Monitoring data quantum encryption transmission method and system

Abstract

The invention relates to data security transmission, in particular to a monitoring data quantum encryption transmission method and system, monitoring equipment and a background server pre-store a quantum protection key generated by a quantum security service platform; the monitoring equipment and the background server are integrated with the quantum security SDK and are initialized; the monitoring equipment requests a quantum session key from the quantum security service platform through the quantum security SDK and caches the quantum session key; the monitoring device encrypts the collected monitoring data by using the quantum session key, and uploads the encrypted data and the associated session key to a background server; the background server requests the same quantum session key from the quantum security service platform through the quantum security SDK, and decrypts the encrypted data to obtain monitoring data; the background server synchronizes the monitoring data to a Web monitoring application for monitoring personnel to check; according to the technical scheme provided by the invention, the defects of poor security and overlong key negotiation time in the prior art can be overcome.

Description

Technical Field

[0001] This invention relates to secure data transmission, specifically to a quantum-encrypted transmission method and system for monitoring data. Background Technology

[0002] In the digital age, secure data transmission plays a crucial role in all fields, with the real-time secure transmission of surveillance data being particularly vital for social security, public order, and the protection of personal privacy. However, current security measures for surveillance data transmission have many shortcomings.

[0003] Current surveillance data transmission primarily relies on traditional encryption algorithms such as AES and RSA. While these algorithms provide a certain level of security in classical computing environments, they face a significant risk of being cracked with the rapid development of quantum computing technology. The powerful computing capabilities of quantum computers can break the keys generated by traditional encryption algorithms in a short time, leading to the leakage of surveillance data and posing a serious threat to social security.

[0004] Meanwhile, traditional encryption technologies also have significant shortcomings in key management. Key management methods are relatively simple, usually employing fixed keys or manual key updates: fixed keys remain unchanged for a long time, making them extremely easy to steal and crack; while manual key updates are not only cumbersome but also prone to key leaks during the update process.

[0005] Furthermore, the key negotiation process in traditional encryption methods is time-consuming, posing a significant challenge for monitoring data that needs to be transmitted in real time. Excessive key negotiation time affects the real-time performance of monitoring data, leading to delays in critical information and hindering timely responses to emergencies. Although quantum keys possess the significant characteristic of "unconditional security," they have not yet been effectively implemented in monitoring scenarios, lacking a comprehensive and efficient key exchange and data encryption scheme. Summary of the Invention

[0006] (a) Technical problems to be solved

[0007] In view of the above-mentioned shortcomings of the existing technology, the present invention provides a quantum encryption transmission method and system for monitoring data, which can effectively overcome the defects of poor security and excessive key negotiation time in the existing technology.

[0008] (II) Technical Solution

[0009] To achieve the above objectives, the present invention provides the following technical solution:

[0010] A quantum-encrypted transmission method for monitoring data includes the following steps:

[0011] S1. Key Pre-setting: Monitoring equipment and back-end servers pre-store quantum protection keys generated by the quantum security service platform;

[0012] S2, SDK Integration Initialization: The monitoring equipment and the backend server are integrated with the quantum security SDK and initialized.

[0013] S3. Key Acquisition: The monitoring device requests the quantum session key from the quantum security service platform via the quantum security SDK and caches it;

[0014] S4. Encrypted Data Upload: The monitoring equipment uses a quantum session key to encrypt the collected monitoring data and uploads the encrypted data along with the associated session key to the backend server.

[0015] S5. Key Synchronization and Decryption: The backend server requests the same quantum session key from the quantum security service platform through the quantum security SDK, and decrypts the encrypted data to obtain the monitoring data;

[0016] S6. Data Display: The backend server synchronizes the monitoring data to the Web monitoring application for monitoring personnel to view.

[0017] Preferably, in S1, the key is pre-set: the monitoring device and the backend server pre-store the quantum protection key generated by the quantum security service platform, including:

[0018] The quantum security service platform generates a quantum protection key containing a unique identifier and an offset, and injects it offline into monitoring devices and backend servers;

[0019] The quantum protection key has an expiration date, and the quantum security service platform updates the quantum protection key regularly according to the expiration date.

[0020] Preferably, in S2, the SDK integration initialization involves integrating the quantum security SDK into the monitoring device and the backend server, and performing initialization, including:

[0021] The monitoring equipment and the back-end server are integrated with the quantum security SDK, configured with the quantum security service platform address and device identifier, and communication initialization is completed.

[0022] Preferably, in S3, key acquisition involves the monitoring device requesting the quantum session key from the quantum security service platform via the quantum security SDK and caching it, including:

[0023] The monitoring device requests a quantum session key from the quantum security service platform via the quantum security SDK, requesting the device identifier, quantum protection key information, and offset.

[0024] After verification, the quantum security service platform generates a quantum session key, encrypts it using a quantum protection key, and sends it to the monitoring device. The monitoring device then decrypts and caches the quantum session key.

[0025] The quantum session key is 16 bits or 32 bits long, and the quantum security service platform dynamically updates the quantum session key according to its validity period / number of uses.

[0026] Preferably, in S4, data is encrypted and uploaded: the monitoring device uses a quantum session key to encrypt the collected monitoring data, and uploads the encrypted data along with the associated session key to the backend server, including:

[0027] After the monitoring equipment collects monitoring data, it uses a quantum session key to encrypt the monitoring data to obtain encrypted data. At the same time, it generates an associated session key (sessionid) and uploads the encrypted data and the associated session key (sessionid) to the backend server.

[0028] Among them, a verification code is added when encrypting the monitoring data so that the backend server can verify its integrity after receiving it;

[0029] After the quantum session key is updated, the monitoring device will synchronize the generated associated session key (sessionid) to the backend server.

[0030] Preferably, in S5, key synchronization and decryption: the backend server requests the same quantum session key from the quantum security service platform via the quantum security SDK, and decrypts the encrypted data to obtain monitoring data, including:

[0031] The backend server requests the same quantum session key from the quantum security service platform through the quantum security SDK, and the request carries the associated session key (sessionid), quantum protection key information, and offset.

[0032] After verification, the quantum security service platform determines that the quantum session key is the same, and encrypts it using the quantum protection key before sending it to the backend server. The backend server decrypts the encrypted data to obtain the quantum session key and then decrypts the encrypted data to obtain the monitoring data.

[0033] A quantum-encrypted transmission system for monitoring data includes a quantum-secure service platform, monitoring equipment, a backend server, and a web monitoring application;

[0034] The quantum security service platform generates a quantum protection key containing a unique identifier and an offset, and injects it into the monitoring device and the backend server. It responds to the key requests from the monitoring device and the backend server by sending back the quantum session key, and updates the quantum protection key and the quantum session key.

[0035] The monitoring equipment collects monitoring data, uses the quantum protection key to request a quantum session key from the quantum security service platform, encrypts the collected monitoring data, and uploads the encrypted data along with the associated session key to the backend server.

[0036] The backend server uses the quantum protection key and the associated session key to request the same quantum session key from the quantum security service platform, decrypts the encrypted data to obtain the monitoring data, and synchronizes the monitoring data to the web monitoring application for data visualization.

[0037] (III) Beneficial Effects

[0038] Compared with the prior art, the quantum encryption transmission method and system for monitoring data provided by the present invention has the following beneficial effects:

[0039] 1) Secure and reliable: Quantum keys resist quantum computing attacks, with a dual layer of protection of "quantum protection key + quantum session key" to prevent data theft and tampering;

[0040] 2) High efficiency and convenience: The SDK automates key acquisition and updates without manual intervention, reducing management costs;

[0041] 3) Excellent real-time performance: Key interaction and encryption / decryption are time-efficient and do not affect the real-time transmission of monitoring data;

[0042] 4) Strong compatibility: The SDK integration method is compatible with existing monitoring equipment and servers, and the transformation cost is low. Attached Figure Description

[0043] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0044] Figure 1 This is a schematic diagram of the process of the present invention. Detailed Implementation

[0045] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0046] The following describes the specific process of the quantum encryption transmission method for monitoring data provided by this invention, using a concrete example (e.g.) Figure 1 (as shown) and technical effects.

[0047] S1. Key Pre-setting: The monitoring equipment and the backend server pre-store the quantum protection key generated by the quantum security service platform, including:

[0048] The quantum security service platform generates a quantum protection key containing a unique identifier and an offset, and injects it offline into monitoring devices and backend servers;

[0049] The quantum protection key has an expiration date, and the quantum security service platform updates the quantum protection key regularly according to the expiration date.

[0050] S2, SDK Integration Initialization: The monitoring equipment and backend server integrate the quantum security SDK and perform initialization, including:

[0051] The monitoring equipment and the back-end server are integrated with the quantum security SDK, configured with the quantum security service platform address and device identifier, and communication initialization is completed.

[0052] S3. Key Acquisition: The monitoring device requests the quantum session key from the quantum security service platform via the quantum security SDK and caches it, including:

[0053] The monitoring device requests a quantum session key from the quantum security service platform via the quantum security SDK, requesting the device identifier, quantum protection key information, and offset.

[0054] After verification, the quantum security service platform generates a quantum session key, encrypts it using a quantum protection key, and sends it to the monitoring device. The monitoring device then decrypts and caches the quantum session key.

[0055] The quantum session key is 16 bits or 32 bits long, and the quantum security service platform dynamically updates the quantum session key according to its validity period / number of uses.

[0056] S4. Encrypted Data Upload: The monitoring equipment uses a quantum session key to encrypt the collected monitoring data and uploads the encrypted data along with the associated session key to the backend server, including:

[0057] After the monitoring equipment collects monitoring data, it uses a quantum session key to encrypt the monitoring data to obtain encrypted data. At the same time, it generates an associated session key (sessionid) and uploads the encrypted data and the associated session key (sessionid) to the backend server.

[0058] Among them, a verification code is added when encrypting the monitoring data so that the backend server can verify its integrity after receiving it;

[0059] After the quantum session key is updated, the monitoring device will synchronize the generated associated session key (sessionid) to the backend server.

[0060] S5. Key Synchronization and Decryption: The backend server requests the same quantum session key from the quantum security service platform via the quantum security SDK, and decrypts the encrypted data to obtain monitoring data, including:

[0061] The backend server requests the same quantum session key from the quantum security service platform through the quantum security SDK, and the request carries the associated session key (sessionid), quantum protection key information, and offset.

[0062] After verification, the quantum security service platform determines that the quantum session key is the same, and encrypts it using the quantum protection key before sending it to the backend server. The backend server decrypts the encrypted data to obtain the quantum session key and then decrypts the encrypted data to obtain the monitoring data.

[0063] S6. Data Display: The backend server synchronizes the monitoring data to the Web monitoring application for monitoring personnel to view.

[0064] Based on the above-disclosed quantum encryption transmission method for monitoring data, this application also discloses a quantum encryption transmission system for monitoring data, including a quantum security service platform, monitoring equipment, a backend server, and a web monitoring application;

[0065] The quantum security service platform generates a quantum protection key containing a unique identifier and an offset, and injects it into the monitoring device and the backend server. It responds to the key requests from the monitoring device and the backend server by sending back the quantum session key, and updates the quantum protection key and the quantum session key.

[0066] The monitoring equipment collects monitoring data, uses the quantum protection key to request a quantum session key from the quantum security service platform, encrypts the collected monitoring data, and uploads the encrypted data along with the associated session key to the backend server.

[0067] The backend server uses the quantum protection key and the associated session key to request the same quantum session key from the quantum security service platform, decrypts the encrypted data to obtain the monitoring data, and synchronizes the monitoring data to the web monitoring application for data visualization.

[0068] To better illustrate the technical solution of this application, a specific example will be used for detailed explanation below.

[0069] Key pre-setting: The quantum security service platform generates a 128-bit quantum protection key KID-001 (offset=0), injects it offline into the monitoring device (DEV-001), and synchronizes it to the server (SRV-001).

[0070] SDK Integration Initialization: Integrate the quantum security SDK into the monitoring device and server, configure the quantum security service platform address http: / / quantum-server:8080 and the device identifier DEV-001, and complete the communication initialization;

[0071] Key Acquisition: The monitoring device SDK requests the quantum session key SK=0x1234DEV-001, the quantum protection key KID-001, and the offset=0. The quantum security service platform generates a 16-bit quantum session key SK=0x1234, encrypts it with the quantum protection key KID-001, and returns it. The monitoring device decrypts and caches the quantum session key SK=0x1234.

[0072] Encrypted data upload: The monitoring device encrypts video data, generates an associated session key sessionid=SID-5678, and uploads "encrypted data+SID-5678+offset=0" to the server;

[0073] Key synchronization and decryption: After the server verifies the data, the SDK requests the associated session key sessionid=SID-5678, the quantum protection key KID-001, and the offset offset=0. The quantum security service platform returns the encrypted quantum session key SK=0x1234, which the server decrypts to decrypt the data.

[0074] Key update: The key expires after 10 minutes. The monitoring device obtains a new quantum session key SK=0x5678 (offset=1, associated session key sessionid=SID-9012) and synchronizes it to the server to continue transmission.

[0075] The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions will not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A quantum-encrypted transmission method for monitoring data, characterized in that: Includes the following steps: S1. Key Pre-setting: Monitoring equipment and back-end servers pre-store quantum protection keys generated by the quantum security service platform; S2, SDK Integration Initialization: The monitoring equipment and the backend server are integrated with the quantum security SDK and initialized. S3. Key Acquisition: The monitoring device requests the quantum session key from the quantum security service platform via the quantum security SDK and caches it; S4. Encrypted Data Upload: The monitoring equipment uses a quantum session key to encrypt the collected monitoring data and uploads the encrypted data along with the associated session key to the backend server. S5. Key Synchronization and Decryption: The backend server requests the same quantum session key from the quantum security service platform through the quantum security SDK, and decrypts the encrypted data to obtain the monitoring data; S6. Data Display: The backend server synchronizes the monitoring data to the Web monitoring application for monitoring personnel to view.

2. The quantum encryption transmission method for monitoring data according to claim 1, characterized in that: S1 Key Pre-configuration: Monitoring devices and backend servers pre-store quantum protection keys generated by the quantum security service platform, including: The quantum security service platform generates a quantum protection key containing a unique identifier and an offset, and injects it offline into monitoring devices and backend servers; The quantum protection key has an expiration date, and the quantum security service platform updates the quantum protection key regularly according to the expiration date.

3. The quantum encryption transmission method for monitoring data according to claim 2, characterized in that: S2 SDK Integration Initialization: The monitoring device and backend server integrate the quantum security SDK and perform initialization, including: The monitoring equipment and the back-end server are integrated with the quantum security SDK, configured with the quantum security service platform address and device identifier, and communication initialization is completed.

4. The quantum encryption transmission method for monitoring data according to claim 3, characterized in that: Key acquisition in S3: The monitoring device requests the quantum session key from the quantum security service platform via the quantum security SDK and caches it, including: The monitoring device requests a quantum session key from the quantum security service platform via the quantum security SDK, requesting the device identifier, quantum protection key information, and offset. After verification, the quantum security service platform generates a quantum session key, encrypts it using a quantum protection key, and sends it to the monitoring device. The monitoring device then decrypts and caches the quantum session key. The quantum session key is 16 bits or 32 bits long, and the quantum security service platform dynamically updates the quantum session key according to its validity period / number of uses.

5. The quantum encryption transmission method for monitoring data according to claim 4, characterized in that: Data encryption upload in S4: The monitoring device uses a quantum session key to encrypt the collected monitoring data and uploads the encrypted data along with the associated session key to the backend server, including: After the monitoring equipment collects monitoring data, it uses a quantum session key to encrypt the monitoring data to obtain encrypted data. At the same time, it generates an associated session key (sessionid) and uploads the encrypted data and the associated session key (sessionid) to the backend server. Among them, a verification code is added when encrypting the monitoring data so that the backend server can verify its integrity after receiving it; After the quantum session key is updated, the monitoring device will synchronize the generated associated session key (sessionid) to the backend server.

6. The quantum encryption transmission method for monitoring data according to claim 5, characterized in that: Key synchronization and decryption in S5: The backend server requests the same quantum session key from the quantum security service platform via the quantum security SDK, and decrypts the encrypted data to obtain monitoring data, including: The backend server requests the same quantum session key from the quantum security service platform through the quantum security SDK, and the request carries the associated session key (sessionid), quantum protection key information, and offset. After verification, the quantum security service platform determines that the quantum session key is the same, and encrypts it using the quantum protection key before sending it to the backend server. The backend server decrypts the encrypted data to obtain the quantum session key and then decrypts the encrypted data to obtain the monitoring data.

7. A quantum-encrypted transmission system for monitoring data, used to execute the quantum-encrypted transmission method for monitoring data as described in claim 1, characterized in that: This includes a quantum security service platform, monitoring equipment, backend servers, and web monitoring applications; The quantum security service platform generates a quantum protection key containing a unique identifier and an offset, and injects it into the monitoring device and the backend server. It responds to the key requests from the monitoring device and the backend server by sending back the quantum session key, and updates the quantum protection key and the quantum session key. The monitoring equipment collects monitoring data, uses the quantum protection key to request a quantum session key from the quantum security service platform, encrypts the collected monitoring data, and uploads the encrypted data along with the associated session key to the backend server. The backend server uses the quantum protection key and the associated session key to request the same quantum session key from the quantum security service platform, decrypts the encrypted data to obtain the monitoring data, and synchronizes the monitoring data to the web monitoring application for data visualization.

Images