A network data encryption method and system based on quantum communication

Abstract

The application relates to the technical field of network data encryption, and discloses a network data encryption method and system based on quantum communication, which comprises the following steps: acquiring real-time channel transmission characteristic data and real-time network load change data, performing multi-dimensional feature extraction, and obtaining a channel-load comprehensive real-time state; performing correlation analysis according to the channel-load comprehensive real-time state, and obtaining a real-time abnormal mode distribution feature; performing comprehensive comparative analysis according to the real-time abnormal mode distribution feature, and obtaining a key generation step length adjustment range; performing adaptive analysis according to the key generation step length adjustment range and the real-time network load change data, and determining a preliminary configuration scheme; performing simulation encryption testing according to the preliminary configuration scheme, and generating an encryption testing evaluation report; performing real-time encryption adaptive optimization according to the encryption testing evaluation report, and obtaining a final key configuration scheme. The method can realize dynamic key generation with long-term security.

Description

Technical Field

[0001] This invention relates to the field of network data encryption technology, and in particular to a network data encryption method and system based on quantum communication. Background Technology

[0002] Currently, quantum communication, as a core area of ​​next-generation communication technology, demonstrates significant advantages in network data encryption due to its high security and anti-eavesdropping properties based on quantum mechanics principles. It shows broad application prospects, particularly in scenarios with extremely high confidentiality requirements such as financial transactions, military communications, and government data protection. Quantum communication utilizes the non-cloning and measurement collapse properties of quantum states to achieve theoretically unconditionally secure key distribution, thus providing a novel security guarantee for network data encryption. Compared with traditional classical encryption methods, quantum communication not only improves the security of data transmission but also provides a more reliable solution to cope with increasingly complex network attacks.

[0003] In one existing technology, network data encryption based on quantum communication mainly relies on quantum key distribution protocols, which achieve theoretically unconditionally secure key distribution through the non-cloning and measurement collapse properties of quantum states. Fixed key generation parameters are used, and keys are generated through a preset step size configuration, combined with classical encryption algorithms to encrypt and protect network data. For example, key updates are periodically performed, and simple adjustments are made based on channel transmission characteristics to cope with changes in the network environment. However, in practical applications, the reliance on static or semi-static step size configurations often makes it difficult to effectively adapt to dynamically changing network environments, such as channel attenuation, noise interference, or unpredictable fluctuations in network load. This leads to a difficulty in simultaneously satisfying key generation efficiency and security in complex network scenarios, especially under peak load conditions or large channel fluctuations, where fixed parameter configurations can easily cause an increase in the bit error rate.

[0004] In summary, existing technologies suffer from the difficulty of achieving dynamic key generation with long-term security. Summary of the Invention

[0005] This invention provides a network data encryption method and system based on quantum communication to achieve dynamic key generation with long-term security.

[0006] In a first aspect, to solve the above-mentioned technical problems, the present invention provides a network data encryption method based on quantum communication, comprising:

[0007] Real-time channel transmission characteristic data and real-time network load change data in quantum communication networks are acquired, and multi-dimensional feature extraction is performed to obtain the comprehensive real-time status of channel-load.

[0008] Based on the comprehensive real-time status of the channel and load, a correlation analysis of channel transmission and network fluctuation is performed to obtain the distribution characteristics of real-time abnormal patterns.

[0009] Based on the distribution characteristics of the real-time anomaly mode, and combined with the key generation step size, real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, a comprehensive comparative analysis is performed to obtain the adjustment range of the key generation step size.

[0010] Based on the key generation step size adjustment range and the real-time network load change data, a correlation adaptation analysis is performed to determine a preliminary configuration scheme.

[0011] Based on the preliminary configuration scheme, conduct simulated encryption tests, analyze the encryption performance and transmission efficiency feedback from the tests, and generate an encryption test evaluation report;

[0012] Based on the encryption test evaluation report and the channel-load integrated real-time status, real-time encryption adaptation optimization is performed to obtain the real-time final key configuration scheme.

[0013] In one optional implementation, the step of acquiring real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, performing multi-dimensional feature extraction, and obtaining the integrated real-time channel-load status includes:

[0014] To acquire real-time channel transmission characteristics data and real-time network load change data in quantum communication networks;

[0015] The real-time channel transmission characteristic data includes key generation step size, real-time channel attenuation, and real-time noise interference.

[0016] Based on the real-time channel transmission characteristic data and the real-time network load change data, preliminary screening and classification are performed to obtain a preliminary channel-load dataset;

[0017] Based on the preliminary channel-load dataset, multi-dimensional feature refinement is performed to obtain the comprehensive real-time status of the channel-load.

[0018] In one optional implementation, the channel transmission-network fluctuation correlation analysis is performed based on the channel-load integrated real-time status to obtain real-time abnormal pattern distribution characteristics, resulting in characteristic 3, which includes:

[0019] Based on the comprehensive real-time status of the channel and load, the data is classified and organized to obtain preliminary status description data;

[0020] Based on the preliminary state description data, abnormal fluctuation analysis is performed to obtain a set of fluctuation trend features;

[0021] Based on the fluctuation trend feature set, a channel transmission-network fluctuation correlation analysis is performed to obtain the distribution characteristics of real-time abnormal patterns.

[0022] In one optional implementation, the step of comprehensively comparing and analyzing the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data based on the distribution characteristics of the real-time anomaly pattern, to obtain the key generation step size adjustment range, includes:

[0023] Based on the real-time channel transmission characteristic data, the key generation step size is extracted, organized, and summarized to obtain the key generation step size configuration record.

[0024] A step size configuration record is generated based on the key, and the deviation is calculated by combining the real-time channel attenuation and the real-time noise interference in the real-time channel transmission characteristic data to obtain the initial step size configuration deviation value.

[0025] Based on the initial step size configuration deviation value, parameter calibration is performed to obtain the step size adjustment reference range;

[0026] Based on the distribution characteristics of the real-time anomaly pattern and the step size adjustment reference range, a correlation mapping analysis is performed to obtain the key generation step size adjustment range.

[0027] In one optional implementation, the step of generating a step size adjustment range based on the key and performing correlation adaptation analysis with the real-time network load change data to determine a preliminary configuration scheme includes:

[0028] Based on the key, a step size adjustment range is generated, and hierarchical dynamic correction is performed to obtain the correction step size parameter;

[0029] Based on the modified step size parameter, a correlation analysis of the bit error rate and transmission quality of the qubits is performed to obtain the feasible range of the preliminary configuration scheme;

[0030] Based on the feasibility of the preliminary configuration scheme and the real-time network load change data, a real-time adaptation is performed to obtain the preliminary configuration scheme.

[0031] In one optional implementation, the step of conducting simulated encryption tests according to the preliminary configuration scheme, analyzing the encryption performance and transmission efficiency feedback from the tests, and generating an encryption test evaluation report includes:

[0032] Based on the preliminary configuration scheme, a simulated encryption test was conducted to obtain the encryption performance and transmission efficiency from the test feedback.

[0033] Based on the encryption performance and the transmission efficiency, a coupling analysis is performed to obtain a set of simulation effect features;

[0034] Based on the simulated effect feature set and combined with the preset simulated effect evaluation table, correlation analysis is performed to generate an encryption test evaluation report.

[0035] In one optional implementation, the step of performing real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load integrated real-time status to obtain a real-time final key configuration scheme includes:

[0036] Based on the encryption test evaluation report and the channel-load integrated real-time status, an adaptation analysis is performed to obtain the real-time deviation value of the step size configuration;

[0037] Based on the real-time deviation value configured by the step size and the integrated real-time status of the channel-load, dynamic optimization of the step size is performed to obtain the real-time optimized step size parameter.

[0038] Based on the real-time optimization step size parameter, the overall scheme is generated to obtain the real-time final key configuration scheme.

[0039] Secondly, the present invention provides a network data encryption system based on quantum communication, comprising:

[0040] The data acquisition module is used to acquire real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time status of the channel and load.

[0041] The anomaly analysis module is used to perform channel transmission-network fluctuation correlation analysis based on the channel-load integrated real-time status to obtain the real-time anomaly pattern distribution characteristics.

[0042] The comprehensive comparison module is used to perform a comprehensive comparative analysis based on the distribution characteristics of the real-time abnormal mode, combined with the key generation step size, real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, to obtain the adjustment range of the key generation step size.

[0043] The preliminary configuration module is used to generate a step size adjustment range based on the key and the real-time network load change data, perform correlation and adaptation analysis, and determine a preliminary configuration scheme.

[0044] The encryption testing module is used to conduct simulated encryption tests according to the preliminary configuration scheme, analyze the encryption performance and transmission efficiency feedback from the tests, and generate an encryption test evaluation report.

[0045] The result output module is used to perform real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load integrated real-time status to obtain the real-time final key configuration scheme.

[0046] Thirdly, the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein the processor executes the computer program to implement the network data encryption method based on quantum communication described in any one of the above.

[0047] Fourthly, the present invention also provides a computer-readable storage medium comprising a stored computer program, wherein, when the computer program is executed, it controls the device where the computer-readable storage medium is located to execute any one of the above-described quantum communication-based network data encryption methods.

[0048] Compared with the prior art, the present invention has the following beneficial effects:

[0049] (1) This invention obtains real-time channel transmission characteristic data and real-time network load change data in quantum communication networks by acquiring real-time channel-load integrated real-time status and performing multi-dimensional feature extraction, which can effectively improve computational efficiency. The preliminary screening and classification of data and multi-dimensional feature refinement in the process can remove redundant information and focus on key features such as key generation step size, channel attenuation and noise interference, thereby reducing the amount of data to be processed and speeding up data processing. At the same time, the multi-dimensional feature extraction of real-time data enhances the comprehensiveness of channel and load status, thereby indirectly improving the security of the encryption process and reducing potential security vulnerabilities caused by missing data. The channel-load integrated real-time status generated in this step provides an accurate basis for subsequent analysis and improves the overall efficiency of data processing.

[0050] (2) Based on the comprehensive real-time status of the channel and load, this invention performs a correlation analysis of channel transmission and network fluctuations to obtain the distribution characteristics of real-time abnormal patterns. By classifying and organizing the preliminary status description data and performing abnormal fluctuation analysis, it can promptly identify abnormal trends in channel transmission and network load, generate a fluctuation trend feature set, and then perform correlation analysis to reveal the distribution characteristics of abnormal patterns. This enables rapid detection of potential interference or abnormal situations, thereby effectively reducing security risks during encryption. In addition, the real-time nature of this step optimizes the response speed of abnormal pattern identification, indirectly improving computational efficiency and avoiding resource waste caused by delayed analysis.

[0051] (3) Based on the distribution characteristics of the real-time abnormal modes, this invention performs a comprehensive comparative analysis of the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain the adjustment range of the key generation step size. By organizing and summarizing the key generation step size configuration records and combining them with real-time channel attenuation and noise interference for deviation calculation, the deviation of the step size configuration can be accurately located. Then, the adjustment range is generated through parameter calibration and correlation mapping analysis. This targeted adjustment reduces redundant iterative calculations and optimizes the execution efficiency of the step size configuration process. At the same time, this step enhances the adaptability to abnormal modes through comprehensive comparative analysis, thereby improving the security of key generation and reducing the encryption risk caused by parameter mismatch.

[0052] (4) Based on the key generation step size adjustment range and the real-time network load change data, this invention performs correlation and adaptation analysis to determine a preliminary configuration scheme. During the process, the step size parameters are dynamically corrected in stages, and combined with the correlation analysis of quantum bit error rate and transmission quality, which can quickly screen out feasible step size ranges. Subsequently, the preliminary configuration scheme is further precisely located through real-time adaptation. This step-by-step optimization reduces redundant steps in the calculation process and speeds up the scheme generation. In addition, the adaptation analysis combined with real-time network load change data enhances the matching degree between the configuration scheme and the actual environment, thereby improving the security of the encryption process and reducing potential security risks caused by environmental changes.

[0053] (5) Based on the preliminary configuration scheme, this invention conducts simulated encryption tests, analyzes the encryption performance and transmission efficiency feedback from the tests, generates an encryption test evaluation report, obtains feedback data on encryption performance and transmission efficiency through simulated encryption tests, and performs coupling analysis to generate a simulated effect feature set, which can comprehensively evaluate the performance of the preliminary configuration scheme under different conditions. This test-feedback-analysis process can promptly discover potential security weaknesses, further verify the reliability of the scheme through correlation analysis, thereby enhancing the overall security of key generation. At the same time, this step optimizes resource utilization through a structured testing process, indirectly improving computational efficiency.

[0054] (6) Based on the encryption test evaluation report and the channel-load integrated real-time status, this invention performs real-time encryption adaptation optimization to obtain a real-time final key configuration scheme. Through adaptation analysis, the real-time deviation value of the step size configuration is extracted, and combined with the channel-load integrated real-time status, the step size is dynamically optimized. This allows for rapid parameter adjustment to generate real-time optimized step size parameters, which are then used to determine the final configuration through overall scheme generation. This closed-loop process of real-time optimization reduces the overhead of repetitive calculations and significantly improves the execution speed of the configuration process. Furthermore, this step enhances the compatibility of the final key configuration scheme with the current network environment through dynamic adaptation, thereby further improving the long-term security of encryption and reducing security threats caused by environmental changes. Attached Figure Description

[0055] Figure 1 This is a schematic diagram of the network data encryption method based on quantum communication provided in the first embodiment of the present invention;

[0056] Figure 2 This is a schematic diagram of the network data encryption system based on quantum communication provided in the second embodiment of the present invention. Detailed Implementation

[0057] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0058] Reference Figure 1 The first embodiment of the present invention provides a network data encryption method based on quantum communication, comprising the following steps:

[0059] S11: Obtain real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time status of channel-load.

[0060] S12, based on the channel-load integrated real-time status, perform channel transmission-network fluctuation correlation analysis to obtain real-time abnormal mode distribution characteristics;

[0061] S13. Based on the distribution characteristics of the real-time abnormal mode, and combined with the key generation step size, real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, a comprehensive comparative analysis is performed to obtain the key generation step size adjustment range.

[0062] S14. Based on the key, generate the step size adjustment range and the real-time network load change data, perform correlation and adaptation analysis, and determine the preliminary configuration scheme;

[0063] S15. Based on the preliminary configuration scheme, conduct a simulated encryption test, analyze the encryption performance and transmission efficiency feedback from the test, and generate an encryption test evaluation report.

[0064] S16. Based on the encryption test evaluation report and the channel-load integrated real-time status, perform real-time encryption adaptation optimization to obtain the real-time final key configuration scheme.

[0065] In step S11, it is necessary to obtain real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time state of channel-load.

[0066] In one implementation, real-time channel transmission characteristic data and real-time network load change data in the quantum communication network are acquired, and multi-dimensional feature extraction is performed to obtain the integrated real-time channel-load state, including:

[0067] Real-time channel transmission characteristic data and real-time network load change data in a quantum communication network are acquired. The real-time channel transmission characteristic data includes key generation step size, real-time channel attenuation, and real-time noise interference. Based on the real-time channel transmission characteristic data and the real-time network load change data, preliminary screening and classification are performed to obtain a preliminary channel-load dataset. Based on the preliminary channel-load dataset, multi-dimensional feature refinement is performed to obtain the comprehensive real-time channel-load status.

[0068] It should be noted that the step of acquiring real-time channel transmission characteristic data and real-time network load change data in the quantum communication network is achieved through photon detectors and network traffic analyzers deployed in the quantum channel. Real-time acquisition of channel transmission characteristic data, such as photon loss rate and polarization error, and network load data, such as packet transmission rate and burst traffic peaks, is performed. After data acquisition, time series analysis methods are used to group the data by timestamp and perform preliminary processing. The real-time channel transmission characteristic data includes key generation step size, real-time channel attenuation, and real-time noise interference. Specifically, dedicated sensors and monitoring equipment accurately measure parameters such as photon loss rate and polarization error in the quantum channel, extracting the key generation step size as a dynamic adjustment parameter. Simultaneously, channel attenuation and noise interference levels are recorded and categorized by characteristic type to ensure data accuracy and consistency. The next step, based on the real-time channel transmission characteristic data and the real-time network load change data, involves preliminary screening and classification to obtain a preliminary channel-load dataset. This step cleans the acquired data, filtering it based on preset channel attenuation thresholds and preset noise interference thresholds (e.g., attenuation not exceeding 3dB / km and noise interference less than 1% polarization error). After removing outlier data points, the dataset is classified and processed based on time and node traffic distribution to generate the preliminary channel-load dataset. Based on the initial channel-load dataset, multi-dimensional feature refinement is performed to obtain the comprehensive real-time channel-load status. Principal component analysis is conducted on the initial channel-load dataset to separate multi-dimensional features of channel attenuation and noise interference, extracting key indicators such as loss change rate and traffic fluctuation frequency. These features are then integrated through feature fusion to generate the comprehensive real-time channel-load status. The comprehensive real-time channel-load status is a multi-dimensional data model that integrates channel transmission characteristics and dynamic changes in network load, reflecting the real-time status of network operation and providing fundamental data support for subsequent anomaly pattern identification, step size adjustment, and encryption performance evaluation.

[0069] In step S12, it is necessary to perform channel transmission-network fluctuation correlation analysis based on the channel-load integrated real-time status to obtain the real-time abnormal mode distribution characteristics.

[0070] In one implementation, based on the comprehensive real-time channel-load status, a channel transmission-network fluctuation correlation analysis is performed to obtain real-time anomaly pattern distribution characteristics, including:

[0071] Based on the comprehensive real-time status of the channel and load, the data is classified and organized to obtain preliminary status description data; based on the preliminary status description data, abnormal fluctuation analysis is performed to obtain a fluctuation trend feature set; based on the fluctuation trend feature set, channel transmission-network fluctuation correlation analysis is performed to obtain real-time abnormal pattern distribution characteristics.

[0072] It should be noted that the following steps are crucial: First, based on the comprehensive real-time channel-load status, the data is categorized and organized to obtain preliminary status description data. This involves classifying and organizing the channel transmission characteristics and network load change data extracted from the comprehensive real-time channel-load status by time period and feature type, performing time series analysis, and grouping the data by timestamp to generate preliminary status description data. Second, based on the preliminary status description data, anomaly fluctuation analysis is performed to obtain a fluctuation trend feature set. This step analyzes the fluctuation trends in the preliminary status description data to identify trend anomalies and extract a fluctuation trend feature set. Third, based on the fluctuation trend feature set, a channel transmission-network fluctuation correlation analysis is performed to obtain real-time anomaly pattern distribution characteristics. This step analyzes the correlation between the dynamic changes in channel status and network load, determines the correlation between fluctuation features, marks the distribution range and affected area of ​​anomaly patterns, and generates real-time anomaly pattern distribution characteristics. Real-time anomaly pattern distribution characteristics are a spatiotemporal distribution model describing abnormal channel transmission and network load conditions, providing an optimization decision-making basis for subsequent step size adjustments and security risk assessments.

[0073] In step S13, based on the distribution characteristics of the real-time abnormal mode, a comprehensive comparative analysis is needed to be performed on the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain the adjustment range of the key generation step size.

[0074] In one implementation, based on the distribution characteristics of the real-time anomaly mode, and combined with a comprehensive comparative analysis of the key generation step size, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data, the key generation step size adjustment range is obtained, including:

[0075] Based on the real-time channel transmission characteristic data, the key generation step size is extracted, organized, and summarized to obtain a key generation step size configuration record. Based on the key generation step size configuration record, combined with the real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, deviation calculation is performed to obtain an initial step size configuration deviation value. Based on the initial step size configuration deviation value, parameter calibration is performed to obtain a step size adjustment reference range. Based on the real-time abnormal mode distribution characteristics and the step size adjustment reference range, correlation mapping analysis is performed to obtain the key generation step size adjustment range.

[0076] It should be noted that the step of extracting and summarizing the key generation step size based on the real-time channel transmission characteristic data to obtain the key generation step size configuration record first extracts the key generation step size data from the real-time channel transmission characteristic data, groups it according to timestamp and channel identifier, and then uses data sorting and statistical methods to sort out the step size values ​​under various channel conditions over a period of time. Combined with environmental parameters such as photon loss rate and polarization error, a key generation step size configuration record containing time series, channel status and corresponding step size values ​​is finally generated.

[0077] Based on the key generation step size configuration record, and combined with the real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, deviation calculation is performed to obtain the initial step size configuration deviation value. This step size value in each configuration record is matched one by one with the real-time channel attenuation (such as fiber loss rate) and real-time noise interference (such as polarization error rate) in the real-time channel transmission characteristic data. The adaptation difference between the step size and the current environmental parameters is calculated. The adaptation difference is the applicability deviation of the key generation step size under the current channel attenuation and noise interference conditions, reflecting the degree of matching between the step size configuration and the real-time environment. The calculation first extracts the ideal environmental parameters (such as historical average channel attenuation loss rate and noise level) corresponding to the historical step size value, then compares them item by item with the current real-time channel attenuation and noise interference values, calculates the absolute difference of each parameter, and then combines the differences of each parameter by weighted average (the weights are allocated according to the degree of influence of the parameter on the step size, such as channel attenuation loss rate weight 0.6, noise weight 0.4), to obtain the comprehensive adaptation difference value of each step size configuration, which is used as the initial deviation value, reflecting its deviation from the current environment. Based on the initial step size configuration deviation value, parameter calibration is performed to obtain the step size adjustment reference range. This step is adjusted according to a preset calibration rule (such as proportionally reducing or increasing the step size). Through multiple iterations, the step size deviation is gradually reduced to approach the preset deviation adaptation threshold. The convergence condition is that the deviation value is less than the preset deviation adaptation threshold (such as 0.1 unit) or the number of iterations reaches the upper limit (such as 10 times). The input of each iteration includes the previous step size value and the corresponding initial deviation value. The output is the updated step size and updated deviation value after adjustment according to the preset calibration rule. The adjustment effect is evaluated by comparing the new and old deviation values. If the updated deviation value is less than the initial deviation value, it indicates that the iteration effect is good. After each iteration, the upper and lower limits of the range are updated to finally determine a step size adjustment reference range that includes all acceptable step size values. Based on the distribution characteristics of the real-time anomaly patterns and the reference range for step size adjustment, a correlation mapping analysis is performed to obtain the key generation step size adjustment range. This step involves associating and matching the anomaly impact range (such as high-noise areas or peak load periods) in the distribution characteristics of the real-time anomaly patterns with the reference range for step size adjustment. Correlation analysis is used to determine the impact of the anomaly patterns on the step size requirements, mapping out the step size interval that best matches the current network state, and finally generating the key generation step size adjustment range. The key generation step size adjustment range is a specific step size configuration range optimized based on real-time anomaly patterns and environmental parameters. It can be used in subsequent adaptation analysis to select the optimal step size parameters to ensure key generation efficiency and security.

[0078] In step S14, it is necessary to generate a step size adjustment range based on the key and perform correlation and adaptation analysis with the real-time network load change data to determine a preliminary configuration scheme.

[0079] In one implementation, a correlation and adaptation analysis is performed based on the step size adjustment range generated by the key and the real-time network load change data to determine a preliminary configuration scheme, including:

[0080] Based on the key generation step size adjustment range, hierarchical dynamic correction is performed to obtain the correction step size parameter; based on the correction step size parameter, quantum bit error rate-transmission quality correlation analysis is performed to obtain the feasible range of the preliminary configuration scheme; based on the feasible range of the preliminary configuration scheme and the real-time network load change data, real-time adaptation is performed to obtain the preliminary configuration scheme.

[0081] It should be noted that the step of performing hierarchical dynamic correction based on the key generation step size adjustment range to obtain the corrected step size parameter involves evaluating each step size value within the adjustment range using preset multi-level deviation thresholds (low, medium, and high). Based on the hierarchical dynamic adjustment of the step size, the step size values ​​that need adjustment are selected according to each threshold level, and then progressively approximating optimization is performed. Low-deviation step sizes are fine-tuned, while medium- and high-deviation step sizes are adjusted more significantly. The corrected step size parameter is obtained through iterative optimization. The preset multi-level deviation thresholds are derived from statistical analysis of historical key generation data. Specifically, by analyzing the step size deviation distribution under different network conditions in the past, the low threshold corresponds to a smaller deviation range, the medium threshold corresponds to a medium deviation range, and the high threshold corresponds to a larger deviation range. The values ​​are taken as a benchmark based on the percentile of the deviation amplitude in historical data (such as 25%, 50%, and 75%) to ensure coverage of deviation levels in most scenarios.

[0082] Based on the corrected step size parameters, a correlation analysis of the qubit error rate and transmission quality is performed to obtain the feasible range of the preliminary configuration scheme. This step involves inputting the corrected step size parameters into a simulation environment, which is a preset virtual quantum communication network model. This simulation integrates real channel attenuation, noise interference, and load fluctuation data, loads historical test scenario parameters, and dynamically adjusts the simulation conditions according to the current network status to ensure the environment closely approximates actual applications. The changing trends of the corresponding qubit error rate and transmission quality are measured. Transmission quality refers to a comprehensive indicator of data transmission efficiency and stability during the key generation process, including the key generation rate (the number of valid keys generated per unit time) and transmission delay (the average time from data transmission to reception). The trends of these indicators with the step size are recorded through simulation tests to evaluate their performance. Then, a comprehensive analysis of the error rate and transmission quality is performed to determine the step size range where the qubit error rate is less than a preset low error rate threshold and the transmission quality is greater than a preset high transmission quality threshold, thus generating the feasible range of the preliminary configuration scheme. The preset low bit error rate (BER) threshold and high transmission quality threshold are derived from historical encryption performance data. Specifically, by analyzing the BER and transmission quality under different step size configurations in past quantum communication networks, the low BER threshold is determined by taking the average of BER values ​​below a certain percentile (e.g., the top 25%) in historical data. The high transmission quality condition is taken from the step size performance value where the transmission quality is higher than the historical average. These values ​​ensure a balance between security and practicality in terms of BER and transmission efficiency. Based on the feasible range of the preliminary configuration scheme and the real-time network load change data, real-time adaptation is performed to obtain the preliminary configuration scheme. This step involves extracting the current traffic peak and fluctuation frequency from the real-time network load change data, matching the step size parameters within the feasible range of the preliminary configuration scheme with the load data, and prioritizing step size values ​​that adapt to load peaks or troughs. The preliminary configuration scheme is a preliminary key generation step size configuration scheme based on the real-time network environment and performance requirements. It can be used for subsequent simulated encryption tests to verify its effectiveness and optimize the final configuration.

[0083] In step S15, a simulated encryption test needs to be conducted according to the preliminary configuration scheme. The encryption performance and transmission efficiency feedback from the test are analyzed, and an encryption test evaluation report is generated.

[0084] In one implementation, based on the initial configuration scheme, a simulated encryption test is performed, and the encryption performance and transmission efficiency feedback from the test are analyzed to generate an encryption test evaluation report, including:

[0085] Based on the preliminary configuration scheme, a simulated encryption test is conducted to obtain the encryption performance and transmission efficiency from the test feedback. Based on the encryption performance and transmission efficiency, a coupling analysis is performed to obtain a set of simulated effect features. Based on the set of simulated effect features and a preset simulated effect evaluation table, a correlation analysis is performed to generate an encryption test evaluation report.

[0086] It should be noted that the step of conducting simulated encryption tests based on the preliminary configuration scheme to obtain the encryption performance and transmission efficiency feedback involves loading the preliminary configuration scheme into a virtual quantum communication environment and running the simulated encryption process according to preset channel conditions and load scenarios. The preset channel conditions are typical parameters extracted from historical quantum communication network data, such as channel attenuation range (e.g., 1-3 dB / km) and noise interference level (e.g., 0.1%-1% polarization error). The load scenarios are determined based on past network traffic statistics, such as three typical scenarios: low load (average traffic 200 Mbps), medium load (500 Mbps), and high load (1000 Mbps), ensuring that the simulation environment covers various situations in real-world applications. The error rate, data transmission rate, and success rate during the key generation process are recorded to generate the encryption performance and transmission efficiency feedback from the tests. Based on the encryption performance and the transmission efficiency, a coupling analysis is performed to obtain a set of simulated effect features. This step compares the correlation between encryption performance (such as bit error rate and security indicators) and transmission efficiency (such as data throughput and latency) data through coupling analysis, extracts key features such as the balance point between performance stability and efficiency using principal component analysis, and integrates them into a set of simulated effect features.

[0087] Based on the simulated effect feature set and combined with the preset simulated effect evaluation table, a correlation analysis is performed to generate an encryption test evaluation report. This step involves matching the simulated effect feature set with the preset simulated effect evaluation table (including historical benchmarks such as bit error rate thresholds and efficiency standards) item by item, performing weighted evaluation analysis, assigning weights to each feature (such as bit error rate and transmission efficiency), and then comparing the feature values ​​with the benchmark values ​​in the evaluation table to calculate the score for each feature. First, each feature value (such as bit error rate of 0.05 and transmission efficiency of 600bps) is compared with the corresponding benchmark. The system compares features against benchmark values ​​(e.g., a bit error rate threshold of 0.1 and an efficiency standard of 500 bps), using a piecewise function to calculate scores: 1 point is awarded if the feature value is better than the benchmark (e.g., bit error rate less than 0.1 and transmission efficiency greater than 500 bps); 0.5 points are awarded if the feature value is within an acceptable range (e.g., bit error rate not greater than 0.15 and transmission efficiency not less than 400 bps); and 0 points are awarded if the feature value is below the minimum standard (e.g., bit error rate > 0.15 or transmission efficiency < 400 bps). A weighted score is then calculated based on feature importance (e.g., bit error rate weight 0.6, efficiency weight 0.4). Thresholds are derived from historical simulation data, with the bit error rate threshold taken from the top 25% percentile (e.g., 0.1) and the efficiency standard from the historical average efficiency value (e.g., 500 bps), ensuring that the thresholds reflect actual performance requirements. Finally, a weighted summation is performed, and optimization suggestions are provided based on the score range to ensure the comprehensiveness and relevance of the evaluation results, generating an encryption test evaluation report containing performance evaluation results and optimization suggestions. An encryption test evaluation report is a detailed report that comprehensively evaluates the encryption performance and transmission efficiency of the initial configuration scheme in a simulated environment, providing support for subsequent step-up optimization and adjustments to the final configuration scheme.

[0088] In step S16, real-time encryption adaptation optimization needs to be performed based on the encryption test evaluation report and the channel-load integrated real-time status to obtain the real-time final key configuration scheme.

[0089] In one implementation, based on the encryption test evaluation report and the channel-load integrated real-time status, real-time encryption adaptation optimization is performed to obtain a real-time final key configuration scheme, including:

[0090] Based on the encryption test evaluation report and the channel-load integrated real-time status, an adaptation analysis is performed to obtain the real-time deviation value of the step size configuration; based on the real-time deviation value of the step size configuration and the channel-load integrated real-time status, dynamic optimization of the step size is performed to obtain the real-time optimized step size parameter; based on the real-time optimized step size parameter, an overall scheme is generated to obtain the real-time final key configuration scheme.

[0091] It should be noted that the step of performing adaptation analysis based on the encryption test evaluation report and the channel-load integrated real-time status to obtain the step size configuration real-time deviation value involves comparing the performance indicators (such as bit error rate and transmission efficiency) in the encryption test evaluation report with the current channel characteristics and load data in the channel-load integrated real-time status item by item. Specifically, each performance indicator is paired with its corresponding real-time characteristic, such as comparing bit error rate with the current channel loss rate, and transmission efficiency with load fluctuation rate. Then, the deviation magnitude of each indicator is calculated, and the deviation values ​​are combined by weighted average. Weights are assigned according to the preset importance of the indicators (such as bit error rate having a higher weight than efficiency), and finally, a step size configuration real-time deviation value reflecting the degree of adaptation between the step size configuration and the real-time environment is generated.

[0092] Based on the real-time deviation value configured by the step size and the integrated real-time status of the channel and load, the step size is dynamically optimized to obtain the real-time optimized step size parameters. This step involves adaptively adjusting the step size according to the real-time deviation value configured by the step size, dividing the adjustment range according to the magnitude of the deviation value, and then combining the load fluctuation trend data to identify the fluctuation peaks and troughs through time series analysis, adjusting the step size to adapt to these changes, and iteratively optimizing based on the performance feedback after each adjustment to gradually approach the optimal step size value. Through multiple iterations of verification, the optimal step size is finally determined, and the real-time optimized step size parameters are generated.

[0093] Based on the real-time optimization step size parameters, the overall scheme is generated to obtain the real-time final key configuration scheme. This step matches the real-time optimization step size parameters with the latest channel characteristics and load data (such as the current loss rate and peak traffic) in the channel-load integrated real-time state. Then, weights are assigned to each indicator according to preset performance priorities (such as security taking precedence over efficiency) (e.g., bit error rate weight is 0.6, efficiency weight is 0.4), and a comprehensive score is calculated. First, a standardized score is assigned to each performance indicator (such as bit error rate and transmission efficiency), based on the relative difference between its actual performance and the preset target (e.g., bit error rate is less than 0.1). A score of 1 point is awarded for a step size of 0.15 or higher, and 0.5 points for a score between 0.1 and 0.15. Weights are then assigned based on preset performance priorities (e.g., a 0.6 weight for bit error rate reflects a security priority, and a 0.4 weight for efficiency reflects a secondary requirement). A weighted summation is used to calculate the overall score. For example, if the bit error rate score is 0.8 and the efficiency score is 0.9, the overall score is 0.8 × 0.6 + 0.9 × 0.4 = 0.48 + 0.36 = 0.84. Finally, the scheme with the highest overall score is selected as the optimal configuration from all candidate step size schemes to generate the real-time final key configuration scheme, ensuring performance balance and priority satisfaction. This final key configuration scheme is a final key generation step size configuration scheme optimized based on real-time network conditions and test feedback. It can be used to deploy key distribution in practical quantum communication networks to ensure both security and efficiency.

[0094] In summary, this invention discloses a network data encryption method based on quantum communication. This invention achieves dynamic key generation with long-term security by extracting multi-dimensional features through real-time acquisition of channel transmission characteristics and network load data, combined with anomaly pattern analysis and adaptive step size adjustment, supplemented by simulation testing and real-time optimization.

[0095] Reference Figure 2 The second embodiment of the present invention provides a network data encryption device based on quantum communication, comprising:

[0096] The data acquisition module is used to acquire real-time channel transmission characteristic data and real-time network load change data in the quantum communication network, perform multi-dimensional feature extraction, and obtain the comprehensive real-time status of the channel and load.

[0097] The anomaly analysis module is used to perform channel transmission-network fluctuation correlation analysis based on the channel-load integrated real-time status to obtain the real-time anomaly pattern distribution characteristics.

[0098] The comprehensive comparison module is used to perform a comprehensive comparative analysis based on the distribution characteristics of the real-time abnormal mode, combined with the key generation step size, real-time channel attenuation and real-time noise interference in the real-time channel transmission characteristic data, to obtain the adjustment range of the key generation step size.

[0099] The preliminary configuration module is used to generate a step size adjustment range based on the key and the real-time network load change data, perform correlation and adaptation analysis, and determine a preliminary configuration scheme.

[0100] The encryption testing module is used to conduct simulated encryption tests according to the preliminary configuration scheme, analyze the encryption performance and transmission efficiency feedback from the tests, and generate an encryption test evaluation report.

[0101] The result output module is used to perform real-time encryption adaptation optimization based on the encryption test evaluation report and the channel-load integrated real-time status to obtain the real-time final key configuration scheme.

[0102] It should be noted that the quantum communication-based network data encryption device provided in this embodiment of the invention is used to execute all the process steps of the quantum communication-based network data encryption method in the above embodiment. The working principles and beneficial effects of the two are one-to-one, so they will not be described again.

[0103] This invention also provides an electronic device. The electronic device includes a processor, a memory, and a computer program stored in the memory and executable on the processor, such as a quantum communication-based network data encryption program. When the processor executes the computer program, it implements the steps described in the various embodiments of the quantum communication-based network data encryption methods above, for example... Figure 1The step S11 shown. Alternatively, when the processor executes the computer program, it implements the functions of each module / unit in the above-described device embodiments, such as the encryption test module.

[0104] For example, the computer program may be divided into one or more modules / units, which are stored in the memory and executed by the processor to complete the present invention. The one or more modules / units may be a series of computer program instruction segments capable of performing a specific function, which describe the execution process of the computer program in the electronic device.

[0105] The electronic device may be a desktop computer, laptop, handheld computer, or smart tablet, etc. The electronic device may include, but is not limited to, a processor and memory. Those skilled in the art will understand that the above components are merely examples of electronic devices and do not constitute a limitation on the electronic device. It may include more or fewer components than described above, or combine certain components, or different components. For example, the electronic device may also include input / output devices, network access devices, buses, etc.

[0106] The processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor can be a microprocessor or any conventional processor. The processor is the control center of the electronic device, connecting all parts of the electronic device via various interfaces and lines.

[0107] The memory can be used to store the computer programs and / or modules. The processor implements various functions of the electronic device by running or executing the computer programs and / or modules stored in the memory and by calling data stored in the memory. The memory may mainly include a program storage area and a data storage area. The program storage area may store the operating system, at least one application program required for a function (such as sound playback function, image playback function, etc.), etc.; the data storage area may store data created according to the use of the mobile phone (such as audio data, phonebook, etc.). In addition, the memory may include high-speed random access memory, and may also include non-volatile memory, such as hard disk, memory, plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, at least one disk storage device, flash memory device, or other volatile solid-state storage device.

[0108] Wherein, if the modules / units integrated in the electronic device are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments of the present invention can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying the computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc. It should be noted that the content included in the computer-readable medium can be appropriately added or removed according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electrical carrier signals and telecommunication signals.

[0109] It should be noted that the device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Furthermore, in the accompanying drawings of the device embodiments provided by this invention, the connection relationships between modules indicate that they have communication connections, which can be specifically implemented as one or more communication buses or signal lines. Those skilled in the art can understand and implement this without any creative effort.

[0110] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above descriptions are merely specific embodiments of the present invention and are not intended to limit the scope of protection of the present invention. In particular, it should be noted that any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention for those skilled in the art.

Claims

1. A network data encryption method based on quantum communication, characterized in that, The method comprises the following steps: obtaining real-time channel transmission characteristic data and real-time network load change data in a quantum communication network, performing multi-dimensional feature extraction, and obtaining a channel-load comprehensive real-time state; performing channel transmission-network fluctuation correlation analysis according to the channel-load comprehensive real-time state, and obtaining a real-time abnormal mode distribution feature; performing comprehensive comparative analysis according to the real-time abnormal mode distribution feature, the key generation step length in the real-time channel transmission characteristic data, the real-time channel attenuation and the real-time noise interference, and obtaining a key generation step length adjustment range; performing correlation adaptation analysis according to the key generation step length adjustment range and the real-time network load change data, and determining a preliminary configuration scheme; performing simulation encryption test according to the preliminary configuration scheme, analyzing the encryption performance and transmission efficiency of the test feedback, and generating an encryption test evaluation report; performing real-time encryption adaptation optimization according to the encryption test evaluation report and the channel-load comprehensive real-time state, and obtaining a real-time final key configuration scheme; wherein the comprehensive comparative analysis according to the real-time abnormal mode distribution feature, the key generation step length in the real-time channel transmission characteristic data, the real-time channel attenuation and the real-time noise interference, and the obtaining of the key generation step length adjustment range comprise: extracting key generation step length data from the real-time channel transmission characteristic data, grouping according to time stamp and channel identifier, and then using data sorting and statistical methods to arrange the step length values under each channel condition in the past period of time, and combining with environmental parameters for labeling to obtain a key generation step length configuration record containing time sequence, channel state and corresponding step length value; performing deviation calculation according to the key generation step length configuration record, the real-time channel attenuation in the real-time channel transmission characteristic data and the real-time noise interference, and obtaining an initial step length configuration deviation value; performing parameter calibration according to the initial step length configuration deviation value, and obtaining a step length adjustment reference range; performing correlation mapping analysis according to the real-time abnormal mode distribution feature and the step length adjustment reference range, and obtaining a key generation step length adjustment range; wherein the correlation adaptation analysis according to the key generation step length adjustment range and the real-time network load change data, and the determination of the preliminary configuration scheme comprise: performing hierarchical dynamic correction according to the key generation step length adjustment range, and obtaining a corrected step length parameter; performing quantum bit error rate-transmission quality correlation analysis according to the corrected step length parameter, and obtaining a preliminary configuration scheme feasible range; performing real-time adaptation according to the preliminary configuration scheme feasible range and the real-time network load change data, and obtaining a preliminary configuration scheme.

2. The network data encryption method based on quantum communication according to claim 1, characterized in that, The method comprises the following steps: obtaining real-time channel transmission characteristic data and real-time network load change data in a quantum communication network, performing multi-dimensional feature extraction, and obtaining a channel-load comprehensive real-time state; obtaining real-time channel transmission characteristic data and real-time network load change data in a quantum communication network; the real-time channel transmission characteristic data comprises key generation step length, real-time channel attenuation and real-time noise interference; According to the real-time channel transmission characteristic data and the real-time network load change data, preliminary screening classification is performed to obtain a preliminary channel-load data set; According to the preliminary channel-load data set, multi-dimensional feature refinement is performed to obtain a channel-load comprehensive real-time state.

3. The network data encryption method based on quantum communication according to claim 1, characterized in that, According to the channel-load comprehensive real-time state, channel transmission-network fluctuation correlation analysis is performed to obtain a real-time abnormal mode distribution feature, including: According to the channel-load comprehensive real-time state, classification and arrangement are performed to obtain preliminary state description data; According to the preliminary state description data, abnormal fluctuation analysis is performed to obtain a fluctuation trend feature set; According to the fluctuation trend feature set, channel transmission-network fluctuation correlation analysis is performed to obtain a real-time abnormal mode distribution feature.

4. The network data encryption method based on quantum communication according to claim 1, characterized in that, According to the preliminary configuration scheme, simulation encryption testing is performed, and the encryption performance and transmission efficiency of the test feedback are analyzed to generate an encryption test evaluation report, including: According to the preliminary configuration scheme, simulation encryption testing is performed to obtain the encryption performance and transmission efficiency of the test feedback; According to the encryption performance and the transmission efficiency, coupling analysis is performed to obtain a simulation effect feature set; According to the simulation effect feature set, in combination with a preset simulation effect evaluation table, correlation analysis is performed to generate an encryption test evaluation report.

5. The network data encryption method based on quantum communication according to claim 1, characterized in that, According to the encryption test evaluation report and the channel-load comprehensive real-time state, real-time encryption adaptation optimization is performed to obtain a real-time final key configuration scheme, including: According to the encryption test evaluation report and the channel-load comprehensive real-time state, adaptation analysis is performed to obtain a step length configuration real-time deviation value; According to the step length configuration real-time deviation value and the channel-load comprehensive real-time state, step length dynamic optimization is performed to obtain a real-time optimization step length parameter; According to the real-time optimization step length parameter, overall scheme generation is performed to obtain a real-time final key configuration scheme.

6. A network data encryption system based on quantum communication, characterized by, A network data encryption method based on quantum communication, as claimed in any one of claims 1 to 5, includes: A data acquisition module is configured to acquire real-time channel transmission characteristic data and real-time network load change data in a quantum communication network, perform multi-dimensional feature extraction, and obtain a channel-load comprehensive real-time state; An abnormality analysis module is configured to perform channel transmission-network fluctuation correlation analysis according to the channel-load comprehensive real-time state to obtain a real-time abnormal mode distribution feature; A comprehensive comparison module is configured to perform comprehensive comparison analysis according to the real-time abnormal mode distribution feature in combination with a key generation step length, real-time channel attenuation, and real-time noise interference in the real-time channel transmission characteristic data to obtain a key generation step length adjustment range; A preliminary configuration module is configured to perform correlation adaptation analysis according to the key generation step length adjustment range and the real-time network load change data to determine a preliminary configuration scheme; An encryption testing module is configured to perform simulation encryption testing according to the preliminary configuration scheme, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report; and An encryption testing module is configured to perform simulation encryption testing according to the preliminary configuration scheme, analyze the encryption performance and transmission efficiency of the test feedback, and generate an encryption test evaluation report. A result output module is configured to perform real-time encryption adaptation optimization according to the encryption test evaluation report and the channel-load comprehensive real-time state, and obtain a real-time final key configuration scheme.

7. An electronic device, comprising: The computer readable storage medium comprises a stored computer program, wherein the computer readable storage medium controls a device in which the computer readable storage medium is located to perform the network data encryption method based on quantum communication according to any one of claims 1 to 5 when the computer program is executed.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium comprises a stored computer program, wherein the computer readable storage medium controls a device in which the computer readable storage medium is located to perform the network data encryption method based on quantum communication according to any one of claims 1 to 5 when the computer program is executed.

Images