Data encryption method and system based on quantum secure communication

Abstract

The application relates to the technical field of data encryption, in particular to a data encryption method and system based on quantum secure communication, which comprises the following steps: generating a dynamic key; encrypting to-be-transmitted data; transmitting the to-be-transmitted data to a receiving end through a quantum channel; decrypting by using the dynamic key; determining whether the encryption of the data is qualified based on a channel operation characteristic value; when it is determined that the encryption of the data is abnormal, adjusting the encryption parameter of the to-be-transmitted data based on a parallel difference parameter, and the parallel difference parameter represents the discrete degree of the error code rate of each quantum channel; when the parallel difference parameter is less than or equal to a preset parallel difference parameter, the error code rates of the quantum channels are relatively uniform, in this case, the error code rates of the channels are relatively high due to the interference of optical environment factors, at this time, the quantum channel wave band is adjusted by adjusting the channel wavelength. According to the specific circumstances of the external environment, the transmitted data is monitored and processed in a targeted manner, and the transmission security of the data is improved.

Description

Technical Field

[0001] This invention relates to the field of data encryption technology, and in particular to a data encryption method and system based on quantum secure communication. Background Technology

[0002] In today's digital age, data security and reliable transmission are of paramount importance. With the rapid development of information technology, data transmission and storage face numerous threats, such as eavesdropping and tampering. Traditional data encryption methods are gradually revealing their limitations in the face of increasingly sophisticated attack techniques.

[0003] Traditional data encryption technologies are primarily based on mathematical algorithms, such as symmetric encryption algorithms (e.g., DES, AES) and asymmetric encryption algorithms (e.g., RSA). The security of these algorithms relies on computational complexity. However, with the continuous improvement of computing power, especially the development of quantum computing technology, the security of traditional encryption algorithms faces severe challenges. Quantum computing can solve the mathematical problems upon which traditional encryption algorithms rely in a short time, thus putting data at risk of being stolen.

[0004] Quantum secure communication, as an emerging communication technology, utilizes the principles of quantum mechanics, including quantum entanglement and the no-cloning theorem, to provide a novel solution for secure data transmission.

[0005] Chinese Patent Application Publication No. CN117061102A discloses a quantum communication security system, relating to the field of information encryption technology. The system includes a server and a receiver. First, the server acquires the information to be transmitted, converts it into encrypted information, and generates a key for transmission. The receiver compares and processes the transmitted key sequence with the original sequence to obtain an anomaly ratio. This anomaly ratio is then compared with a preset ratio to obtain a pre-normal sequence. The pre-normal sequence is further processed to obtain the relationship between the data position information and the sequence information in the original sequence, resulting in a new transmission sequence. This new transmission sequence is then compared with the original sequence to obtain a duplication error ratio, which is then compared with a threshold Y2 to obtain a decryption signal. The decoded information is then displayed on a display terminal. However, this technical solution suffers from the following problem: it fails to consider the specific circumstances of the external environment and does not specifically monitor and process the transmitted data, thus affecting data transmission security. Summary of the Invention

[0006] To address this issue, the present invention provides a data encryption method and system based on quantum secure communication, which overcomes the problem in the prior art that does not take into account the specific circumstances of the external environment and does not specifically monitor and process the transmitted data, thus affecting the security of data transmission.

[0007] On one hand, the present invention provides a data encryption method based on quantum secure communication, comprising:

[0008] S1, Generate a dynamic key;

[0009] S2, encrypts the data to be transmitted based on a dynamic key;

[0010] S3 transmits the encrypted data to the receiving end via the quantum channel;

[0011] S4, the receiving end uses the same dynamic key as the sending end for decryption;

[0012] S5, determines whether the encryption of the data is qualified based on the channel operation characterization value, including,

[0013] When an encryption anomaly is detected in the data, the encryption parameters for the data to be transmitted are adjusted based on the parallel difference parameter. When the row difference parameter is less than or equal to the preset parallel difference parameter, the wavelength of the quantum channel is adjusted. The encryption parameters also include the length of the dynamic key.

[0014] Alternatively, once the encryption of the data is deemed valid, the current parameters can be used to continue transmitting each piece of data to be transmitted.

[0015] Furthermore, the validity of data encryption is determined based on channel operation characterization values, including:

[0016] The average bit error rate of each quantum channel obtained within the preset testing period is determined as the channel operation characterization value;

[0017] If the channel operation characterization value is less than or equal to the preset channel operation characterization value, then the encryption of the data is deemed qualified, and the current parameters are used to complete the transmission of each data to be transmitted.

[0018] If the channel operation characteristic value is greater than the preset channel operation characteristic value, an encryption anomaly is determined for the data, and the encryption parameters for the data to be transmitted are adjusted based on the parallel difference parameter.

[0019] Furthermore, the encryption parameters for the data to be transmitted are adjusted based on parallel differential parameters, including:

[0020] The variance of the calculated bit error rate of each quantum channel is determined as the parallel difference parameter;

[0021] If the parallel difference parameter is less than or equal to the preset parallel difference parameter, the wavelength of the quantum channel will be adjusted to the corresponding value based on the parallel difference parameter.

[0022] If the parallel difference parameter is greater than the preset parallel difference parameter, an alarm message for transmission abnormality will be issued.

[0023] Furthermore, the wavelength of the quantum channel is adjusted to the corresponding value based on the parallel difference parameter, wherein,

[0024] The increase in wavelength of the quantum channel is proportional to the parallel difference parameter.

[0025] Furthermore, when adjusting the wavelength of the quantum channel, the adjusted wavelength is compared with a preset critical wavelength;

[0026] If the adjusted wavelength is less than or equal to the preset critical wavelength, it is determined that the current parameters will continue to be used to complete the transmission of each data to be transmitted.

[0027] If the adjusted wavelength is greater than the preset critical wavelength, the preset channel operation characteristic value will be adjusted to the corresponding value based on the historical anomaly characteristic value.

[0028] Furthermore, based on historical anomaly characteristic values, the preset channel operation characteristic values ​​are adjusted to corresponding values, wherein,

[0029] Based on the acquired channel operation characterization values, a time-domain curve of the channel operation characterization values ​​is plotted, and the slope of the curve at the current time node is solved to obtain the historical anomaly characterization values.

[0030] The increase in the preset channel operation characteristic value is inversely proportional to the historical abnormal characteristic value.

[0031] Furthermore, after adjusting the preset channel operation characteristic values, the encryption of the data is re-determined based on the channel operation characteristic values, including:

[0032] If the channel operation characterization value is less than or equal to the adjusted preset channel operation characterization value, then the encryption of the data is deemed qualified, and the current parameters are used to complete the transmission of each data to be transmitted.

[0033] If the channel operation characterization value is greater than the adjusted preset channel operation characterization value, it is determined that there is an encryption anomaly for the data, and an alarm message for the transmission anomaly is issued. The channel with a bit error rate greater than the preset channel operation characterization value is marked as an abnormal channel, and the length of the dynamic key is adjusted to the corresponding value based on the channel operation characterization value.

[0034] For the data to be transmitted at the receiving and transmitting ends corresponding to the abnormal channel, quantum channel switching transmission is performed.

[0035] Furthermore, the number of quantum channels that have been determined to be changed is recorded as the update number. When the update number is greater than the preset update number, it is determined to update the quantum key distribution protocol.

[0036] On the other hand, the present invention also provides a data encryption system using the above-described quantum-secure communication-based data encryption method, comprising:

[0037] The key generation module is used to generate dynamic keys;

[0038] The data encryption module is used to encrypt the data to be transmitted based on a dynamic key;

[0039] The data transmission module is used to transmit the data to be transmitted output by the data encryption module to the receiving end through a quantum channel;

[0040] The data decryption module is used to decrypt data using the same dynamic key as the sender.

[0041] The analysis module is used to determine whether the encryption of the data is qualified based on the channel operation characterization value. When an encryption anomaly is determined for the data, the encryption parameters for the data to be transmitted are adjusted based on parallel differential parameters, including the wavelength of the quantum channel and the length of the dynamic key.

[0042] The alarm module is used to issue corresponding alarm information based on the judgment results of the analysis module.

[0043] Compared with existing technologies, the advantages of this invention lie in determining the encryption quality of data based on channel operation characterization values. These values ​​reflect the overall transmission quality of all quantum channels. By monitoring the transmitted data, anomalies during data transmission are detected promptly. When the channel operation characterization value exceeds a preset value, numerous errors occur during data transmission. In this case, encryption parameters for the data to be transmitted are adjusted based on parallel difference parameters, which characterize the dispersion of the bit error rate (BER) of each quantum channel. When the parallel difference parameters exceed a preset value, the BER of each quantum channel varies significantly. In this situation, due to eavesdropping on individual data, some quantum channels may have excessively high BERs, leading to large differences between channels and increased variance. This eavesdropping has a significant impact. In this case, an alarm for transmission anomalies is issued promptly. In-depth analysis of BER anomalies allows for targeted handling measures, achieving secure transmission of encrypted data.

[0044] Furthermore, when the parallel difference parameter is less than or equal to the preset parallel difference parameter, the bit error rate of each quantum channel is relatively uniform. In this case, due to interference from optical environmental factors, the bit error rate of each channel is relatively high, and different quantum channel bands have different sensitivities to environmental interference. Adjusting the quantum channel band, by regulating the channel wavelength, changes the channel's transmission characteristics to reduce the bit error rate. This effectively reduces the impact of environmental interference on data transmission, improves the reliability of data transmission, and ensures stable transmission of the data to be transmitted.

[0045] Furthermore, to avoid system instability or exceeding the system's usability range due to over-adjustment of the channel wavelength, a preset critical channel wavelength is set. When the adjusted quantum channel wavelength exceeds the critical value, it indicates that the bit error rate may be caused by accidental anomalies. In this case, the data eavesdropping sensitivity is improved, and the preset channel operation characterization value is adjusted to avoid excessive data processing due to excessively high eavesdropping detection sensitivity. Based on historical anomaly characterization values, the preset channel operation characterization value is adjusted to the corresponding value. The historical anomaly characterization value represents the change in bit error rate under different environmental conditions at different times. The lower the historical anomaly characterization value, the smoother the change in bit error rate over time. The bit error rate will not change due to normal time variations. After adjusting the eavesdropping detection sensitivity, if an encryption anomaly is still detected, it is determined that eavesdropping exists but has a minor impact. In this case, the channel is updated, and the key length is adjusted to promptly detect eavesdropping and take measures to protect data security. This effectively addresses eavesdropping while ensuring secure data transmission.

[0046] Furthermore, the update frequency reflects the system's stability and security. When the update frequency exceeds the preset limit, the proportion of changes made in a single operation becomes too large, and the current communication protocol cannot adapt to the actual communication environment. In this case, the protocol should be changed to improve system performance. Attached Figure Description

[0047] Figure 1 This is a flowchart illustrating the steps of a data encryption method based on quantum secure communication according to an embodiment of the present invention.

[0048] Figure 2 This is a block diagram of a data encryption system based on quantum secure communication, according to an embodiment of the present invention. Detailed Implementation

[0049] To make the objectives and advantages of the present invention clearer, the present invention will be further described below with reference to embodiments; it should be understood that the specific embodiments described herein are merely for explaining the present invention and are not intended to limit the present invention.

[0050] Preferred embodiments of the present invention will now be described with reference to the accompanying drawings. Those skilled in the art should understand that these embodiments are merely illustrative of the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0051] Furthermore, it should be noted that, in the description of this invention, unless otherwise explicitly specified and limited, the term "connected" should be interpreted broadly. For example, it can refer to a fixed connection, a detachable connection, or an integral connection; it can refer to a mechanical connection or an electrical connection; it can refer to a direct connection or an indirect connection through an intermediate medium; and it can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances.

[0052] Please see Figure 1 The figures shown are flowcharts illustrating the steps of a data encryption method based on quantum secure communication according to an embodiment of the present invention. The data encryption method of the present invention includes:

[0053] S1, Generate a dynamic key;

[0054] S2, encrypts the data to be transmitted based on a dynamic key;

[0055] S3 transmits the encrypted data to the receiving end via the quantum channel;

[0056] S4, the receiving end uses the same dynamic key as the sending end for decryption;

[0057] S5, determines whether the encryption of the data is qualified based on the channel operation characterization value, including,

[0058] When an encryption anomaly is detected for the data, the encryption parameters for the data to be transmitted are adjusted based on parallel differential parameters, including the wavelength of the quantum channel and the length of the dynamic key.

[0059] Alternatively, once the encryption of the data is deemed valid, the current parameters can be used to continue transmitting each piece of data to be transmitted.

[0060] Please see Figure 2 The diagrams shown are block diagrams of a data encryption system based on quantum secure communication according to an embodiment of the present invention. The data encryption system of the present invention includes:

[0061] The key generation module is used to generate dynamic keys;

[0062] A data encryption module, which is connected to the key generation module, is used to encrypt the data to be transmitted based on a dynamic key;

[0063] A data transmission module, which is connected to the data encryption module, is used to transmit the data to be transmitted output by the data encryption module to the receiving end through a quantum channel;

[0064] A data decryption module, which is connected to the data transmission module and the key generation module respectively, is used to decrypt using the same dynamic key as the sending end;

[0065] An analysis module, which is connected to the key generation module and the data decryption module respectively, is used to determine whether the encryption of the data is qualified based on the channel operation characterization value, and to adjust the encryption parameters of the data to be transmitted based on parallel difference parameters when the encryption of the data is determined to be abnormal. The encryption parameters include the wavelength of the quantum channel and the length of the dynamic key.

[0066] An alarm module, which is connected to the analysis module, is used to issue corresponding alarm information based on the judgment result of the analysis module.

[0067] Specifically, there are no restrictions on the method by which the key generation module generates dynamic keys. Quantum secure communication technology can be used, employing quantum entanglement and a quantum key distribution protocol, such as the BB84 protocol, to generate dynamic keys. The communicating parties transmit entangled quantum states through a quantum channel, measure and post-process these quantum states, and generate identical keys; this will not be elaborated further.

[0068] Specifically, the data encryption module uses a symmetric encryption algorithm, AES, and a generated dynamic key to encrypt the data. The data to be encrypted is divided into blocks, and each block is encrypted using the dynamic key to generate ciphertext; this will not be elaborated further.

[0069] Specifically, determining whether data encryption is qualified based on channel operation characterization values ​​includes:

[0070] The average bit error rate of each quantum channel obtained within the preset testing period is determined as the channel operation characterization value;

[0071] If the channel operation characterization value is less than or equal to the preset channel operation characterization value, then the encryption of the data is deemed qualified, and the current parameters are used to complete the transmission of each data to be transmitted.

[0072] If the channel operation characteristic value is greater than the preset channel operation characteristic value, an encryption anomaly is determined for the data, and the encryption parameters for the data to be transmitted are adjusted based on the parallel difference parameter.

[0073] Specifically, the preset channel operation characterization value is selected within the range [0.6%, 0.9%]. Those skilled in the art can determine the preset channel operation characterization value based on actual usage conditions. Long-term monitoring of the quantum channel can be performed to obtain the bit error rate under different environmental conditions, and the preset channel operation characterization value can be determined by combining this with the theoretical performance limits of the quantum channel. The quantum channel can be tested under different weather conditions, and the average value of the calculated and recorded channel operation characterization values ​​is determined as the preset bit error rate. In this embodiment, preferably, the preset channel operation characterization value is 0.6%.

[0074] Specifically, the method for determining the bit error rate is not limited. It can be determined using Cyclic Redundancy Check (CRC). The sending end generates a CRC checksum based on the data to be transmitted and appends it to the data before sending it. The receiving end, upon receiving the data, recalculates the CRC checksum and compares it with the received checksum. If they do not match, the data is considered erroneous. The bit error rate is obtained by calculating the ratio of the number of erroneous data points within a period to the total amount of data transmitted within that period. Alternatively, a known test bit sequence can be sent. The receiving end receives these bit sequences and compares them bit-by-bit with the original sequence from the sending end. The ratio of the number of recorded erroneous bits to the total number of received bits is determined as the bit rate. This is existing technology and will not be elaborated further.

[0075] Specifically, the encryption parameters for the data to be transmitted are adjusted based on parallel differential parameters, including:

[0076] The variance of the calculated bit error rate of each quantum channel is determined as the parallel difference parameter;

[0077] If the parallel difference parameter is less than or equal to the preset parallel difference parameter, the wavelength of the quantum channel will be adjusted to the corresponding value based on the parallel difference parameter.

[0078] If the parallel difference parameter is greater than the preset parallel difference parameter, an alarm message for transmission abnormality will be issued.

[0079] Specifically, the preset parallel difference parameter is selected within the range [0.0025, 0.0034]. Those skilled in the art can determine the preset parallel difference parameter according to actual usage. Historical operating data of the system can be collected, and the bit error rate of each quantum channel can be recorded. It is understood that the larger the amount of data collected and the longer the time span, the better it reflects the true situation of the system under different environmental conditions and operating states. In this embodiment, the bit error rate data of each quantum channel is continuously collected at different times each day for three months. The collected historical bit error rate data is grouped and the variance is calculated. The data is grouped according to different time periods (daytime, nighttime) and different weather conditions (sunny days, rainy days), and the variance of each group is calculated separately. By analyzing the distribution pattern and value range of these variances, the upper limit of the variance under normal environmental interference is selected as the preset variance. In this embodiment, preferably, the preset parallel difference parameter is 0.0025.

[0080] Specifically, the encryption quality of data is determined based on channel performance characteristics, which reflect the overall transmission quality of all quantum channels. Monitoring the transmitted data promptly identifies anomalies during transmission. When the channel performance characteristics exceed a preset value, numerous errors occur during data transmission. In this case, encryption parameters for the transmitted data are adjusted based on a parallel difference parameter, which characterizes the dispersion of the bit error rate (BER) of each quantum channel. When the parallel difference parameter exceeds a preset value, significant differences in BER exist among the quantum channels. In this situation, due to potential eavesdropping on individual data, some quantum channels may have excessively high BERs, leading to large discrepancies between channels and increased variance. This eavesdropping significantly impacts the system, prompting a timely alarm for transmission anomalies. In-depth analysis of BER anomalies and targeted measures are then implemented to ensure secure transmission of encrypted data.

[0081] Specifically, the wavelength of the quantum channel is adjusted to a corresponding value based on parallel difference parameters, wherein,

[0082] The increase in wavelength of the quantum channel is proportional to the parallel difference parameter.

[0083] In this embodiment, optionally,

[0084] The parallel difference parameter is compared with the first parallel alignment threshold and the second parallel alignment threshold;

[0085] If the parallel difference parameter is less than or equal to the first parallel comparison threshold, then the wavelength of each quantum channel is adjusted to Bi+1nm;

[0086] If the parallel difference parameter is less than or equal to the second parallel alignment threshold and greater than the first parallel alignment threshold, then the wavelength of each quantum channel is adjusted to Bi+3nm.

[0087] If the parallel difference parameter is greater than the second parallel comparison threshold, then the wavelength of each quantum channel is adjusted to Bi+4nm.

[0088] Bi is the initial wavelength of the i-th quantum channel, i = 1, 2, 3, ..., n, where n is the total number of monitored quantum channels. The first parallel comparison threshold is set to 0.76X0, and the second parallel comparison threshold is set to 0.85X0. X0 is a preset parallel difference parameter.

[0089] Specifically, when the parallel difference parameter is less than or equal to the preset parallel difference parameter, the bit error rate of each quantum channel is relatively uniform. However, in this case, interference from optical environmental factors leads to a higher bit error rate for each channel, and different quantum channel bands have varying sensitivities to environmental interference. Adjusting the quantum channel band, by modifying the channel wavelength, changes the channel's transmission characteristics to reduce the bit error rate. This effectively reduces the impact of environmental interference on data transmission, improves data transmission reliability, and ensures stable transmission of the data to be transmitted.

[0090] Specifically, when adjusting the wavelength of the quantum channel, the adjusted wavelength is compared with a preset critical wavelength.

[0091] If the adjusted wavelength is less than or equal to the preset critical wavelength, it is determined that the current parameters will continue to be used to complete the transmission of each data to be transmitted.

[0092] If the adjusted wavelength is greater than the preset critical wavelength, the preset channel operation characteristic value will be adjusted to the corresponding value based on the historical anomaly characteristic value.

[0093] Specifically, the preset critical wavelength is selected within the range [1556nm, 1565nm]. Those skilled in the art can determine the preset critical wavelength based on actual usage conditions. They can collect historical data from the system during long-term operation, record the bit error rate at different wavelengths, and determine the wavelength at which the bit error rate significantly increases as the critical channel wavelength. An advantage of this embodiment is that the preset critical wavelength is 1565nm; when it exceeds 1565nm, the bit error rate increases significantly.

[0094] Specifically, based on historical anomaly characteristic values, the preset channel operation characteristic values ​​are adjusted to corresponding values, wherein,

[0095] Based on the acquired channel operation characterization values, a time-domain curve of the channel operation characterization values ​​is plotted, and the slope of the curve at the current time node is solved to obtain the historical anomaly characterization values.

[0096] The increase in the preset channel operation characteristic value is inversely proportional to the historical abnormal characteristic value.

[0097] In this embodiment, optionally,

[0098] Compare the historical anomaly representation values ​​with the first preset historical comparison value and the second preset historical comparison value;

[0099] If the historical anomaly characterization value is less than or equal to the first preset historical comparison value, the preset channel operation characterization value will be adjusted to 1.26 times the initial preset channel operation characterization value.

[0100] If the historical anomaly characterization value is less than or equal to the second preset historical comparison value and greater than the first preset historical comparison value, then the preset channel operation characterization value will be adjusted to 1.18 times the initial preset channel operation characterization value.

[0101] If the historical anomaly characterization value is greater than the second preset historical comparison value, the preset channel operation characterization value will be adjusted to 1.03 times the initial preset channel operation characterization value.

[0102] The first preset historical comparison value is 0.6L0, the second preset historical comparison value is 0.7L0, and L0 is the average value of each historical anomaly representation value in the historical data obtained.

[0103] Specifically, when adjusting the preset channel operation characterization values, the encryption of the data is re-determined based on the channel operation characterization values, including:

[0104] If the channel operation characterization value is less than or equal to the adjusted preset channel operation characterization value, then the encryption of the data is deemed qualified, and the current parameters are used to complete the transmission of each data to be transmitted.

[0105] If the channel operation characterization value is greater than the adjusted preset channel operation characterization value, it is determined that there is an encryption anomaly for the data, and an alarm message for the transmission anomaly is issued. The channel with a bit error rate greater than the preset channel operation characterization value is marked as an abnormal channel, and the length of the dynamic key is adjusted to the corresponding value based on the channel operation characterization value.

[0106] For the data to be transmitted at the receiving and transmitting ends corresponding to the abnormal channel, quantum channel switching transmission is performed.

[0107] Specifically, the system has several backup quantum channels pre-configured. Once it is determined that a channel needs to be replaced, the backup channels are quickly selected. The backup channel with the lowest bit error rate is chosen for replacement.

[0108] The length of the dynamic key is adjusted to a corresponding value based on the channel operation characterization value, wherein,

[0109] The increase in the length of the dynamic key is directly proportional to the inverse.

[0110] In this embodiment, optionally,

[0111] The channel operation characterization value is compared with the first preset channel comparison threshold and the second preset channel comparison threshold;

[0112] If the channel operation characterization value is less than or equal to the first preset channel comparison threshold, the length of the dynamic key will be adjusted to 1.11 times the initial length.

[0113] If the channel operation characterization value is less than or equal to the second preset channel comparison threshold and greater than the first preset channel comparison threshold, then the length of the dynamic key will be adjusted to 1.21 times the initial length.

[0114] If the channel operation characterization value is greater than the second preset channel comparison threshold, the length of the dynamic key will be adjusted to 1.27 times the initial length.

[0115] The first preset channel comparison threshold is set to 4.5J0, and the second preset channel comparison threshold is set to 5.8J0. J0 is the adjusted preset channel operation characteristic value.

[0116] Specifically, to avoid system instability or exceeding the system's usability range due to over-adjustment of the channel wavelength, a preset critical channel wavelength is set. When the adjusted quantum channel wavelength exceeds the critical value, it indicates that the bit error rate may be caused by accidental anomalies. In this case, the data eavesdropping sensitivity is improved, and the preset channel operation characteristic value is adjusted to avoid excessive data processing due to excessively high eavesdropping detection sensitivity. Based on historical anomaly characteristic values, the preset channel operation characteristic value is adjusted to the corresponding value. The historical anomaly characteristic value represents the change in bit error rate under different environmental conditions at different times. The lower the historical anomaly characteristic value, the smoother the change in bit error rate over time. The bit error rate will not change due to normal time variations. After adjusting the eavesdropping detection sensitivity, if an encryption anomaly is still detected, it is determined that eavesdropping exists but has a minor impact. In this case, the channel is updated, and the key length is adjusted to promptly detect eavesdropping and take measures to protect data security. This effectively addresses eavesdropping while ensuring secure data transmission.

[0117] Specifically, the number of quantum channels that have been determined to be changed is recorded as the update number. When the update number is greater than the preset update number, it is determined to update the quantum key distribution protocol.

[0118] Specifically, the preset update quantity is selected within the range [0.03n, 0.05n], where n is the total number of quantum channels. Those skilled in the art can determine the preset update quantity according to the actual usage. In this embodiment, the preset update quantity is preferably 0.05n.

[0119] Specifically, the update frequency reflects the system's stability and security. When the update frequency exceeds the preset limit, the proportion of changes made in a single operation is too large, and the current communication protocol cannot adapt to the actual communication environment. In this case, the protocol should be changed to improve system performance.

[0120] The technical solution of the present invention has been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will all fall within the scope of protection of the present invention.

[0121] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A data encryption method based on quantum secure communication, characterized in that, Comprise: S1, generating a dynamic key; S2, encrypting the data to be transmitted based on the dynamic key; S3, transmitting the encrypted data to be transmitted to the receiving end through the quantum channel; S4, the receiving end uses the same dynamic key as the sending end to decrypt; S5, determine whether the encryption of the data is qualified based on the channel operation characteristic value, including, determine the average of the error rate of each quantum channel obtained in the preset inspection period as the channel operation characteristic value; when it is determined that the encryption of the data is abnormal, adjust the encryption parameters for the data to be transmitted based on the parallel difference parameter, and when the parallel difference parameter is less than or equal to the preset parallel difference parameter, adjust the wavelength of the quantum channel; the encryption parameter also includes the length of the dynamic key; the variance of the error rate of each quantum channel calculated is determined as the parallel difference parameter; or, when it is determined that the encryption of the data is qualified, continue to use the current parameters to complete the transmission of each data to be transmitted.

2. The data encryption method based on quantum secure communication according to claim 1, characterized in that, Determine whether the encryption of the data is qualified based on the channel operation characteristic value, including: if the channel operation characteristic value is less than or equal to the preset channel operation characteristic value, it is determined that the encryption of the data is qualified, and the current parameters are continuously used to complete the transmission of each data to be transmitted; if the channel operation characteristic value is greater than the preset channel operation characteristic value, it is determined that the encryption of the data is abnormal, and the encryption parameters for the data to be transmitted are adjusted based on the parallel difference parameter.

3. The data encryption method based on quantum secure communication according to claim 2, characterized in that, Adjust the encryption parameters for the data to be transmitted based on the parallel difference parameter, including: if the parallel difference parameter is less than or equal to the preset parallel difference parameter, adjust the wavelength of the quantum channel to the corresponding value based on the parallel difference parameter; if the parallel difference parameter is greater than the preset parallel difference parameter, determine to issue an alarm information for transmission abnormality.

4. The data encryption method based on quantum secure communication according to claim 3, characterized in that, Adjust the wavelength of the quantum channel to the corresponding value based on the parallel difference parameter, wherein, the increase amplitude of the wavelength of the quantum channel is proportional to the parallel difference parameter.

5. The data encryption method based on quantum secure communication according to claim 4, characterized in that, When the adjustment of the wavelength of the quantum channel is completed, compare the adjusted wavelength with the preset critical wavelength; if the adjusted wavelength is less than or equal to the preset critical wavelength, it is determined to continue to use the current parameters to complete the transmission of each data to be transmitted; if the adjusted wavelength is greater than the preset critical wavelength, adjust the preset channel operation characteristic value to the corresponding value based on the historical abnormal characteristic value.

6. The data encryption method based on quantum secure communication according to claim 5, characterized in that, Adjust the preset channel operation characteristic value to the corresponding value based on the historical abnormal characteristic value, wherein, draw a channel operation characteristic value time domain curve based on the obtained channel operation characteristic values, solve the slope of the curve at the current time node to obtain the historical abnormal characteristic value; the increase amplitude of the preset channel operation characteristic value is inversely proportional to the historical abnormal characteristic value.

7. The data encryption method based on quantum secure communication according to claim 6, characterized in that, When the adjustment of the preset channel operation characteristic value is completed, determine whether the encryption of the data is qualified based on the channel operation characteristic value again, including: if the channel operation characteristic value is less than or equal to the adjusted preset channel operation characteristic value, it is determined that the encryption of the data is qualified, and the current parameters are continuously used to complete the transmission of each data to be transmitted; If the channel operation characteristic value is greater than the adjusted preset channel operation characteristic value, it is determined that the encryption of the data is abnormal, it is determined to issue alarm information for transmission abnormality, it is determined to mark the channel with the error code rate greater than the preset channel operation characteristic value as an abnormal channel, and the length of the dynamic key is adjusted to a corresponding value based on the channel operation characteristic value; The to-be-transmitted data of the receiving end and the sending end corresponding to the abnormal channel is transmitted through quantum channel replacement.

8. The data encryption method based on quantum secure communication according to claim 7, characterized in that, The number of quantum channels determined to be replaced is recorded as an update number, and when the update number is greater than a preset update number, it is determined to update the quantum key distribution protocol.

9. A data encryption system using the data encryption method based on quantum secure communication according to any one of claims 1 to 8, characterized by, The key generation module is configured to generate a dynamic key. The data encryption module is configured to encrypt the to-be-transmitted data based on the dynamic key. The data transmission module is configured to transmit the to-be-transmitted data output by the data encryption module to the receiving end through the quantum channel. The data decryption module is configured to use the same dynamic key as the sending end for decryption. The analysis module is configured to determine whether the encryption of the data is qualified based on the channel operation characteristic value, and to adjust the encryption parameters for the to-be-transmitted data based on the parallel difference parameter when it is determined that the encryption of the data is abnormal, the encryption parameters including the wavelength of the quantum channel and the length of the dynamic key. The alarm module is configured to issue corresponding alarm information based on the determination result of the analysis module. ​

Images