Data encryption transmission method and device, equipment, system, storage medium and product

Abstract

The invention discloses a data encryption transmission method and device, equipment, a system, a storage medium and a product, and the data encryption transmission method applied to sending equipment comprises the steps: carrying out the encryption and modulation processing of first plaintext data based on a quantum noise stream cipher technology, and generating a first modulation symbol; performing spatial expansion processing on the first modulation symbol based on preprocessed base information for spatial coding to generate a ciphertext signal; sending the ciphertext signal to a receiving device; wherein the constellation points in the preprocessed base information are in non-uniform distribution in the judgment boundary. Therefore, according to the embodiment of the invention, the base information is preprocessed, so that the ciphertext signal encrypted and modulated by the quantum noise stream cipher technology is located near the judgment boundary, even if the quantum noise is small noise, the high bit representing the ciphertext data in the ciphertext signal can also be influenced, the bit error rate of the high bit is improved, and the accuracy of the ciphertext data is improved. And the security of data transmission is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to data encryption technology, and in particular to a data encryption transmission method and device, equipment, system, storage medium and product. BACKGROUND

[0002] Quantum Noise Stream Cipher (QNSC) technology is a current mainstream physical layer encryption method, including multiple mapping intensity shift keying (ISK), phase shift keying (PSK) with phase rotation, quadrature amplitude modulation (QAM) with phase and intensity modulation, and other modulation methods. QNSC technology uses the inevitable quantum noise in an optical fiber as an encryption source to mask the transmitted information, so that an eavesdropper who intercepts the transmitted information also has difficulty in separating and decrypting the plaintext data, thereby improving the confidentiality and security of data transmission.

[0003] In related technologies, after plaintext data is encrypted and modulated using QNSC technology, the generated modulation symbol is mapped to base information with uniformly distributed constellation points for transmission. The ciphertext signal is composed of multiple bits, the high-order bits in the ciphertext signal represent ciphertext data, and the low-order bits in the ciphertext signal represent base information. The bits of different positions in the ciphertext signal have different bit weights and different tolerances to quantum noise. Since quantum noise is usually small noise, the base information is easily affected by quantum noise and deviates, causing errors in low-order bits. However, the influence of quantum noise on ciphertext data is small and difficult to cause errors. Therefore, the error rate of high-order bits in the ciphertext signal is low, and the eavesdropper may still eavesdrop on the ciphertext data information in the ciphertext signal, which poses a security risk to data transmission. SUMMARY

[0004] In view of this, the embodiments of the present application provide a data encryption transmission method and device, equipment, system, storage medium and product, aiming to improve the security of data transmission.

[0005] The technical solutions of the embodiments of the present application are as follows:

[0006] In a first aspect, the embodiments of the present application provide a data encryption transmission method applied to a sending device, and the method comprises:

[0007] encrypting and modulating the first plaintext data based on quantum noise stream cipher technology to generate a first modulation symbol;

[0008] based on the pre-processed base information for spatial encoding, performing spatial expansion processing on the first modulation symbol to generate a ciphertext signal;

[0009] sending the ciphertext signal to a receiving device;

[0010] wherein the constellation points in the pre-processed base information are non-uniformly distributed within the decision boundary.

[0011] In the above scheme, the constellation points in the pre-processed base information are non-uniformly distributed within the decision boundary, including that the constellation points in the pre-processed base information are single-layer distributed along the decision boundary.

[0012] In the above scheme, the method further comprises:

[0013] obtaining a first seed key;

[0014] based on a pre-set first expansion rule, performing expansion processing on the first seed key to generate a running key for encrypting the first plaintext data.

[0015] In the above scheme, the quantum noise stream cipher technology is used to encrypt and modulate the first plaintext data to generate the first modulation symbol, including:

[0016] based on the running key, performing encryption processing on the first plaintext data to generate first ciphertext data;

[0017] performing quadrature amplitude modulation processing on the first ciphertext data to generate the first modulation symbol.

[0018] In the above scheme, the encryption processing on the first plaintext data based on the running key to generate the first ciphertext data includes:

[0019] performing exclusive OR processing on the first plaintext data based on the running key to generate the first ciphertext data.

[0020] In the above scheme, the method further comprises:

[0021] obtaining a second seed key;

[0022] based on a pre-set second expansion rule, performing expansion processing on the second seed key to generate base information.

[0023] In the above scheme, the method further comprises:

[0024] based on a pre-set probability shaping rule, performing probability shaping processing on the base information, so that the constellation points in the pre-processed base information are non-uniformly distributed within the decision boundary.

[0025] In the above scheme, the probability shaping processing of the base information based on the preset probability shaping rule comprises:

[0026] The in-phase base information in the base information is processed based on the preset probability shaping rule to generate preprocessed in-phase base information, and the quadrature base information in the base information is processed based on the preset probability shaping rule to generate preprocessed quadrature base information.

[0027] The preprocessed in-phase base information and the preprocessed quadrature base information are superimposed to generate preprocessed base information.

[0028] The in-phase base information is component information in the base information that is consistent with the phase of the ciphertext signal, and the quadrature base information is component information that is orthogonal to the phase of the ciphertext signal.

[0029] In a second aspect, the embodiments of the present application provide a data encryption transmission method applied to a receiving device, and the method comprises:

[0030] Receiving a ciphertext signal sent by a sending device;

[0031] Based on the preprocessed base information for spatial encoding, the ciphertext signal is processed by spatial order reduction to generate a second modulation symbol.

[0032] Based on quantum noise stream cipher technology, the second modulation symbol is demodulated and decrypted to generate second plaintext data.

[0033] The ciphertext signal is encrypted and modulated based on quantum noise stream cipher technology and the preprocessed base information, and the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0034] In the above scheme, the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, which comprises that the constellation points in the preprocessed base information are single-layer distributed along the decision boundary.

[0035] In the above scheme, the method further comprises:

[0036] Obtaining a second seed key;

[0037] The second seed key is processed based on a preset second expansion rule to generate base information.

[0038] In the above scheme, the method further comprises:

[0039] The base information is processed based on a preset probability shaping rule to make the constellation points in the preprocessed base information non-uniformly distributed within the decision boundary.

[0040] In the above scheme, the step of performing probabilistic shaping processing on the base information based on a preset probabilistic shaping rule includes:

[0041] Based on preset probabilistic shaping rules, probabilistic shaping is performed on the in-phase basis information in the basis information to generate preprocessed in-phase basis information, and probabilistic shaping is performed on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information.

[0042] The preprocessed in-phase basis information and the preprocessed orthogonal basis information are superimposed to generate preprocessed basis information;

[0043] Wherein, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

[0044] In the above scheme, the method further includes:

[0045] Obtain the first seed key;

[0046] Based on a preset first expansion rule, the first seed key is expanded to generate an operating key for decrypting the second modulation symbol.

[0047] In the above scheme, the step of demodulating and decrypting the second modulation symbol based on quantum noise stream cryptography to generate second plaintext data includes:

[0048] Based on quadrature amplitude modulation technology, the second modulation symbol is demodulated to generate second ciphertext data;

[0049] Based on the operating key, the second ciphertext data is decrypted to generate the second plaintext data.

[0050] In the above scheme, the step of decrypting the second ciphertext data based on the running key to generate the second plaintext data includes:

[0051] Based on the running key, the second ciphertext data is XORed to generate the second plaintext data.

[0052] Thirdly, embodiments of this application provide a data encryption transmission apparatus, applied to a sending device, the apparatus comprising:

[0053] The first processing module is used to encrypt and modulate the first plaintext data based on quantum noise stream cryptography to generate the first modulation symbol;

[0054] An extension module is used to perform spatial extension processing on the first modulation symbol based on preprocessed base information for spatial coding to generate a ciphertext signal;

[0055] The transmitting module is used to transmit the encrypted signal to the receiving device;

[0056] The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0057] Fourthly, embodiments of this application provide a data encryption transmission apparatus, applied to a receiving device, the apparatus comprising:

[0058] The receiving module is used to receive encrypted signals sent by the transmitting device;

[0059] The order reduction module is used to perform spatial order reduction processing on the ciphertext signal based on the preprocessed base information for spatial coding, to generate a second modulation symbol;

[0060] The second processing module is used to demodulate and decrypt the second modulation symbol based on quantum noise stream cryptography to generate second plaintext data.

[0061] The ciphertext signal is generated based on quantum noise stream cryptography and the preprocessed base information encryption modulation. The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0062] Fifthly, embodiments of this application provide a transmitting device, including: a processor and a memory for storing a computer program capable of running on the processor, wherein the processor, when running the computer program, performs the steps of the method described in the first aspect.

[0063] In a sixth aspect, embodiments of this application provide a receiving device, including: a processor and a memory for storing a computer program capable of running on the processor, wherein the processor, when running the computer program, performs the steps of the method as described in the second aspect.

[0064] In a seventh aspect, embodiments of this application provide a data encryption transmission system, including a transmitting device as described in the fifth aspect and a receiving device as described in the sixth aspect.

[0065] Eighthly, embodiments of this application provide a storage medium storing a computer program, which, when executed by a processor, implements the steps of the methods described in the first and / or second aspects.

[0066] Ninthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the steps of the methods described in the first and / or second aspects.

[0067] The data encryption transmission method for a transmitting device provided in this application includes: encrypting and modulating first plaintext data based on quantum noise stream cryptography to generate a first modulation symbol; spatially expanding the first modulation symbol based on preprocessed base information for spatial coding to generate a ciphertext signal; and transmitting the ciphertext signal to a receiving device; wherein the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary. Thus, by preprocessing the base information, this application ensures that the ciphertext symbol after encryption and modulation using quantum noise stream cryptography is near the decision boundary. Even if the quantum noise is small, it will still affect the high-order bits representing the ciphertext data in the ciphertext signal, increasing the bit error rate of the high-order bits and improving the security of data transmission. Attached Figure Description

[0068] Figure 1 This is a schematic flowchart illustrating a data encryption transmission method applied to a transmitting device according to an embodiment of this application;

[0069] Figure 2 This is a schematic diagram of a low-order modulation symbol in one example of this application;

[0070] Figure 3 This is a schematic diagram of a high-order ciphertext symbol in one example of this application;

[0071] Figure 4 This is a schematic diagram of the first modulation symbol in one example of this application;

[0072] Figure 5 This is a schematic diagram of a constellation diagram of preprocessed base information according to an embodiment of this application;

[0073] Figure 6 A schematic diagram of a constellation diagram of preprocessed base information for another embodiment of this application;

[0074] Figure 7 This is a schematic diagram of encrypted symbols according to an embodiment of this application;

[0075] Figure 8 This is a schematic diagram of encrypted symbols according to another embodiment of this application;

[0076] Figure 9 This is a schematic flowchart illustrating the data encryption transmission method applied to a receiving device according to an embodiment of this application;

[0077] Figure 10 This is a schematic diagram of the data encryption transmission device applied to the sending device according to an embodiment of this application;

[0078] Figure 11 This is a schematic diagram of the data encryption transmission device applied to a receiving device according to an embodiment of this application;

[0079] Figure 12 This is a schematic diagram of the structure of the transmitting device according to an embodiment of this application;

[0080] Figure 13 This is a schematic diagram of the receiving device according to an embodiment of this application. Detailed Implementation

[0081] The present application will now be described in further detail with reference to the accompanying drawings and embodiments.

[0082] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein in the specification of this application is for the purpose of describing particular embodiments only and is not intended to be limiting of this application.

[0083] This application provides a data encryption transmission method, applied to a sending device, such as... Figure 1 As shown, the method includes:

[0084] Step 101: Based on quantum noise stream cryptography, the first plaintext data is encrypted and modulated to generate the first modulation symbol.

[0085] Step 102: Based on the preprocessed base information used for spatial coding, perform spatial expansion processing on the first modulation symbol to generate a ciphertext signal.

[0086] Among them, the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0087] Step 103: Send the encrypted signal to the receiving device.

[0088] Here, the transmitting device in this embodiment of the application is based on quantum noise stream cipher (QNSC) technology to achieve encrypted data transmission with the receiving device.

[0089] It should be noted that fiber optic eavesdropping attacks can exploit weaknesses in the physical layer security of optical communication systems to intercept information through non-intrusive eavesdropping methods. Quantum noise stream cryptography, on the other hand, uses the unavoidable quantum noise in optical fibers as an encryption source. The optical signal is masked by quantum noise during transmission, making it difficult for eavesdroppers to distinguish between real data and noise in the optical signal. Therefore, quantum noise stream cryptography is currently a mainstream physical layer encryption scheme applied to data encryption transmission, improving the security of data transmission.

[0090] Here, quantum noise stream encryption includes various modulation methods such as intensity keying with multi-level mapping, phase shift keying with phase rotation, and quadrature amplitude modulation with phase and intensity modulation.

[0091] In this process, the data encryption transmission based on quantum noise stream cryptography is jointly implemented by the sending device (Alice) and the receiving device (Bob). The sending and receiving devices share an operating key, and the asymmetry of the influence of quantum noise on the receiving device and the eavesdropper is realized based on the operating key.

[0092] Specifically, in the quantum noise stream encryption process, the transmitting and receiving devices share an operating key. The transmitting device uses the operating key to encrypt the plaintext data, and the generated ciphertext data is loaded onto an optical carrier using methods such as strength keying, phase shift keying, or quadrature amplitude modulation and then transmitted to the receiving device. The phase or amplitude of the transmitted ciphertext signal fluctuates due to the influence of quantum noise, and the fluctuation is random and unpredictable. Because the ciphertext signal is masked by quantum noise, it is difficult for eavesdroppers to distinguish the specific phase or amplitude of the ciphertext from the intercepted information. Although the ciphertext signal received by the receiving device is also affected by quantum noise, the receiving device possesses the same operating key as the transmitting device. Based on the operating key, it can obtain the reference phase and / or reference amplitude of the modulation symbols of the ciphertext data, thereby effectively mitigating the influence of quantum noise and enabling the extraction of plaintext data from the ciphertext signal.

[0093] It should be noted that, in order to improve the masking effect of quantum noise, related technologies usually perform basis addition processing on the modulation symbols of the ciphertext, so that the modulation symbols are upgraded. After the modulation order is increased, the phase and / or amplitude differences between different ciphertext signals become smaller, thus making the influence of quantum noise on the ciphertext signal more obvious.

[0094] Here, the rule for basis addition is to use m-bit basis information to perform basis addition on the modulation symbols of n information bits, generating 2... n+m ×2 n+m The encrypted symbols. In one application example of this application, such as Figure 2 As shown, the encrypted data is modulated by phase shift keying to generate low-order modulation symbols. These modulation symbols are then mapped onto the basis information, which is uniformly distributed across constellation points, to generate... Figure 3 The ciphertext symbol shown is a 256×256 high-order symbol.

[0095] Here, the ciphertext signal is usually composed of multiple bits. The high-order bits in the ciphertext signal represent the ciphertext data, and the low-order bits in the ciphertext signal represent the base information. For example, if the information of the modulation symbol is (00, 11) and the base information is (10, 01), then the information of the ciphertext signal after the base addition process is (1010, 1001).

[0096] It should be noted that the decision boundary is a threshold or critical value used by the receiving device in the signal decision process to determine which category or state the received signal belongs to. Since the ciphertext signal will undergo phase and / or amplitude shifts under the influence of quantum noise, the decision boundary is mainly used to help the receiving device accurately recover and extract plaintext data under the interference of quantum noise.

[0097] Understandably, in a constellation diagram, the farther a constellation point is from the decision boundary, the higher its tolerance to noise and the lower its bit error rate after being affected by noise. In the ciphertext signal obtained after basis addition, different bits have different tolerances to noise, and quantum noise is usually small. Specifically, the basis information closer to the decision boundary is easily affected by quantum noise and shifts, causing low-bit errors. However, constellation points, including the ciphertext data, which are farther from the decision boundary, are less likely to cause errors even if affected by quantum noise. Therefore, the high-bit error rate in the ciphertext signal is low. Thus, an eavesdropper may still be able to eavesdrop on the ciphertext data information in the ciphertext signal, posing a data transmission security risk.

[0098] It should be noted that, in order to solve the above problems, the embodiments of this application differ from the related technologies in that the modulation symbols of the ciphertext data are mapped onto the basis information in which constellation points are evenly distributed. Instead, the basis information is preprocessed to change the distribution of the basis space, so that the constellation points in the preprocessed basis information are only within the decision boundary and are non-uniformly distributed. After the modulation symbols are mapped onto the preprocessed basis information, the ciphertext symbols converge near the decision boundary. Even if the quantum noise is small, the ciphertext signal will still cause high-bit errors after being masked by small noise during transmission. This reduces the tolerance of the ciphertext signal to noise, increases the high-bit error rate, and improves the security of data transmission.

[0099] The data encryption transmission method of the transmitting device in the embodiments of this application will be described in detail below.

[0100] For example, before encrypting and modulating the first plaintext data based on quantum noise stream cryptography and generating the first modulation symbol, the method further includes: obtaining a first seed key; and expanding the first seed key based on a preset first expansion rule to generate an operating key for encrypting the first plaintext data.

[0101] Here, the first seed key is a short seed key (SK) shared by the transmitting and receiving devices based on a secure negotiation channel.

[0102] Here, the sending device sets up a first encryption box (ENC), in which a first extension rule is configured. The sending device uses the first encryption box to extend the first seed key into a long running key.

[0103] In some embodiments, the first encryption box is specifically a first pseudo-random number generator (PRNG). The sending device uses the first seed key as the initial value of the first pseudo-random number generator, performs calculations on the first seed key based on a preset algorithm, and generates a continuous pseudo-random number sequence to be used as the running key. The pseudo-random number sequence is statistically close to a real random number sequence, but is actually obtained through a deterministic calculation process.

[0104] It should be noted that the receiving device is equipped with a third encryption box, the structure of which is exactly the same as the structure of the first encryption box of the sending device. That is, the third encryption box is configured with the first extension rule, and the receiving device can also generate the running key based on the shared first seed key and the third encryption box.

[0105] For example, based on quantum noise stream cryptography, encrypting and modulating first plaintext data to generate a first modulation symbol includes: encrypting the first plaintext data based on a running key to generate first ciphertext data; and performing quadrature amplitude modulation on the first ciphertext data to generate a first modulation symbol.

[0106] Here, the first plaintext data is the original data content that the sending device needs to transmit to the receiving device.

[0107] Understandably, the first plaintext data is encrypted at the bit level based on the generated operating key, thereby improving the confidentiality of the transmitted data.

[0108] In some embodiments, encrypting the first plaintext data based on the running key to generate the first ciphertext data includes: performing an XOR operation on the first plaintext data based on the running key to generate the first ciphertext data.

[0109] It is understandable that the XOR operation can be used as an encryption algorithm to encrypt the first plaintext data. For example, if the first plaintext data is 011101 and the running key is 101001, then the first ciphertext data generated after XORing the first plaintext data based on the running key is 110100.

[0110] Here, quadrature amplitude modulation (QAM) processing uses optical signals with different phase and intensity levels to represent data information. By simultaneously modulating two orthogonal carriers, the signal of the first plaintext data is mapped to constellation points on the complex plane. Each constellation point represents a specific combination of amplitude and phase, thereby identifying different binary codes.

[0111] Here, quadrature amplitude modulation includes various modulation orders such as 16QAM, 64QAM, and 256QAM. A higher modulation order means each modulated symbol represents more bits, resulting in higher transmission efficiency, but also higher requirements for channel quality. This application does not specifically limit the modulation order of the modulation symbols. In one application example, based on 16QAM encoding, the first ciphertext data is modulated to generate the first modulation symbol, such as... Figure 4 As shown.

[0112] In some embodiments, the first document data can also be modulated using other modulation methods such as intensity keying and phase shift keying to generate the first modulation symbol.

[0113] Here, after generating the first modulation symbol, it is necessary to perform base addition processing on the first modulation symbol; for example, the method further includes: obtaining a second seed key; and performing expansion processing on the second seed key based on a preset second expansion rule to generate base information.

[0114] Here, the second seed key is a short seed key shared by the sending and receiving devices based on a secure negotiation channel.

[0115] Here, the sending device sets up a second encryption box, which is configured with a second extension rule. The sending device uses the second encryption box to extend the second seed key into base information.

[0116] In some embodiments, the second encryption box is specifically a second pseudo-random number generator.

[0117] It should be noted that the receiving device is equipped with a fourth encryption box, the structure of which is exactly the same as the structure of the sending device's second encryption box. That is, the fourth encryption box is configured with the second extension rule, and the receiving device can also generate the base information based on the shared second seed key and the fourth encryption box.

[0118] It should be noted that the above-mentioned basic information generation steps can be performed simultaneously with the operation key generation steps.

[0119] For example, the method further includes: performing probabilistic shaping on the base information based on a preset probabilistic shaping rule, so that the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0120] The process of performing probabilistic shaping on the basis information based on preset probabilistic shaping rules includes: performing probabilistic shaping on the in-phase basis information in the basis information to generate preprocessed in-phase basis information, and performing probabilistic shaping on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information; and performing superposition processing on the preprocessed in-phase basis information and the preprocessed orthogonal basis information to generate preprocessed basis information.

[0121] Among them, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

[0122] It should be noted that Probability Shaping (PS) is a modulation technique used to improve the performance of optical communication systems. Because the uniform distribution of constellation points on the constellation diagram may lead to low transmission efficiency and high bit error rate under some channel conditions, probability shaping optimizes the distribution probability of constellation points on the constellation diagram to make the transmitted signal adapt to the channel conditions, thereby improving transmission efficiency and reducing bit error rate.

[0123] Here, the transmitting device sets a first constant distribution matcher, and the first constant distribution matcher is configured with probability shaping rules; the base information includes two components: in-phase (I) base information and quadrature (Q) base information. In this embodiment, the transmitting device performs probability shaping processing on the two base information components based on preset probability shaping rules, and superimposes the shaped two base information components to generate preprocessed base information.

[0124] It should be noted that the probabilistic shaping of the base information in this application embodiment is not for improving the adaptability to channel conditions to reduce the bit error rate, but rather, based on preset probabilistic shaping rules, shapes the base information into a specific form to improve the bit error rate of the high-order bits of the ciphertext signal. The preset probabilistic shaping rules include parameters such as block length and distribution probability; the block length is set to match the modulation symbol to reduce computational complexity; by configuring the distribution probability of each constellation point, the distribution probability of constellation points near the decision boundary is increased, while the distribution probability of constellation points far from the decision boundary is decreased, resulting in a non-uniform distribution of constellation points in the base information based on the decision boundary.

[0125] For example, the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, including: the constellation points in the preprocessed base information are distributed in a single layer along the decision boundary.

[0126] In some embodiments, the constellation diagram of the preprocessed base information is as follows: Figure 5 As shown in the figure. The dashed line represents the decision boundary, and the constellation points in the base information are distributed in a single layer along the decision boundary.

[0127] In some embodiments, since no decision boundaries are set near the edges of the constellation graph of the base information, in order to further improve the bit error rate of the high bits of the ciphertext signal, Figure 5 Based on the constellation diagram shown, the distribution probability of constellation points near the edges and corners in the constellation diagram of the base information is reduced. After removing the constellation points near the edges and corners, the constellation diagram of the preprocessed base information is as follows.Figure 6 As shown.

[0128] Understandably, after performing probabilistic shaping on the base information based on the preset probabilistic shaping rules, the constellation points in the base information are distributed only close to the decision boundary, and the base information is distributed around the base space, thereby maximizing the bit error rate of the high-order bits of the ciphertext signal.

[0129] It should be noted that the receiving device is equipped with a second constant distribution matcher, which is configured with the same probability shaping rule as the first constant distribution matcher set by the transmitting device. That is, after the receiving device performs probability shaping on the base information, it can also obtain the same form of preprocessed base information.

[0130] It should be noted that the above-mentioned probabilistic shaping process of the base information can be performed after the first modulation symbol is generated, before the first modulation symbol is generated, or simultaneously with the modulation step of the first modulation symbol.

[0131] Here, after generating the first modulation symbol and the preprocessed base information, the first modulation symbol is spatially expanded using the preprocessed base information to upgrade it to a higher-order ciphertext symbol. The specific expansion expression is as follows:

[0132] E = D1 * 2 M-2 +2*B-2 M-2 +1

[0133] Where E is the higher-order ciphertext symbol, D1 is the first modulation symbol, B is the preprocessed base information, and M is the order of the higher-order ciphertext symbol.

[0134] In some embodiments, based on Figure 5 The constellation diagram of the preprocessed base information shown, and the ciphertext symbols obtained after spatial expansion processing of the first modulation symbol are as follows: Figure 7 As shown.

[0135] In some embodiments, based on Figure 6 The constellation diagram of the preprocessed base information shown, and the ciphertext symbols obtained after spatial expansion processing of the first modulation symbol are as follows: Figure 8 As shown.

[0136] Understandably, when ciphertext symbols converge near the decision boundary, even if the quantum noise is small, it can still easily affect the higher bits under the masking effect of quantum noise. Without obtaining the running key, eavesdroppers cannot distinguish the fluctuating ciphertext data from the ciphertext signal, thus improving the security of data transmission.

[0137] Based on the aforementioned data encryption transmission method for transmitting devices, this application embodiment also provides a data encryption transmission method applied to receiving devices, such as... Figure 9 As shown, the method includes:

[0138] Step 901: Receive the encrypted signal sent by the transmitting device.

[0139] Step 902: Based on the preprocessed base information used for spatial coding, the ciphertext signal is spatially reduced in order to generate a second modulation symbol.

[0140] Step 903: Based on quantum noise stream cryptography, the second modulation symbol is demodulated and decrypted to generate the second plaintext data.

[0141] The ciphertext signal is generated by quantum noise stream cryptography and preprocessed base information encryption modulation; the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0142] For example, the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, including: the constellation points in the preprocessed base information are distributed in a single layer along the decision boundary.

[0143] Understandably, because the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, the ciphertext signal is masked by quantum noise during transmission, making the high-order bits of the ciphertext data prone to errors. However, since the receiving device obtains the preprocessed base information and the running key of the quantum noise stream cryptography technique in advance, it can obtain the reference phase and / or reference amplitude of the modulation symbols of the ciphertext data, effectively mitigating the influence of quantum noise. This allows the device to extract the second plaintext data, which is identical to the first plaintext data, from the ciphertext signal. Without the running key, the eavesdropper cannot distinguish the fluctuating ciphertext data from the ciphertext signal, thus improving the security of data transmission.

[0144] For example, before receiving the encrypted signal sent by the transmitting device, the method includes: obtaining a first seed key; and expanding the first seed key based on a preset first expansion rule to generate an operating key for decrypting the second modulation symbol.

[0145] Here, the first seed key is a short seed key shared by the sending and receiving devices based on a secure negotiation channel.

[0146] Here, the receiving device sets up a third encryption box, in which a first extension rule is configured. The receiving device uses the third encryption box to extend the first seed key into a long running key.

[0147] In some embodiments, the third encryption box is specifically a third pseudo-random number generator.

[0148] It should be noted that the sending device sets up a first encryption box, the structure of which is exactly the same as the structure of the receiving device's third encryption box. That is, the first encryption box is configured with a first extension rule, and the receiving device uses the shared first seed key and the running key generated by the third encryption box, which is the same as the running key used by the sending device to encrypt and generate the ciphertext signal.

[0149] For example, the method further includes: obtaining a second seed key; and expanding the second seed key based on a preset second expansion rule to generate base information.

[0150] Here, the second seed key is a short seed key shared by the sending and receiving devices based on a secure negotiation channel.

[0151] Here, the receiving device sets up a fourth encryption box, which is configured with a second extension rule. The receiving device uses the fourth encryption box to extend the second seed key into base information.

[0152] In some embodiments, the fourth encryption box is specifically a fourth pseudo-random number generator.

[0153] It should be noted that the sending device is equipped with a second encryption box, and the structure of the second encryption box is exactly the same as that of the fourth encryption box of the receiving device, that is, the second encryption box is also configured with the second extended rule.

[0154] For example, the method further includes: performing probabilistic shaping on the base information based on a preset probabilistic shaping rule, so that the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0155] For example, based on a preset probability shaping rule, the basis information is subjected to probability shaping processing, including: performing probability shaping processing on the in-phase basis information in the basis information to generate preprocessed in-phase basis information, and performing probability shaping processing on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information; and performing superposition processing on the preprocessed in-phase basis information and the preprocessed orthogonal basis information to generate preprocessed basis information.

[0156] Among them, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

[0157] Here, the receiving device sets a second constant distribution matcher, which is configured with the same probability shaping rule as the first constant distribution matcher set by the transmitting device. In this embodiment, the receiving device performs probability shaping processing on the two base information components based on the preset probability shaping rule, and superimposes the shaped two base information components to generate preprocessed base information.

[0158] It is understandable that, since both the receiving device and the transmitting device are configured with the same second extension rule and probability shaping rule, the preprocessed base information generated by the receiving device based on the shared second seed key and the fourth encryption box and the second constant distribution matcher is the same as the preprocessed base information used by the transmitting device to modulate and generate the ciphertext signal.

[0159] Here, after receiving the ciphertext signal, the receiving device uses the pre-processed base information to perform spatial order reduction processing on the ciphertext signal, reducing the ciphertext signal to a lower-order second modulation symbol. The specific order reduction expression is as follows:

[0160] D2=(E-2*B+2 M-2 -1)*2 2-M

[0161] D2 is the second modulation symbol.

[0162] For example, based on quantum noise stream cryptography, demodulating and decrypting the second modulation symbol to generate second plaintext data includes: demodulating the second modulation symbol based on orthogonal amplitude modulation to generate second ciphertext data; and decrypting the second ciphertext data based on the running key to generate second plaintext data.

[0163] Here, the encrypted signal is generated by the transmitting device based on quadrature amplitude modulation technology.

[0164] Here, the received signal demodulates the second modulation symbol based on the same modulation order used by the transmitting device to modulate and generate the ciphertext signal.

[0165] In some embodiments, if the transmitting device modulates and generates a ciphertext signal based on other modulation methods such as intensity keying or phase shift keying, the receiving device performs borrowing processing on the second modulation symbol based on the same modulation method.

[0166] Understandably, based on the generated operating key, the second ciphertext data is decrypted at the bit level to generate the second plaintext data.

[0167] In some embodiments, decrypting the second ciphertext data to generate second plaintext data includes: performing an XOR operation on the second ciphertext data based on the running key to generate second plaintext data.

[0168] Here, for example, if the second ciphertext data is 110100 and the running key is 101001, then the second plaintext data generated after XORing the second ciphertext data based on the running key is 011101.

[0169] To implement the method of the embodiments of this application, the embodiments of this application also provide a data encryption transmission device, which corresponds to the above-described data encryption transmission method. The steps in the above-described data encryption transmission method embodiments are also fully applicable to the embodiments of this device.

[0170] like Figure 10 As shown, the data encryption transmission device applied to the transmitting device includes: a first processing module 1001, an extension module 1002, and a transmitting module 1003. The first processing module 1001 is used to encrypt and modulate the first plaintext data based on quantum noise stream cryptography to generate a first modulation symbol; the extension module 1002 is used to perform spatial extension processing on the first modulation symbol based on preprocessed base information for spatial coding to generate a ciphertext signal; the transmitting module 1003 is used to transmit the ciphertext signal to the receiving device. The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0171] In some embodiments, the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, including: the constellation points in the preprocessed base information are distributed in a single layer along the decision boundary.

[0172] In some embodiments, the data encryption transmission device applied to the sending device further includes a first generation module 1004, which is used to obtain a first seed key; and to perform expansion processing on the first seed key based on a preset first expansion rule to generate an operating key for encrypting the first plaintext data.

[0173] In some embodiments, the first generation module 1004 is further configured to obtain a second seed key; and based on a preset second expansion rule, to perform expansion processing on the second seed key to generate base information.

[0174] In some embodiments, the first processing module 1001 is specifically used to: encrypt the first plaintext data based on the running key to generate the first ciphertext data; and perform quadrature amplitude modulation processing on the first ciphertext data to generate the first modulation symbol.

[0175] In some embodiments, the first processing module 1001 is specifically used to: perform XOR processing on the first plaintext data based on the running key to generate the first ciphertext data.

[0176] In some embodiments, the data encryption transmission device applied to the sending device further includes a first probability shaping module 1005, which is used to perform probability shaping processing on the base information based on a preset probability shaping rule, so that the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0177] In some embodiments, the first probability shaping module 1005 is specifically used to: perform probability shaping processing on the in-phase basis information in the basis information based on preset probability shaping rules to generate preprocessed in-phase basis information, and perform probability shaping processing on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information; and perform superposition processing on the preprocessed in-phase basis information and the preprocessed orthogonal basis information to generate preprocessed basis information.

[0178] Among them, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

[0179] like Figure 11 As shown, the data encryption transmission device applied to the receiving device includes: a receiving module 1101, a reduction module 1102, and a second processing module 1103. The receiving module 1101 receives the ciphertext signal sent by the transmitting device; the reduction module 1102 performs spatial reduction processing on the ciphertext signal based on pre-processed base information for spatial coding to generate a second modulation symbol; the second processing module 1103 demodulates and decrypts the second modulation symbol based on quantum noise stream cryptography to generate second plaintext data. The ciphertext signal is generated by encryption modulation based on quantum noise stream cryptography and pre-processed base information. The constellation points in the pre-processed base information are non-uniformly distributed within the decision boundary.

[0180] The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, including: the constellation points in the preprocessed base information are distributed in a single layer along the decision boundary.

[0181] In some embodiments, the data encryption transmission device applied to the receiving device further includes a second generation module 1104, which is used to obtain a second seed key; and to perform expansion processing on the second seed key based on a preset second expansion rule to generate base information.

[0182] In some embodiments, the second generation module 1104 is used to obtain a first seed key; and based on a preset first expansion rule, to expand the first seed key to generate an operating key for decrypting the second modulation symbol.

[0183] In some embodiments, the data encryption transmission device applied to the receiving device further includes a second probability shaping module 1105, which is used to perform probability shaping processing on the base information based on a preset probability shaping rule, so that the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

[0184] In some embodiments, the second probability shaping module 1105 is specifically used to: perform probability shaping processing on the in-phase basis information in the basis information based on preset probability shaping rules to generate preprocessed in-phase basis information, and perform probability shaping processing on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information; and perform superposition processing on the preprocessed in-phase basis information and the preprocessed orthogonal basis information to generate preprocessed basis information.

[0185] Among them, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

[0186] In some embodiments, the second processing module 1103 is specifically used to: demodulate the second modulation symbol based on quadrature amplitude modulation technology to generate second ciphertext data; and decrypt the second ciphertext data based on the running key to generate second plaintext data.

[0187] In some embodiments, the second processing module 1103 is specifically used to: perform XOR processing on the second ciphertext data based on the running key to generate the second plaintext data.

[0188] It should be noted that the data encryption transmission device provided in the above embodiments is only illustrated by the division of the above program modules when performing data encryption transmission. In practical applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the processing described above. In addition, the data encryption transmission device and the data encryption transmission method embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in the method embodiments, which will not be repeated here.

[0189] Based on the hardware implementation of the above program modules, and in order to implement the data encryption transmission method of this application embodiment, this application embodiment also provides a sending device, such as... Figure 12 As shown, the transmitting device 1200 includes at least one processor 1201, a memory 1202, a user interface 1203, and at least one network interface 1204. The various components in the transmitting device 1200 are coupled together via a bus system 1205. It can be understood that the bus system 1205 is used to implement communication between these components. In addition to a data bus, the bus system 1205 also includes a power bus, a control bus, and a status signal bus. However, for clarity, in… Figure 12 The general labeled all buses as Bus System 1205.

[0190] The user interface 1203 may include a monitor, keyboard, mouse, trackball, click wheel, buttons, touchpad, or touch screen.

[0191] The memory 1202 in this embodiment is used to store various types of data to support the operation of the transmitting device 1200. Examples of such data include any computer program used to operate on the transmitting device 1200.

[0192] The data encryption transmission method for a transmitting device disclosed in this application can be applied to, or implemented by, the processor 1201. The processor 1201 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the data encryption transmission method can be completed by the integrated logic circuitry of the hardware in the processor 1201 or by instructions in software form. The processor 1201 can be a general-purpose processor, a digital signal processor (DSP), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The processor 1201 can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the embodiments of this application can be directly manifested as execution by a hardware decoding processor, or execution by a combination of hardware and software modules in the decoding processor. The software modules can be located in a storage medium, which is located in the memory 1202. The processor 1201 reads the information in the memory 1202 and, in conjunction with its hardware, completes the steps of the data encryption transmission method for a transmitting device provided in the embodiments of this application.

[0193] In an exemplary embodiment, the transmitting device 1200 may be implemented by one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), FPGAs, general-purpose processors, controllers, microcontrollers (MCUs), microprocessors, or other electronic components to perform the aforementioned data encryption transmission method.

[0194] It is understood that memory 1202 can be volatile memory or non-volatile memory, or both. Non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), EEPROM, ferromagnetic random access memory (FRAM), flash memory, magnetic surface memory, optical disc, or compact disc read-only memory (CD-ROM); magnetic surface memory can be disk storage or magnetic tape storage. Volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as Static Random Access Memory (SRAM), Synchronous Static Random Access Memory (SSRAM), Dynamic Random Access Memory (DRAM), Synchronous Dynamic Random Access Memory (SDRAM), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM), Enhanced Synchronous Dynamic Random Access Memory (ESDRAM), Sync Link Dynamic Random Access Memory (SLDRAM), and Direct Rambus Random Access Memory (DRRAM). The memory 1201 described in this application embodiment is intended to include, but is not limited to, these and any other suitable types of memory.

[0195] Based on the hardware implementation of the above program modules, and in order to implement the data encryption transmission method of this application embodiment, this application embodiment also provides a receiving device, such as... Figure 13 As shown, the receiving device 1300 includes at least one processor 1301, a memory 1302, a user interface 1303, and at least one network interface 1304. The various components in the receiving device 1300 are coupled together via a bus system 1305. It can be understood that the bus system 1305 is used to implement communication between these components. In addition to a data bus, the bus system 1305 also includes a power bus, a control bus, and a status signal bus. However, for clarity, in… Figure 13 The general labeled all buses as Bus System 1305.

[0196] The user interface 1303 may include a monitor, keyboard, mouse, trackball, click wheel, buttons, touchpad, or touch screen.

[0197] The memory 1302 in this embodiment is used to store various types of data to support the operation of the receiving device 1300. Examples of such data include any computer program used to operate on the receiving device 1300.

[0198] The data encryption transmission method for a receiving device disclosed in this application can be applied to, or implemented by, processor 1301. Processor 1301 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the data encryption transmission method can be completed by integrated logic circuits in the hardware of processor 1301 or by instructions in software form. The processor 1301 can be a general-purpose processor, a DSP, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Processor 1301 can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. A general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the embodiments of this application can be directly manifested as execution by a hardware decoding processor, or execution by a combination of hardware and software modules in the decoding processor. The software modules can be located in a storage medium, specifically memory 1302. Processor 1301 reads information from memory 1302 and, in conjunction with its hardware, completes the steps of the data encryption transmission method for a receiving device provided in the embodiments of this application.

[0199] In an exemplary embodiment, the receiving device 1300 may be implemented by one or more ASICs, DSPs, PLDs, CPLDs, FPGAs, general-purpose processors, controllers, MCUs, microprocessors, or other electronic components to perform the aforementioned data encryption transmission method.

[0200] It is understood that memory 1302 can be volatile memory or non-volatile memory, or both. Non-volatile memory can be ROM, PROM, EPROM, EEPROM, FRAM, Flash Memory, magnetic surface memory, optical disk, or read-only optical disk; magnetic surface memory can be disk storage or magnetic tape storage. Volatile memory can be RAM, which is used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as SRAM, SSRAM, DRAM, SDRAM, DDRSDRAM, ESDRAM, SLDRAM, and DRRAM. The memory 1302 described in the embodiments of this application is intended to include, but is not limited to, these and any other suitable types of memory.

[0201] This application also provides a data encryption transmission system, including the aforementioned sending device 1200 and receiving device 1300.

[0202] In an exemplary embodiment, this application also provides a storage medium, namely a computer storage medium, specifically a computer-readable storage medium, such as a memory 1202 including a computer program, which can be executed by the processor 1201 of the transmitting device 1200 to complete the steps described in the data encryption transmission method applied to the transmitting device according to this application embodiment; and a memory 1302 including a computer program, which can be executed by the processor 1301 of the receiving device 1300 to complete the steps described in the data encryption transmission method applied to the receiving device according to this application embodiment. The computer-readable storage medium can be a ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disc, or CD-ROM, etc.

[0203] In an exemplary embodiment, this application also provides a computer program product, including a computer program that can be executed by a processor 1201 of a transmitting device 1200 and by a processor 1301 of a receiving device 1300 to perform the steps described in the method of this application embodiment.

[0204] It should be noted that terms such as "first" and "second" are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0205] Furthermore, the technical solutions described in the embodiments of this application can be combined arbitrarily without conflict.

[0206] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A method for encrypted data transmission, characterized in that, Applied to a transmitting device, the method includes: Based on quantum noise stream cryptography, the first plaintext data is encrypted and modulated to generate the first modulation symbol; Based on the preprocessed base information used for spatial coding, the first modulation symbol is spatially extended to generate a ciphertext signal; Send the encrypted signal to the receiving device; The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

2. The method according to claim 1, characterized in that, The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, including: the constellation points in the preprocessed base information are distributed in a single layer along the decision boundary.

3. The method according to claim 1 or 2, characterized in that, The method further includes: Obtain the first seed key; Based on a preset first expansion rule, the first seed key is expanded to generate an operating key for encrypting the first plaintext data.

4. The method according to claim 3, characterized in that, The quantum noise stream cryptography technique encrypts and modulates the first plaintext data to generate a first modulation symbol, including: Based on the operating key, the first plaintext data is encrypted to generate the first ciphertext data; The first ciphertext data is subjected to quadrature amplitude modulation processing to generate the first modulation symbol.

5. The method according to claim 4, characterized in that, The step of encrypting the first plaintext data based on the running key to generate the first ciphertext data includes: Based on the operating key, the first plaintext data is XORed to generate the first ciphertext data.

6. The method according to claim 1 or 2, characterized in that, The method further includes: Obtain the second seed key; Based on the preset second expansion rule, the second seed key is expanded to generate base information.

7. The method according to claim 6, characterized in that, The method further includes: Based on preset probabilistic shaping rules, the base information is subjected to probabilistic shaping processing, so that the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

8. The method according to claim 7, characterized in that, The probabilistic shaping process performed on the base information based on preset probabilistic shaping rules includes: Based on preset probabilistic shaping rules, probabilistic shaping is performed on the in-phase basis information in the basis information to generate preprocessed in-phase basis information, and probabilistic shaping is performed on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information. The preprocessed in-phase basis information and the preprocessed orthogonal basis information are superimposed to generate preprocessed basis information; Wherein, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

9. A method for encrypted data transmission, characterized in that, Applied to a receiving device, the method includes: Receive encrypted signals sent by the transmitting device; Based on the preprocessed base information for spatial coding, the ciphertext signal is spatially reduced in order to generate a second modulation symbol; Based on quantum noise stream cryptography, the second modulation symbol is demodulated and decrypted to generate the second plaintext data; The ciphertext signal is generated based on quantum noise stream cryptography and the preprocessed base information encryption modulation. The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

10. The method according to claim 9, characterized in that, The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary, including: the constellation points in the preprocessed base information are distributed in a single layer along the decision boundary.

11. The method according to claim 9 or 10, characterized in that, The method further includes: Obtain the second seed key; Based on the preset second expansion rule, the second seed key is expanded to generate base information.

12. The method according to claim 11, characterized in that, The method further includes: Based on preset probabilistic shaping rules, the base information is subjected to probabilistic shaping processing, so that the constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

13. The method according to claim 12, characterized in that, The probabilistic shaping process performed on the base information based on preset probabilistic shaping rules includes: Based on preset probabilistic shaping rules, probabilistic shaping is performed on the in-phase basis information in the basis information to generate preprocessed in-phase basis information, and probabilistic shaping is performed on the orthogonal basis information in the basis information to generate preprocessed orthogonal basis information. The preprocessed in-phase basis information and the preprocessed orthogonal basis information are superimposed to generate preprocessed basis information; Wherein, the in-phase basis information is the component information in the basis information that is in phase with the ciphertext signal, and the orthogonal basis information is the component information that is orthogonal to the phase of the ciphertext signal.

14. The method according to claim 9 or 10, characterized in that, The method further includes: Obtain the first seed key; Based on a preset first expansion rule, the first seed key is expanded to generate an operating key for decrypting the second modulation symbol.

15. The method according to claim 14, characterized in that, The quantum noise stream cryptography technique demodulates and decrypts the second modulation symbol to generate second plaintext data, including: Based on quadrature amplitude modulation technology, the second modulation symbol is demodulated to generate second ciphertext data; Based on the operating key, the second ciphertext data is decrypted to generate the second plaintext data.

16. The method according to claim 15, characterized in that, The step of decrypting the second ciphertext data based on the running key to generate the second plaintext data includes: Based on the running key, the second ciphertext data is XORed to generate the second plaintext data.

17. A data encryption transmission device, characterized in that, Applied to a transmitting device, the apparatus includes: The first processing module is used to encrypt and modulate the first plaintext data based on quantum noise stream cryptography to generate the first modulation symbol; An extension module is used to perform spatial extension processing on the first modulation symbol based on preprocessed base information for spatial coding to generate a ciphertext signal; The transmitting module is used to transmit the encrypted signal to the receiving device; The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

18. A data encryption transmission device, characterized in that, Applied to a receiving device, the apparatus includes: The receiving module is used to receive encrypted signals sent by the transmitting device; The order reduction module is used to perform spatial order reduction processing on the ciphertext signal based on the preprocessed base information for spatial coding, to generate a second modulation symbol; The second processing module is used to demodulate and decrypt the second modulation symbol based on quantum noise stream cryptography to generate second plaintext data. The ciphertext signal is generated based on quantum noise stream cryptography and the preprocessed base information encryption modulation. The constellation points in the preprocessed base information are non-uniformly distributed within the decision boundary.

19. A transmitting device, characterized in that, include: A processor and a memory for storing a computer program capable of running on the processor, wherein the processor, when running the computer program, performs the steps of the method according to any one of claims 1 to 8.

20. A receiving device, characterized in that, include: A processor and a memory for storing a computer program capable of running on the processor, wherein the processor, when running the computer program, performs the steps of the method according to any one of claims 9 to 16.

21. A data encryption transmission system, characterized in that, It includes the transmitting device as described in claim 19 and the receiving device as described in claim 20.

22. A storage medium, characterized in that, The storage medium stores a computer program, which, when executed by a processor, implements the steps of the method according to any one of claims 1 to 16.

23. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 16.

Images