A star flash short-distance communication security protection system fusing quantum key distribution

Abstract

The application belongs to the technical field of communication security, and particularly relates to a star flash short-distance communication security protection system combined with quantum key distribution, which further comprises: a feature extraction module, which is used for collecting channel state information of a star flash wireless channel as an auxiliary entropy source before a quantum key distribution link is established, and extracting phase features corresponding to a multipath effect of the wireless channel; and a semantic analysis module, which is used for analyzing semantic features of upper-layer services of a star flash terminal, constructing a key demand heat map, and pre-modulating original quantum keys by using the phase features; meanwhile, the pre-modulation mode does not change quantum state transmission characteristics, can significantly improve key complexity and unpredictability on the premise of not increasing quantum error rate, solves technical pain points of single entropy source dimension, easy-to-decode keys and insufficient security redundancy of a traditional QKD, and realizes double enhancement of a star flash short-distance communication physical layer security level.

Description

Technical Field

[0001] This invention belongs to the field of communication security technology, specifically a star-flash short-range communication security protection system that integrates quantum key distribution. Background Technology

[0002] SparkLink, a new generation of short-range wireless communication technology independently developed in my country, boasts advantages such as low latency, high reliability, low power consumption, and massive connectivity. It is widely used in short-range, high-frequency communication scenarios such as industrial control, automotive terminals, smart homes, and IoT low-power (SLE) terminals, serving as a core short-range communication support technology for the Internet of Things (IoT) environment. Among these, SparkLink SLE low-power terminals emphasize lightweight design and low power consumption, making them suitable for a large number of battery-powered devices with long standby times and limited computing resources. They are particularly widely used in IoT sensing and edge terminal access scenarios.

[0003] As the industry scales up the deployment of satellite communication, the demand for secure transmission of various business data, real-time control signaling, and terminal privacy information continues to rise. Traditional satellite communication relies on classic symmetric encryption algorithms such as AES and SM4, which have inherent security weaknesses and struggle to cope with increasingly complex eavesdropping, tampering, and replay attacks. While classic encryption algorithms rely on mathematical computational complexity for security, with upgrades in computing power and iterations in quantum computing technology, the security barriers of traditional encryption systems continue to weaken, failing to meet the encryption requirements of high-security scenarios such as industrial control and short-range vehicle-to-vehicle communication.

[0004] Quantum key distribution (QKD), relying on the physical security characteristics of quantum states—their non-cloning and uncertainty principles—can achieve theoretically unconditionally secure key generation and distribution, becoming a core technology solution for high-level security protection in wireless communication. Currently, QKD technology is gradually being integrated with wireless communication to address the security deficiencies of traditional encryption mechanisms. However, existing QKD-SLE (Short Range Interconnection) integration schemes still have many compatibility issues and cannot match the low power consumption, low latency, high dynamics, and fast switching characteristics of SLE terminals.

[0005] In existing integrated solutions, the QKD key entropy source relies solely on random quantum state generation. This entropy source has a single dimension and limited key randomness. Furthermore, it does not incorporate the dynamic characteristics of the StarSpark wireless channel. Eavesdroppers can intercept quantum states and break fixed key generation rules to decipher the key, resulting in insufficient system security redundancy. At the same time, the traditional QKD key generation, negotiation, and update mechanisms are rigid, using a uniform key length and update frequency, which cannot adapt to the differentiated service requirements of StarSpark terminals. Real-time control signaling has extremely high requirements for latency and security, and conventional periodic key encryption is susceptible to replay attacks. On the other hand, high-frequency key updates for large-capacity payloads and low-priority background services would cause serious waste of computing power and power consumption, making it unsuitable for the stringent power consumption budget constraints of SLE terminals.

[0006] Furthermore, traditional QKD key synchronization relies on independent key negotiation signaling interactions, requiring the completion of base reconciliation processes such as basis vector comparison, key negotiation, and parameter verification via public channels. This results in millisecond-level synchronization latency, which cannot match the ultra-low latency requirements of StarSpeed ​​communication (microseconds). The additional signaling interactions also increase terminal power consumption and channel resource overhead. Simultaneously, StarSpeed ​​terminals frequently experience cell handover scenarios. Existing QKD solutions lack a dedicated key migration mechanism, leading to key synchronization lag and significant encryption context reconstruction delays during cell handover. This easily results in handover disconnections, packet loss, and decryption failures, making seamless terminal handover impossible.

[0007] In summary, current StarSpark short-range communication security solutions suffer from several industry pain points, including low security redundancy, poor service adaptability, high power consumption and latency overhead, and insufficient handover security connectivity. These issues severely restrict the large-scale deployment of quantum encryption technology in StarSpark low-power terminal scenarios. There is an urgent need for a quantum key security protection system that adapts to the StarSpark SLE terminal architecture and balances high physical layer security, low latency, low power consumption, and dynamic adaptability. Therefore, this paper proposes a StarSpark short-range communication security protection system that integrates quantum key distribution to address these problems. Summary of the Invention

[0008] To overcome the shortcomings of existing technologies and solve at least one of the technical problems mentioned in the background art, this invention proposes a star-flash short-range communication security protection system that integrates quantum key distribution.

[0009] The technical solution adopted by this invention to solve its technical problem is: a star-flash short-range communication security protection system integrating quantum key distribution, comprising a star-flash terminal and an access point, and further comprising: The feature extraction module is used to collect the channel state information of the star flash wireless channel as an auxiliary entropy source before the establishment of the quantum key distribution link, extract the phase features corresponding to the multipath effect of the wireless channel, and use the phase features to premodulate the original quantum key. The semantic parsing module is used to parse the semantic features of the upper-layer services of the StarSpark terminal and construct a key demand heat map. Based on the key demand heat map, the quantum key extraction length and key update frequency are adaptively adjusted. One-time pad encryption is used for real-time control signaling of the communication link, and periodic key stream encryption is used for regular service payload data to match the power consumption budget constraints of the StarSpark terminal. The implicit frame synchronization unit is used to receive the broadcast time-frequency synchronization signal sent by the access point, and complete the quantum key frame structure mapping and matching based on the time-frequency synchronization signal. The implicit synchronization eliminates the need for independent key negotiation signaling interaction on the terminal side. The key migration module is used to monitor the cell handover behavior of the StarScan terminal. When the terminal initiates cell handover, it links the source access point and the target access point to perform quantum key entanglement exchange or key pre-distribution. After the physical link handover is completed, it activates the encryption context corresponding to the new link.

[0010] Preferably, the feature extraction module includes a channel acquisition subunit, a phase feature calculation subunit, and a key premodulation subunit; The phase feature calculation subunit is used to perform noise reduction and filtering preprocessing on the auxiliary entropy source dataset, remove invalid information such as channel noise and interference clutter, and extract dynamic phase offset and phase fluctuation features generated by multipath transmission.

[0011] Preferably, the key premodulation subunit establishes a one-to-one mapping relationship between dynamic phase offset, phase fluctuation characteristics and the original bit sequence of the quantum key; it performs bit error correction and redundancy removal on the premodulated original quantum key in combination with the coherence time threshold of the StarSpark communication channel, and selects effective key bits with high entropy values; and it adaptively adjusts the premodulation computation complexity according to the real-time power consumption load of the StarSpark terminal: reducing the number of key premodulation iterations when the terminal is running high-power services, and improving the key premodulation accuracy and bit utilization when the terminal is in low-power standby mode.

[0012] Preferably, the semantic parsing module includes a business semantic recognition subunit, a heatmap construction subunit, and a key adaptive scheduling subunit; The business semantic recognition subunit captures the service transmission type, transmission priority, latency requirements and encryption level of the StarFlash terminal, distinguishes three types of business semantics: real-time control signaling, low-latency interaction and high-capacity payload, and generates a multi-dimensional business semantic feature vector. The heatmap construction subunit weights and quantizes the business semantic feature vector, using data sensitivity, transmission real-time performance, and business security level as weights to construct a key demand heatmap that can be dynamically updated in the spatiotemporal dimension. The key adaptive scheduling subunit adjusts the quantum key parameters in stages according to the key demand heatmap.

[0013] Preferably, the key adaptive scheduling subunit is configured with a key demand quantization algorithm, and combines the key demand heatmap to complete the adaptive control of quantum key extraction length and update frequency; Define the set of business semantic feature weights ,in For data sensitivity weight, To transmit real-time weights, The weights are determined by the business security level and satisfy the weight normalization constraint. + + =1; Construct a quantitative formula for the key demand heat of a single time period: In the formula, Real-time business key demand popularity value for Sensitive metrics for real-time business data Quantify the transmission latency requirement. Quantify the business security level; Based on the popularity threshold, three levels of key scheduling are defined: high popularity range. Medium heat range Low heat range ; Corresponding to dynamically configured quantum key extraction length Key update cycle ; in This is the minimum security key length for StarScan communication. For adjustable key length increments, This is the maximum key update cycle. To enable adjustable update cycles, dynamic matching of key resources with business needs is achieved.

[0014] Preferably, the key adaptive scheduling subunit is configured with a hierarchical encryption matching mechanism; For real-time control signaling, the one-time pad is applied, and the signaling key iteration formula is as follows: In the formula For the first Frame signaling encryption key, For the quantum key bit mapping function, For the real-time phase characteristic parameters of the star flash channel, each frame of control signaling independently calls a brand-new quantum key bit stream to complete encryption; For routine business payload data, a periodic key stream encryption mechanism is adopted, and the valid duration of the key stream meets the following requirements: In the formula The encryption redundancy factor for the service payload is dynamically determined based on the terminal power consumption budget. Simultaneously construct a power-constrained key scheduling model: ,in The power consumption for key generation and encryption operations. For the power consumption of StarFlash service transmission, This is the real-time maximum power consumption threshold for the terminal, maximizing the key encryption security level under power consumption constraints.

[0015] Preferably, the implicit frame synchronization unit is configured with a quantum key frame implicit mapping algorithm to achieve signaling-free key synchronization; Extract the frame header timing features and carrier phase features of the access point broadcast time-frequency synchronization signal to construct a time-frequency synchronization feature vector. ,in This is the frame timing offset. This is the carrier frequency offset. This refers to the phase offset of the synchronization signal. Establish the mapping relationship between time-frequency characteristics and quantum key frame structure: In the formula An implicit mapping matching function binds the superframe and subframe timing structure of Starflash communication to the quantum key distribution frame structure one by one; The terminal directly parses the broadcast time-frequency signal to complete key frame alignment and key stream synchronization without the need for additional key negotiation signaling, and corrects the mapping offset error based on the channel coherence time.

[0016] Preferably, the key migration module includes a switching state awareness subunit, an entanglement exchange execution subunit, and a context activation subunit; The switching status sensing subunit listens to the terminal measurement report and access point switching command, obtains the target access point identifier and channel quality information, and outputs a key migration pre-trigger signal before link switching. After receiving the pre-trigger signal, the entanglement exchange execution subunit completes quantum entanglement exchange between the source access point and the target access point through a trusted relay or direct link, or the key management center pre-distributes key seeds to the target access point. After the terminal completes random access to the target access point, the context activation subunit retrieves the migrated key based on the time-frequency characteristics of the new link, reconstructs the encryption context, and quickly switches the decryption working state.

[0017] Preferably, it also includes a physical layer security enhancement module; The physical layer security enhancement module uses the channel phase features output by the feature extraction module as a dynamic mask to chaotically scramble the quantum key bits and generate a physical layer security enhancement sequence. This sequence is orthogonally superimposed on the amplitude and phase components of the star-flash pilot symbols or data symbols. The receiver strips the enhancement sequence through channel estimation and restores the original quantum key by combining it with an error correction algorithm, thereby realizing the spectrum multiplexing transmission of the quantum key and star-flash service data.

[0018] Preferably, it also includes a safety performance assessment and feedback module; The security performance evaluation and feedback module statistically analyzes the quantum key error rate, key generation rate, and key heat matching degree, and calculates the comprehensive security performance index. When the index is lower than the threshold, feedback adjustment is triggered: if the channel deteriorates, the accuracy of entropy source acquisition and phase calculation is adjusted, and the key update frequency is reduced; if the service is mismatched, the semantic weight parameters are corrected. At the same time, historical data on the channel, service, and performance are stored in the knowledge base.

[0019] The beneficial effects of this invention are: This invention provides a secure protection system for short-range star-flash communication integrating quantum key distribution (QKD). Before establishing the QKD link, a feature extraction module collects real-time CSI channel state information of the star-flash SLE link. After filtering, noise reduction, and PCA static component removal, dynamic multipath phase features with true randomness are extracted. These features are used as an auxiliary entropy source to perform XOR mapping and phase premodulation on the original quantum key generated by the BB84 protocol. Simultaneously, a channel coherence time threshold is introduced to complete invalid bit removal and error correction screening. Compared to traditional single entropy source schemes that rely solely on quantum states to generate keys, this scheme deeply embeds the physical random characteristics of the star-flash time-varying wireless channel into the quantum key bit sequence. Even if an eavesdropper intercepts the complete quantum state through the channel, they cannot recover the valid plaintext key because they cannot obtain the real-time dynamic phase information of the terminal. Furthermore, this premodulation method does not change the quantum state transmission characteristics and can significantly improve key complexity and unpredictability without increasing the quantum error rate. This solves the technical pain points of traditional QKD entropy source dimensionality, easy key decryption, and insufficient security redundancy, achieving a dual enhancement of the physical layer security level of star-flash short-range communication.

[0020] This invention provides a secure protection system for short-range star-flash communication that integrates quantum key distribution. It captures multi-dimensional semantic features such as star-flash service type, priority, latency, and security level through a semantic parsing module, constructs a weighted quantized key demand heatmap, and adaptively and dynamically adjusts the quantum key extraction length and key update frequency based on high, medium, and low heatmap intervals. Furthermore, it differentiates between control signaling and service payloads by implementing different encryption mechanisms: real-time SLB control signaling employs a one-time pad, frame-by-frame key refresh mechanism to completely eliminate replay and eavesdropping attacks; conventional SLE service payloads use periodic keystream encryption with dynamic redundancy coefficients, balancing security and resource overhead. Simultaneously, considering the terminal PMU power consumption status, it reduces pre-modulation complexity and simplifies key overhead under high load, while improving key entropy and encryption accuracy under low load. Finally, it strictly limits the power consumption ratio of encryption operations through a system-wide power consumption constraint model. It effectively solves problems such as poor adaptability of traditional fixed key parameters, insufficient security of high-priority services, power consumption waste of low-priority services, and excessive power consumption budget of SLE terminals. It achieves the optimal balance between security strength, service performance, and terminal power consumption, and greatly improves the encryption adaptability and terminal battery life in multi-service concurrent scenarios of StarFlash.

[0021] This invention provides a StarSpark short-range communication security protection system integrating quantum key distribution (QKD). It constructs a key frame mapping relationship by reusing the time-frequency and phase characteristics of the native broadcast synchronization frames of StarSpark APs through an implicit frame synchronization unit. This eliminates the signaling process of traditional QKD basis vector negotiation and public interaction, compressing the key synchronization latency from milliseconds to microseconds. This solves the problems of redundant signaling, high latency, and high channel overhead in traditional key synchronization. Simultaneously, a key migration module pre-triggers entanglement exchange or key seed pre-distribution between the source and target APs before terminal handover. After the terminal completes random access, it quickly reconstructs the new link encryption context, controlling the handover interruption time to within the StarSpark standard of 2ms, achieving a first-packet decryption success rate of 99.9%. This completely solves the defects of delayed key updates, encryption context gaps, and service packet loss interruptions in StarSpark's highly dynamic cell handover scenarios. It achieves end-to-end signaling-free synchronization, extremely low-latency key alignment, and seamless handover security, greatly improving the encryption reliability and service continuity of StarSpark mobile terminal communication. Attached Figure Description

[0022] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, illustrate exemplary embodiments of the invention and are used to explain the invention, but do not constitute an undue limitation of the invention.

[0023] In the attached diagram: Figure 1 This is a schematic diagram of the system flow of the present invention; Figure 2 This is a schematic diagram of the feature extraction module in this invention; Figure 3 This is a schematic diagram of the key premodulation subunit in this invention; Figure 4 This is a schematic diagram of the semantic parsing module in this invention. Detailed Implementation

[0024] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0025] Specific implementation examples are given below.

[0026] Please see Figures 1-4 This invention provides a secure protection system for short-range star-flash communication integrating quantum key distribution, including a star-flash terminal and an access point, and further comprising: The feature extraction module is used to collect the channel state information of the star flash wireless channel as an auxiliary entropy source before the establishment of the quantum key distribution link, extract the phase features corresponding to the multipath effect of the wireless channel, and use the phase features to premodulate the original quantum key. The semantic parsing module is used to parse the semantic features of the upper-layer services of the StarSpark terminal and construct a key demand heat map. Based on the key demand heat map, the quantum key extraction length and key update frequency are adaptively adjusted. One-time pad encryption is used for real-time control signaling of the communication link, and periodic key stream encryption is used for regular service payload data to match the power consumption budget constraints of the StarSpark terminal. The implicit frame synchronization unit is used to receive the broadcast time-frequency synchronization signal sent by the access point, and complete the quantum key frame structure mapping and matching based on the time-frequency synchronization signal. The implicit synchronization eliminates the need for independent key negotiation signaling interaction on the terminal side. The key migration module is used to monitor the cell handover behavior of the StarSpark terminal. When the terminal initiates cell handover, it links the source access point and the target access point to perform quantum key entanglement exchange or key pre-distribution. After the physical link handover is completed, it activates the encryption context corresponding to the new link. The physical layer security enhancement module is used to generate a dynamic mask using the channel phase features output by the feature extraction module and to scramble the quantum key bits in a chaotic manner. The generated enhancement sequence is orthogonally superimposed on the StarSpark pilot symbols or data symbols to achieve spectrum reuse transmission. The security performance evaluation and feedback module is used to statistically analyze the quantum error rate, key generation rate, and key heat matching degree, calculate the comprehensive security performance index, and adjust system parameters and update the knowledge base based on the index feedback. This system is deployed between the StarSpark SLE (low power) terminal and the access point (AP). At the hardware level, a 1550nm / 850nm low light transceiver unit is added to the StarSpark RF front end, and the StarSpark antenna is reused or a common aperture design is adopted. At the software level, a secure middleware is built on top of the MAC layer. When the system starts up, the feature extraction module is initialized first: before sending the QKD probe pulse, the terminal sends a training sequence through the star flash SLE link to collect the CSI matrix of the current channel. Extracting multipath phase As an auxiliary entropy source, subsequently, using Raw qubit strings generated by the BB84 protocol Perform premodulation and generate a premodulation key. This process embeds classical channel features into the quantum key, so that even if an eavesdropper intercepts the quantum state, they will not be able to recover the valid key without real-time classical channel phase information, thereby improving the security redundancy of the system without increasing the quantum error rate. During the service transmission phase, the semantic parsing module monitors the StarShine MAC layer service identifier (ServiceID) in real time. When it detects SLB (Service Level Block) real-time control signaling, it immediately triggers one-time encryption. When it detects SLE data payload, it dynamically calculates the key demand heat value based on the current buffer data volume and battery power, and extracts the key stream as needed. The implicit frame synchronization unit continuously locks onto the broadcast synchronization frame (SyncFrame) sent by the StarShine AP, and parses the superframe boundary timing from it. and carrier phase Directly map the start bit of the QKD key frame to This completely eliminates the public discussion and signaling interaction during the BaseReconciliation phase of traditional QKD, reducing key synchronization latency from milliseconds to microseconds. When a terminal undergoes cell handover, the key migration module, upon receiving the HandoverCommand from the AP, performs entanglement exchange or key seed pre-distribution through the Xn interface between the source AP and the target AP. This ensures that the encryption context of the new link is ready when the terminal connects to the new AP, achieving zero-perception secure handover.

[0027] In some embodiments, such as Figures 1-4 As shown, the feature extraction module includes a channel acquisition subunit, a phase feature calculation subunit, and a key premodulation subunit; The channel acquisition subunit acquires CSI data of the star flash SLE link at a 1ms period to form the raw dataset. The phase feature calculation subunit is used to perform noise reduction and filtering preprocessing on the auxiliary entropy source dataset, removing invalid information such as channel noise and interference clutter, and extracting dynamic phase offset and phase fluctuation features generated by multipath transmission. Specifically, firstly, bandpass filtering is performed on Draw, with the cutoff frequency set to 0.8 times the star flash coherence bandwidth Bc to filter out out-of-band noise. Then, principal component analysis (PCA) algorithm is used to remove static path components, retaining only dynamic multipath components. For the first... An effective multipath, its instantaneous phase Solve using the following formula: ; in, The length of the sliding window (taken as 3 to 5 times the period of the star flash symbol). For the center frequency, The sampling interval is given. This formula smooths the transient phase jump through short-time coherent integration, and the final output is an effective phase feature vector. It only includes dynamic phase shifts and fluctuations with true randomness caused by the motion of environmental scatterers, which are used as inputs to the next level of high-quality auxiliary entropy source.

[0028] In some embodiments, such as Figures 1-4 As shown, the key premodulation subunit establishes a one-to-one mapping relationship between dynamic phase shift, phase fluctuation characteristics and the original quantum key bit sequence; it performs bit error correction and redundancy removal on the premodulated original quantum key in combination with the coherence time threshold of the Star Flash communication channel, and selects high-entropy effective key bits; and it adaptively adjusts the premodulation computation complexity according to the real-time power consumption load of the Star Flash terminal. Specifically, the key premodulation subunit establishes a phase-bit mapping table. Let the original quantum key bit sequence be... The phase eigenvector is The premodulation operation is defined as a composite operation of XOR superposition and position permutation: ; in To determine the quantization order and prevent mapping errors caused by excessively deep channel fading, a coherence time threshold Tc is introduced for bit error correction and redundancy removal: This is only implemented when the phase difference between two consecutive samples... Only when the condition is met is the phase feature considered valid and allowed to participate in modulation; otherwise, it is marked as an invalid bit and removed in post-processing. The power consumption adaptive mechanism is used to adjust the computational complexity of premodulation: read the real-time power consumption status register of the StarSpark Terminal PMU (Power Management Unit).

[0029] When the terminal is running high-power services (such as video transmission, CPU usage >70%): the quantization order will be adjusted. Reduced to 2 bits, with the number of iterations set to 1, prioritizes business throughput and reduces the complexity of key premodulation operations; In low-power standby mode (CPU usage <20%): Upgraded to 8 bits, enabled Turbo code for auxiliary verification, improving key pre-modulation accuracy and bit utilization; This mechanism is implemented through the DVFS (Dynamic Voltage Frequency Scaling) interface, ensuring that the power consumption of key preprocessing is always less than 5% of the terminal's total power budget.

[0030] In some embodiments, such as Figures 1-4 As shown, the semantic parsing module includes a business semantic recognition subunit, a heatmap construction subunit, and a key adaptive scheduling subunit.

[0031] The business semantic recognition subunit captures the service transmission type, transmission priority, latency requirements, and encryption level of the StarScan terminal, distinguishes between three types of business semantics: real-time control signaling, low-latency interaction, and high-capacity payload, and generates a multi-dimensional business semantic feature vector: , The heatmap construction subunit performs weighted quantization on the business semantic feature vector, using data sensitivity, transmission real-time performance, and business security level as weights to construct a dynamically updatable key demand heatmap in the spatiotemporal dimension. Specifically, a weighted quantization model is adopted, defining a normalized weight set: The default configuration is =0.4 (sensitivity), =0.3 (real-time performance), =0.3 (security level), for each business flow, calculate its instantaneous key demand heat: Note: Real-time quantization uses an inverse proportional function; the lower the latency requirement (the smaller the value), the greater the contribution to heat generation. The system maintains a [quantization value] in memory. A two-dimensional heatmap (N is the number of service flows, T is the time window) is updated every 10ms, forming a spatiotemporally traceable heatmap of key demand, intuitively reflecting which services are most eager for keys at the current moment. In some embodiments, such as Figures 1-4 As shown, the semantic parsing module includes a business semantic recognition subunit, a heatmap construction subunit, and a key adaptive scheduling subunit; The business semantic recognition subunit captures the service transmission type, transmission priority, latency requirements and encryption level of the StarFlash terminal, distinguishes three types of business semantics: real-time control signaling, low-latency interaction and high-capacity payload, and generates a multi-dimensional business semantic feature vector. The heatmap construction subunit weights and quantizes the business semantic feature vector, using data sensitivity, transmission real-time performance, and business security level as weights to construct a key demand heatmap that can be dynamically updated in the spatiotemporal dimension. The key adaptive scheduling subunit adjusts the quantum key parameters hierarchically according to the key demand heatmap, based on... The value is then subjected to the following piecewise linear adjustment: the key adaptive scheduling subunit is configured with a key demand quantization algorithm, and combined with the key demand heatmap to complete the adaptive adjustment of the quantum key extraction length and update frequency; The key scheduling levels are divided into three levels based on the heat value threshold: High heat range : Corresponds to real-time control signaling or high-definition video stream; Medium heat range : Corresponds to ordinary voice or interactive data; Low heat range : Corresponds to the backend heartbeat or log upload.

[0032] Corresponding to dynamically configured quantum key extraction length Key update cycle ; in This is the minimum security key length for StarScan communication (e.g., 64 bits). The key length is adjustable in increments (maximum value such as 128 bits). The maximum key update cycle (e.g., 500ms). To adjust the update cycle (maximum value 50ms), a high-frequency, long-key supply is forced in high-intensity intervals; linear interpolation is used to balance security and resources in medium-intensity intervals; and key consumption is minimized in low-intensity intervals. The scheduler makes a decision every 10ms and updates the key consumption accordingly. , The parameters are written into the configuration register of the QKD post-processing FPGA to achieve dynamic matching of key resources and business requirements.

[0033] In some embodiments, such as Figures 1-4 As shown, the key adaptive scheduling subunit is also configured with a hierarchical encryption matching mechanism.

[0034] For real-time control signaling, a one-time pad is applied, and the signaling key iteration formula is as follows: In the formula For the first Frame signaling encryption key, For the quantum key bit mapping function (specifically: , For the real-time phase characteristic parameters of the starburst channel, each frame of control signaling independently calls a brand-new quantum key bit stream for encryption, which is then destroyed after use. For routine business payload data, a periodic key stream encryption mechanism is adopted, and the valid duration of the key stream meets the following requirements: In the formula The encryption redundancy factor for the service payload is dynamically determined based on the terminal power consumption budget: video stream =3 (small window for anti-replay attack), file transfer =10 (tolerates longer key reuse); Simultaneously construct a power-constrained key scheduling model: ; in Power consumption for key generation and encryption operations ( =α·Len / Tupdate+β), For the power consumption of StarFlash service transmission, The real-time maximum power consumption threshold for the terminal, when predicted When the timeout is about to expire, the scheduler prioritizes reducing the load of low-frequency services. Value and They could even temporarily revert to classic AES encryption to maximize the security level of key encryption under power consumption constraints.

[0035] In some embodiments, such as Figures 1-4 As shown, the implicit frame synchronization unit is configured with a quantum key frame implicit mapping algorithm to achieve signaling-free key synchronization; Extract the frame header timing features and carrier phase features of the access point broadcast time-frequency synchronization signal to construct a time-frequency synchronization feature vector. : : The precise timestamp of the start boundary of SyncFrame (accuracy 1μs); Frequency offset estimate (used to compensate for Doppler). : The absolute phase of the pilot subcarrier in the SyncFrame; Establish the mapping relationship between time-frequency characteristics and quantum key frame structure: : The specific mapping formula is as follows: In the formula For implicit mapping matching functions For a predefined fixed offset number of signs, This is a carrier phase-based fine-tuning compensation term. The algorithm binds the superframe and subframe timing structures of the Starflash communication to the quantum key distribution frame structure one by one. The end-user directly parses the broadcast time-frequency signal to complete key frame alignment and key stream synchronization, without requiring additional key negotiation signaling. It also corrects the mapping offset error based on the channel coherence time: when the channel coherence time... When the synchronization period is less than the synchronization period, the phase tracking loop correction is automatically activated. This ensures that the key frame alignment error is less than one symbol period during long-term operation.

[0036] In some embodiments, such as Figures 1-4 As shown, the key migration module includes a switching state awareness subunit, an entanglement exchange execution subunit, and a context activation subunit.

[0037] The handover state awareness subunit monitors the terminal measurement report (RLC layer Measurement Report) and access point handover instructions to obtain the target access point identifier and channel quality information. When the target APRSRP is 3dB higher than the source AP for 50ms, a key migration pre-trigger signal Sig_pre is output before the link handover.

[0038] After receiving the pre-trigger signal, the entanglement switching execution subunit completes quantum entanglement switching between the source access point and the target access point via a trusted relay or direct link, or the key management center pre-distributes a key seed to the target access point. Specifically, if there is a direct fiber connection between the source and target APs, Bell state measurement is performed to complete the entanglement switching; if it is only a wireless mesh backhaul, the KMC injects the key seed into the target AP in advance. And synchronize the key index through a secure tunnel. The entire process is completed before the terminal initiates RandomAccess; After the terminal completes random access to the target access point, the context activation subunit retrieves the migrated key based on the time-frequency characteristics of the new link, reconstructs the encryption context, and quickly switches the decryption working state. Specifically, it extracts a new Ω′ from the SyncFrame of the new link and combines it with the pre-distributed... and Local reconstruction and decryption of the state machine: The first packet decryption success rate reached 99.9%, and the switching interruption time was controlled within 2ms as specified by the StarFlash standard, so that the upper-layer services were completely unaware of it.

[0039] In some embodiments, such as Figures 1-4 As shown, it also includes a physical layer security enhancement module.

[0040] The physical layer security enhancement module utilizes the channel phase features output by the feature extraction module. As a dynamic mask, the quantum key bits are chaotically scrambled to generate the physical layer security enhancement sequence Senh. The chaotic mapping formula is: : in For the chaotic parameters, As a dynamic mask, the quantum key bits are chaotically scrambled to generate an enhanced sequence. At the launch end, Orthogonally superimposed on the phase component of the star flash pilot symbol: in This is a power scaling factor (ranging from 0.05 to 0.1) to ensure it doesn't affect the accuracy of normal channel estimation. The receiver first obtains the power through standard channel estimation. Subtract the known Separate The original key is restored after dechallenge. This scheme achieves transparent multiplexing of key enhancement information and service data on the same spectrum resource, with a spectrum efficiency loss of <2%, while preventing unauthorized receivers from accessing the data due to lack of access. However, it is impossible to remove the enhancement sequence and obtain dual physical layer security.

[0041] In some embodiments, such as Figures 1-4 As shown, it also includes a safety performance evaluation and feedback module.

[0042] The security performance evaluation and feedback module calculates three core indicators in a 1-second cycle: quantum key error rate (QBER), key generation rate (SKR), and key match (Match), and then calculates the comprehensive security performance index. : (Key popularity matching degree) Calculate the comprehensive safety performance index Feedback adjustment mechanism: when When the value is less than 0.7 and the main cause is an increase in QBER, it is determined to be channel degradation. The phase resolution filter order is automatically increased, and at the same time... Increase by 20% to reduce the pressure of key generation; when If the value is less than 0.7 and the main reason is a low Match value, it is determined to be a business mismatch. The weight self-learning algorithm is then activated to refit the optimal value based on historical data from the past hour. ; Knowledge base construction: Each adjustment event is packaged into a triple (Context, Action, Effect) and stored in an embedded SQLite knowledge base, for example... When encountering similar contexts in the future, the system can directly look up the table and apply the best historical action, thus enabling lifelong learning and continuous optimization of system parameters.

[0043] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely illustrative of the principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the claimed invention.

Claims

1. A secure protection system for short-range star-flash communication integrating quantum key distribution, comprising a star-flash terminal and an access point, characterized in that, Also includes: The feature extraction module is used to collect the channel state information of the star flash wireless channel as an auxiliary entropy source before the establishment of the quantum key distribution link, extract the phase features corresponding to the multipath effect of the wireless channel, and use the phase features to premodulate the original quantum key. The semantic parsing module is used to parse the semantic features of the upper-layer services of the StarSpark terminal and construct a key demand heat map. Based on the key demand heat map, the quantum key extraction length and key update frequency are adaptively adjusted. One-time pad encryption is used for real-time control signaling of the communication link, and periodic key stream encryption is used for regular service payload data to match the power consumption budget constraints of the StarSpark terminal. The implicit frame synchronization unit is used to receive the broadcast time-frequency synchronization signal sent by the access point, and complete the quantum key frame structure mapping and matching based on the time-frequency synchronization signal. The implicit synchronization eliminates the need for independent key negotiation signaling interaction on the terminal side. The key migration module is used to monitor the cell handover behavior of the StarScan terminal. When the terminal initiates cell handover, it links the source access point and the target access point to perform quantum key entanglement exchange or key pre-distribution. After the physical link handover is completed, it activates the encryption context corresponding to the new link.

2. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: The feature extraction module includes a channel acquisition subunit, a phase feature calculation subunit, and a key premodulation subunit; The phase feature calculation subunit is used to perform noise reduction and filtering preprocessing on the auxiliary entropy source dataset, remove invalid information such as channel noise and interference clutter, and extract dynamic phase offset and phase fluctuation features generated by multipath transmission.

3. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: The key premodulation subunit establishes a one-to-one mapping relationship between dynamic phase offset, phase fluctuation characteristics and the original bit sequence of the quantum key; it performs bit error correction and redundancy removal on the premodulated original quantum key in combination with the coherence time threshold of the StarSpark communication channel, and selects effective key bits with high entropy values; and it adaptively adjusts the premodulation computation complexity according to the real-time power consumption load of the StarSpark terminal: it reduces the number of key premodulation iterations when the terminal is running high-power services, and improves the key premodulation accuracy and bit utilization when the terminal is in low-power standby mode.

4. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: The semantic parsing module includes a business semantic recognition subunit, a heatmap construction subunit, and a key adaptive scheduling subunit. The business semantic recognition subunit captures the service transmission type, transmission priority, latency requirements and encryption level of the StarFlash terminal, distinguishes three types of business semantics: real-time control signaling, low-latency interaction and high-capacity payload, and generates a multi-dimensional business semantic feature vector. The heatmap construction subunit weights and quantizes the business semantic feature vector, using data sensitivity, transmission real-time performance, and business security level as weights to construct a key demand heatmap that can be dynamically updated in the spatiotemporal dimension. The key adaptive scheduling subunit adjusts the quantum key parameters in stages according to the key demand heatmap.

5. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 4, characterized in that: The key adaptive scheduling subunit is configured with a key demand quantization algorithm, which, combined with the key demand heatmap, enables adaptive control of the quantum key extraction length and update frequency. Define the set of business semantic feature weights ,in For data sensitivity weight, To transmit real-time weights, The weights are determined by the business security level and satisfy the weight normalization constraint. + + =1; Construct a quantitative formula for the key demand heat of a single time period: In the formula, Real-time business key demand popularity value for Sensitive metrics for real-time business data Quantify the transmission latency requirement. Quantify the business security level; Based on the popularity threshold, three levels of key scheduling are defined: high popularity range. Medium heat range Low heat range ; Corresponding to dynamically configured quantum key extraction length Key update cycle ; in This is the minimum security key length for StarScan communication. For adjustable key length increments, This is the maximum key update cycle. To enable adjustable update cycles, dynamic matching of key resources with business needs is achieved.

6. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: The key adaptive scheduling subunit is configured with a hierarchical encryption matching mechanism; For real-time control signaling, the one-time pad is applied, and the signaling key iteration formula is as follows: In the formula For the first Frame signaling encryption key, For the quantum key bit mapping function, For the real-time phase characteristic parameters of the star flash channel, each frame of control signaling independently calls a brand-new quantum key bit stream to complete encryption; For routine business payload data, a periodic key stream encryption mechanism is adopted, and the valid duration of the key stream meets the following requirements: In the formula The encryption redundancy factor for the service payload is dynamically determined based on the terminal power consumption budget. Simultaneously construct a power-constrained key scheduling model: ,in The power consumption for key generation and encryption operations. For the power consumption of StarFlash service transmission, This is the real-time maximum power consumption threshold for the terminal, maximizing the key encryption security level under power consumption constraints.

7. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: The implicit frame synchronization unit is configured with a quantum key frame implicit mapping algorithm to achieve signalless key synchronization; Extract the frame header timing features and carrier phase features of the access point broadcast time-frequency synchronization signal to construct a time-frequency synchronization feature vector. ,in This is the frame timing offset. This is the carrier frequency offset. This refers to the phase offset of the synchronization signal. Establish the mapping relationship between time-frequency characteristics and quantum key frame structure: In the formula An implicit mapping matching function binds the superframe and subframe timing structure of Starflash communication to the quantum key distribution frame structure one by one; The terminal directly parses the broadcast time-frequency signal to complete key frame alignment and key stream synchronization without the need for additional key negotiation signaling, and corrects the mapping offset error based on the channel coherence time.

8. The star-flash short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: The key migration module includes a switching state awareness subunit, an entanglement swap execution subunit, and a context activation subunit; The switching status sensing subunit listens to the terminal measurement report and access point switching command, obtains the target access point identifier and channel quality information, and outputs a key migration pre-trigger signal before link switching. After receiving the pre-trigger signal, the entanglement exchange execution subunit completes quantum entanglement exchange between the source access point and the target access point through a trusted relay or direct link, or the key management center pre-distributes key seeds to the target access point. After the terminal completes random access to the target access point, the context activation subunit retrieves the migrated key based on the time-frequency characteristics of the new link, reconstructs the encryption context, and quickly switches the decryption working state.

9. A short-range communication security protection system integrating quantum key distribution as described in claim 1, characterized in that: It also includes a physical layer security enhancement module; The physical layer security enhancement module uses the channel phase features output by the feature extraction module as a dynamic mask to chaotically scramble the quantum key bits and generate a physical layer security enhancement sequence. This sequence is orthogonally superimposed on the amplitude and phase components of the star-flash pilot symbols or data symbols. The receiver strips the enhancement sequence through channel estimation and restores the original quantum key by combining it with an error correction algorithm, thereby realizing the spectrum multiplexing transmission of the quantum key and star-flash service data.

10. A secure protection system for short-range star-flash communication integrating quantum key distribution as described in claim 1, characterized in that: It also includes a safety performance assessment and feedback module; The security performance evaluation and feedback module statistically analyzes the quantum key error rate, key generation rate, and key heat matching degree, and calculates the comprehensive security performance index. When the index is lower than the threshold, feedback adjustment is triggered: if the channel deteriorates, the accuracy of entropy source acquisition and phase calculation is adjusted, and the key update frequency is reduced; if the service is mismatched, the semantic weight parameters are corrected. At the same time, historical data on the channel, service, and performance are stored in the knowledge base.

Images