Quantum state-of-mind perception-based encrypted communication management method and device, and storage medium

Abstract

This application discloses a method, apparatus, and storage medium for encrypted communication management based on quantum situation awareness. The method includes: acquiring real-time operating status data of a quantum communication network; performing a security situation assessment of the quantum communication network based on the real-time operating status data using a quantum situation awareness model, and generating a situation assessment result reflecting the current security risks of the quantum communication network; generating control strategy adjustment instructions for the quantum communication network based on the situation assessment result; and adjusting the key management strategy and data encryption strategy of the quantum communication network in response to the control strategy adjustment instructions, and performing encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy. This application enables real-time awareness of the operating status of the quantum communication network and dynamically adjusts the key management strategy and data encryption strategy accordingly, thereby improving the security, reliability, and adaptability of the quantum encrypted communication system.

Description

Technical Field

[0001] This application relates to the field of communication security, and in particular to a method, apparatus and storage medium for encrypted communication management based on quantum situation awareness. Background Technology

[0002] Quantum encryption technology, based on fundamental principles of quantum mechanics (such as the Heisenberg uncertainty principle and the no-cloning theorem), can achieve theoretically unconditional security. It effectively resists the threats posed by quantum computing to traditional public-key cryptosystems (such as RSA (Rivest-Shamir-Adleman, an asymmetric encryption algorithm) and ECC (Elliptic Curve Cryptography, an asymmetric encryption algorithm)). It is considered a key technology for next-generation information security infrastructure and is widely used in communication scenarios with high security requirements, such as finance, government affairs, and national defense. The security and stability of a quantum encryption system largely depend on its ability to dynamically manage and adaptively adjust to real-time changes in the quantum communication environment.

[0003] In related technologies, traditional quantum encryption management systems typically employ a static configuration model. Regarding quantum key management, parameters such as key generation rate and key update cycle are preset during system initialization and remain fixed throughout subsequent operation. As for encryption strategies, a pre-selected single encryption algorithm and fixed encryption strength are used throughout the entire communication session, without adjustment based on changes in the communication environment. This model has the following problems: First, due to the lack of real-time situational awareness of the quantum communication environment, the system cannot effectively monitor the real-time state of the quantum channel and is also unable to identify potential quantum attack behaviors. Quantum signals are susceptible to environmental factors during transmission, leading to quantum state decoherence and increased bit error rate. However, the existing system cannot perform real-time assessment and early warning, making the system lack timely response capabilities when facing environmental changes and malicious attacks. Second, the fixed encryption strategy prevents the system from adaptively adjusting according to the real-time security status of the quantum communication network. When the quality of the quantum channel deteriorates or abnormal activity is detected, the system still operates with a fixed key generation rate and encryption strength. It cannot proactively increase the encryption strength to resist threats when security risks increase, nor can it appropriately reduce resource overhead to improve transmission efficiency when the channel status is good. The fixed key update cycle also makes the key vulnerable to long-term accumulation and cracking.

[0004] Therefore, how to achieve real-time perception of the operating status of quantum communication networks and dynamically adjust key management and data encryption strategies accordingly to improve the security, reliability, and adaptability of quantum encrypted communication systems is a technical problem that urgently needs to be solved. Summary of the Invention

[0005] The main objective of this application is to provide a quantum situation awareness-based encrypted communication management method, device, and storage medium to achieve real-time awareness of the operating status of the quantum communication network and dynamically adjust the key management strategy and data encryption strategy accordingly, thereby improving the security, reliability, and adaptability of the quantum encrypted communication system.

[0006] To achieve the above objectives, this application provides a quantum situational awareness-based encrypted communication management method, comprising: To acquire real-time operational status data of quantum communication networks; Based on the real-time operating status data, a security situation assessment of the quantum communication network is performed using a quantum situation awareness model, generating a situation assessment result that reflects the current security risks of the quantum communication network. Based on the situation assessment results, control strategy adjustment instructions for the quantum communication network are generated. In response to the control strategy adjustment command, the key management strategy and data encryption strategy of the quantum communication network are adjusted, and encrypted transmission of communication data is performed based on the adjusted key management strategy and data encryption strategy.

[0007] Optionally, acquiring the real-time operating status data of the quantum communication network includes: By deploying multiple situational awareness nodes in the quantum channel, the physical layer parameters, environmental parameters, and signal anomaly parameters of the quantum communication network are collected respectively. The quantum signal is analyzed by quantum state tomography to obtain the density matrix information of the quantum state, and the quantum channel is judged to be eavesdropping or physical layer attack based on the density matrix information. The physical layer parameters, environmental parameters, signal anomaly parameters, and density matrix information are correlated and fused to generate the real-time operating status data.

[0008] Optionally, the step of conducting a security situation assessment of the quantum communication network based on the real-time operating status data using a quantum situation awareness model, and generating a situation assessment result reflecting the current security risks of the quantum communication network, includes: Feature extraction is performed on the real-time operating status data, and the extracted operating status features are input into a pre-trained quantum situational awareness model; The quantum situation awareness model identifies the current security situation level and eavesdropping risk probability of the quantum communication network, and then correlates and aggregates the current security situation level and eavesdropping risk probability to generate the situation assessment result.

[0009] Optionally, before performing feature extraction on the real-time operating status data, the method further includes: The quantum signals in the real-time operating status data are analyzed using quantum state tomography to obtain the density matrix information of the quantum states. The quantum state fidelity, decoherence rate, and outlier values ​​of the off-diagonal coherence terms of the quantum channel are extracted from the density matrix information and used as tomographic feature vectors. The step of inputting the extracted operational state features into the pre-trained quantum situational awareness model includes: concatenating the operational state features with the tomographic feature vector and then inputting them together into the quantum situational awareness model.

[0010] Optionally, generating control strategy adjustment instructions for the quantum communication network based on the situation assessment results includes: Analyze the situation assessment results and extract the security situation level and eavesdropping risk probability from the situation assessment results; The security status level and the eavesdropping risk probability are matched with the triggering conditions in the preset policy rule base to determine the key lifecycle management parameters and encryption algorithm adaptation parameters; The key lifecycle management parameters and the encryption algorithm adaptation parameters are encapsulated into the control policy adjustment instruction and issued.

[0011] Optionally, adjusting the key management strategy and data encryption strategy of the quantum communication network includes: According to the control strategy, the key lifecycle management parameters in the adjustment instruction are triggered to reconfigure the quantum key distribution protocol parameters, adjust the key distribution rate of the quantum key generation device, and modify the key update cycle and key length in the quantum key storage medium. According to the control strategy, the encryption algorithm adaptation parameters in the adjustment instruction are adjusted to match the target quantum encryption algorithm from the preset quantum encryption algorithm library, and the encryption algorithm of the current communication link is switched to the target quantum encryption algorithm.

[0012] Optionally, the step of performing encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy includes: Obtain the quantum key distributed by the adjusted key management strategy as the session encryption key, and obtain the target quantum encryption algorithm determined by the adjusted data encryption strategy; At the sending end, the original communication data is encrypted using the session encryption key and the target quantum encryption algorithm to generate an encrypted ciphertext data packet, which is then sent to the receiving end via the quantum channel. At the receiving end, the identity of the receiving end is verified. After the verification is successful, the receiving encrypted ciphertext data packet is decrypted using the decryption key corresponding to the session encryption key to restore the original communication data.

[0013] Furthermore, to achieve the above objectives, this application also provides a quantum situational awareness-based encrypted communication management device, comprising: The acquisition module is used to acquire real-time operating status data of the quantum communication network; The first generation module is used to perform a security situation assessment of the quantum communication network based on the real-time operating status data and through a quantum situation awareness model, and generate a situation assessment result that reflects the current security risks of the quantum communication network. The second generation module is used to generate control strategy adjustment instructions for the quantum communication network based on the situation assessment results. The execution module is configured to, in response to the control strategy adjustment instruction, adjust the key management strategy and data encryption strategy of the quantum communication network, and perform encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy.

[0014] This application also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the quantum situation awareness-based encrypted communication management method as described above.

[0015] This application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the quantum situation awareness-based encrypted communication management method as described above.

[0016] This application proposes a quantum situational awareness-based encrypted communication management method, device, and storage medium. It acquires real-time operational status data of a quantum communication network and performs a security situation assessment based on this data using a quantum situational awareness model. This generates a situation assessment result reflecting the current security risks, and then generates control strategy adjustment instructions based on the assessment result, driving dynamic adjustments to key management and data encryption strategies. Because this application can determine the corresponding security situation level and eavesdropping risk probability based on different real-time operational states of the quantum communication network using a quantum situational awareness model, it can determine matching key lifecycle management parameters and encryption algorithm adaptation parameters. This enables adaptive adjustments to key distribution rate, key update cycle, encryption algorithm, and encryption strength, thereby improving the dynamic response capability of the quantum encrypted communication system to changes in the channel environment and potential security threats. This achieves the technical effect of improving the security, reliability, and adaptability of quantum encrypted communication, solving the technical problem in existing technologies where the lack of situational awareness and dynamic adjustment mechanisms prevents the system from adaptively adjusting encryption strategies according to real-time security conditions. Attached Figure Description

[0017] Figure 1This is one of the flowcharts of an encrypted communication management method based on quantum situational awareness, which is an embodiment of this application.

[0018] Figure 2 This is a second flowchart of an encrypted communication management method based on quantum situational awareness, as an embodiment of this application.

[0019] Figure 3 This is the third flowchart of an encrypted communication management method based on quantum situational awareness, which is an embodiment of this application.

[0020] Figure 4 This is the fourth flowchart of an encrypted communication management method based on quantum situational awareness, which is an embodiment of this application.

[0021] Figure 5 This is the fifth flowchart of an encrypted communication management method based on quantum situational awareness, which is an embodiment of this application.

[0022] Figure 6 This is a flowchart of a quantum situation awareness-based encrypted communication management method according to an embodiment of this application.

[0023] Figure 7 This is the seventh flowchart of an encrypted communication management method based on quantum situational awareness, which is an embodiment of this application.

[0024] Figure 8 This is a schematic diagram of an encrypted communication management device based on quantum situational awareness, according to an embodiment of this application.

[0025] Figure 9 A schematic diagram of the physical structure of an electronic device is provided.

[0026] In the diagram: 810, Acquisition module; 820, First generation module; 830, Second generation module; 840, Execution module; 901, Processor; 902, Memory; 9021, Computer program.

[0027] The realization of the purpose, functional features and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0028] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0029] Quantum encryption technology, based on fundamental principles of quantum mechanics (such as the Heisenberg uncertainty principle and the no-cloning theorem), can achieve theoretically unconditional security. It can effectively resist the threat posed by quantum computing to traditional public-key cryptosystems (such as RSA and ECC) and is widely used in high-security communication scenarios such as finance, government affairs, and national defense. The security and stability of a quantum encryption system largely depend on its ability to dynamically manage and adaptively adjust to real-time changes in the quantum communication environment.

[0030] Traditional quantum encryption management systems typically employ a static configuration model, pre-setting parameters such as key generation rate, key update cycle, and encryption algorithm during system initialization. These parameters remain fixed throughout subsequent operation, lacking the ability to effectively monitor and dynamically evaluate the real-time operating status of the quantum communication environment. Consequently, the system cannot adaptively adjust its encryption strategy based on the real-time security status of the quantum channel, failing to proactively enhance protection strength when security risks increase or optimize transmission efficiency when channel conditions are favorable.

[0031] Therefore, traditional quantum encryption management systems have several drawbacks. First, due to the lack of real-time situational awareness of the quantum communication environment, the system cannot effectively monitor the real-time state of the quantum channel (such as noise levels, signal attenuation, changes in quantum state fidelity, and abnormal photon number distribution), and it is also difficult to identify potential quantum attack behaviors (such as photon number splitting attacks and man-in-the-middle attacks), making the system lack timely response capabilities in the face of environmental changes and malicious attacks. Second, the rigid encryption strategy means that key parameters such as key generation rate, key update cycle, and encryption algorithm selection cannot be dynamically adjusted according to the channel state, which neither improves security to resist threats nor reduces resource consumption to improve efficiency.

[0032] Based on this, embodiments of this application provide a quantum situational awareness-based encrypted communication management method, apparatus, and storage medium. By acquiring and assessing the real-time operating status data of the quantum communication network, control strategy adjustment instructions are generated based on the assessment results. These instructions drive the key management strategy and data encryption strategy to adaptively adjust, thereby enhancing the dynamic response capability of the quantum encrypted communication system to changes in the channel environment and potential security threats. This achieves the technical effect of improving the security, reliability, and adaptability of quantum encrypted communication, solving the technical problem in the prior art where the lack of situational awareness and dynamic adjustment mechanisms prevents the system from adaptively adjusting the encryption strategy according to the real-time security situation.

[0033] Figure 1 This is one of the flowcharts of a quantum situation awareness-based encrypted communication management method according to an embodiment of this application. This quantum situation awareness-based encrypted communication management method can be executed by a processor of an electronic device, such as... Figure 1As shown, the quantum situation awareness-based encrypted communication management method may include the following steps: Step S110: Obtain real-time operating status data of the quantum communication network.

[0034] In this implementation, the state data of the quantum communication network during operation is acquired in real time, that is, real-time operational state data. For example, multiple situational awareness nodes deployed in the quantum channel are used to collect physical layer parameters (such as quantum signal strength, quantum state phase shift, photon number distribution count), environmental parameters (such as ambient temperature, electromagnetic interference intensity), and signal anomaly parameters (such as illegal access probe signals, abnormal signal waveforms) of the quantum communication network. This is only an example and does not limit the specific method and data type of acquiring real-time operational state data.

[0035] Optionally, the acquired quantum signal can be analyzed using quantum state tomography to obtain the density matrix information of the quantum state. This density matrix can completely characterize the distribution of the quantum state in Hilbert space. The density matrix information can be used to determine whether there is eavesdropping or physical layer attack on the quantum channel. For example, when the off-diagonal elements of the density matrix show abnormal decay, it indicates that the coherence of the quantum state has been destroyed, and there may be eavesdropping.

[0036] Optionally, physical layer parameters, environmental parameters, signal anomaly parameters, and density matrix information can be correlated and fused to generate real-time operational status data. The fusion method can employ multi-dimensional feature concatenation or weighted fusion. Multi-dimensional feature concatenation involves concatenating the physical layer parameter feature vectors, environmental parameter feature vectors, and density matrix feature vectors according to a preset feature dimension order to form a unified operational status feature vector. Weighted fusion involves assigning different weight coefficients to each type of parameter based on its contribution to the security situation assessment, and then performing a weighted sum or weighted average of the parameters to obtain a comprehensive quantitative index of operational status. Through these fusion methods, the real-time operational status data includes both macroscopic environmental information and microscopic quantum state information, providing a comprehensive data foundation for subsequent situation assessment.

[0037] Optionally, by acquiring multi-dimensional operational status data of the quantum communication network in real time, signal attenuation, noise anomalies, or potential attack signs in the quantum channel can be detected immediately. This real-time data acquisition mechanism enables the system to continuously monitor the dynamic changes in the quantum communication environment, providing reliable data support for subsequent security posture assessments and adjustments to encryption strategies.

[0038] Step S120: Based on real-time operational status data, conduct a security situation assessment of the quantum communication network using a quantum situation awareness model, and generate a situation assessment result that reflects the current security risks of the quantum communication network.

[0039] In this implementation, after obtaining the real-time operating status data in step S110, the quantum communication network is assessed for security status through a quantum situational awareness model. That is, the real-time operating status data is input into a pre-trained quantum situational awareness model, which identifies the current security status level and eavesdropping risk probability of the quantum communication network and generates a situational assessment result.

[0040] For example, feature extraction is performed on real-time operational status data. Noise power spectral density, signal mean, and variance are extracted from physical layer parameters as time-domain features; temperature change rate and electromagnetic interference intensity are extracted from environmental parameters as environmental features; and quantum state fidelity and decoherence rate are extracted from density matrix information as quantum state features. These features are then concatenated: specifically, the time-domain features, environmental features, and quantum state features are combined according to a preset feature dimension order to form a multi-dimensional feature vector, which serves as the feature vector representing the quantum channel state. This feature vector is then input into a pre-trained quantum situational awareness model.

[0041] Optionally, the quantum situation awareness model can employ a situation classifier built on a neural network. This classifier uses a multilayer perceptron structure or a convolutional neural network structure, and maps the model output to the probability distribution of four security situation levels: "safe," "alert," "dangerous," and "urgent" through a softmax output layer. The level with the highest probability is output as the current security situation level. The model is pre-trained by: acquiring a training sample set containing the operating state features of the quantum communication network and corresponding security situation level labels; inputting the training samples into the neural network and training it to convergence using supervised learning, enabling the model to learn the mapping relationship from operating state features to security situation levels. The current security situation level of the quantum communication network (such as safe, alert, dangerous, and urgent levels) is output through the situation classifier. Simultaneously, an eavesdropping risk assessment model is built based on a Bayesian network. The feature vector is input into the eavesdropping risk assessment model, and the probability of eavesdropping risk is calculated by combining dynamic weight coefficients. The dynamic weight coefficients are updated according to real-time channel changes through a Long Short-Term Memory (LSTM) network to adapt to the dynamic characteristics of the quantum communication environment.

[0042] Optionally, based on the current security posture level and the probability of eavesdropping risk, the federated learning framework also supports threat intelligence sharing across quantum communication nodes. Each node uploads model gradients locally instead of raw data, improving global detection accuracy while protecting data privacy.

[0043] Optionally, the current security situation level and the probability of eavesdropping risk can be correlated and aggregated to generate a situation assessment result. Correlation and aggregation refers to combining the security situation level as a qualitative risk indicator and the probability of eavesdropping risk as a quantitative risk indicator according to a preset data structure to form a unified format of situation assessment result data. This situation assessment result comprehensively reflects the degree and type of security risks currently faced by the quantum communication network, providing a decision-making basis for the dynamic adjustment of subsequent encryption strategies.

[0044] Step S130: Based on the situation assessment results, generate control strategy adjustment instructions for the quantum communication network.

[0045] In this implementation, after the situation assessment result is generated in step S120 above, a control strategy adjustment instruction is generated based on the situation assessment result. That is, the security situation level and eavesdropping risk probability in the situation assessment result are matched with the triggering conditions in the preset policy rule base to determine the key lifecycle management parameters and encryption algorithm adaptation parameters, and these parameters are encapsulated into a control strategy adjustment instruction and issued.

[0046] For example, the situation assessment results are analyzed to extract the security situation level (such as the danger level) and the probability of eavesdropping risk, and then matched with the triggering conditions in the preset policy rule base. The preset policy rule base stores policy parameters corresponding to different security situation levels and eavesdropping risk probability ranges. For example, when the security situation level is secure, the corresponding key update cycle is 24 hours and the key distribution rate remains at the baseline value; when the security situation level is dangerous or the eavesdropping risk probability exceeds 80%, the corresponding key update cycle is shortened to 1 hour and the key distribution rate is increased to twice the baseline value.

[0047] Optionally, key lifecycle management parameters and encryption algorithm adaptation parameters are determined. Key lifecycle management parameters include key distribution rate adjustment values ​​and key update cycle adjustment values, used to instruct the quantum key management module to adjust the rate of key generation and distribution, as well as the frequency of key updates. Encryption algorithm adaptation parameters include the target quantum encryption algorithm identifier and encryption strength level, used to instruct the encrypted communication module to select a matching encryption algorithm and encryption strength from a preset quantum encryption algorithm library. Here, a quantum encryption algorithm refers to an algorithm that uses quantum keys to encrypt and decrypt communication data, such as a one-time pad algorithm; the preset quantum encryption algorithm library contains various quantum encryption algorithms with different computational complexities and security strengths (such as one-time pad algorithms, quantum stream encryption algorithms, etc.). Quantum key distribution protocols (such as the BB84 protocol (Bennett-Brassard 1984, BB84 protocol), the E91 protocol (Ekert 1991, E91 protocol), the B92 protocol (Bennett 1992, B92 protocol), etc.) are also included. The quantum key distribution protocol is used to generate and distribute a shared quantum key between the communicating parties, which is then used by the quantum encryption algorithm to perform encryption operations on the communication data.

[0048] Optionally, the key lifecycle management parameters and encryption algorithm adaptation parameters are encapsulated into a control policy adjustment instruction, which is then sent to the quantum key management module and the encrypted communication module via a standardized interface. This control policy adjustment instruction carries complete policy parameter information, allowing the receiver to execute it directly without additional parsing.

[0049] Optionally, by matching the situation assessment results with a pre-defined policy rule base, an automated mapping from perception to decision-making is achieved, avoiding the delays and uncertainties of manual decision-making and ensuring the timeliness and accuracy of encryption policy adjustments.

[0050] Step S140: In response to the control strategy adjustment instruction, adjust the key management strategy and data encryption strategy of the quantum communication network, and perform encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy.

[0051] In this implementation, after the control strategy adjustment instruction is generated and issued in step S130, the quantum key management module and the encrypted communication module respond to the instruction by performing key management strategy adjustment and data encryption strategy adjustment respectively, and perform encrypted transmission of communication data based on the adjusted strategy.

[0052] For example, the quantum key management module adjusts the key lifecycle management parameters in the instructions according to the control strategy, triggering the reconfiguration of quantum key distribution protocol parameters. For instance, the pulse transmission frequency of the key generation device is adjusted from 10MHz to 20MHz, thereby increasing the key extraction rate accordingly; at the same time, the key update cycle (e.g., shortened from 24 hours to 1 hour) and key length (e.g., extended from 128 bits to 256 bits) in the key storage medium are modified, and the old key is destroyed and the new key is written.

[0053] Optionally, the encrypted communication module adjusts the encryption algorithm adaptation parameters in the command according to the control strategy, matches the target quantum encryption algorithm from the preset quantum encryption algorithm library, and switches the quantum encryption algorithm of the current communication link to the target quantum encryption algorithm. For example, when the security situation level is dangerous, a one-time pad algorithm with higher security strength (such as using a longer key length) is selected from the preset quantum encryption algorithm library to enhance the data encryption strength; at the same time, the quantum key management module selects the E91 protocol with higher security strength from the preset quantum key distribution protocol library to replace the currently used BB84 protocol to generate a new shared quantum key, providing a more secure key material for the quantum encryption algorithm.

[0054] Optionally, after the key management strategy and data encryption strategy are adjusted, encrypted transmission of communication data is performed. Specifically, the sending end obtains the quantum key distributed by the adjusted key management strategy as the session encryption key, and obtains the target quantum encryption algorithm determined by the adjusted data encryption strategy. It then uses the session encryption key and the target quantum encryption algorithm to perform encryption operations on the original communication data, generating encrypted ciphertext data packets, which are then sent to the receiving end through the quantum channel. The receiving end verifies the legitimacy of its identity using quantum entanglement verification technology. After successful verification, it uses the decryption key corresponding to the session encryption key to perform decryption operations on the received encrypted ciphertext data packets, recovering the original communication data.

[0055] Optionally, the dynamic adjustment of key management and data encryption strategies is triggered in real time based on the evaluation results of the quantum situational awareness model, without the need for manual intervention. When the quantum channel is in good condition, the system can automatically reduce the key update frequency and encryption strength to improve transmission efficiency; when a security threat is detected, the system can immediately increase the key update frequency and encryption strength to resist attacks, thereby achieving an adaptive balance between security and communication efficiency.

[0056] In this embodiment, real-time operational status data of the quantum communication network is acquired. Based on this data, a quantum situational awareness model is used to assess the security situation of the quantum communication network, generating a situational assessment result reflecting the current security risks. According to the situational assessment result, control strategy adjustment instructions for the quantum communication network are generated. In response to these instructions, the key management strategy and data encryption strategy of the quantum communication network are adjusted, and encrypted transmission of communication data is performed based on the adjusted strategies. Because this application can determine the corresponding security situation level and eavesdropping risk probability based on different real-time operational states of the quantum communication network using a quantum situational awareness model, and thus determine matching key lifecycle management parameters and encryption algorithm adaptation parameters, it achieves adaptive adjustment of key distribution rate, key update cycle, encryption strength, and mode. This enhances the dynamic response capability of the quantum encrypted communication system to changes in the channel environment and potential security threats, thereby improving the security, reliability, and adaptability of quantum encrypted communication. This solves the technical problem in existing technologies where the lack of situational awareness and dynamic adjustment mechanisms prevents the system from adaptively adjusting its encryption strategy according to real-time security conditions.

[0057] The steps described above will be explained in detail below.

[0058] Figure 2 This is a second flowchart of an embodiment of an encrypted communication management method based on quantum situational awareness, according to this application. Figure 2 As shown, obtaining real-time operational status data of the quantum communication network in step 110 may include the following steps: Step 111: Collect physical layer parameters, environmental parameters, and signal anomaly parameters of the quantum communication network by deploying multiple situational awareness nodes in the quantum channel; Step 112: Analyze the collected quantum signal using quantum state tomography to obtain the density matrix information of the quantum state, and determine whether there is eavesdropping or physical layer attack in the quantum channel based on the density matrix information; Step 113: Correlate and fuse physical layer parameters, environmental parameters, signal anomaly parameters, and density matrix information to generate real-time operating status data.

[0059] In this embodiment, multiple situational awareness nodes deployed in the quantum channel first collect physical layer parameters (including quantum signal strength, quantum state phase shift, and photon number distribution count), environmental parameters (including ambient temperature and electromagnetic interference intensity), and signal anomaly parameters (including unauthorized access probe signals and abnormal signal waveforms). Then, quantum state tomography is used to analyze the collected quantum signals to obtain the density matrix information of the quantum states. This density matrix information can completely characterize the distribution of quantum states in Hilbert space (its diagonal elements represent the population of each quantum state, and off-diagonal elements represent the coherence between quantum states). Based on the density matrix information (such as abnormal attenuation of off-diagonal element amplitude, decrease in purity, or abnormal change in von Neumann entropy), it is determined whether there is eavesdropping behavior or physical layer attack in the quantum channel. Finally, the above physical layer parameters, environmental parameters, signal anomaly parameters, and density matrix information are correlated and fused to generate real-time operating status data.

[0060] Optionally, the order of steps S111 and S112 is not limited to the above-described sequence. For example, step S112 can be performed first to analyze the quantum signal using quantum state tomography to obtain density matrix information, and then step S111 can be performed to collect physical layer parameters, environmental parameters, and signal anomaly parameters through situational awareness nodes; or steps S111 and S112 can be performed in parallel. The step numbers above are for ease of description only and do not constitute a limitation on the order of step execution.

[0061] Optionally, by collecting the above three types of parameters through multiple situational awareness nodes, a multi-dimensional data acquisition system covering the physical layer, environmental layer, and security layer of the quantum communication network can be constructed. This multi-point distributed acquisition method can comprehensively capture various dynamic changes in the quantum channel. At the same time, by analyzing the quantum signal through quantum state tomography to obtain density matrix information, microscopic quantum state characteristic data can be provided for subsequent steps. By correlating and fusing macroscopic environmental parameters, physical layer parameters, and microscopic density matrix information, the real-time operating status data includes both macroscopic environmental information and microscopic quantum state information, providing a comprehensive data foundation for the subsequent situation assessment model and improving the accuracy and reliability of situation assessment.

[0062] Figure 3 This is the third flowchart of an embodiment of an encrypted communication management method based on quantum situational awareness in this application. Figure 3 As shown, step 120, based on real-time operational status data, uses a quantum situational awareness model to assess the security situation of the quantum communication network and generates a situational assessment result reflecting the current security risks of the quantum communication network. This may include the following steps: Step 121: Extract features from real-time operational status data and input the extracted operational status features into the pre-trained quantum situational awareness model; Step 122: Identify the current security status level and eavesdropping risk probability of the quantum communication network through the quantum situation awareness model, and correlate and aggregate the current security status level and eavesdropping risk probability to generate a situation assessment result.

[0063] In this embodiment, the real-time operating status data obtained in step S110 is first subjected to feature extraction. The mean and variance of quantum signal intensity and the rate of change of phase offset are extracted from physical layer parameters as time-domain statistical features. The trend of ambient temperature change and the spectrum distribution of electromagnetic interference are extracted from environmental parameters as environmental features. The quantum state fidelity, decoherence rate and outliers of off-diagonal coherence terms are extracted from density matrix information as quantum state features. The above features are concatenated or weighted to generate a multi-dimensional operating status feature vector representing the state of the quantum channel. This operating status feature vector is then input into a pre-trained quantum situation awareness model. Subsequently, the situation classifier in the quantum situation awareness model identifies the current security situation level of the quantum communication network (such as different levels such as safe, alert, dangerous, and emergency). At the same time, the eavesdropping risk assessment module in the model calculates the eavesdropping risk probability (such as quantitative assessment based on Bayesian network combined with dynamic weight coefficients). Finally, the current security situation level and the eavesdropping risk probability are correlated and aggregated (such as combining the two into a unified data structure according to a preset mapping relationship) to generate a situation assessment result reflecting the current security risk of the quantum communication network.

[0064] Optionally, the order of steps S121 and S122 is not limited to the above-described sequence. For example, the quantum situation awareness model can be a multi-task learning model that simultaneously outputs the security situation level and the probability of eavesdropping risk; or it can output the probability of eavesdropping risk first and then obtain the security situation level based on the probability interval mapping. The above step numbering is only for ease of description and does not constitute a limitation on the order of step execution.

[0065] Optionally, by extracting multi-dimensional features from real-time operational status data, the raw sensor data can be converted into quantitative features with physical meaning, enabling the quantum situational awareness model to more accurately identify subtle changes in the quantum communication environment. By simultaneously outputting the security situation level and the probability of eavesdropping risk from the quantum situational awareness model, the current security risks can be comprehensively characterized from both qualitative and quantitative dimensions. After correlating and aggregating the security situation level and the probability of eavesdropping risk, a situational assessment result is generated, providing a unified decision-making basis for the subsequent generation of encryption strategies and improving the accuracy and timeliness of strategy adjustments.

[0066] Figure 4 This is the fourth flowchart of an embodiment of an encrypted communication management method based on quantum situational awareness in this application. Figure 4As shown, before feature extraction of the real-time operating status data in step 121, the following steps may be included: Step 1201: Analyze the quantum signals in the real-time operating state data based on quantum state tomography to obtain the density matrix information of the quantum states; Step 1202: Extract the quantum state fidelity, decoherence rate, and outlier values ​​of the off-diagonal coherence terms of the quantum channel from the density matrix information, and use them as tomographic feature vectors; Step 121, in which the extracted operational state features are input into the pre-trained quantum situational awareness model, may include the following steps: Step 1211: After concatenating the running state features and the tomographic feature vector, input them together into the quantum situational awareness model.

[0067] In this embodiment, steps S1201 to S1211 are the specific implementation methods before feature extraction of real-time operating status data in step S121. It should be noted that although steps S1201 to S1211 in the accompanying drawings are sequentially executed before step S121, steps S1201 to S1211 are essentially a further refinement of the feature extraction process in step S121. That is, while extracting the regular operating status features, additional tomographic feature vectors are extracted using quantum state tomography, and finally, the two are concatenated and input into the model. First, before (or in parallel with) feature extraction in step S121, quantum signals in the real-time operational status data are analyzed using quantum state tomography. By performing projection measurements on the quantum signals under multiple different basis vectors and using maximum likelihood estimation or linear reconstruction algorithms, the density matrix information of the quantum states is obtained. This density matrix information includes diagonal elements (representing the population of each quantum state) and off-diagonal elements (representing the coherence between quantum states). Then, the quantum state fidelity (measuring the closeness of the current quantum state to the ideal quantum state), decoherence rate (characterizing how fast the coherence of the quantum state decays over time), and outliers of the off-diagonal coherence terms (reflecting whether the coherence of the quantum state is subject to unexpected perturbations) of the quantum channel are extracted from the density matrix information. These extracted parameters are combined into a tomography feature vector. Finally, in step S121, the operational status features extracted from the real-time operational status data are concatenated with the tomography feature vector (e.g., combined into a unified feature vector according to a preset dimensional order). The concatenated complete features are then input into the pre-trained quantum situation awareness model.

[0068] Optionally, the order of steps S1201 to S1211 and the feature extraction of real-time running status data in step S121 is not limited to the order of feature extraction followed by tomographic parsing. For example, steps S1201 to S1202 can be performed first to obtain the tomographic feature vector, followed by the regular feature extraction in step S121, and finally step S1211 can be performed to concatenate the two; or the regular feature extraction in step S121 and the tomographic feature extraction in steps S1201 to S1202 can be performed in parallel, and then the concatenation operation in step S1211 can be performed. The above step numbering is only for ease of description and does not constitute a limitation on the order of step execution.

[0069] Optionally, by introducing tomographic feature vectors based on quantum state tomography technology in addition to conventional feature extraction, more microscopic quantum state information (such as fidelity, decoherence rate, etc.) in the quantum channel can be obtained. Compared with the traditional method that relies solely on macroscopic sensing parameters (such as signal strength, temperature, etc.), tomographic feature vectors can more sensitively capture abnormal changes at the quantum state level. By concatenating the operating state features and tomographic feature vectors and inputting them into the quantum situation awareness model, the model can make a comprehensive situation judgment based on both macroscopic environmental information and microscopic quantum state information. This improves the sensitivity (able to detect abnormal signs at the quantum state level earlier) and accuracy (reduces misjudgments due to insufficient information) of security situation assessment, providing a more reliable decision-making basis for the dynamic adjustment of subsequent encryption strategies.

[0070] Figure 5 This is the fifth flowchart of an embodiment of an encrypted communication management method based on quantum situational awareness in this application. Figure 5 As shown, step 130, based on the situation assessment results, generates control strategy adjustment instructions for the quantum communication network, which may include the following steps: Step 131: Analyze the situation assessment results and extract the security situation level and eavesdropping risk probability from the situation assessment results; Step 132: Match the security status level and eavesdropping risk probability with the triggering conditions in the preset policy rule base to determine the key lifecycle management parameters and encryption algorithm adaptation parameters; Step 133: Encapsulate the key lifecycle management parameters and encryption algorithm adaptation parameters into control policy adjustment instructions and issue them.

[0071] In this embodiment, the situation assessment result generated in step S120 is first parsed. Qualitative information representing the current security risk level (security situation level, such as safe, alert, dangerous, emergency, etc.) and quantitative information representing the current eavesdropping probability (eavesdropping risk probability, such as a specific value between 0% and 100%) are extracted from the situation assessment result. Then, the security situation level and eavesdropping risk probability are matched with triggering conditions in a preset policy rule base. The preset policy rule base stores the correspondence between different security situation levels and / or eavesdropping risk probability ranges and key lifecycle management parameters and encryption algorithm adaptation parameters. For example, when the security situation level is safe and the eavesdropping risk is high... When the probability is less than 30%, it corresponds to the first strategy parameter group. When the security situation level is dangerous or the probability of eavesdropping exceeds 80%, it corresponds to the second strategy parameter group. By comparing the current security situation level and the probability of eavesdropping with the triggering conditions, the matching key lifecycle management parameters (including but not limited to key distribution rate adjustment value and key update cycle adjustment value) and encryption algorithm adaptation parameters (including but not limited to target quantum encryption algorithm identifier and encryption strength level) are determined. Finally, the key lifecycle management parameters and encryption algorithm adaptation parameters are encapsulated into control strategy adjustment instructions according to the preset instruction format and sent to the quantum key management module and encryption communication module through a standardized interface.

[0072] Optionally, the order of steps S131, S132, and S133 is not limited to the above-described sequence. For example, the matching operation with the preset policy rule base in step S132 can be performed first, and then the required security posture level and eavesdropping risk probability can be back-confirmed based on the matching result; or the parameter extraction in step S131 and the rule matching part in step S132 can be performed interchangeably. The above step numbering is only for ease of description and does not constitute a limitation on the order of step execution.

[0073] Optionally, a pre-defined policy rule base constructs a hierarchical policy mapping table with security status level as the primary index and eavesdropping risk probability as the secondary judgment condition. When the security status level is secure, the key lifecycle management parameters correspond to a longer key update cycle (e.g., 24 hours) and a baseline key distribution rate; when the security status level is alert, the key lifecycle management parameters correspond to a shortened key update cycle (e.g., 12 hours) and an increased key distribution rate; when the security status level is dangerous, the key lifecycle management parameters correspond to an extremely short key update cycle (e.g., 1 hour) and the highest key distribution rate; when the security status level is urgent, the key lifecycle management parameters correspond to triggering immediate key replacement and emergency key destruction mechanisms. Simultaneously, the encryption algorithm adaptation parameters dynamically adjust with changes in the security status level, corresponding to the BB84 standard protocol mode under secure and alert levels, and to the enhanced mode of the E91 or B92 protocol with higher security strength under dangerous and urgent levels. The system achieves automated mapping from situation assessment results to specific strategy parameters by using a pre-defined strategy rule base, ensuring the timeliness and consistency of strategy adjustments. By encapsulating adjustment parameters into standard format instructions and distributing them to each execution module, the system ensures reliable transmission and correct parsing of strategy instructions, effectively reducing the delays and uncertainties caused by manual decision-making and operation.

[0074] Figure 6 This is flowchart six of an embodiment of an encrypted communication management method based on quantum situational awareness, as described in this application. Figure 6 As shown, adjusting the key management strategy and data encryption strategy of the quantum communication network in step 140 may include the following steps: Step 1411: Adjust the key lifecycle management parameters in the instruction according to the control strategy, trigger the reconfiguration of quantum key distribution protocol parameters, adjust the key distribution rate of the quantum key generation device, and modify the key update cycle and key length in the quantum key storage medium; Step 1412: Adjust the encryption algorithm adaptation parameters in the control strategy instruction, match the target quantum encryption algorithm from the preset quantum encryption algorithm library, and switch the encryption algorithm of the current communication link to the target quantum encryption algorithm.

[0075] In this embodiment, firstly, according to the control strategy adjustment instruction issued in step S133, the key lifecycle management parameters (including key distribution rate adjustment value and key update cycle adjustment value) are adjusted to trigger the quantum key distribution protocol parameter reconfiguration process. After the quantum key management module parses the key lifecycle management parameters, it issues a rate adjustment instruction to the quantum key generation device to adjust the pulse emission frequency and key extraction rate of the quantum key generation device to achieve a change in the key distribution rate. At the same time, it modifies the key update cycle (e.g., shortening it from 24 hours to 1 hour) and key length (e.g., expanding it from 128 bits to 256 bits) in the quantum key storage medium and triggers the old key destruction and new key writing operations. Then, according to the control strategy adjustment instruction, the encryption algorithm adaptation parameters (including the target quantum encryption algorithm identifier and encryption strength level) are adjusted to match the target quantum encryption algorithm from the preset quantum encryption algorithm library (e.g., locating the corresponding algorithm implementation according to the identifier index), and performs a hot switch of the encryption algorithm of the communication link. Under the premise of ensuring that the current communication is not interrupted, the encryption algorithm of the current communication link is switched to the target quantum encryption algorithm.

[0076] Optionally, the order of steps S1411 and S1412 is not limited to the above-described sequence. For example, the encryption algorithm switching in step S1412 can be performed first, followed by the key distribution rate adjustment and key update cycle modification in step S1411; alternatively, steps S1411 and S1412 can be performed in parallel. The step numbers above are for ease of description only and do not constitute a limitation on the order of step execution.

[0077] Optionally, there is a linkage between the key lifecycle management parameters in step S1411 and the encryption algorithm adaptation parameters in step S1412. When the security level is high, the key update cycle is shortened while the encryption algorithm switches to a higher strength mode. The two work together to enhance the overall protection capability of the system. During the switching process, the system adopts a mechanism of first establishing a backup channel and then switching the main channel to ensure uninterrupted communication: for example, after receiving the control policy adjustment instruction, the system first establishes a backup encrypted communication channel based on the new key lifecycle management parameters and encryption algorithm adaptation parameters. After the backup channel is verified, the communication traffic is switched from the original channel to the backup channel, thereby avoiding data transmission interruption caused by policy switching and improving the communication continuity and reliability during the system adjustment process.

[0078] Figure 7 This is flowchart seven of an embodiment of an encrypted communication management method based on quantum situational awareness, as described in this application. Figure 7 As shown, adjusting the key management strategy and data encryption strategy of the quantum communication network in step 140 may include the following steps: Step 1421: Obtain the quantum key distributed by the adjusted key management strategy as the session encryption key, and obtain the target quantum encryption algorithm determined by the adjusted data encryption strategy; Step 1422: At the sending end, the original communication data is encrypted using the session encryption key and the target quantum encryption algorithm to generate an encrypted ciphertext data packet, which is then sent to the receiving end through the quantum channel; Step 1423: At the receiving end, the identity of the receiving end is verified. After the verification is successful, the receiving encrypted ciphertext data packet is decrypted using the decryption key corresponding to the session encryption key to restore the original communication data.

[0079] In this embodiment, firstly, after the key management strategy and data encryption strategy are adjusted, the quantum key distributed by the adjusted key management strategy is obtained as the session encryption key for the current communication session (this quantum key is generated based on a quantum key distribution protocol, utilizing the non-cloning property of quantum states to ensure the security of the key itself). Simultaneously, the target quantum encryption algorithm determined by the adjusted data encryption strategy is obtained (e.g., an encryption algorithm matched from a preset quantum encryption algorithm library that is appropriate for the current security level). Then, at the sending end, the session encryption key and the target quantum encryption algorithm are used to perform encryption operations on the original communication data (e.g., using a one-time pad algorithm to encrypt the original communication data). The data is encrypted bit by bit to generate ciphertext of the same length as the original data. The encrypted ciphertext data packet is then sent to the receiving end via a quantum channel. Finally, at the receiving end, upon receiving the encrypted ciphertext data packet, the identity of the receiving end is first verified (e.g., by using quantum entanglement verification technology to verify the identity of the receiving party, ensuring that the key is only distributed to legitimate users and preventing the key from being illegally stolen). After the verification is successful, the decryption key corresponding to the session encryption key (this decryption key and the encryption key are paired and generated in the quantum key distribution protocol to ensure encryption and decryption consistency) is used to perform decryption operations on the received encrypted ciphertext data packet to recover the original communication data.

[0080] Optionally, the order of steps S1421, S1422, and S1423 is not limited to the above-described sequence. For example, the receiver's legitimacy verification preparation (such as establishing a quantum entanglement channel in advance) can be performed first, followed by the transmitter's encryption operation; or the key acquisition in step S1421 and the encryption operation in step S1422 can be performed interchangeably. The step numbers above are for ease of description only and do not constitute a limitation on the order of step execution.

[0081] Optionally, during the encryption operation of the original communication data using the session encryption key and the target quantum encryption algorithm at the sending end, the encryption algorithm can be dynamically selected according to the data type and communication scenario. For audio and video streams with high real-time requirements, a lightweight quantum encryption algorithm is selected to reduce processing latency; for confidential file transmission, a high-strength quantum encryption algorithm is used to ensure data security. During the identity verification process at the receiving end, quantum entanglement verification technology is used. The two communicating parties share a pair of entangled quantum states. The receiving end measures the entangled particles in its hands and compares them with the sending end. Only after successful verification can decryption be performed. This verification method based on quantum mechanics ensures that the key is only distributed to legitimate users, preventing man-in-the-middle attacks. Simultaneously, the method of transmitting encrypted ciphertext data packets through a quantum channel utilizes the physical properties of quantum states; any eavesdropping on the quantum channel will change the state of the quantum state and be detected immediately. Through the coordinated adjustment of key management and encryption strategies, a complete secure closed loop from key generation and distribution to data encryption and decryption is achieved, effectively improving the security and reliability of the quantum encrypted communication system.

[0082] Figure 8 This is a schematic diagram of the structure of a quantum situational awareness-based encrypted communication management device according to an embodiment of this application, as shown below. Figure 8 As shown, based on the above embodiments, the quantum situational awareness-based encrypted communication management device may include: an acquisition module 810, a first generation module 820, a second generation module 830, and an execution module 840. Detailed descriptions of each functional module are as follows: The acquisition module 810 is used to acquire real-time operating status data of the quantum communication network; The first generation module 820 is used to perform a security situation assessment of the quantum communication network based on real-time operating status data and a quantum situation awareness model, and generate a situation assessment result that reflects the current security risks of the quantum communication network. The second generation module 830 is used to generate control strategy adjustment instructions for the quantum communication network based on the situation assessment results. The execution module 840 is used to adjust the key management strategy and data encryption strategy of the quantum communication network in response to the control strategy adjustment command, and to perform encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy.

[0083] In this embodiment of the application, the acquisition module 810 can also be specifically used for: By deploying multiple situational awareness nodes in the quantum channel, physical layer parameters, environmental parameters, and signal anomaly parameters of the quantum communication network are collected respectively. The collected quantum signals are analyzed using quantum state tomography to obtain the density matrix information of the quantum states, and the density matrix information is used to determine whether there is eavesdropping or physical layer attack in the quantum channel. Physical layer parameters, environmental parameters, signal anomaly parameters, and density matrix information are correlated and fused to generate real-time operating status data.

[0084] In this embodiment of the application, the first generation module 820 can also be specifically used for: Feature extraction is performed on real-time operational status data, and the extracted operational status features are input into a pre-trained quantum situational awareness model; The current security status level and eavesdropping risk probability of the quantum communication network are identified by the quantum situation awareness model, and the current security status level and eavesdropping risk probability are correlated and aggregated to generate a situation assessment result.

[0085] In this embodiment of the application, the first generation module 820 can also be specifically used for: Quantum state tomography is used to analyze quantum signals in real-time operating status data to obtain quantum state density matrix information. The quantum state fidelity, decoherence rate, and outlier values ​​of the off-diagonal coherence terms of the quantum channel are extracted from the density matrix information and used as tomographic feature vectors. The extracted operational state features are input into the pre-trained quantum situation awareness model, including: concatenating the operational state features with the tomographic feature vector and then inputting them together into the quantum situation awareness model.

[0086] In this embodiment of the application, the second generation module 830 can also be specifically used for: Analyze the situation assessment results and extract the security situation level and eavesdropping risk probability from the situation assessment results; The security status level and the probability of eavesdropping risk are matched with the triggering conditions in the preset policy rule base to determine the key lifecycle management parameters and encryption algorithm adaptation parameters; The key lifecycle management parameters and encryption algorithm adaptation parameters are encapsulated into control policy adjustment instructions and issued.

[0087] In this embodiment of the application, the execution module 840 may also be specifically used for: The key lifecycle management parameters in the control strategy adjustment instructions are used to trigger the reconfiguration of quantum key distribution protocol parameters, adjust the key distribution rate of the quantum key generation device, and modify the key update cycle and key length in the quantum key storage medium. According to the control strategy, the encryption algorithm adaptation parameters in the instruction are adjusted, the target quantum encryption algorithm is matched from the preset quantum encryption algorithm library, and the encryption algorithm of the current communication link is switched to the target quantum encryption algorithm.

[0088] In this embodiment of the application, the execution module 840 may also be specifically used for: Obtain the quantum key distributed by the adjusted key management strategy as the session encryption key, and obtain the target quantum encryption algorithm determined by the adjusted data encryption strategy; At the sending end, the original communication data is encrypted using the session encryption key and the target quantum encryption algorithm to generate encrypted ciphertext data packets, which are then sent to the receiving end via the quantum channel. At the receiving end, the identity of the receiving end is verified. After the verification is successful, the decryption key corresponding to the session encryption key is used to perform decryption operation on the received encrypted ciphertext data packet to restore the original communication data.

[0089] Based on the above embodiments, Figure 9 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 9 As shown, the electronic device 900 may include: a processor 901, a memory 902, and a computer program 9021 stored in the memory and executable on the processor. When executed, the processor implements the quantum situation awareness-based encrypted communication management method described in any of the foregoing embodiments.

[0090] Based on the above embodiments, this application also provides a computer-readable storage medium, which, when the instructions in the computer-readable storage medium are executed by the processor of an electronic device, enables the electronic device to execute a quantum situational awareness-based encrypted communication management method. The method may include, for example, acquiring real-time operating status data of a quantum communication network. Based on real-time operational status data, a quantum situation awareness model is used to assess the security situation of the quantum communication network, generating a situation assessment result that reflects the current security risks of the quantum communication network. Based on the situation assessment results, generate control strategy adjustment instructions for the quantum communication network; In response to the control strategy adjustment command, the key management strategy and data encryption strategy of the quantum communication network are adjusted, and the encrypted transmission of communication data is performed based on the adjusted key management strategy and data encryption strategy.

[0091] Furthermore, the logical instructions in the aforementioned memory 930 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of this application embodiment, essentially, or the parts that contribute to the prior art, or parts of the technical solutions, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0092] Based on the above embodiments, in another aspect, this application also provides a computer program product, which includes a computer program that can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the quantum situation awareness-based encrypted communication management method provided by the above methods. The method includes: acquiring real-time operating status data of the quantum communication network. Based on real-time operational status data, a quantum situation awareness model is used to assess the security situation of the quantum communication network, generating a situation assessment result that reflects the current security risks of the quantum communication network. Based on the situation assessment results, generate control strategy adjustment instructions for the quantum communication network; In response to the control strategy adjustment command, the key management strategy and data encryption strategy of the quantum communication network are adjusted, and the encrypted transmission of communication data is performed based on the adjusted key management strategy and data encryption strategy.

[0093] Based on the above embodiments, in another aspect, this application also provides a non-transitory computer-readable storage medium storing a computer program thereon. When the computer program is executed by a processor, it is implemented to perform the quantum situation awareness-based encrypted communication management method provided by the above methods. The method may include, for example, acquiring real-time operating status data of the quantum communication network. Based on real-time operational status data, a quantum situation awareness model is used to assess the security situation of the quantum communication network, generating a situation assessment result that reflects the current security risks of the quantum communication network. Based on the situation assessment results, generate control strategy adjustment instructions for the quantum communication network; In response to the control strategy adjustment command, the key management strategy and data encryption strategy of the quantum communication network are adjusted, and the encrypted transmission of communication data is performed based on the adjusted key management strategy and data encryption strategy.

[0094] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0095] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods of various embodiments or some parts of embodiments.

Claims

1. A method for managing encrypted communication based on quantum situational awareness, characterized in that, include: To acquire real-time operational status data of quantum communication networks; Based on the real-time operating status data, a security situation assessment of the quantum communication network is performed using a quantum situation awareness model, generating a situation assessment result that reflects the current security risks of the quantum communication network. Based on the situation assessment results, control strategy adjustment instructions for the quantum communication network are generated. In response to the control strategy adjustment command, the key management strategy and data encryption strategy of the quantum communication network are adjusted, and encrypted transmission of communication data is performed based on the adjusted key management strategy and data encryption strategy.

2. The encrypted communication management method based on quantum situation awareness according to claim 1, characterized in that, The acquisition of real-time operational status data of the quantum communication network includes: By deploying multiple situational awareness nodes in the quantum channel, the physical layer parameters, environmental parameters, and signal anomaly parameters of the quantum communication network are collected respectively. The quantum signal is analyzed by quantum state tomography to obtain the density matrix information of the quantum state, and the quantum channel is judged to be eavesdropping or physical layer attack based on the density matrix information. The physical layer parameters, environmental parameters, signal anomaly parameters, and density matrix information are correlated and fused to generate the real-time operating status data.

3. The encrypted communication management method based on quantum situation awareness according to claim 2, characterized in that, The process of assessing the security situation of the quantum communication network based on the real-time operational status data using a quantum situation awareness model, and generating a situation assessment result reflecting the current security risks of the quantum communication network, includes: Feature extraction is performed on the real-time operating status data, and the extracted operating status features are input into a pre-trained quantum situational awareness model; The quantum situation awareness model identifies the current security situation level and eavesdropping risk probability of the quantum communication network, and then correlates and aggregates the current security situation level and eavesdropping risk probability to generate the situation assessment result.

4. The encrypted communication management method based on quantum situation awareness according to claim 3, characterized in that, Before performing feature extraction on the real-time operating status data, the method further includes: The quantum signals in the real-time operating status data are analyzed using quantum state tomography to obtain the density matrix information of the quantum states. The quantum state fidelity, decoherence rate, and outlier values ​​of the off-diagonal coherence terms of the quantum channel are extracted from the density matrix information and used as tomographic feature vectors. The step of inputting the extracted operational state features into the pre-trained quantum situational awareness model includes: concatenating the operational state features with the tomographic feature vector and then inputting them together into the quantum situational awareness model.

5. The encrypted communication management method based on quantum situation awareness according to claim 1, characterized in that, The step of generating control strategy adjustment instructions for the quantum communication network based on the situation assessment results includes: Analyze the situation assessment results and extract the security situation level and eavesdropping risk probability from the situation assessment results; The security status level and the eavesdropping risk probability are matched with the triggering conditions in the preset policy rule base to determine the key lifecycle management parameters and encryption algorithm adaptation parameters; The key lifecycle management parameters and the encryption algorithm adaptation parameters are encapsulated into the control policy adjustment instruction and issued.

6. The encrypted communication management method based on quantum situation awareness according to claim 1, characterized in that, The adjustment of the key management strategy and data encryption strategy of the quantum communication network includes: According to the control strategy, the key lifecycle management parameters in the adjustment instruction are triggered to reconfigure the quantum key distribution protocol parameters, adjust the key distribution rate of the quantum key generation device, and modify the key update cycle and key length in the quantum key storage medium. According to the control strategy, the encryption algorithm adaptation parameters in the adjustment instruction are adjusted to match the target quantum encryption algorithm from the preset quantum encryption algorithm library, and the quantum encryption algorithm of the current communication link is switched to the target quantum encryption algorithm.

7. The encrypted communication management method based on quantum situation awareness according to claim 1, characterized in that, The process of performing encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy includes: Obtain the quantum key distributed by the adjusted key management strategy as the session encryption key, and obtain the target quantum encryption algorithm determined by the adjusted data encryption strategy; At the sending end, the original communication data is encrypted using the session encryption key and the target quantum encryption algorithm to generate an encrypted ciphertext data packet, which is then sent to the receiving end via the quantum channel. At the receiving end, the identity of the receiving end is verified. After the verification is successful, the receiving encrypted ciphertext data packet is decrypted using the decryption key corresponding to the session encryption key to restore the original communication data.

8. A quantum situational awareness-based encrypted communication management device, characterized in that, include: The acquisition module is used to acquire real-time operating status data of the quantum communication network; The first generation module is used to perform a security situation assessment of the quantum communication network based on the real-time operating status data and through a quantum situation awareness model, and generate a situation assessment result that reflects the current security risks of the quantum communication network. The second generation module is used to generate control strategy adjustment instructions for the quantum communication network based on the situation assessment results. The execution module is configured to, in response to the control strategy adjustment instruction, adjust the key management strategy and data encryption strategy of the quantum communication network, and perform encrypted transmission of communication data based on the adjusted key management strategy and data encryption strategy.

9. An electronic device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the quantum situation awareness-based encrypted communication management method as described in any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the quantum situation awareness-based encrypted communication management method as described in any one of claims 1 to 7.

Images