process. In addition, this step enhances the compatibility of the final key configuration scheme with the current network environment through dynamic adaptation, thereby further improving the long-term security of encryption and reducing security threats caused by environmental changes. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 This is a flowchart of a network data encryption method based on quantum communication provided by the first embodiment of the present invention; Figure 2 This is a schematic diagram of the structure of a network data encryption system based on quantum communication provided by the second embodiment of the present invention. DETAILED DESCRIPTION

[0022] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without making any creative efforts shall fall within the scope of protection of the present invention.

[0023] Reference Figure 1 The first embodiment of the present invention provides a network data encryption method based on quantum communication, comprising the following steps: S11, obtaining real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, performing multi-dimensional feature extraction, and obtaining a comprehensive real-time channel-load status; S12, performing a channel transmission-network fluctuation correlation analysis based on the comprehensive real-time channel-load status to obtain a real-time abnormal pattern distribution feature; S13, performing a comprehensive comparative analysis based on the real-time abnormal pattern distribution characteristics and the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain a key generation step size adjustment range; S14, performing correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution; S15, performing a simulated encryption test according to the preliminary configuration plan, analyzing the encryption performance and transmission efficiency of the test feedback, and generating an encryption test evaluation report; S16, performing real-time encryption adaptation optimization according to the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration solution.

[0024] In step S11, it is necessary to obtain real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time status of the channel-load.

[0025] In one implementation, real-time channel transmission characteristic data and real-time network load change data in a quantum communication network are obtained, and multi-dimensional feature extraction is performed to obtain a comprehensive real-time channel-load status, including: Real-time channel transmission characteristic data and real-time network load change data in a quantum communication network are obtained; the real-time channel transmission characteristic data include key generation step size, real-time channel attenuation, and real-time noise interference; preliminary screening and classification are performed based on the real-time channel transmission characteristic data and the real-time network load change data to obtain a preliminary channel-load data set; and multi-dimensional feature refinement is performed based on the preliminary channel-load data set to obtain a comprehensive real-time channel-load status.

[0026] It should be noted that the step of obtaining real-time channel transmission characteristic data and real-time network load change data in the quantum communication network is achieved by deploying photon detectors and network traffic analyzers in the quantum channel. Channel transmission characteristic data such as photon loss rate and polarization error, as well as network load data such as packet transmission rate and burst traffic peak are collected in real time. After data collection, the time series analysis method is used to group and preliminarily organize them by timestamp. The real-time channel transmission characteristic data includes key generation step, real-time channel attenuation and real-time noise interference. That is, after the dedicated sensors and monitoring equipment accurately measure the parameters such as photon loss rate and polarization error in the quantum channel, the key generation step is extracted as a dynamic adjustment parameter. At the same time, the channel attenuation and noise interference level are recorded and classified according to the feature type to ensure the accuracy and consistency of the data. According to the real-time channel transmission characteristic data and the real-time network load change data, preliminary screening and classification are performed to obtain a preliminary channel-load data set. This step cleans the collected data and screens it based on the preset channel attenuation threshold and the preset noise interference threshold, such as attenuation not exceeding 3dB / km and noise interference less than 1% polarization error. After removing abnormal data points, the data is classified and organized based on time and node traffic distribution to generate a preliminary channel-load data set. Based on the preliminary channel-load dataset, multidimensional feature refinement is performed to obtain a comprehensive real-time channel-load status. This step performs principal component analysis on the preliminary channel-load dataset to separate the multidimensional features of channel attenuation and noise interference, extract key indicators such as loss change rate and traffic fluctuation frequency, and generate a comprehensive real-time channel-load status through feature fusion. This comprehensive real-time channel-load status is a multidimensional data model that integrates channel transmission characteristics and dynamic changes in network load. It reflects the real-time status of network operation and provides basic data support for subsequent anomaly pattern recognition, step size adjustment, and encryption performance evaluation.

[0027] In step S12, it is necessary to perform a channel transmission-network fluctuation correlation analysis based on the comprehensive real-time channel-load status to obtain a real-time abnormal pattern distribution feature.

[0028] In one implementation, based on the comprehensive real-time channel-load status, a channel transmission-network fluctuation correlation analysis is performed to obtain real-time abnormal pattern distribution characteristics, including: According to the comprehensive real-time channel-load status, classification and organization are performed to obtain preliminary status description data; based on the preliminary status description data, abnormal fluctuation analysis is performed to obtain a fluctuation trend feature set; based on the fluctuation trend feature set, channel transmission-network fluctuation correlation analysis is performed to obtain real-time abnormal pattern distribution characteristics.

[0029] It should be noted that the step of classifying and organizing the channel-load integrated real-time status to obtain preliminary status description data classifies and organizes the channel transmission characteristics and network load change data extracted from the channel-load integrated real-time status by time period and feature type, performs time series analysis, and groups the data by timestamp to generate preliminary status description data. The step of performing abnormal fluctuation analysis based on the preliminary status description data to obtain a fluctuation trend feature set performs abnormal fluctuation trend analysis on the fluctuation trends in the preliminary status description data, identifies trend anomalies, and extracts a fluctuation trend feature set. The step of performing channel transmission-network fluctuation correlation analysis based on the fluctuation trend feature set to obtain real-time abnormal pattern distribution features performs correlation analysis on the dynamic changes of channel status and network load, determines the correlation between fluctuation features, marks the distribution range and impact area of ​​abnormal patterns, and generates real-time abnormal pattern distribution features. The real-time abnormal pattern distribution feature is a spatiotemporal distribution model that describes abnormal channel transmission and network load conditions, providing an optimization decision basis for subsequent step size adjustment and security risk assessment.

[0030] In step S13, a comprehensive comparative analysis is performed based on the real-time abnormal pattern distribution characteristics, combined with the key generation step, real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, to obtain the key generation step adjustment range.

[0031] In one implementation, a comprehensive comparative analysis is performed based on the real-time abnormal pattern distribution characteristics in combination with the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain a key generation step size adjustment range, including: According to the real-time channel transmission characteristic data, the key generation step is extracted and sorted and summarized to obtain a key generation step configuration record; according to the key generation step configuration record, combined with the real-time channel attenuation and the real-time noise interference in the real-time channel transmission characteristic data, a deviation calculation is performed to obtain an initial step configuration deviation value; according to the initial step configuration deviation value, parameter calibration is performed to obtain a step adjustment reference range; according to the real-time abnormal pattern distribution characteristics and the step adjustment reference range, an association mapping analysis is performed to obtain a key generation step adjustment range.

[0032] It should be noted that, based on the real-time channel transmission characteristic data, the key generation step is extracted and sorted and summarized to obtain the key generation step configuration record. This step first extracts the key generation step data from the real-time channel transmission characteristic data, groups it by timestamp and channel identifier, and then uses data sorting and statistical methods to sort out the step values ​​under various channel conditions in the past period of time, and marks them in combination with environmental parameters such as photon loss rate and polarization error, and finally generates a key generation step configuration record containing time series, channel status and corresponding step values.

[0033] Deviation calculation is performed based on the key generation step size configuration record, combined with the real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, to obtain an initial step size configuration deviation value. This step matches the step size value in each configuration record with the real-time channel attenuation (e.g., fiber loss rate) and real-time noise interference (e.g., polarization error rate) in the real-time channel transmission characteristic data. The adaptation difference between the step size and the current environmental parameters is calculated. The adaptation difference is the deviation in the applicability of the key generation step size under the current channel attenuation and noise interference conditions, reflecting the degree of match between the step size configuration and the real-time environment. The calculation first extracts the ideal environmental parameters corresponding to historical step size values ​​(e.g., historical average channel attenuation loss rate and noise level). These parameters are then compared item by item with the current real-time channel attenuation and noise interference values, and the absolute difference of each parameter is calculated. The parameter differences are then combined through weighted averaging (weights are assigned based on the degree of influence of the parameters on the step size, such as a weight of 0.6 for the channel attenuation loss rate and a weight of 0.4 for the noise). The comprehensive adaptation difference value for each step size configuration is calculated as the initial deviation value, reflecting the degree of deviation from the current environment. According to the deviation value configured in the initial step size, parameter calibration is performed to obtain the step size adjustment reference range. This step is adjusted according to the preset calibration rules (such as proportionally reducing or enlarging the step size). The step size deviation is gradually reduced through multiple iterative corrections to make it close to the preset deviation adaptation threshold. The convergence condition is that the deviation value is less than the preset deviation adaptation threshold (such as 0.1 units) or the number of iterations reaches the upper limit (such as 10 times). The input of each iteration includes the previous step size value and the corresponding initial deviation value. The output is the updated step size and updated deviation value adjusted according to the preset calibration rules. The adjustment effect is evaluated by comparing the new and old deviation values. If the updated deviation value is less than the initial deviation value, it means that the iteration effect is good. The upper and lower limits of the range are updated after each iteration, and finally a step size adjustment reference range that includes all acceptable step size values ​​is determined. Based on the real-time anomaly pattern distribution characteristics and the step size adjustment reference range, an association mapping analysis is performed to obtain the key generation step size adjustment range. This step associates and matches the abnormal impact range (such as high noise areas or peak load periods) in the real-time anomaly pattern distribution characteristics with the step size adjustment reference range. Correlation analysis is used to determine the impact of the abnormal pattern on the step size requirement, mapping the step size interval that best matches the current network state, and ultimately generating the key generation step size adjustment range. The key generation step size adjustment range is a specific step size configuration interval optimized based on real-time anomaly patterns and environmental parameters. It can be used in subsequent adaptation analysis to select the optimal step size parameter to ensure key generation efficiency and security.

[0034] In step S14, it is necessary to perform correlation adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution.

[0035] In one implementation, performing correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution includes: According to the key generation step adjustment range, hierarchical dynamic correction is performed to obtain the corrected step parameters; according to the corrected step parameters, quantum bit error rate-transmission quality correlation analysis is performed to obtain the feasible range of the preliminary configuration scheme; according to the feasible range of the preliminary configuration scheme and the real-time network load change data, real-time adaptation is performed to obtain the preliminary configuration scheme.

[0036] It should be noted that the step of dynamically modifying the key generation step size based on the key generation step size adjustment range to obtain the modified step size parameter involves a hierarchical evaluation of each step size value within the step size adjustment range using preset multi-level deviation thresholds (low, medium, and high). Based on the hierarchical dynamic adjustment of the step size, the step size values ​​that require adjustment are screened according to the threshold levels. Subsequently, a stepwise approximation optimization is performed, with low-deviation step sizes fine-tuned and medium- and high-deviation step sizes adjusted more significantly. The modified step size parameter is obtained through iterative optimization. The preset multi-level deviation thresholds are derived from statistical analysis of historical key generation data. Specifically, by analyzing the step size deviation distribution under different network conditions in the past, the low threshold corresponds to a smaller deviation range, the medium threshold corresponds to a medium deviation range, and the high threshold corresponds to a larger deviation range. The values ​​are based on the deviation amplitude quantiles (e.g., 25%, 50%, and 75%) in the historical data to ensure that the deviation level covers most scenarios.

[0037] According to the modified step size parameter, a quantum bit error rate-transmission quality correlation analysis is performed to obtain the feasible range of the preliminary configuration scheme. In this step, the modified step size parameter is input into the simulation environment through correlation analysis, where the simulation environment is a preset virtual quantum communication network model, which simulates and integrates real channel attenuation, noise interference and load fluctuation data, loads historical test scenario parameters, and dynamically adjusts the simulation conditions according to the current network status to ensure that the environment is close to actual applications, and measures the changing trends of the corresponding quantum bit error rate and transmission quality. The transmission quality refers to the comprehensive index of data transmission efficiency and stability in the key generation process, including the key generation rate (the number of valid keys generated per unit time) and transmission delay (the average time from data sending to receiving). The trend of these indicators changing with the step size is recorded through simulation tests to evaluate their performance. After that, the bit error rate and transmission quality are comprehensively analyzed to obtain the step size range in which the quantum bit error rate is less than the preset low bit error rate threshold and the transmission quality is greater than the preset high transmission quality threshold, thereby generating the feasible range of the preliminary configuration scheme. The preset low bit error rate threshold and high transmission quality threshold are derived from historical encryption performance statistics. Specifically, by analyzing the bit error rate and transmission quality under different step length configurations in past quantum communication networks, the low bit error rate threshold is determined to be the average of the historical data where the bit error rate is below a certain percentile (e.g., the top 25%), and the high transmission quality threshold is determined to be the step length performance value where the transmission quality is above the historical average. These values ​​are selected to ensure that the bit error rate and transmission efficiency achieve a balance between security and practicality. Based on the feasible range of the preliminary configuration scheme and the real-time network load variation data, real-time adaptation is performed to obtain the preliminary configuration scheme. This step extracts the current traffic peaks and fluctuation frequencies from the real-time network load variation data, matches the step length parameters within the feasible range of the preliminary configuration scheme with the load data, and prioritizes step lengths that adapt to load peaks and troughs. The preliminary configuration scheme is generated by integrating real-time load characteristics. The preliminary configuration scheme is a preliminary key generation step length configuration scheme based on the real-time network environment and performance requirements. It can be used in subsequent simulated encryption tests to verify its effectiveness and optimize the final configuration.

[0038] In step S15, it is necessary to perform a simulated encryption test according to the preliminary configuration plan, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report.

[0039] In one implementation, a simulated encryption test is performed according to the preliminary configuration scheme, encryption performance and transmission efficiency feedback from the test are analyzed, and an encryption test evaluation report is generated, including: According to the preliminary configuration plan, a simulated encryption test is performed to obtain the encryption performance and transmission efficiency of the test feedback; based on the encryption performance and the transmission efficiency, a coupling analysis is performed to obtain a simulation effect feature set; based on the simulation effect feature set, combined with a preset simulation effect evaluation table, a correlation analysis is performed to generate an encryption test evaluation report.

[0040] It should be noted that the simulated encryption test, conducted according to the preliminary configuration scheme, and the encryption performance and transmission efficiency feedback obtained from the test was obtained by loading the preliminary configuration scheme into a virtual quantum communication environment and running the simulated encryption process according to preset channel conditions and load scenarios. The preset channel conditions are typical parameters extracted from analyzing historical quantum communication network data, such as the channel attenuation range (e.g., 1-3dB / km) and noise interference level (e.g., 0.1%-1% polarization error). The load scenarios are determined based on historical network traffic statistics, such as low load (average traffic of 200Mbps), medium load (500Mbps), and high load (1000Mbps), ensuring that the simulation environment covers a wide range of situations in real-world applications. Metrics such as the bit error rate, data transmission rate, and success rate during the key generation process are recorded to generate test feedback on encryption performance and transmission efficiency. Based on the encryption performance and the transmission efficiency, a coupling analysis is performed to obtain a simulation effect feature set. In this step, the encryption performance (such as bit error rate and security indicators) and transmission efficiency (such as data throughput and delay) data are compared through coupling analysis, and key features such as the performance stability and efficiency balance point are extracted using principal component analysis, and integrated into a simulation effect feature set.

[0041] According to the simulation effect feature set, combined with the preset simulation effect evaluation table, correlation analysis is performed to generate an encryption test evaluation report. This step is to match the simulation effect feature set with the preset simulation effect evaluation table (including historical benchmarks such as bit error rate thresholds and efficiency standards) item by item, perform weighted evaluation analysis, assign weights to each feature (such as bit error rate, transmission efficiency), and then compare the feature value with the benchmark value in the evaluation table to calculate the score of each feature. First, each feature value (such as bit error rate 0.05, transmission efficiency 600bps) is compared with the corresponding benchmark value. The test compares the feature value with the baseline (e.g., a bit error rate threshold of 0.1 and an efficiency standard of 500bps). A piecewise function is used to calculate the score: if the feature value exceeds the baseline (e.g., a bit error rate less than 0.1 and a transmission efficiency greater than 500bps), a score of 1 is assigned; if it is within the acceptable range (e.g., a bit error rate no greater than 0.15 and a transmission efficiency no less than 400bps), a score of 0 is assigned; if it is below the minimum standard (e.g., a bit error rate > 0.15 or a transmission efficiency < 400bps), a score of 0 is assigned. A weighted score is then calculated based on the feature's importance (e.g., a weight of 0.6 for bit error rate and 0.4 for efficiency). The thresholds are statistically derived from historical simulation data. The bit error rate threshold is taken from the top 25% percentile of historical bit error rates (e.g., 0.1), and the efficiency standard is taken from the historical average efficiency value (e.g., 500bps). This ensures that the thresholds reflect actual performance requirements. Finally, a weighted summation is performed, and optimization recommendations are provided based on the score range to ensure comprehensive and targeted evaluation results. An encryption test evaluation report is generated, containing the performance evaluation results and optimization recommendations. The encryption test evaluation report is a detailed report that comprehensively evaluates the encryption performance and transmission efficiency of the preliminary configuration scheme in a simulated environment, providing support for subsequent step optimization and adjustment decisions of the final configuration scheme.

[0042] In step S16, it is necessary to perform real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration solution.

[0043] In one implementation, performing real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load integrated real-time status to obtain a real-time final key configuration solution includes: Based on the encryption test evaluation report and the channel-load comprehensive real-time status, an adaptation analysis is performed to obtain a real-time deviation value of the step configuration; based on the real-time deviation value of the step configuration and the channel-load comprehensive real-time status, the step is dynamically optimized to obtain a real-time optimized step parameter; based on the real-time optimized step parameter, an overall solution is generated to obtain a real-time final key configuration solution.

[0044] It should be noted that, based on the encryption test evaluation report and the channel-load comprehensive real-time status, an adaptation analysis is performed to obtain the step configuration real-time deviation value. This step is achieved by comparing the performance indicators (such as bit error rate and transmission efficiency) in the encryption test evaluation report with the current channel characteristics and load data in the channel-load comprehensive real-time status item by item. Specifically, each performance indicator is paired with the corresponding real-time characteristic one by one, such as the bit error rate is compared with the current channel loss rate, and the transmission efficiency is compared with the load fluctuation rate. Then, the deviation amplitude of each indicator is calculated, and the deviation values ​​are integrated through weighted average. Weights are assigned according to the preset indicator importance (such as the bit error rate weight is higher than the efficiency). Finally, a step configuration real-time deviation value that reflects the degree of adaptation of the step configuration to the real-time environment is generated.

[0045] According to the real-time deviation value of the step size configuration and the comprehensive real-time status of the channel-load, the step size is dynamically optimized to obtain the real-time optimized step size parameter. This step adaptively adjusts the step size according to the real-time deviation value of the step size configuration, divides the adjustment range according to the size of the deviation value, and then combines the load fluctuation trend data to identify the fluctuation peaks and troughs through time series analysis, adjusts the step size to adapt to these changes, and iteratively optimizes according to the performance feedback evaluated after each adjustment, gradually approaching the step size value with optimal performance, and finally determines the optimal step size through multiple cycles of verification to generate the real-time optimized step size parameter.

[0046] According to the real-time optimization step parameters, the overall solution is generated to obtain the real-time final key configuration solution. This step matches the real-time optimization step parameters with the latest channel characteristics and load data (such as current loss rate and traffic peak) in the channel-load comprehensive real-time status. Then, according to the preset performance priority (such as security takes precedence over efficiency), each indicator is assigned a weight (such as the bit error rate weight is 0.6, the efficiency weight is 0.4), and the comprehensive score is calculated. First, a standardized score is assigned to each performance indicator (such as bit error rate and transmission efficiency). Based on the relative gap between its actual performance and the preset target (such as the bit error rate is lower than 0.1), the score is calculated. A score of 1 is assigned for a step size above 0.15, 0 for a step size above 0.15, and 0.5 for a step size between 0.1 and 0.15. Weights are then assigned based on pre-set performance priorities (e.g., a weight of 0.6 for bit error rate reflects security priority, while a weight of 0.4 for efficiency reflects secondary priority). A comprehensive score is calculated through weighted summation. For example, if the bit error rate score is 0.8 and the efficiency score is 0.9, the comprehensive score = 0.8 × 0.6 + 0.9 × 0.4 = 0.48 + 0.36 = 0.84. Finally, the candidate step size with the highest comprehensive score is selected as the optimal configuration, generating a real-time final key configuration to ensure performance balance and priority satisfaction. The final key configuration is a final key generation step size configuration optimized based on real-time network status and test feedback, and can be used to deploy key distribution in actual quantum communication networks to ensure security and efficiency.

[0047] In summary, the present invention discloses a network data encryption method based on quantum communication. The present invention performs multi-dimensional feature extraction by acquiring channel transmission characteristics and network load data in real time, combines abnormal pattern analysis and adaptive step size adjustment, and is supplemented by simulation testing and real-time optimization to achieve dynamic key generation with long-term security.

[0048] Reference Figure 2 A second embodiment of the present invention provides a network data encryption device based on quantum communication, comprising: The data acquisition module is used to obtain real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time channel-load status; An anomaly analysis module, configured to perform a channel transmission-network fluctuation correlation analysis based on the comprehensive real-time channel-load status to obtain a real-time anomaly pattern distribution feature; A comprehensive comparison module is configured to perform a comprehensive comparison and analysis based on the real-time abnormal pattern distribution characteristics, combined with the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data, to obtain a key generation step size adjustment range; A preliminary configuration module, configured to perform correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution; An encryption test module is used to perform a simulated encryption test according to the preliminary configuration plan, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report; The result output module is used to perform real-time encryption adaptation optimization according to the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration solution.

[0049] It should be noted that the network data encryption device based on quantum communication provided in an embodiment of the present invention is used to execute all the process steps of the network data encryption method based on quantum communication in the above embodiment. The working principles and beneficial effects of the two correspond one to one, so they will not be repeated here.

[0050] An embodiment of the present invention further provides an electronic device. The electronic device includes: a processor, a memory, and a computer program stored in the memory and executable on the processor, such as a network data encryption program based on quantum communication. When the processor executes the computer program, the steps in the above-mentioned embodiments of the network data encryption method based on quantum communication are implemented, such as Figure 1 Alternatively, when the processor executes the computer program, the functions of the modules / units in the above-mentioned device embodiments are realized, such as the encryption test module.

[0051] Exemplarily, the computer program may be divided into one or more modules / units, which are stored in the memory and executed by the processor to implement the present invention. The one or more modules / units may be a series of computer program instruction segments capable of implementing specific functions, and the instruction segments are used to describe the execution process of the computer program in the electronic device.

[0052] The electronic device may be a computing device such as a desktop computer, notebook, PDA, or smart tablet. The electronic device may include, but is not limited to, a processor and memory. Those skilled in the art will appreciate that the aforementioned components are merely examples of electronic devices and do not constitute a limitation of the electronic device. The electronic device may include more or fewer components than those described above, or a combination of certain components, or different components. For example, the electronic device may also include input / output devices, network access devices, buses, and the like.

[0053] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA), other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor. The processor is the control center of the electronic device and connects various parts of the entire electronic device using various interfaces and lines.

[0054] The memory can be used to store the computer programs and / or modules. The processor implements the various functions of the electronic device by running or executing the computer programs and / or modules stored in the memory and accessing the data stored in the memory. The memory may primarily include a program storage area and a data storage area. The program storage area may store an operating system and at least one application required for a function (such as a sound playback function or an image playback function); the data storage area may store data generated based on the use of the mobile phone (such as audio data, a phone book, etc.). Furthermore, the memory may include high-speed random access memory and non-volatile memory, such as a hard disk, internal memory, a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, at least one disk storage device, a flash memory device, or other volatile solid-state storage device.

[0055] If the module / unit integrated into the electronic device is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention can implement all or part of the process steps in the above-mentioned method embodiments by using a computer program to instruct the relevant hardware. The computer program can be stored in a computer-readable storage medium. When executed by a processor, the computer program can implement the steps of each of the above-mentioned method embodiments. The computer program includes computer program code, which can be in source code form, object code form, executable file, or some intermediate form. The computer-readable medium can include: any entity or device capable of carrying the computer program code, recording medium, USB flash drive, mobile hard drive, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electric carrier signal, telecommunication signal, and software distribution medium. It should be noted that the content of the computer-readable medium can be appropriately increased or decreased based on the requirements of legislation and patent practice in a jurisdiction. For example, in some jurisdictions, based on legislation and patent practice, computer-readable media does not include electric carrier signals and telecommunication signals.

[0056] It should be noted that the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed across multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. In addition, in the drawings of the device embodiments provided by the present invention, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. A person of ordinary skill in the art can understand and implement the present invention without inventive effort.

[0057] The specific embodiments described above further illustrate the objectives, technical solutions, and beneficial effects of the present invention. It should be understood that the above descriptions are merely specific embodiments of the present invention and are not intended to limit the scope of protection of the present invention. In particular, it should be noted that any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included within the scope of protection of the present invention for those skilled in the art.

Claims

1. A network data encryption method based on quantum communication, characterized in that: include: Acquire real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time channel-load status; Based on the comprehensive real-time channel-load status, a channel transmission-network fluctuation correlation analysis is performed to obtain a real-time abnormal pattern distribution feature; A comprehensive comparative analysis is performed based on the real-time abnormal pattern distribution characteristics and the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain a key generation step size adjustment range; Performing correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution; Conduct a simulated encryption test based on the preliminary configuration plan, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report; According to the encryption test evaluation report and the channel-load comprehensive real-time status, real-time encryption adaptation optimization is performed to obtain a real-time final key configuration solution.

2. The network data encryption method based on quantum communication according to claim 1, characterized in that: The method of obtaining real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, performing multi-dimensional feature extraction, and obtaining a comprehensive real-time channel-load state includes: Obtain real-time channel transmission characteristic data and real-time network load change data in quantum communication networks; The real-time channel transmission characteristic data includes key generation step length, real-time channel attenuation and real-time noise interference; Performing preliminary screening and classification based on the real-time channel transmission characteristic data and the real-time network load change data to obtain a preliminary channel-load data set; Based on the preliminary channel-load data set, multi-dimensional feature refinement is performed to obtain a comprehensive real-time status of the channel-load.

3. The network data encryption method based on quantum communication according to claim 1, characterized in that: The channel transmission-network fluctuation correlation analysis is performed based on the comprehensive real-time channel-load status to obtain real-time abnormal pattern distribution characteristics, including: Classify and sort the channel-load comprehensive real-time status to obtain preliminary status description data; Perform abnormal fluctuation analysis based on the preliminary state description data to obtain a fluctuation trend feature set; Based on the fluctuation trend feature set, a channel transmission-network fluctuation correlation analysis is performed to obtain real-time abnormal pattern distribution features.

4. The network data encryption method based on quantum communication according to claim 1, characterized in that: The key generation step size adjustment range is obtained by performing a comprehensive comparative analysis based on the real-time abnormal pattern distribution characteristics and in combination with the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data, including: Extracting and summarizing the key generation step lengths based on the real-time channel transmission characteristic data to obtain a key generation step length configuration record; performing a deviation calculation based on the key generation step configuration record and combining the real-time channel attenuation and the real-time noise interference in the real-time channel transmission characteristic data to obtain an initial step configuration deviation value; Perform parameter calibration based on the initial step size configuration deviation value to obtain a step size adjustment reference range; According to the real-time abnormal pattern distribution characteristics and the step adjustment reference range, an association mapping analysis is performed to obtain the key generation step adjustment range.

5. The network data encryption method based on quantum communication according to claim 1, characterized in that: The performing of correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution includes: Perform hierarchical dynamic correction according to the key generation step adjustment range to obtain a correction step parameter; Based on the modified step size parameter, a quantum bit error rate-transmission quality correlation analysis is performed to obtain a feasible range of the preliminary configuration scheme; According to the feasible range of the preliminary configuration scheme and the real-time network load change data, real-time adaptation is performed to obtain a preliminary configuration scheme.

6. The network data encryption method based on quantum communication according to claim 1, characterized in that: According to the preliminary configuration scheme, a simulated encryption test is performed, the encryption performance and transmission efficiency of the test feedback are analyzed, and an encryption test evaluation report is generated, including: Conduct a simulated encryption test based on the preliminary configuration plan to obtain encryption performance and transmission efficiency feedback from the test; Performing coupling analysis based on the encryption performance and the transmission efficiency to obtain a simulation effect feature set; Based on the simulation effect feature set and in combination with a preset simulation effect evaluation table, correlation analysis is performed to generate an encryption test evaluation report.

7. The network data encryption method based on quantum communication according to claim 1, characterized in that: The method of performing real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration solution includes: Performing adaptation analysis based on the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a step size configuration real-time deviation value; Performing dynamic optimization of the step size according to the step size configuration real-time deviation value and the channel-load comprehensive real-time status to obtain a real-time optimized step size parameter; According to the real-time optimization step size parameter, an overall solution is generated to obtain a real-time final key configuration solution.

8. A network data encryption system based on quantum communication, characterized in that: include: The data acquisition module is used to obtain real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time channel-load status; An anomaly analysis module, configured to perform a channel transmission-network fluctuation correlation analysis based on the comprehensive real-time channel-load status to obtain a real-time anomaly pattern distribution feature; A comprehensive comparison module is configured to perform a comprehensive comparison and analysis based on the real-time abnormal pattern distribution characteristics, combined with the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data, to obtain a key generation step size adjustment range; A preliminary configuration module, configured to perform correlation and adaptation analysis based on the key generation step adjustment range and the real-time network load change data to determine a preliminary configuration solution; An encryption test module is used to perform a simulated encryption test according to the preliminary configuration plan, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report; The result output module is used to perform real-time encryption adaptation optimization according to the encryption test evaluation report and the channel-load comprehensive real-time status to obtain a real-time final key configuration solution.

9. An electronic device, characterized in that: The method comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, the network data encryption method based on quantum communication according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium includes a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the network data encryption method based on quantum communication according to any one of claims 1 to 7.

Images