Network security data encryption method and system based on quantum technology

Abstract

The invention relates to the technical field of network security data encryption, in particular to a network security data encryption method and system based on a quantum technology, and the method comprises the following steps: classifying to-be-encrypted data, recognizing and marking sensitive data and non-sensitive data; a quantum key distribution protocol is adopted, and an encryption key is generated and shared between two communication parties through a quantum channel; based on the shared encryption key, the sensitive data is encrypted by using a quantum state encryption technology, and the quantum state encryption technology encrypts the data through quantum superposition and quantum entanglement characteristics; and applying a quantum entropy coding technology to the encrypted sensitive data, and carrying out optimization coding on the data through superposition and entanglement characteristics of quantum bits by utilizing a quantum information theory. According to the method, the sensitive data are encrypted by adopting the quantum state, so that the problem of data leakage caused by the fact that traditional network data encryption mostly adopts classical key encryption based on a symmetric or asymmetric algorithm is solved.

Description

TECHNICAL FIELD

[0001] The application relates to the field of network security data encryption technology, in particular to a network security data encryption method and system based on quantum technology. BACKGROUND

[0002] With the rapid development of network communication and data exchange, data security has become an important research direction in the information age. The existing network security system generally relies on classical cryptography algorithms, and data encryption and decryption are realized through symmetric or asymmetric key mechanisms to ensure the security of information in the transmission and storage process. In recent years, with the wide application of big data, cloud computing and artificial intelligence, the data scale is continuously expanding, and the data types and sources are increasingly complex, which puts forward higher requirements on data encryption efficiency, confidentiality and attack resistance.

[0003] Traditional network data encryption mostly adopts classical key encryption based on symmetric or asymmetric algorithms. Since the key is easy to be intercepted, copied or brute-forced in the distribution and storage process, data leakage problems are caused. SUMMARY

[0004] In order to make up for the above shortcomings, the application provides a network security data encryption method and system based on quantum technology, which aims to improve the problem that traditional network data encryption mostly adopts classical key encryption based on symmetric or asymmetric algorithms. Since the key is easy to be intercepted, copied or brute-forced in the distribution and storage process, data leakage problems are caused.

[0005] In the first aspect, the application provides the following technical scheme, a network security data encryption method based on quantum technology, comprising the following steps:

[0006] Classify the data to be encrypted, identify and mark sensitive data and non-sensitive data;

[0007] Adopt quantum key distribution protocol to generate and share encryption keys between the two communication parties through quantum channels;

[0008] Based on the shared encryption key, the sensitive data is encrypted using quantum state encryption technology, which encrypts the data through quantum superposition and quantum entanglement characteristics;

[0009] After quantum entropy coding, quantum data compression technology is further applied to compress the encrypted data through quantum bit clustering;

[0010] After quantum entropy coding, quantum data compression technology is further applied to compress the encrypted data through quantum bit clustering;

[0011] The compressed encrypted data is securely transmitted and stored, and a quantum secure communication protocol is used to protect the data during data transmission, and a quantum resistance storage technology is used to protect the encrypted data during data storage.

[0012] New encryption keys are generated and distributed periodically using a quantum key distribution protocol.

[0013] By using the above technical solution, the sensitive data is encrypted using quantum states, and then encrypted under the protection of quantum keys shared by both parties, thereby improving the problem that traditional network data encryption mostly uses classical key encryption based on symmetric or asymmetric algorithms, and the key is easily intercepted, copied or brute-forced during distribution and storage, causing data leakage.

[0014] Further, the identification and labeling of sensitive data and non-sensitive data include the following steps:

[0015] Collecting the data to be encrypted from a database, a file system, an application interface, or a real-time data stream;

[0016] Cleaning, standardizing, and feature extracting the collected data;

[0017] Determining the sensitive type of the data based on predefined keywords, field constraints, or regular expressions;

[0018] Using a machine learning or deep learning model to determine the sensitivity of the data and performing confidence evaluation on the determination result;

[0019] Adding a sensitivity label to the data determined to be sensitive and adding a non-sensitive label to the data determined to be non-sensitive;

[0020] Storing or generating an index for the labeled sensitive data and non-sensitive data;

[0021] During the labeling process, different processing strategies are set according to the confidence of the sensitivity determination result.

[0022] Further, the generation and sharing of encryption keys between the two parties of communication includes the following steps:

[0023] Establishing a quantum channel between the two parties of communication for transmitting quantum bits;

[0024] The sender encodes a random bit sequence into a quantum state and sends it to the receiver through the quantum channel;

[0025] The receiver randomly selects a measurement basis to measure the received quantum bits and records the measurement result and the measurement basis;

[0026] Both parties exchange their measurement basis information through a traditional public channel, and reserve the quantum bits matched by the measurement basis as raw keys;

[0027] Error detection is performed on the reserved raw keys, and error correction is performed on the raw keys according to the detection result;

[0028] The error-corrected raw keys are subjected to privacy amplification processing to generate a final shared encryption key.

[0029] Further, the encryption processing of the data includes the following steps:

[0030] Sensitive data is mapped to quantum bit states;

[0031] Hadamard gate operations are applied to the quantum bits to encode quantum superposition states;

[0032] CNOT gate operations are applied to selected two quantum bits to establish entanglement;

[0033] According to the shared encryption key, Pauli-X gate, Pauli-Y gate and Pauli-Z gate operations are applied to the quantum bits in sequence;

[0034] The quantum bit sequence subjected to quantum state encryption processing is output.

[0035] Further, the optimized encoding of the data includes the following steps:

[0036] The encrypted quantum bit sequence is divided into several groups according to a fixed length, and each group is used as an encoding unit;

[0037] The frequency of each quantum bit pattern appearing in the quantum state is counted to obtain the number of occurrences of each pattern;

[0038] According to the number of occurrences, the quantum bit patterns are mapped to quantum bit encoding sequences of different lengths in descending order, forming quantum entropy encoding sequences;

[0039] The encoding sequences are generated into corresponding quantum states through quantum gate operations, and the quantum states include quantum superposition and entanglement states;

[0040] The quantum bit sequence subjected to quantum entropy encoding processing is output, providing input for subsequent quantum data compression.

[0041] Further, the compression of the encrypted data includes the following steps:

[0042] The quantum bit sequence subjected to quantum entropy encoding is divided into several clusters according to a fixed length, and each cluster is used as a compression unit;

[0043] Comparing quantum state patterns within each quantum bit cluster, identifying identical quantum state patterns;

[0044] Merging the identified identical quantum state patterns into a single representation through quantum gate operations;

[0045] Applying quantum gate operations to quantum bits according to cluster characteristics to compress information within the cluster;

[0046] Reconstructing the compressed quantum bit cluster into a compressed quantum state sequence and outputting as final compressed encrypted data.

[0047] Further, the use of quantum secure communication protocol to protect data includes the following steps:

[0048] Establishing a quantum channel between the two parties of communication and generating a shared encryption key through a quantum key distribution protocol;

[0049] Applying the shared encryption key to the encryption processing of the compressed data packets, and encrypting each data packet using an independent key;

[0050] Sending the encrypted data packets to the receiving party one by one through a quantum-enhanced channel;

[0051] The receiving party uses the shared encryption key to decrypt the received data packets to recover the compressed encrypted data sequence;

[0052] During decryption, the hash value of the received data is compared.

[0053] Further, the protection of encrypted data through quantum resistance storage technology includes the following steps:

[0054] Encrypting the compressed encrypted data using a quantum key to form a quantum state encrypted data sequence;

[0055] Quantum state encoding of the quantum state encrypted data sequence, storing data through quantum bit superposition and entangled encoding layout;

[0056] Applying quantum error correction codes to the encoded quantum state data to generate redundant quantum bits;

[0057] Storing the encoded and error-corrected quantum state data in a quantum resistance storage medium, supporting data reading and writing through a standardized interface;

[0058] During data reading, the data integrity is confirmed through quantum state measurement and hash check, and the data is recovered according to the quantum error correction code.

[0059] In a second aspect, the present application provides the following technical solutions, a network security data encryption system based on quantum technology, the system comprises:

[0060] a data classification and sensitivity evaluation module for classifying the data to be encrypted, identifying and marking sensitive data and non-sensitive data;

[0061] a quantum key distribution module for generating and sharing encryption keys between the two parties of communication by quantum channel using quantum key distribution protocol;

[0062] a quantum state encryption module for encrypting sensitive data using quantum state encryption technology based on shared encryption keys, which encrypts data through quantum superposition and quantum entanglement characteristics;

[0063] a quantum entropy encoding module for applying quantum entropy encoding technology to encrypted sensitive data, which optimally encodes data through superposition and entanglement characteristics of quantum bits using quantum information theory;

[0064] a quantum data compression module for further applying quantum data compression technology to encrypted data after quantum entropy encoding through quantum bit clustering;

[0065] a data transmission and storage module for securely transmitting and storing compressed encrypted data, protecting data during data transmission using quantum secure communication protocol, and protecting encrypted data during data storage using quantum resistance storage technology;

[0066] a key update and rotation module for generating and distributing new encryption keys periodically using quantum key distribution protocol.

[0067] The present application has the following advantages:

[0068] 1、In the present application, quantum state encryption is used for sensitive data, and then encryption is realized under the protection of quantum keys shared by the two parties of communication, thereby improving the problem that traditional network data encryption mostly uses classical key encryption based on symmetric or asymmetric algorithm, and the keys are easily intercepted, copied or brute-forced during distribution and storage, causing data leakage.

[0069] 2、In the present application, quantum entropy encoding is first performed on encrypted sensitive data, and then quantum data compression is performed, thereby reducing the number of quantum bits required for storage and transmission, thereby improving the problem that traditional encrypted data mostly uses uncompressed or simply compressed mode, and the large data volume leads to high storage and transmission resource occupation.

[0070] 3、The present application, by applying quantum secure communication protocol to the encrypted data transmission and quantum resistance storage technology for storage, and then in the transmission and storage process to protect data security, thereby improving the traditional data protection mostly adopts the classical transmission and storage mode, due to the existence of intermediate eavesdropping and storage cracking risk, thereby causing the problem of insufficient data security. BRIEF DESCRIPTION OF DRAWINGS

[0071] Figure 1 A method flow chart of a network security data encryption method based on quantum technology is provided for the present application.

[0072] Figure 2 A system architecture diagram of a network security data encryption system based on quantum technology is provided for the present application. DETAILED DESCRIPTION

[0073] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0074] Embodiment one

[0075] In the first embodiment of the present application, the present application provides a network security data encryption method based on quantum technology, as shown in Figure 1 The method comprises the following steps:

[0076] Classify the data to be encrypted, identify and mark sensitive data and non-sensitive data;

[0077] Further, identifying and marking sensitive data and non-sensitive data comprises the following steps:

[0078] Collecting data to be encrypted from databases, file systems, application interfaces or real-time data streams;

[0079] Cleaning, standardizing and feature extracting the collected data;

[0080] Determining the sensitive type of the data based on predefined keywords, field constraints or regular expressions;

[0081] Using machine learning or deep learning models to determine the sensitivity of the data and to evaluate the confidence of the determination result;

[0082] Adding a sensitivity label to the data determined to be sensitive, and adding a non-sensitive label to the data determined to be non-sensitive;

[0083] Store or index the marked sensitive data and non-sensitive data separately.

[0084] During the labeling process, different processing strategies are set according to the confidence level of the sensitivity determination results.

[0085] Specifically, by classifying and labeling the data to be encrypted, sensitive and non-sensitive data are identified, providing basic data support for subsequent quantum state encryption and compression steps. The process begins by receiving an input dataset D = {d1, d2, ..., d...}. n}, where each data unit d i The dataset D can originate from databases, file systems, application interfaces, or real-time data streams, and includes data content fields and their contextual feature information. To ensure the accuracy of subsequent recognition, the system cleans and standardizes the dataset D, removing missing values ​​and outliers, and extracts a structured feature vector X using the feature extraction function f(x). i =f(d i After feature extraction, the system first performs preliminary screening based on a rule-based matching algorithm, setting the keyword set K = {k1, k2, ..., k}. m}, Field constraint set F = {f1, f2, ..., f p}, and the set of regular expressions R = {r1, r2, ..., r q}, through the logical decision function g(X) i Generate initial sensitivity label values ​​y' using K, F, and R. i ∈{0,1}, where 0 represents non-sensitive data and 1 represents potentially sensitive data. Subsequently, to improve classification accuracy, the system introduces a sensitivity determination model based on supervised learning, which outputs probabilities for the initially labeled samples. The model input is the feature vector X. i The output is the sensitivity probability P. i Its calculation expression is:

[0086] P i =σ(W·X) i +b);

[0087] Where W is the model weight matrix, b is the bias term, and σ(·) is the Sigmoid activation function, used to map the linear combination to the interval (0,1), based on the output probability P. i The system sets a confidence threshold τ∈(0,1), when P i When ≥τ, the data d i Marked as sensitive data; when P i When <τ, data d i Data marked as non-sensitive is labeled, and the labeling result forms a label vector Y = {y1, y2, ..., y}. n}; where y i∈{S,N} represent sensitive and non-sensitive categories, respectively. For data deemed sensitive, the system adds a sensitivity flag field to the metadata layer and generates a corresponding index table to prioritize the use of quantum key resources for protection in the subsequent quantum state encryption stage. For non-sensitive data, lightweight conventional encryption or compression is used. If the confidence level P output by the model... i If the data is located in the interval [τ1, τ2] (where τ1 < τ2), a secondary verification mechanism is triggered. Accuracy is improved through secondary model judgment or manual review. Ultimately, the system output includes two categories: first, a classification label result Y, used to distinguish data sensitivity levels; and second, a label index structure I = {i S i N The above output results are input to the next encryption module, where the index corresponding to the sensitive data points to the quantum encryption channel to realize key distribution and encryption operations based on quantum states, and the index corresponding to the non-sensitive data enters the regular data channel for subsequent processing.

[0088] By automating the classification and labeling of data to be encrypted, the system accurately distinguishes between sensitive and non-sensitive data. This enables the use of differentiated processing strategies for different data types during subsequent encryption processes, thereby improving the utilization rate of encryption resources and enhancing overall data security and processing efficiency.

[0089] A quantum key distribution protocol is used to generate and share encryption keys between the two communicating parties through a quantum channel;

[0090] Furthermore, generating and sharing an encryption key between the communicating parties includes the following steps:

[0091] A quantum channel is established between the two communicating parties to transmit qubits;

[0092] The sender encodes a random bit sequence into a quantum state and transmits it to the receiver via a quantum channel;

[0093] The receiver randomly selects a measurement basis to measure the received qubits and records the measurement results and the measurement basis.

[0094] Both parties exchange their respective measurement basis information through a traditional open channel and retain the measurement basis matching qubits as the original key;

[0095] Error detection is performed on the retained original key, and error correction is performed on the original key based on the detection results;

[0096] The original key after error correction undergoes privacy amplification processing to generate the final shared encryption key.

[0097] Specifically, a quantum key distribution protocol is used to generate and share encryption keys between the communicating parties via a quantum channel, ensuring the security and randomness of the key generation process. First, a quantum channel and a classical channel are established between the communicating parties A and B. The quantum channel is used to transmit the qubit sequence, and the classical channel is used for subsequent measurement basis switching and error correction communication. Sender A randomly generates the bit sequence: S = {s1, s2, ..., s...} n}; where s i ∈{0,1} represents the classical bit value to be encoded, and the corresponding encoding basis B is randomly selected. A ={b1,b2,…,b n}; where b i ∈{Z,H} represent the rectangular basis and the diagonal basis, respectively. The sender encodes each bit si into a quantum state |ψ i >, which is represented as:

[0098]

[0099] The encoded quantum state sequence Q = {|ψ1>,|ψ2>,…,|ψ n The data is transmitted to receiver B via a quantum channel. After receiving each qubit, the receiver independently and randomly selects a measurement basis B. B ={b'1,b'2,…,b' n}; where b' i ∈{Z,X}, and perform measurements to obtain the measurement result sequence R={r1,r2,…,r n After the measurement is completed, both parties exchange their respective measurement basis information and compare the measurement basis through a classical channel. When b i =b' i At that time, the measurement result r i Considered valid and consistent with the original bits s i Correspondingly, the original key sequence K is formed. r To verify the security of the quantum channel, the system was tested in K... r A portion of bits is randomly selected from the data for bit error rate calculation. The formula for calculating the bit error rate e is:

[0100]

[0101] Where N e N represents the number of error bits detected. t This represents the total number of sampled bits. If e is less than the preset threshold e th If the channel is considered secure, both parties continue with error correction and privacy amplification steps. The error correction phase employs an information-theoretically secure cascaded algorithm, transmitting verification information through a public channel to correct discrepancies in the bits, thus obtaining the consensus key K. c The privacy amplification phase uses a one-way hash function H(·) to convert K...c Compressed into a shorter final key K f The calculation expression is:

[0102] K f =H(K) c );

[0103] The choice of H(·) ensures that the probability of information leakage is within a safe threshold, and the final output K f This refers to the quantum encryption key shared by both communicating parties, which is used in the subsequent quantum state encryption process for sensitive data.

[0104] By employing a quantum key distribution protocol, encryption keys are securely generated and shared between the communicating parties, achieving quantum security and randomness in the key transmission process. This effectively reduces the risk of key leakage and improves the security level of encrypted data communication.

[0105] Based on a shared encryption key, quantum state encryption technology is used to encrypt sensitive data. Quantum state encryption technology encrypts data through the properties of quantum superposition and quantum entanglement.

[0106] Furthermore, encrypting the data includes the following steps:

[0107] Mapping sensitive data to qubit states;

[0108] Applying Hadamard gate operations to qubits to encode quantum superposition states;

[0109] By applying a CNOT gate operation to two selected qubits, entanglement is established.

[0110] Based on the shared encryption key, Pauli-X, Pauli-Y, and Pauli-Z gate operations are sequentially applied to the qubits;

[0111] Output the quantum bit sequence after quantum state encryption.

[0112] Specifically, based on the shared encryption key obtained by both communicating parties through a quantum key distribution protocol, sensitive data is subjected to quantum state encryption processing. The input data is a sensitive dataset D = {d1, d2, ..., d...} that has been classified and labeled. n}, where each data element d i Encoded as the corresponding quantum bit state |ψ i First, the sensitive data is mapped through the quantum mapping function f(d) i ) is converted into a quantum state, i.e., |ψ i >=f(d i ), to obtain the quantum bit sequence Subsequently, a Hadamard gate operation is applied to each qubit to generate a superposition state, with the transformation relation being: This operation distributes quantum information in a superposition space of multiple ground states. Then, any two qubits are selected and an entangled relationship is established by performing a controlled NOT gate (CNOT) operation, so that the states of any two qubits can be represented as |Φ>=α|00>+β|11>. This creates an inseparable quantum correlation between the qubits, based on the shared encryption key K={k1,k2,…,k…}. n Pauli gate operations are applied sequentially to the qubits, where the encryption operator for each bit can be represented as follows: Where X, Y, and Z are the Pauli-X, Pauli-Y, and Pauli-Z gates, respectively, and k i1 ,k i2 ,k i3 As a control parameter in the key, the encrypted quantum state is represented as |Ψ'>=U i |Ψ>, this state is an unmeasurable quantum superposition state. Only the receiver holding the same key can decrypt it through opposite quantum gate operations. The output is the quantum bit sequence |Ψ'> after quantum state encryption. This sequence is used as the input for subsequent quantum entropy encoding and quantum compression steps to further optimize the utilization of quantum bit resources while ensuring encryption security.

[0113] By using quantum state encryption technology based on shared keys to process sensitive data through quantum superposition and entanglement, quantum-level data mixing and state hiding are achieved, thereby improving the encryption process's resistance to parsing and information security.

[0114] Quantum entropy coding technology is applied to encrypted sensitive data, and quantum information theory is used to optimize the encoding of data through the superposition and entanglement properties of qubits;

[0115] Furthermore, optimizing the encoding of the data includes the following steps:

[0116] The encrypted quantum bit sequence is divided into several groups of fixed length, and each group serves as a coding unit.

[0117] The frequency of each mode in the quantum state of each group of qubits is counted to obtain the number of times each mode appears;

[0118] Based on the frequency of occurrence, the qubit patterns are mapped into qubit encoding sequences of different lengths in descending order, forming a quantum entropy encoding sequence;

[0119] Quantum states are generated from encoded sequences through quantum gate operations. These quantum states include quantum superposition and entangled states.

[0120] The output is a sequence of qubits encoded by quantum entropy, which serves as input for subsequent quantum data compression.

[0121] Specifically, the encrypted sensitive data undergoes quantum entropy encoding processing. The input data is a quantum bit sequence encrypted with quantum states: |Ψ'>={|ψ'1>,|ψ'2>,…,|ψ' n >};where each |ψ' i > Represents the state of a single qubit after encryption. First, the qubit sequence is divided into several coding units G of fixed length L. j ={|ψ' j1 >,|ψ' j2 >,…,|ψ' jL The >} is used for subsequent statistics and encoding. For each encoding unit, the mode frequency p appearing in the ground state set {|0>,|1>} is statistically analyzed using quantum measurements. i Calculate its quantum entropy value H q Represented as:

[0122] H q =-∑ i p i log2p i ;

[0123] Where p i Let E be the probability of the i-th quantum state mode. Based on the obtained probability distribution, assign shorter encoding sequences to frequently occurring quantum state modes and longer encoding sequences to frequently occurring modes, and construct the quantum entropy optimization mapping function E. q :|ψ' i >→C i ; where C i For the corresponding qubit encoding sequence, C is converted through quantum gate operations. i Mapped to the corresponding quantum state |φ i >=U E (C i )|0>;where U E To realize the quantum gate matrix of entropy encoding mapping, this operation utilizes the properties of quantum superposition and entanglement to redistribute the information probability amplitude in the quantum state space, maximizing encoding efficiency. The final output is the quantum bit sequence |Φ>={|φ1>,|φ2>,…,|φ m This sequence maintains the reversibility and security of the original information while compressing the distribution of redundant information.

[0124] By encoding the encrypted qubit sequence with quantum entropy, optimized reconstruction based on the probability distribution of quantum states is achieved, thereby reducing redundant qubits while maintaining information reversibility and improving the efficiency of subsequent quantum compression and storage.

[0125] After quantum entropy encoding, quantum data compression technology is further applied to compress the encrypted data through a cluster of qubits;

[0126] Furthermore, compressing encrypted data includes the following steps:

[0127] The quantum bit sequence encoded by quantum entropy is divided into several clusters of fixed length, and each cluster serves as a compression unit.

[0128] The quantum state modes within each qubit cluster are compared to identify identical quantum state modes;

[0129] For the same quantum state patterns identified, they are merged into a single representation through quantum gate operations;

[0130] Based on cluster characteristics, quantum gate operations are applied to qubits to compress information within the cluster;

[0131] The compressed qubit cluster is reconstructed into a compressed quantum state sequence, and the output is the final compressed encrypted data.

[0132] Specifically, quantum data compression technology is applied to the quantum entropy-encoded encrypted data to reduce the size of qubits and optimize storage and transmission efficiency. The input data is the quantum entropy-encoded qubit sequence |Φ>={|φ1>,|φ2>,…,|φ m >};where each |φ i > represents the encoded quantum bit state. The system first divides the sequence into fixed lengths L... c Divided into several clusters Used for pattern matching and compression within a cluster, for each cluster, recurring quantum state patterns are identified, and pattern merging is achieved through quantum coherence and quantum gate operations. Its mathematical description can be expressed as:

[0133]

[0134] Among them U C Let n be the quantum gate matrix corresponding to the squeezing operation. j The number of identical quantum state modes within the cluster, |Φ' j The compressed state is represented by a single state. Subsequently, based on the cluster characteristics, the remaining qubits are further compressed through quantum gate operations to construct a compressed cluster sequence. And reconstruct all compressed clusters into the final compressed quantum state sequence Output |Ψ cAs the final compressed and encrypted data, it maintains the reversibility of the original information and reduces redundant qubits, providing input data for subsequent quantum-secure transmission or quantum-resistant storage. This allows the system to improve storage utilization and transmission efficiency while ensuring encryption security. The cluster length L in the compression operation... c The number of repeating modes, n, is determined by the distribution of quantum bit resources and processing power. j Obtained through statistical analysis of quantum states within the cluster.

[0135] By performing cluster compression and merging of identical patterns on the bit sequence encoded by quantum entropy, the redundancy of quantum bits is reduced, thereby reducing the size of encrypted data and improving the efficiency of data transmission and storage.

[0136] The compressed encrypted data is securely transmitted and stored. During data transmission, a quantum-safe communication protocol is used to protect the data, and during data storage, quantum-resistant storage technology is used to protect the encrypted data.

[0137] Furthermore, protecting data using quantum-safe communication protocols includes the following steps:

[0138] Establish a quantum channel between the two communicating parties and generate a shared encryption key through a quantum key distribution protocol;

[0139] A shared encryption key is applied to the block encryption of compressed encrypted data, while each data block is encrypted using an independent key;

[0140] Encrypted data packets are sent sequentially to the receiver via a quantum-enhanced channel;

[0141] The receiver uses a shared encryption key to decrypt the received data packets and recover the compressed encrypted data sequence.

[0142] During the decryption process, the hash value of the received data is compared.

[0143] Specifically, the compressed encrypted data is securely transmitted and stored. End-to-end data protection is achieved through quantum-secure communication protocols and quantum-resistant storage technology. The input data is the compressed qubit sequence |Φ>={|φ1>,|φ2>,…,|φ m >};where each |φ i > Represents the state of a single qubit after quantum entropy encoding and compression. First, a quantum channel is established between the communicating parties, and a shared encryption key K is generated through quantum key distribution. s ={k1,k2,…,k m The compressed qubit sequence is then divided into several data blocks D according to the block size g. j ={|φ j1 >,|φj2 >,…,|φ jg >}, and apply independent encryption operations to each group. Among them U i For the shared key k i Quantum gate operations are used to achieve encrypted modulation of qubits, resulting in encrypted block sequences |Φ'. j >=U j (K s )D j The encrypted packets are sent sequentially to the receiver via a quantum-enhanced channel, and the receiver uses the same shared key to perform the inverse operation on each packet. To recover the compressed qubit sequence |Φ>, during the decryption process, the hash value H(D) of each block is calculated. j ) = h j The data integrity is verified by comparing it with the hash value pre-calculated by the sender, ensuring that it has not been tampered with or lost during transmission. The output is a compressed quantum bit sequence |Φ> that has been securely transmitted and verified for integrity. This sequence can then be input into a quantum-resistant storage module for long-term secure storage. Quantum state encoding and quantum error correction code QEC(·) are used to protect the data in the storage medium, ensuring the integrity and security of information during reading and decoding, thereby achieving end-to-end quantum encryption protection.

[0144] By using a quantum-safe communication protocol to encrypt and transmit compressed data in groups, and combining it with quantum-resistant storage technology, the security and integrity verification of data during transmission and storage are achieved, thereby improving the overall information confidentiality and reliability.

[0145] Furthermore, protecting encrypted data using quantum-resistant storage technology includes the following steps:

[0146] The compressed encrypted data is encrypted using a quantum key to form a quantum state encrypted data sequence;

[0147] Quantum state encrypted data sequences are encoded using quantum state encoding, and the data is stored through quantum bit superposition and entanglement coding layout;

[0148] Quantum error-correcting codes are applied to the encoded quantum state data to generate redundant qubits;

[0149] The encoded and error-corrected quantum state data is stored in a quantum-resistant storage medium, and data reading and writing are supported through a standardized interface;

[0150] During the data reading process, data integrity is confirmed through quantum state measurement and hash verification, and data is recovered based on quantum error correction codes.

[0151] Specifically, quantum-resistant storage technology is used to achieve secure storage and integrity protection for compressed encrypted data. The input data is a compressed quantum bit sequence |Φ>={|φ1>,|φ2>,…,|φ m >}, each |φ i > Representing the state of a single qubit after quantum entropy encoding and compression, firstly, using the shared quantum key K s ={k1,k2,…,k m Quantum state encryption is performed on |Φ> to generate an encrypted quantum state sequence. Among them U i For key k i The quantum gate operation is then performed, followed by quantum state encoding of the encrypted quantum state sequence Φ'>. Information distribution optimization is achieved in the storage medium through quantum superposition and entanglement, and the encoded quantum state is represented as |Φ'>. e >=E(|Φ'>), where E(·) is the encoding mapping function. Then, for |Φ e By applying quantum error-correcting codes (QEC(·)) to generate redundant qubits, a recoverable quantum state sequence |Φ is obtained. c >=QEC(|Φ e >), in the stored procedure, |Φ is transferred through a standardized interface c >Write the data into a quantum-resistant storage medium. When data needs to be read, the readout quantum state |Φ can be obtained through quantum measurement. r > and calculate its hash value H(|Φ r >) The hash value is compared with the stored hash value to confirm integrity, and quantum error correction codes are used to repair possible measurement errors or bit loss, thus recovering the original encrypted quantum bit sequence |Φ ' The output is a sequence of encrypted qubits that is protected by quantum-resistant storage, verifiable in integrity, and recoverable.

[0152] By using quantum-resistant storage technology to encode, correct errors, and encrypt compressed and encrypted data, the security, integrity verification, and recoverability of data during storage and retrieval are achieved, thereby improving the confidentiality and reliability of long-term storage.

[0153] New encryption keys are generated and distributed periodically using a quantum key distribution protocol.

[0154] By periodically generating and distributing new encryption keys using a quantum key distribution protocol, dynamic updates and rotations of keys are achieved, thereby enhancing the encryption system's resistance to attacks and long-term data security.

[0155] Example 2:

[0156] In the data centers of global financial institutions, massive amounts of transaction data need to be transmitted and stored in real time, containing a large amount of sensitive customer information. Existing data encryption methods cannot simultaneously achieve quantum security, transmission efficiency, and optimized storage capacity, resulting in data leakage and high storage costs. To solve these problems, this invention provides a network security data encryption system based on quantum technology, the structure of which is as follows: Figure 2 As shown. The specific implementation process of this system is as follows:

[0157] First, the data classification and sensitivity assessment module classifies transaction data, identifies and marks sensitive data and non-sensitive data, thereby ensuring that only sensitive information is quantum encrypted, improving processing efficiency and reducing the processing burden of non-sensitive data;

[0158] Secondly, the quantum key distribution module establishes a quantum channel between the two parties in the transaction to generate a shared encryption key through the quantum key distribution protocol, thereby realizing dynamic key generation and secure sharing, and thus enhancing the communication's resistance to attacks.

[0159] Then, the quantum state encryption module uses a shared key to perform quantum superposition and entanglement encryption on sensitive data, so that the data is mixed and hidden at the quantum state level, thereby improving encryption strength and information security.

[0160] Next, the quantum entropy encoding module performs quantum entropy optimization encoding on the encrypted sensitive data. By optimizing the data representation through the probability distribution of quantum bit modes, redundant information is reduced, providing efficient input for subsequent compression and improving data transmission and storage efficiency.

[0161] Subsequently, the quantum data compression module compresses the bit sequence encoded by quantum entropy by clusters, reduces the size of the qubits by merging them in the same mode and by quantum gate operations, thereby further reducing storage costs and speeding up transmission.

[0162] Then, the data transmission and storage module uses a quantum-safe communication protocol to encrypt and transmit packets during data transmission, and uses quantum-resistant storage technology to perform quantum state encoding and error correction during data storage, so as to achieve end-to-end security protection and integrity verification, and ensure the security and reliability of data in transmission and long-term storage.

[0163] Finally, the key update and rotation module periodically generates and distributes new quantum keys to achieve dynamic key updates, thereby continuously enhancing the system's resistance to attacks and long-term data security.

[0164] Through the above steps, this system achieves quantum-level encryption, secure transmission, compressed storage, and dynamic key management of sensitive data in financial transaction scenarios, effectively solving the problems of high data leakage risk, low transmission efficiency, and high storage cost in existing technologies.

[0165] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A network security data encryption method based on quantum technology, characterized in that, Includes the following steps: Classify the encrypted data to identify and label sensitive and non-sensitive data; A quantum key distribution protocol is used to generate and share encryption keys between the two communicating parties through a quantum channel; Based on a shared encryption key, quantum state encryption technology is used to encrypt sensitive data. The quantum state encryption technology encrypts data through the properties of quantum superposition and quantum entanglement. Quantum entropy coding technology is applied to encrypted sensitive data, and quantum information theory is used to optimize the encoding of data through the superposition and entanglement properties of qubits; After quantum entropy encoding, quantum data compression technology is further applied to compress the encrypted data through a cluster of qubits; The compressed encrypted data is securely transmitted and stored. During data transmission, a quantum-safe communication protocol is used to protect the data, and during data storage, quantum-resistant storage technology is used to protect the encrypted data. New encryption keys are generated and distributed periodically using a quantum key distribution protocol.

2. The network security data encryption method based on quantum technology according to claim 1, characterized in that, The process of identifying and marking sensitive data and non-sensitive data includes the following steps: Collect the data to be encrypted from databases, file systems, application interfaces, or real-time data streams; The collected data is cleaned, standardized, and its features are extracted. Determine the sensitive type of data based on predefined keywords, field constraints, or regular expressions; Use machine learning or deep learning models to determine the sensitivity of the data and evaluate the confidence level of the determination results; Add a sensitivity label to data that is deemed sensitive, and add a non-sensitive label to data that is deemed non-sensitive; Store or index the marked sensitive data and non-sensitive data separately. During the labeling process, different processing strategies are set according to the confidence level of the sensitivity determination results.

3. The network security data encryption method based on quantum technology according to claim 1, characterized in that, The process of generating and sharing an encryption key between the two communicating parties includes the following steps: A quantum channel is established between the two communicating parties to transmit qubits; The sender encodes a random bit sequence into a quantum state and transmits it to the receiver through the quantum channel; The receiver randomly selects a measurement basis to measure the received qubits and records the measurement results and the measurement basis. Both parties exchange their respective measurement basis information through a traditional open channel and retain the measurement basis matching qubits as the original key; Error detection is performed on the retained original key, and error correction is performed on the original key based on the detection results; The original key after error correction undergoes privacy amplification processing to generate the final shared encryption key.

4. The network security data encryption method based on quantum technology according to claim 1, characterized in that, The data encryption process includes the following steps: Mapping sensitive data to qubit states; A Hadamard gate operation is applied to the qubit to encode the quantum superposition state; An entanglement relationship is established by applying a CNOT gate operation to two selected qubits; Based on the shared encryption key, Pauli-X gate, Pauli-Y gate, and Pauli-Z gate operations are sequentially applied to the qubit; Output the quantum bit sequence after quantum state encryption.

5. A network security data encryption method based on quantum technology according to claim 1, characterized in that, The optimized encoding of the data includes the following steps: The encrypted quantum bit sequence is divided into several groups of fixed length, and each group serves as a coding unit. The frequency of each mode in the quantum state of each group of qubits is counted to obtain the number of times each mode appears; Based on the number of occurrences, the qubit patterns are mapped into qubit encoding sequences of different lengths in descending order to form a quantum entropy encoding sequence; The encoded sequence is generated into corresponding quantum states through quantum gate operations, and the quantum states include quantum superposition and entanglement states. The output is a sequence of qubits encoded by quantum entropy, which serves as input for subsequent quantum data compression.

6. A network security data encryption method based on quantum technology according to claim 1, characterized in that, The compression of encrypted data includes the following steps: The quantum bit sequence encoded by quantum entropy is divided into several clusters of fixed length, and each cluster serves as a compression unit. The quantum state modes within each qubit cluster are compared to identify identical quantum state modes; For the same quantum state patterns identified, they are merged into a single representation through quantum gate operations; Based on cluster characteristics, quantum gate operations are applied to qubits to compress information within the cluster; The compressed qubit cluster is reconstructed into a compressed quantum state sequence, and the output is the final compressed encrypted data.

7. A network security data encryption method based on quantum technology according to claim 1, characterized in that, The method of protecting data using a quantum-safe communication protocol includes the following steps: Establish a quantum channel between the two communicating parties and generate a shared encryption key through a quantum key distribution protocol; A shared encryption key is applied to the block encryption of compressed encrypted data, while each data block is encrypted using an independent key; Encrypted data packets are sent sequentially to the receiver via a quantum-enhanced channel; The receiver uses a shared encryption key to decrypt the received data packets and recover the compressed encrypted data sequence. During the decryption process, the hash value of the received data is compared.

8. A network security data encryption method based on quantum technology according to claim 1, characterized in that, The method of protecting encrypted data using quantum-resistant storage technology includes the following steps: The compressed encrypted data is encrypted using a quantum key to form a quantum state encrypted data sequence; Quantum state encrypted data sequences are encoded using quantum state encoding, and the data is stored through quantum bit superposition and entanglement coding layout; Quantum error-correcting codes are applied to the encoded quantum state data to generate redundant qubits; The encoded and error-corrected quantum state data is stored in a quantum-resistant storage medium, and data reading and writing are supported through a standardized interface; During the data reading process, data integrity is confirmed through quantum state measurement and hash verification, and data is recovered based on quantum error correction codes.

9. A network security data encryption system based on quantum technology, characterized in that, A network security data encryption method based on quantum technology as described in any one of claims 1-8, the system comprising: The data classification and sensitivity assessment module is used to classify the data to be encrypted, identify and mark sensitive data and non-sensitive data; A quantum key distribution module is used to generate and share encryption keys between communicating parties through a quantum channel using a quantum key distribution protocol. A quantum state encryption module is used to encrypt sensitive data using quantum state encryption technology based on a shared encryption key. The quantum state encryption technology encrypts data through the properties of quantum superposition and quantum entanglement. The quantum entropy coding module is used to apply quantum entropy coding technology to encrypted sensitive data, and uses quantum information theory to optimize the encoding of data through the superposition and entanglement properties of qubits; The quantum data compression module is used to further apply quantum data compression technology after quantum entropy encoding, and to compress encrypted data through a cluster of qubits; The data transmission and storage module is used to securely transmit and store compressed encrypted data. During data transmission, a quantum-safe communication protocol is used to protect the data, and during data storage, quantum-resistant storage technology is used to protect the encrypted data. The key update and rotation module is used to periodically generate and distribute new encryption keys using the quantum key distribution protocol.

Images