Communication method based on quantum communication system

Abstract

The invention discloses a communication method based on a quantum communication system. And under the condition that both the identity authentication of the sending terminal and the identity authentication of the receiving terminal pass, the sending terminal sends a communication application to the first ground base station, and the communication application is used for establishing quantum encryption communication with the receiving terminal. Then, under the condition that the classical communication channel between the sending terminal and the receiving terminal is established, the first ground base station generates a quantum key application request based on the communication application, and sends the quantum key application request to a quantum satellite; then, the quantum satellite generates a first quantum symmetric key based on the quantum key application request. And finally, based on the quantum key application request, the quantum satellite sends a first quantum key in the first quantum symmetric keys to the first ground base station, and sends a second quantum key in the first quantum symmetric keys to the second ground base station, so as to perform quantum encryption communication. Therefore, the quantum channel can be prevented from being occupied by a large amount of communication data, and the quantum resource utilization efficiency is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of quantum encryption communication, and more particularly to a communication method based on a quantum communication system. BACKGROUND

[0002] In the star-ground integrated quantum encryption communication scenario, in the prior art architecture, long-distance quantum key transmission usually relies on quantum satellites. However, quantum satellite transmission has limited data volume and high cost, and it is difficult to expand the data transmission volume by increasing the number of satellites, which leads to the inability to match the growing quantum encryption communication traffic, thereby making it difficult to meet the large-scale communication needs of long-distance quantum encryption communication. SUMMARY

[0003] The present application provides a communication method based on a quantum communication system.

[0004] The present application provides a communication method based on a quantum communication system, the quantum communication system comprising a quantum satellite, a sending terminal, a first ground base station in communication connection with the sending terminal, a receiving terminal, and a second ground base station in communication connection with the receiving terminal, the method comprising: In the case that the identity authentication of the sending terminal and the identity authentication of the receiving terminal are both passed, the sending terminal sends a communication application to the first ground base station, the communication application being used to establish quantum encryption communication with the receiving terminal; In the case that the classical communication channel between the sending terminal and the receiving terminal is established, the first ground base station generates a quantum key application request based on the communication application and sends it to the quantum satellite; The quantum satellite generates a first quantum symmetric key based on the quantum key application request; The quantum satellite sends a first quantum key in the first quantum symmetric key to the first ground base station and a second quantum key in the first quantum symmetric key to the second ground base station based on the quantum key application request, so as to perform the quantum encryption communication.

[0005] Thus, the quantum communication system includes a quantum satellite, a sending terminal, a first ground base station in communication connection with the sending terminal, a receiving terminal, and a second ground base station in communication connection with the receiving terminal. When the identity authentication of the sending terminal and the identity authentication of the receiving terminal are both passed, the sending terminal sends a communication application to the first ground base station, the communication application being used to establish quantum encryption communication with the receiving terminal. Then, when the classical communication channel between the sending terminal and the receiving terminal is established, the first ground base station generates a quantum key application request based on the communication application and sends it to the quantum satellite. Then, the quantum satellite generates a first quantum symmetric key based on the quantum key application request. Finally, the quantum satellite sends a first quantum key in the first quantum symmetric key to the first ground base station and a second quantum key in the first quantum symmetric key to the second ground base station based on the quantum key application request, so as to perform quantum encryption communication. In this way, through the separation design of the quantum key channel and the classical data channel, the advantages of long-distance key distribution of the quantum satellite are exerted, and data transmission is carried out through the classical channel, so that the quantum channel can be avoided to be occupied by a large amount of communication data, and the quantum resource utilization efficiency is improved.

[0006] In some embodiments, the quantum communication system further includes a key distribution center, and the method further includes: The sending terminal sends a first authentication key to the key distribution center; The key distribution center performs identity authentication according to the first authentication key and a pre-stored second authentication key; When the first authentication key and the second authentication key are consistent, the key distribution center determines that the identity authentication of the sending terminal is passed; The receiving terminal sends a third authentication key to the key distribution center; The key distribution center performs identity authentication according to the third authentication key and a fourth authentication key pre-stored by itself; When the third authentication key and the fourth authentication key are consistent, the key distribution center determines that the identity authentication of the receiving terminal is passed.

[0007] Thus, the sending terminal sends its first authentication key to the key distribution center. Next, the key distribution center authenticates the sender using the first authentication key and a pre-stored second authentication key. If the first and second authentication keys match, the key distribution center determines that the sending terminal's authentication is successful. Subsequently, the receiving terminal sends its third authentication key to the key distribution center. Then, the key distribution center authenticates the receiver using the third authentication key and its own pre-stored fourth authentication key. Finally, if the third and fourth authentication keys match, the key distribution center determines that the receiving terminal's authentication is successful. In this way, by comparing the authentication keys of the terminal with those of the key distribution center, it is ensured that the terminal accessing the quantum communication system is a pre-authorized legitimate device, effectively resisting attacks by unauthorized terminal spoofing.

[0008] In some embodiments, the method further includes: The transmitting terminal sends target communication data to the first ground base station; The first ground base station encrypts the target communication data according to the first quantum key to determine the first encrypted information; The first ground base station sends the first encrypted information to the second ground base station based on the classic communication channel; The second ground base station decrypts the first encrypted information based on the second quantum key, generates the target communication data, and sends the target communication data to the receiving terminal to complete the quantum encrypted communication.

[0009] In this way, the transmitting terminal sends the target communication data to the first ground base station. Next, the first ground base station encrypts the target communication data using a first quantum key to determine the first encrypted information. Then, the first ground base station sends the first encrypted information to the second ground base station via a classical communication channel. Finally, the second ground base station decrypts the first encrypted information using a second quantum key, generates the target communication data, and sends it to the receiving terminal, completing the quantum encrypted communication. In this way, the target communication data is transmitted in ciphertext form via a classical channel. Relying on the non-cloning and symmetry properties of the quantum key, even if an eavesdropper intercepts the ciphertext, they cannot decrypt it due to the lack of the corresponding key, thus avoiding the risk of leakage of the original target communication data. The quantum channel is only used for key transmission; a large amount of communication data is transmitted through the classical communication channel, which avoids the quantum satellite and quantum channel being occupied by data transmission, significantly improving the utilization rate of quantum resources.

[0010] In some embodiments, the method further includes: The first ground base station sends the first quantum key to the transmitting terminal; The second ground base station sends the second quantum key to the receiving terminal; The transmitting terminal encrypts the target communication data according to the first quantum key to determine the second encryption information; The sending terminal sends the second encrypted information to the receiving terminal based on the classic communication channel; The receiving terminal decrypts the second encrypted information based on the second quantum key to generate target communication data and complete the quantum encrypted communication.

[0011] In this way, the first ground base station sends the first quantum key to the transmitting terminal. Then, the second ground base station sends the second quantum key to the receiving terminal. Next, the transmitting terminal encrypts the target communication data using the first quantum key to determine the second encrypted information. Subsequently, the transmitting terminal sends the second encrypted information to the receiving terminal via a classical communication channel. Finally, the receiving terminal decrypts the second encrypted information using the second quantum key to generate the target communication data, completing the quantum encrypted communication. In this way, the ground base stations no longer bear the computational burden of data encryption and forwarding, but only handle the lightweight operation of key distribution, allowing them to support communication requests from more terminals simultaneously and significantly improving the service concurrency of quantum encrypted communication.

[0012] 5. In some embodiments, the quantum communication system further includes a first control station and a second control station, the first control station and the second control station being spaced apart by a preset distance, the first control station being communicatively connected between the first ground base station and the transmitting terminal, and the second control station being communicatively connected between the second ground base station and the receiving terminal.

[0013] Thus, the quantum communication system also includes a first control station and a second control station, spaced a predetermined distance apart. The first control station is connected to the first ground base station and the transmitting terminal, while the second control station is connected to the second ground base station and the receiving terminal. In this way, through the relay extension of the control stations, the effective coverage radius of the ground base stations is significantly increased. Terminals that were previously unable to access the quantum communication system due to distance can now connect through the control stations, thereby expanding the service range of quantum encrypted communication.

[0014] In some embodiments, the method further includes: The first ground base station sends the first quantum key to the first central control station; The first centralized control station sends the first quantum key to the transmitting terminal; The second ground base station sends the second quantum key to the second central control station; The second central control station sends the second quantum key to the receiving terminal; The transmitting terminal encrypts the target communication data according to the first quantum key to determine the third encryption information; The sending terminal sends the third encrypted information to the receiving terminal based on the classic communication channel; The receiving terminal decrypts the third encrypted information based on the second quantum key to generate target communication data and complete the quantum encrypted communication.

[0015] Thus, the first ground base station sends the first quantum key to the first centralized control station. Next, the first centralized control station sends the first quantum key to the transmitting terminal. Then, the second ground base station sends the second quantum key to the second centralized control station. Subsequently, the second centralized control station sends the second quantum key to the receiving terminal. Then, the transmitting terminal encrypts the target communication data using the first quantum key to determine the third encrypted information. Next, the transmitting terminal sends the third encrypted information to the receiving terminal using a classical communication channel. Finally, the receiving terminal decrypts the third encrypted information using the second quantum key to generate the target communication data, completing the quantum encrypted communication. In this way, by setting up a centralized control station, the long-distance key transmission between the terminal and the ground base station is broken down into two short-distance transmission segments, reducing signal attenuation and bit error rate. At the same time, the centralized control station has link optimization and security verification functions, reducing the risk of key eavesdropping and tampering, and ensuring the reliability and security of key distribution in long-distance scenarios.

[0016] In some embodiments, the quantum communication system further includes a preset scheduling module, and the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station all integrate quantum key distribution equipment. The method further includes: The preset scheduling module determines the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first central control station, and the second central control station based on the association information received associated with the sending terminal.

[0017] Thus, the quantum communication system also includes a pre-set scheduling module. The quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station all integrate quantum key distribution equipment. Based on the received association information linked to the transmitting terminal, the pre-set scheduling module determines the target key distribution device from among the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station. In this way, by dynamically scheduling and distributing some quantum key generation tasks to the ground base stations and control stations, the workload of the quantum satellite can be effectively reduced, communication delays caused by satellite overload can be avoided, and the overall service concurrency capability of the system can be improved.

[0018] In some implementations, the associated information includes the first location information of the transmitting terminal, the second location information of the receiving terminal, the third location information and the first current workload information of the quantum satellite, the fourth location information and the second current workload information of the first ground base station, the fifth location information and the third current workload information of the second ground base station, the sixth location information and the fourth current workload information of the first centralized control station, and the seventh location information and the fifth current workload information of the second centralized control station.

[0019] Thus, the associated information includes the first location information of the transmitting terminal, the second location information of the receiving terminal, and the third location information and first current workload information of the quantum satellite, the fourth location information and second current workload information of the first ground base station, the fifth location information and third current workload information of the second ground base station, the sixth location information and fourth current workload information of the first central control station, and the seventh location information and fifth current workload information of the second central control station. In this way, the explicit location information ensures the shortest key transmission path, reducing signal attenuation and transmission delay. The explicit workload information ensures load balancing of the quantum communication system, avoiding overload of local devices and improving the stability and efficiency of key distribution.

[0020] In some implementations, determining the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station based on received association information associated with the transmitting terminal includes: The preset scheduling module filters candidate key distribution devices located within a preset range between the sending terminal and the receiving terminal based on the first location information and the second location information, combined with the third location information, the fourth location information, the fifth location information, the sixth location information, and the seventh location information; The preset scheduling module sorts the current workload of the candidate key distribution devices in descending order based on the first current workload information, the second current workload information, the third current workload information, the fourth current workload information, and the fifth current workload information; The preset scheduling module determines the candidate key distribution device with the smallest current load in the sorting results as the target key distribution device.

[0021] Thus, the pre-scheduling module, based on the first and second location information, combined with the third, fourth, fifth, sixth, and seventh location information, filters candidate key distribution devices located within a preset range between the sending and receiving terminals. Next, the pre-scheduling module sorts the current workload of the candidate key distribution devices in descending order based on the first, second, third, fourth, and fifth current workload information. Finally, the pre-scheduling module determines the candidate key distribution device with the smallest current workload in the sorted results as the target key distribution device. This location-based selection ensures the shortest key transmission path and minimal signal attenuation, improving distribution efficiency. Load sorting avoids selecting high-load devices, achieving load balancing in the quantum communication system and reducing the risk of failure due to device overload.

[0022] In some embodiments, the method further includes: The first ground base station sends the quantum key request to the target key distribution device; The target key distribution device generates the first quantum symmetric key based on its integrated quantum key distribution device; The target key distribution device, based on the quantum key request, sends the first quantum key from the first quantum symmetric key to the first ground base station, and sends the second quantum key from the first quantum symmetric key to the second ground base station, in order to perform the quantum encrypted communication.

[0023] In this way, the first ground base station sends a quantum key request to the target key distribution device. Next, the target key distribution device generates a first quantum symmetric key based on its integrated quantum key distribution capabilities. Finally, based on the quantum key request, the target key distribution device sends the first quantum key from the first quantum symmetric key to the first ground base station, and the second quantum key from the first quantum symmetric key to the second ground base station, for quantum encrypted communication. This standardized process of "key request - key generation - key distribution" ensures that key services can be completed according to a unified logic, regardless of whether the target key distribution device is a satellite, ground base station, or central control station. This avoids process confusion caused by differences in equipment type and improves the operability and stability of the system.

[0024] Additional aspects and advantages of embodiments of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of embodiments of this application. Attached Figure Description

[0025] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the description of the embodiments taken in conjunction with the following drawings, wherein: Figure 1 This is one of the flowcharts illustrating the communication method according to an embodiment of this application; Figure 2 This is a second schematic flowchart of the communication method according to an embodiment of this application; Figure 3 This is the third flowchart illustrating the communication method according to an embodiment of this application; Figure 4 This is the fourth flowchart illustrating the communication method according to the embodiments of this application; Figure 5 This is the fifth flowchart illustrating the communication method according to an embodiment of this application; Figure 6 This is the sixth flowchart illustrating the communication method according to the embodiments of this application; Figure 7 This is the seventh flowchart illustrating the communication method according to the embodiments of this application; Figure 8 This is the eighth flowchart illustrating the communication method according to the embodiments of this application. Detailed Implementation

[0026] The embodiments of this application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the embodiments of this application, and should not be construed as limiting the embodiments of this application.

[0027] In practical applications of space-ground integrated quantum encrypted communication, the existing technical architecture relies almost entirely on quantum satellites as the core hub for long-distance (especially cross-regional and intercontinental) quantum key transmission. However, the technical characteristics and cost structure of quantum satellites themselves make it difficult to support the large-scale expansion of quantum encrypted communication services.

[0028] On the one hand, limited by the physical characteristics of quantum channels, when a satellite, acting as a source of quantum entanglement, distributes entangled photon pairs to ground base stations, the effective transmission efficiency is extremely low due to environmental factors such as atmospheric turbulence and photon scattering. For example, in current technology, the rate at which a quantum satellite establishes quantum entanglement between two ground stations more than 1120 kilometers apart is only 2 pairs per second. After post-processing error correction and error removal, the final usable key rate can only reach 0.12 bits per second, far lower than the transmission efficiency of classical communication. This low data transmission characteristic determines that the number of encrypted communication sessions that a single quantum satellite can simultaneously carry is extremely limited, making it difficult to meet the communication needs of multiple users and high concurrency.

[0029] On the other hand, the high cost of the entire lifecycle of quantum satellites makes it difficult to overcome the bottleneck through large-scale deployment. From the R&D stage, quantum satellites require the integration of cutting-edge technologies such as high-precision quantum entanglement sources, onboard QKD equipment, and optical payloads resistant to space environment interference, with development cycles lasting several years and requiring substantial investment. The launch phase relies on high-thrust launch vehicles, resulting in high costs per launch and the risk of launch failure. During in-orbit operation, continuous investment in telemetry and control resources, orbital maintenance costs, and addressing the impact of space radiation and extreme temperatures on equipment performance further increase operating costs. More importantly, Earth orbit resources are finite, especially the low and medium Earth orbit resources suitable for quantum communication, which are nearing saturation. Even without considering cost factors, it is impossible to expand the overall data transmission capacity by increasing the number of quantum satellites indefinitely.

[0030] Meanwhile, the demand for quantum encrypted communication is growing rapidly. As key sectors such as finance, government, military, and energy increasingly prioritize communication security, the demand for cross-regional data transmission, remote encrypted calls, and large-capacity sensitive file transfers is surging. Not only is the number of users growing exponentially, but the amount of data transmitted per user is also increasing significantly due to applications such as high-definition video and real-time data interaction. However, under the existing quantum satellite architecture, the number of concurrent sessions and data transmission rates for long-distance quantum encrypted communication are strictly limited. When the workload exceeds the satellite's capacity, problems such as increased key distribution delays, unstable communication links, and even the inability to establish encrypted connections occur, resulting in a large number of legitimate communication needs remaining unmet.

[0031] As a result, space-ground integrated quantum encrypted communication has remained in the small-scale pilot stage, making it difficult to truly enter large-scale application scenarios.

[0032] Based on the above issues, please refer to Figure 1 This application provides a communication method based on a quantum communication system. The quantum communication system includes a quantum satellite, a transmitting terminal, a first ground base station establishing a communication connection with the transmitting terminal, a receiving terminal, and a second ground base station establishing a communication connection with the receiving terminal. The method includes: 011: If the authentication of the sending terminal and the authentication of the receiving terminal are both successful, the sending terminal sends a communication request to the first ground base station. The communication request is used to establish quantum encrypted communication with the receiving terminal. 012: Once the classical communication channel between the transmitting terminal and the receiving terminal is established, the first ground base station generates a quantum key request based on the communication request and sends it to the quantum satellite; 013: The quantum satellite generates the first quantum symmetric key based on a quantum key request; 014: Based on a quantum key request, the quantum satellite sends the first quantum key from the first quantum symmetric key to the first ground base station, and sends the second quantum key from the first quantum symmetric key to the second ground base station for quantum encrypted communication.

[0033] Specifically, a quantum communication system refers to an integrated system specifically designed to achieve quantum-encrypted communication between space and ground. Its core components include a quantum satellite, terminal equipment (such as transmitting and receiving terminals), and ground communication nodes (such as a first ground base station and a second ground base station). Secure communication is achieved through the collaboration of quantum and classical channels.

[0034] A quantum satellite refers to a satellite capable of generating and distributing quantum keys. It integrates QKD (quantum key generation and distribution) devices (based on quantum no-cloning and measurement collapse principles) and can serve as a source of quantum entanglement or a key generation carrier, acting as a core node for long-distance quantum key transmission. In some implementations, the quantum satellite acts as the key generation core, establishing connections with a first and a second ground base station via quantum channels.

[0035] The sending terminal refers to the terminal device that initiates quantum encrypted communication (such as a modified quantum mobile phone with a built-in quantum SIM card and quantum security middleware), which has the ability to authenticate identity and initiate quantum encrypted communication requests.

[0036] A receiving terminal refers to a terminal device that receives quantum encrypted communication data. It has the same quantum encrypted communication capabilities as the sending terminal and can only receive communication data after identity authentication.

[0037] The first ground base station refers to a ground communication node that establishes a fixed communication connection with the transmitting terminal, integrates QKD equipment, and undertakes the functions of receiving communication requests, forwarding key requests, and receiving and distributing keys.

[0038] The second ground base station refers to a ground communication node that establishes a fixed communication connection with the receiving terminal. Its function is the same as that of the first ground base station, providing key support and communication link guarantee for the receiving terminal.

[0039] Identity authentication refers to the security verification process that verifies whether a terminal is qualified for quantum encrypted communication. It is based on the comparison of pre-stored authentication keys to ensure the legitimacy of the communication subject (i.e., the terminal device).

[0040] A communication request refers to a request submitted by a sending terminal to a first ground base station, clearly stating the need to establish quantum encrypted communication with a designated receiving terminal.

[0041] A communication channel refers to the link between the transmitting terminal, the first ground base station, the second ground base station, and the receiving terminal used to transmit data. It is usually a classic network channel (such as a cellular network or a fiber optic network) and is responsible for carrying encrypted communication data.

[0042] A quantum key request refers to a signal transmitted by a first ground base station to a quantum satellite, requesting the generation of a quantum key specific to this communication. In some implementations, the quantum key request includes information such as the terminal identifier (including the identifiers of the sending terminal and the receiving terminal) and the communication session identifier for this communication.

[0043] The first quantum symmetric key refers to the symmetric encryption key generated by the quantum satellite and used exclusively for this communication (the same key is used for both encryption and decryption). It has the characteristic of being "use-and-discard". It includes a first quantum key used by the sending side and a second quantum key used by the receiving side.

[0044] In long-distance quantum encrypted communication, quantum satellites have limited data transmission capacity and are costly, making it difficult to increase data transmission volume by adding more satellites, resulting in a mismatch with the growing volume of quantum encrypted communication services. This application's implementation constructs a quantum communication system consisting of a "quantum satellite-ground base station-terminal," establishing a secure foundation for quantum encrypted communication between the sending and receiving terminals through a process of "identity authentication beforehand → communication application submission → key application initiation → satellite key generation → key distribution to the base station."

[0045] First, both the sending and receiving terminals must complete identity authentication. Only when both parties pass authentication are they qualified to initiate and receive quantum encrypted communication, thus blocking unauthorized device access. This ensures that only authorized terminals can initiate or receive communication, protecting the legitimacy of the communication participants and avoiding the risk of security leaks caused by unauthorized access.

[0046] After authentication is successful, the sending terminal sends a communication request to the first ground base station bound to it, specifying that the communication target is the designated receiving terminal, thus triggering the subsequent key application process.

[0047] After the first ground base station confirms that the classical communication channel between the transmitting terminal and the receiving terminal has been successfully established (ensuring that data can be transmitted normally), it generates a quantum key request based on the received communication request. The quantum key request includes information such as the terminal identifier and communication session identifier of this communication and is sent to the quantum satellite.

[0048] After receiving a quantum key request, the quantum satellite generates a first quantum symmetric key based on the principles of quantum mechanics using its integrated QKD device. The first quantum symmetric key includes a first quantum key for encryption on the sending side and a second quantum key for decryption on the receiving side.

[0049] Finally, based on the base station identifier in the quantum key application request, the quantum satellite sends the first quantum key to the first ground base station and the second quantum key to the second ground base station, completing the satellite-to-ground key distribution and providing secure key support for subsequent encrypted data communication.

[0050] In summary, the communication method based on a quantum communication system provided in this application includes a quantum satellite, a transmitting terminal, a first ground base station with which the transmitting terminal establishes a communication connection, a receiving terminal, and a second ground base station with which the receiving terminal establishes a communication connection. When both the transmitting and receiving terminals pass authentication, the transmitting terminal sends a communication request to the first ground base station to establish quantum encrypted communication with the receiving terminal. Next, after the classical communication channel between the transmitting and receiving terminals is established, the first ground base station generates a quantum key request based on the communication request and sends it to the quantum satellite. Then, the quantum satellite generates a first quantum symmetric key based on the quantum key request. Finally, based on the quantum key request, the quantum satellite sends the first quantum key from the first quantum symmetric key to the first ground base station and the second quantum key from the first quantum symmetric key to the second ground base station for quantum encrypted communication. This separation of the quantum key channel and the classical data channel leverages the advantages of long-distance key distribution by the quantum satellite while using the classical channel to carry data transmission, preventing the quantum channel from being occupied by large amounts of communication data and improving the efficiency of quantum resource utilization.

[0051] Please see Figure 2 In some implementations, the quantum communication system further includes a key distribution center, and the method further includes: 015: The sending terminal sends the first authentication key to the key distribution center; 016: The key distribution center performs identity verification based on the first authentication key and the pre-stored second authentication key; 017: If the first authentication key and the second authentication key are consistent, the key distribution center determines that the sending terminal's identity authentication has been passed; 018: The receiving terminal sends a third authentication key to the key distribution center; 019: The key distribution center performs identity verification based on the third authentication key and its own pre-stored fourth authentication key; 020: If the third authentication key and the fourth authentication key are consistent, the key distribution center determines that the identity authentication of the receiving terminal has been passed.

[0052] Specifically, the key distribution center refers to the core node in a quantum communication system responsible for terminal authentication and key management. It has the functions of pre-storing terminal authentication keys, receiving authentication information submitted by terminals, and executing identity authentication logic. It is a trust hub that ensures the legitimacy of the communication subject (terminal equipment).

[0053] The first authentication key refers to the key information (which can be a symmetric key or a public key authentication credential) that the sending terminal stores in advance to prove its identity. It is pre-allocated by the key distribution center and bound to the terminal.

[0054] The second authentication key refers to the verification key pre-stored by the key distribution center for the sending terminal, which forms a unique correspondence with the first authentication key (such as being the same symmetric key or the public key in a public-private key pair), and is used to verify the authenticity of the sending terminal's identity.

[0055] The third authentication key refers to the identity authentication key pre-stored by the receiving terminal. It has the same function as the first authentication key and is used to prove the legitimacy of the receiving terminal.

[0056] The fourth authentication key refers to the verification key pre-stored by the key distribution center for the receiving terminal. It is uniquely associated with the third authentication key and is used to verify the authenticity of the receiving terminal's identity.

[0057] Identity authentication refers to the process by which a key distribution center determines whether a terminal is an authorized device by comparing the authentication key submitted by the terminal with the corresponding key stored in its own database. It is a preliminary verification step for communication security.

[0058] In quantum encrypted communication, the lack of a unified authentication mechanism could allow unauthorized terminals to impersonate legitimate devices and access the system, fraudulently obtaining quantum keys or stealing communication data, directly threatening communication security. Furthermore, decentralized authentication (such as verification by a single ground base station) may lead to security vulnerabilities due to inconsistent key management, necessitating the establishment of a centralized and standardized identity verification system. The communication method provided in this application, through a process of "terminal submitting authentication key → key distribution center comparing pre-stored keys → authentication passed if they match," separately authenticates both the sending and receiving terminals, ensuring that only authorized terminals can participate in subsequent quantum encrypted communication.

[0059] Thus, the sending terminal sends its first authentication key to the key distribution center. Next, the key distribution center authenticates the sender using the first authentication key and a pre-stored second authentication key. If the first and second authentication keys match, the key distribution center determines that the sending terminal's authentication is successful. Subsequently, the receiving terminal sends its third authentication key to the key distribution center. Then, the key distribution center authenticates the receiver using the third authentication key and its own pre-stored fourth authentication key. Finally, if the third and fourth authentication keys match, the key distribution center determines that the receiving terminal's authentication is successful. In this way, by comparing the authentication keys of the terminal with those of the key distribution center, it is ensured that the terminal accessing the quantum communication system is a pre-authorized legitimate device, effectively resisting attacks by unauthorized terminal spoofing.

[0060] Please see Figure 3 In some implementations, the method further includes: 021: The transmitting terminal sends the target communication data to the first ground base station; 022: The first ground base station encrypts the target communication data according to the first quantum key to determine the first encrypted information; 023: The first ground base station sends the first encrypted information to the second ground base station based on the classic communication channel; 024: The second ground base station decrypts the first encrypted information based on the second quantum key, generates target communication data, and sends the target communication data to the receiving terminal to complete quantum encrypted communication.

[0061] Specifically, target communication data refers to the raw data that the sending terminal needs to transmit to the receiving terminal. It can be various types of communication content such as voice, text, and files, and is the transmission object of quantum encrypted communication.

[0062] The first encrypted information refers to the ciphertext data generated by the first ground base station after encrypting the target communication data using the first quantum key. It has anti-eavesdropping characteristics and can only be decrypted using the corresponding second quantum key.

[0063] Encryption processing refers to the process by which the first ground base station uses an encryption algorithm (such as a symmetric encryption algorithm) and a first quantum key to encrypt the target communication data, transforming the original data into ciphertext that cannot be directly interpreted, thus ensuring the security of data transmission.

[0064] Decryption refers to the process by which the second ground base station uses a decryption algorithm corresponding to the encryption algorithm and a second quantum key to reverse-process the first encrypted information and restore the original target communication data.

[0065] After completing identity authentication and establishing the communication channel, the transmitting terminal sends the target communication data to the first ground base station it is bound to. Subsequently, the first ground base station invokes its built-in encryption module, using the first quantum key distributed by the quantum satellite as the encryption key, and employs a symmetric encryption algorithm conforming to quantum encryption security standards (such as AES-256) to encrypt the target communication data, generating first encrypted information that cannot be illegally cracked. Then, the first ground base station sends the first encrypted information to the second ground base station through a classical communication channel.

[0066] Then, after receiving the first encrypted information, the second ground base station invokes the decryption module, using the second quantum key distributed by the quantum satellite as the decryption key, to execute the reverse decryption process corresponding to the encryption algorithm, accurately restoring the original target communication data. Finally, the second ground base station sends the decrypted target communication data to its bound receiving terminal, which successfully obtains the original data, completing the entire quantum encrypted communication process.

[0067] In this way, the transmitting terminal sends the target communication data to the first ground base station. Next, the first ground base station encrypts the target communication data using a first quantum key to determine the first encrypted information. Then, the first ground base station sends the first encrypted information to the second ground base station via a classical communication channel. Finally, the second ground base station decrypts the first encrypted information using a second quantum key, generates the target communication data, and sends it to the receiving terminal, completing the quantum encrypted communication. In this way, the target communication data is transmitted in ciphertext form via a classical channel. Relying on the non-cloning and symmetry properties of the quantum key, even if an eavesdropper intercepts the ciphertext, they cannot decrypt it due to the lack of the corresponding key, thus avoiding the risk of leakage of the original target communication data. The quantum channel is only used for key transmission; a large amount of communication data is transmitted through the classical communication channel, which avoids the quantum satellite and quantum channel being occupied by data transmission, significantly improving the utilization rate of quantum resources.

[0068] Please see Figure 4 In some implementations, the method further includes: 025: The first ground base station sends the first quantum key to the transmitting terminal; 026: The second ground base station sends the second quantum key to the receiving terminal; 027: The transmitting terminal encrypts the target communication data according to the first quantum key to determine the second encrypted information; 028: The sending terminal sends the second encrypted information to the receiving terminal based on the classic communication channel; 029: The receiving terminal decrypts the second encrypted information based on the second quantum key, generates the target communication data, and completes quantum encrypted communication.

[0069] Specifically, the second encrypted information refers to the ciphertext data generated by the sending terminal after encrypting the target communication data using the first quantum key. It is essentially the same as the first encrypted information mentioned above, both being secure data encrypted with quantum key. The difference is that the encryption execution entity changes from the ground base station to the sending terminal.

[0070] Encryption processing refers to the process by which the sending terminal uses a built-in quantum-safe middleware (such as the encryption module that comes with a quantum SIM card) to call the first quantum key to execute a symmetric encryption algorithm on the target communication data, thereby achieving efficient encryption by relying on the terminal's hardware adaptation capabilities.

[0071] Decryption refers to the process by which the receiving terminal uses its integrated quantum security component and a second quantum key to execute a reverse decryption algorithm on the received second encrypted information, restoring the original data and forming a unique match with the encryption algorithm of the sending terminal.

[0072] Classical communication channels refer to classic data links (such as cellular networks, Wi-Fi, fiber optic networks, etc.) that directly connect the sending and receiving terminals, without the need for relaying through ground base stations, and are used for the direct transmission of second-encrypted information.

[0073] The aforementioned centralized encryption and forwarding mode using ground base stations may have the following problems: When the number of communication users and the amount of data transmitted increase, all data must be encrypted and forwarded through the ground base station, which can lead to overload of the base station's computing load, increased communication latency, and consequently limit the concurrent service capacity of quantum encrypted communication. Furthermore, as an intermediate node for data transmission, a failure at the base station will directly interrupt the communication link, posing a reliability risk.

[0074] To address this issue, the implementation method of this application assigns the responsibility of quantum key distribution only to the first and second ground base stations, sending the first and second quantum keys to the transmitting terminal and the receiving terminal, respectively. The transmitting terminal encrypts the target communication data to generate second encrypted information, which is then sent directly to the receiving terminal via a classical communication channel. The receiving terminal decrypts the data to obtain the target communication data, thus completing the quantum encrypted communication.

[0075] After the quantum satellite distributes the first and second quantum keys to the first and second ground base stations, the first ground base station sends the first quantum key to the transmitting terminal via a secure classical link (such as an encrypted cellular link), and the second ground base station sends the second quantum key to the receiving terminal in the same way. Subsequently, after the terminal devices (including the transmitting and receiving terminals) receive the quantum key, the built-in quantum-safe middleware verifies the validity of the quantum key (such as verifying the key signature and session identifier) ​​to ensure that the quantum key has not been tampered with or replaced.

[0076] After acquiring the target communication data (voice, file, text, etc.), the sending terminal invokes its own encryption module. Using the first quantum key as the key, it employs a symmetric encryption algorithm compatible with quantum encryption standards (such as the national standard SM4 algorithm or AES-256 algorithm) to encrypt the target communication data, generating a second encrypted message that cannot be directly deciphered. This second encrypted message is then directly transmitted to the receiving terminal via a classic inter-terminal communication channel (which can be selected based on the scenario, such as a cellular network or fiber optic network).

[0077] After receiving the second encrypted information, the receiving terminal calls its own decryption module, using the second quantum key as the key, to execute the reverse decryption process corresponding to the encryption algorithm of the sending terminal, accurately restoring the original target communication data. Once the receiving terminal successfully obtains the target communication data, the entire quantum encrypted communication process ends. If further communication is required, the cycle of "applying for a new key - terminal encrypted direct transmission" must be repeated.

[0078] In this way, the first ground base station sends the first quantum key to the transmitting terminal. Then, the second ground base station sends the second quantum key to the receiving terminal. Next, the transmitting terminal encrypts the target communication data using the first quantum key to determine the second encrypted information. Subsequently, the transmitting terminal sends the second encrypted information to the receiving terminal via a classical communication channel. Finally, the receiving terminal decrypts the second encrypted information using the second quantum key to generate the target communication data, completing the quantum encrypted communication. In this way, the ground base stations no longer bear the computational burden of data encryption and forwarding, but only handle the lightweight operation of key distribution, allowing them to support communication requests from more terminals simultaneously and significantly improving the service concurrency of quantum encrypted communication.

[0079] In some embodiments, the quantum communication system further includes a first control station and a second control station, which are spaced apart by a preset distance. The first control station is communicatively connected between a first ground base station and a transmitting terminal, and the second control station is communicatively connected between a second ground base station and a receiving terminal.

[0080] Specifically, the first centralized control station refers to the relay node in the quantum communication system, which has the functions of signal forwarding, key relay, and communication link optimization, and is deployed between the first ground base station and the transmitting terminal.

[0081] The second centralized control station refers to a relay node with the same function as the first centralized control station. It is deployed between the second ground base station and the receiving terminal to ensure the stability and security of the communication link on the receiving side.

[0082] The preset distance refers to the pre-planned deployment interval standard of the central control station in the quantum communication system (usually a fixed value determined based on factors such as communication signal attenuation characteristics and safe transmission distance, such as 50 kilometers), which is used to ensure effective coverage of the terminal by the central control station and the link optimization effect.

[0083] The communication connection can be understood as a stable data transmission link (which can be a wired link such as optical fiber, or a wireless link such as microwave or dedicated communication frequency band) established between the central control station and the ground base station, and between the central control station and the terminal. It has low latency and anti-interference characteristics and is used to transmit quantum keys, communication signals and control commands.

[0084] In quantum encrypted communication, when the distance between the transmitting terminal and the first ground base station, and the receiving terminal and the second ground base station are far, the signal may be severely attenuated due to the long transmission path, the key transmission error rate may increase, and the communication stability may be affected.

[0085] Based on the aforementioned three-tier architecture of "quantum satellite-ground base station-terminal", a new centralized control station is added as a fourth-tier relay node, forming a four-tier architecture of "quantum satellite-ground base station-centralized control station-terminal". The first centralized control station establishes communication connections with the first ground base station and the transmitting terminal, respectively. The second centralized control station establishes communication connections with the second ground base station and the receiving terminal, respectively. The two centralized control stations are deployed at a preset distance interval (e.g., one every 50 kilometers) to ensure coverage of long-distance transmission blind spots between the terminal and the ground base station.

[0086] Thus, the quantum communication system also includes a first control station and a second control station, spaced a predetermined distance apart. The first control station is connected between the first ground base station and the transmitting terminal, while the second control station is connected between the second ground base station and the receiving terminal. In this way, through the relay extension of the control stations, the effective coverage radius of the ground base stations is significantly increased. Terminals that were previously unable to access the quantum communication system due to distance can now connect through the control stations, thereby expanding the service range of quantum encrypted communication. Please see Figure 5 In some implementations, the method further includes: 030: The first ground base station sends the first quantum key to the first central control station; 031: The first central control station sends the first quantum key to the transmitting terminal; 032: The second ground base station sends the second quantum key to the second central control station; 033: The second central control station sends the second quantum key to the receiving terminal; 034: The transmitting terminal encrypts the target communication data according to the first quantum key to determine the third encrypted information; 035: The sending terminal sends third encrypted information to the receiving terminal based on the classic communication channel; 036: The receiving terminal decrypts the third encrypted information based on the second quantum key, generates the target communication data, and completes quantum encrypted communication.

[0087] Specifically, the third encrypted information refers to the ciphertext data generated after the sending terminal encrypts the target communication data using the first quantum key. It has anti-eavesdropping and anti-tampering characteristics and can only be decrypted using the second quantum key.

[0088] After the quantum satellite distributes the first quantum key to the first ground base station and the second quantum key to the second ground base station, the first ground base station sends the first quantum key to the first centralized control station via a secure link (such as encrypted optical fiber). The first centralized control station performs integrity verification and signal amplification on the key before sending it to the transmitting terminal via a terminal-adapted communication link (such as a dedicated wireless frequency band). Simultaneously, the second ground base station sends the second quantum key to the second centralized control station. The second centralized control station, after undergoing the same verification and optimization process, forwards the second quantum key to the receiving terminal, ensuring that both terminals securely and accurately obtain the corresponding quantum key.

[0089] After receiving the first quantum key, the transmitting terminal verifies its validity using a built-in quantum-safe middleware (such as a quantum SIM card module). Once confirmed, it uses the first quantum key to execute a symmetric encryption algorithm (such as SM4 or AES-256) on the target communication data (voice, files, text, etc.), generating a third encrypted message that cannot be directly deciphered. The transmitting terminal then sends this third encrypted message directly to the receiving terminal via classical communication channels (including fiber optic and 5G networks), bypassing ground base stations or central control stations, thus shortening the data transmission path.

[0090] After receiving the third encrypted information, the receiving terminal uses the second quantum key obtained from the second central control station to perform a reverse decryption process through its own decryption module, restores the original target communication data, and completes the entire quantum encrypted communication process.

[0091] Thus, the first ground base station sends the first quantum key to the first centralized control station. Next, the first centralized control station sends the first quantum key to the transmitting terminal. Then, the second ground base station sends the second quantum key to the second centralized control station. Subsequently, the second centralized control station sends the second quantum key to the receiving terminal. Then, the transmitting terminal encrypts the target communication data using the first quantum key to determine the third encrypted information. Next, the transmitting terminal sends the third encrypted information to the receiving terminal using a classical communication channel. Finally, the receiving terminal decrypts the third encrypted information using the second quantum key to generate the target communication data, completing the quantum encrypted communication. In this way, by setting up a centralized control station, the long-distance key transmission between the terminal and the ground base station is broken down into two short-distance transmission segments, reducing signal attenuation and bit error rate. At the same time, the centralized control station has link optimization and security verification functions, reducing the risk of key eavesdropping and tampering, and ensuring the reliability and security of key distribution in long-distance scenarios.

[0092] Please see Figure 6In some embodiments, the quantum communication system further includes a preset scheduling module, and the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station are all integrated with quantum key distribution equipment. The method also includes: 037: The preset scheduling module determines the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first central control station, and the second central control station based on the association information received associated with the sending terminal.

[0093] Specifically, the preset scheduling module refers to the intelligent control node in the quantum communication system that is responsible for scheduling the key distribution equipment. It has the functions of receiving related information, analyzing equipment status, executing filtering algorithms, and determining the optimal key distribution subject. It is the core hub for realizing system load balancing and efficiency optimization.

[0094] Quantum key distribution (QKD) refers to dedicated hardware that generates and distributes secure keys based on quantum mechanical principles (quantum no-cloning property, measurement collapse effect), and can independently generate and transmit quantum keys. QKD devices are integrated into quantum satellites, ground base stations, and centralized control stations.

[0095] Related information refers to the comprehensive data of the sending terminal and related equipment, which is the basic data support for scheduling decisions.

[0096] The target key distribution device refers to the device selected by the preset scheduling module from the candidate devices that is most suitable for undertaking the task of generating and distributing the communication key, and is the main body for generating the quantum key for this communication.

[0097] After the sending terminal initiates a communication request and completes identity authentication, the preset scheduling module receives the associated information. Subsequently, the preset scheduling module analyzes and processes the associated information based on a preset algorithm to determine the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first central control station, and the second central control station.

[0098] Thus, the quantum communication system also includes a pre-set scheduling module. The quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station all integrate quantum key distribution equipment. Based on the received association information linked to the transmitting terminal, the pre-set scheduling module determines the target key distribution device from among the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station. In this way, by dynamically scheduling and distributing some quantum key generation tasks to the ground base stations and control stations, the workload of the quantum satellite can be effectively reduced, communication delays caused by satellite overload can be avoided, and the overall service concurrency capability of the system can be improved.

[0099] In some implementations, the associated information includes first location information of the transmitting terminal, second location information of the receiving terminal, and third location information and first current workload information of the quantum satellite, fourth location information and second current workload information of the first ground base station, fifth location information and third current workload information of the second ground base station, sixth location information and fourth current workload information of the first central control station, and seventh location information and fifth current workload information of the second central control station.

[0100] Specifically, the first location information refers to the real-time geographical location data of the sending terminal (which may be latitude and longitude, base station coverage area identifier, satellite positioning coordinates, etc.), which is used to characterize the spatial distribution of the sending terminal and is the basis for judging the distance between the candidate key distribution device (including quantum satellite, first ground base station, second ground base station, first central control station and second central control station, etc.) and the sending terminal.

[0101] The second location information refers to the real-time geographical location data of the receiving terminal, which has the same function as the first location information and is used together to determine the spatial location relationship between the two communicating parties.

[0102] The third location information refers to the real-time orbital position data of the quantum satellite (obtained based on the satellite telemetry and control system), which is used to determine the spatial distance and communication coverage status of the quantum satellite relative to the transmitting and receiving terminals.

[0103] The first current workload information refers to the workload data of the key generation and distribution tasks currently undertaken by the quantum satellite, including the number of key requests to be processed, the number of communication sessions being executed, and the remaining computing resources, which are used to evaluate the service capabilities of the quantum satellite.

[0104] The fourth location information refers to the fixed geographical location data of the first ground base station (such as the latitude and longitude of the base station equipment room), which serves as a spatial identifier for the ground core node and is used to calculate the distance to the terminal and other equipment.

[0105] The second current workload information refers to the real-time task load data of the first ground base station, including the amount of key distribution tasks currently being processed, data forwarding pressure, hardware resource utilization, etc., reflecting the busy level of the first ground base station.

[0106] The fifth location information refers to the fixed geographical location data of the second ground base station, which has the same function as the fourth location information, providing a basis for distance judgment on the receiving side.

[0107] The third current workload information refers to the real-time task load data of the second ground base station, which is used to evaluate the service capacity of the second ground base station.

[0108] The sixth location information refers to the fixed geographical location data of the first centralized control station (coordinates after deployment at a preset distance), which is used to characterize the spatial location of the first centralized control station and assist in determining the length of the key transmission path.

[0109] The fourth current workload information refers to the real-time task load data of the first central control station, including key relay task volume, link maintenance pressure, and remaining computing power, reflecting the service redundancy of the first central control station.

[0110] The seventh location information refers to the fixed geographical location data of the second centralized control station, which has the same function as the sixth location information.

[0111] The fifth current workload information refers to the real-time task load data of the second central control station, which is used to evaluate the service capacity of the second central control station.

[0112] Thus, the associated information includes the first location information of the transmitting terminal, the second location information of the receiving terminal, and the third location information and first current workload information of the quantum satellite, the fourth location information and second current workload information of the first ground base station, the fifth location information and third current workload information of the second ground base station, the sixth location information and fourth current workload information of the first central control station, and the seventh location information and fifth current workload information of the second central control station. In this way, the explicit location information ensures the shortest key transmission path, reducing signal attenuation and transmission delay. The explicit workload information ensures load balancing of the quantum communication system, avoiding overload of local devices and improving the stability and efficiency of key distribution.

[0113] Please see Figure 7 In some implementations, step 037 (determining the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station based on the received association information associated with the transmitting terminal) includes: 0371: The preset scheduling module filters candidate key distribution devices located within a preset range between the sending terminal and the receiving terminal based on the first location information and the second location information, combined with the third location information, the fourth location information, the fifth location information, the sixth location information, and the seventh location information; 0372: The preset scheduling module sorts the current workload of candidate key distribution devices in descending order based on the first current workload information, the second current workload information, the third current workload information, the fourth current workload information, and the fifth current workload information; 0373: The preset scheduling module will determine the candidate key distribution device with the smallest current load in the sorting results as the target key distribution device.

[0114] Specifically, the preset range refers to a spatial area pre-defined based on factors such as communication efficiency, signal attenuation threshold, and key transmission delay limit. A certain radius or area is defined with the line connecting the sending terminal and the receiving terminal as the axis to ensure that the selected devices can guarantee the timeliness and security of key transmission.

[0115] Candidate key distribution devices refer to a set of devices that meet the "preset range between the sending terminal and the receiving terminal" requirement after location screening (selected from quantum satellite, first ground station, second ground station, first control station and second control station).

[0116] Current load refers to a quantitative assessment indicator of the current workload of candidate devices. It is a unified value calculated by a preset algorithm based on data such as the number of pending key requests, the number of sessions being executed, the utilization rate of computing resources, and the busyness of the link. It is used to intuitively reflect the busyness of the devices.

[0117] Descending order sorting refers to arranging the current load of candidate key distribution devices in descending order, so that the device with the largest load is placed at the front and the device with the smallest load is placed at the back, providing a clear basis for selecting the optimal device in the future.

[0118] The sorting result refers to the candidate device list formed after sorting in descending order, which intuitively presents the differences in the workload of each device and serves as a direct reference for determining the target key distribution device.

[0119] The pre-defined scheduling module first extracts the first location information (transmitting terminal) and the second location information (receiving terminal) mentioned above, and calculates the relative position of the two terminals, the midpoint of the connecting line, and the communication coverage area using a geospatial algorithm. Next, it calls upon the location information of each candidate device (the third location information of the quantum satellite, the fourth location information of the first ground station, the fifth location information of the second ground station, the sixth location information of the first central control station, and the seventh location information of the second central control station) to determine whether each device is located within a pre-defined range between the two terminals (e.g., an area with a radius of 50 kilometers using the connecting line between the two terminals as the axis). If the device is within this range, it indicates that its key transmission path is short and the signal attenuation is small, and it is included in the candidate key distribution device set; if it is outside the range (e.g., the quantum satellite's current orbit is far from the communication area, or the ground station is deployed thousands of kilometers away), it is excluded, ensuring that the initially screened candidate key distribution devices have spatial adaptability.

[0120] For the candidate key distribution devices selected in the first step, the pre-defined scheduling module extracts the corresponding workload information (the first current workload information of the quantum satellite, the second current workload information of the first ground station, the third current workload information of the second ground station, the fourth current workload information of the first central control station, and the fifth current workload information of the second central control station). Using a standardized algorithm, the workload data from different dimensions (such as the number of tasks to be processed and the computing power utilization rate) is converted into a unified "current load" (e.g., 100 points for full load and 0 points for idle load). Subsequently, the candidate devices are sorted in descending order of current load, forming a clear load ranking list that intuitively presents the service redundancy capabilities of each candidate device.

[0121] The preset scheduling module selects the candidate device with the smallest current load (i.e., the last ranked device) from the descending sort results and identifies it as the target key distribution device.

[0122] Thus, the pre-scheduling module, based on the first and second location information, combined with the third, fourth, fifth, sixth, and seventh location information, filters candidate key distribution devices located within a preset range between the sending and receiving terminals. Next, the pre-scheduling module sorts the current workload of the candidate key distribution devices in descending order based on the first, second, third, fourth, and fifth current workload information. Finally, the pre-scheduling module determines the candidate key distribution device with the smallest current workload in the sorted results as the target key distribution device. This location-based selection ensures the shortest key transmission path and minimal signal attenuation, improving distribution efficiency. Load sorting avoids selecting high-load devices, achieving load balancing in the quantum communication system and reducing the risk of failure due to device overload.

[0123] Please see Figure 8 In some implementations, the method further includes: 038: The first ground base station sends the quantum key request to the target key distribution device; 039: The target key distribution device generates the first quantum symmetric key based on its integrated quantum key distribution device; 040: Based on the quantum key request, the target key distribution device sends the first quantum key from the first quantum symmetric key to the first ground base station, and sends the second quantum key from the first quantum symmetric key to the second ground base station to perform quantum encrypted communication.

[0124] Specifically, after obtaining the target key distribution device identifier determined by the preset scheduling module, the first ground base station sends the generated quantum key application request (containing the core parameters of this communication) to the target key distribution device through a secure control channel (such as an encrypted classical link).

[0125] After receiving a quantum key request, the target key distribution device activates its integrated quantum key distribution device, generates a quantum state based on the principles of quantum mechanics, and generates the first quantum symmetric key through internal quantum signal processing algorithms (such as entangled photon pair measurement and post-processing error correction).

[0126] The target key distribution device, based on the base station identification information in the quantum key request, sends the first quantum key to the first ground base station and the second quantum key to the second ground base station via a quantum channel (preferred to ensure secure key transmission) or an encrypted classical channel. If the target key distribution device is a ground station or control station, it can distribute the key rapidly via a short-range quantum channel or encrypted fiber optic cable. If the target key distribution device is a quantum satellite, it transmits the key to both ground base stations via a satellite-to-ground quantum channel, ensuring accurate delivery of the quantum key to the corresponding node.

[0127] After receiving the key, the first and second ground base stations will proceed with quantum-encrypted communication according to the subsequent procedures.

[0128] In this way, the first ground base station sends a quantum key request to the target key distribution device. Next, the target key distribution device generates a first quantum symmetric key based on its integrated quantum key distribution capabilities. Finally, based on the quantum key request, the target key distribution device sends the first quantum key from the first quantum symmetric key to the first ground base station, and the second quantum key from the first quantum symmetric key to the second ground base station, for quantum encrypted communication. This standardized process of "key request - key generation - key distribution" ensures that key services can be completed according to a unified logic, regardless of whether the target key distribution device is a satellite, ground base station, or central control station. This avoids process confusion caused by differences in equipment type and improves the operability and stability of the system.

[0129] This application also provides a computer-readable storage medium containing a computer program. When the computer program is executed by one or more processors, it causes the one or more processors to perform the method of this application.

[0130] It is understood that a computer program includes computer program code. Computer program code can be in the form of source code, object code, executable files, or some intermediate form. Computer-readable storage media can include: any entity or device capable of carrying computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution media, etc.

[0131] In this specification, the terms "specifically," "furthermore," "particularly," "understandably," etc., refer to specific features, structures, materials, or characteristics described in connection with embodiments or examples that are included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0132] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the function involved, as will be understood by those skilled in the art to which embodiments of this application pertain.

[0133] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A communication method based on a quantum communication system, characterized in that, The quantum communication system includes a quantum satellite, a transmitting terminal, a first ground base station establishing a communication connection with the transmitting terminal, a receiving terminal, and a second ground base station establishing a communication connection with the receiving terminal. The method includes: If both the authentication of the sending terminal and the authentication of the receiving terminal are successful, the sending terminal sends a communication request to the first ground base station. The communication request is used to establish quantum encrypted communication with the receiving terminal. Once the classical communication channel between the transmitting terminal and the receiving terminal is established, the first ground base station generates a quantum key request based on the communication request and sends it to the quantum satellite; The quantum satellite generates a first quantum symmetric key based on the quantum key request; Based on the quantum key request, the quantum satellite sends the first quantum key from the first quantum symmetric key to the first ground base station, and sends the second quantum key from the first quantum symmetric key to the second ground base station to perform the quantum encrypted communication.

2. The method according to claim 1, characterized in that, The quantum communication system also includes a key distribution center, and the method further includes: The sending terminal sends the first authentication key to the key distribution center; The key distribution center performs identity verification based on the first authentication key and the pre-stored second authentication key; If the first authentication key and the second authentication key are consistent, the key distribution center determines that the sending terminal has passed authentication; The receiving terminal sends a third authentication key to the key distribution center; The key distribution center performs identity verification based on the third authentication key and its own pre-stored fourth authentication key; If the third authentication key and the fourth authentication key are consistent, the key distribution center determines that the identity authentication of the receiving terminal has been successful.

3. The method according to claim 1, characterized in that, The method further includes: The transmitting terminal sends target communication data to the first ground base station; The first ground base station encrypts the target communication data according to the first quantum key to determine the first encrypted information; The first ground base station sends the first encrypted information to the second ground base station based on the classic communication channel; The second ground base station decrypts the first encrypted information based on the second quantum key, generates the target communication data, and sends the target communication data to the receiving terminal to complete the quantum encrypted communication.

4. The method according to claim 1, characterized in that, The method further includes: The first ground base station sends the first quantum key to the transmitting terminal; The second ground base station sends the second quantum key to the receiving terminal; The transmitting terminal encrypts the target communication data according to the first quantum key to determine the second encryption information; The sending terminal sends the second encrypted information to the receiving terminal based on the classic communication channel; The receiving terminal decrypts the second encrypted information based on the second quantum key to generate target communication data and complete the quantum encrypted communication.

5. The method according to claim 1, characterized in that, The quantum communication system further includes a first control station and a second control station, which are spaced apart by a preset distance. The first control station is communicatively connected between the first ground base station and the transmitting terminal, and the second control station is communicatively connected between the second ground base station and the receiving terminal.

6. The method according to claim 5, characterized in that, The method further includes: The first ground base station sends the first quantum key to the first central control station; The first centralized control station sends the first quantum key to the transmitting terminal; The second ground base station sends the second quantum key to the second central control station; The second central control station sends the second quantum key to the receiving terminal; The transmitting terminal encrypts the target communication data according to the first quantum key to determine the third encryption information; The sending terminal sends the third encrypted information to the receiving terminal based on the classic communication channel; The receiving terminal decrypts the third encrypted information based on the second quantum key to generate target communication data and complete the quantum encrypted communication.

7. The method according to claim 5, characterized in that, The quantum communication system further includes a preset scheduling module. The quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station all integrate quantum key distribution equipment. The method further includes: The preset scheduling module determines the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first central control station, and the second central control station based on the association information received associated with the sending terminal.

8. The method according to claim 7, characterized in that, The associated information includes the first location information of the transmitting terminal, the second location information of the receiving terminal, the third location information and the first current workload information of the quantum satellite, the fourth location information and the second current workload information of the first ground base station, the fifth location information and the third current workload information of the second ground base station, the sixth location information and the fourth current workload information of the first centralized control station, and the seventh location information and the fifth current workload information of the second centralized control station.

9. The method according to claim 8, characterized in that, The step of determining the target key distribution device from the quantum satellite, the first ground base station, the second ground base station, the first control station, and the second control station based on the received association information associated with the transmitting terminal includes: The preset scheduling module filters candidate key distribution devices located within a preset range between the sending terminal and the receiving terminal based on the first location information and the second location information, combined with the third location information, the fourth location information, the fifth location information, the sixth location information, and the seventh location information; The preset scheduling module sorts the current workload of the candidate key distribution devices in descending order based on the first current workload information, the second current workload information, the third current workload information, the fourth current workload information, and the fifth current workload information; The preset scheduling module determines the candidate key distribution device with the smallest current load in the sorting results as the target key distribution device.

10. The method according to claim 7, characterized in that, The method further includes: The first ground base station sends the quantum key request to the target key distribution device; The target key distribution device generates the first quantum symmetric key based on its integrated quantum key distribution device; The target key distribution device, based on the quantum key request, sends the first quantum key from the first quantum symmetric key to the first ground base station, and sends the second quantum key from the first quantum symmetric key to the second ground base station, in order to perform the quantum encrypted communication.

Images