Dynamic quantum encryption communication system

Abstract

The utility model discloses a dynamic quantum encryption communication system, which comprises a communication terminal, a quantum safety device and a quantum key management terminal, the quantum security device is connected with the communication terminal through a communication interface, and the communication terminal is in communication connection with the quantum key management terminal through a cellular network. The utility model discloses a dynamic quantum encryption communication system, which adopts a quantum safety device to realize the functions of quantum key storage and data encryption and decryption, and when the quantum key stored in the quantum safety device is used up (namely K is greater than T, K is the quantity of the stored quantum key, and T is a set threshold value), the quantum key is encrypted and decrypted. A user can use the communication terminal to send a quantum key filling request to the quantum key management terminal through a network, online filling of the quantum key is achieved, and convenience and rapidness are achieved.

Description

TECHNICAL FIELD

[0001] The utility model relates to quantum secure communication equipment and quantum password cloud field, concretely relates to a dynamic quantum encryption communication system. BACKGROUND

[0002] Quantum secure communication is a new type of communication mode, and quantum key distribution (QKD) is the core, and the security is established on the basis of the basic principle of quantum mechanics, and absolute security guarantee cannot be eavesdropped and cracked.

[0003] In the existing quantum secure communication equipment, many modules are integrated in the communication parties, and complex key management, quantum key storage and other functions need to be realized, which leads to high cost of terminal equipment of the communication parties, and is not conducive to market promotion. At the same time, the communication parties need to know each other's secret network key in advance, which is very unfavorable to expand the user members of the secret communication, and the key of all terminal equipment needs to be updated every time a new member joins.

[0004] The current quantum secure communication equipment uses quantum key distribution network to prefill a large amount of quantum key for terminal equipment, but the number of pre-filled keys is limited, and the keys need to be filled by offline mode after being used up, which greatly reduces the convenience of the equipment and easily causes poor user experience, and the most disturbing is the lack of dynamic real-time update. UTILITY MODEL CONTENT

[0005] The utility model proposes a dynamic quantum encryption communication system in order to solve the problem that the existing quantum secure communication equipment needs to fill quantum key by offline mode.

[0006] In order to achieve the above purpose, the technical scheme adopted by the utility model is as follows:

[0007] A dynamic quantum encryption communication system, comprising a communication terminal, a quantum security device and a quantum key management terminal;

[0008] The quantum security device is connected with the communication terminal through a communication interface, and the communication terminal is connected with the quantum key management terminal through a cellular network.

[0009] In the above scheme, the quantum security device is used to realize the functions of quantum key storage and data encryption and decryption, when the quantum key stored in the quantum security device is about to be used up (i.e. K > T, K is the amount of stored quantum key, and T is the set threshold value), the user can send a quantum key filling request to the quantum key management terminal through the network by using the communication terminal, realize online filling of quantum key, and be convenient and fast.

[0010] Preferably, the quantum security device is a secure UKEY or a secure TF card.

[0011] Preferably, the quantum security device comprises a data encryption and decryption module and a quantum key storage module.

[0012] The quantum key storage module is connected with the data encryption and decryption module, and the data encryption and decryption module is connected with the communication terminal through a communication interface.

[0013] Preferably, the quantum security device further comprises an authentication module, and the authentication module is connected with the data encryption and decryption module.

[0014] Preferably, the quantum key management terminal comprises a quantum key distribution device and a server.

[0015] The communication terminal is connected with the server through a cellular network, and the server is connected with the quantum key distribution device.

[0016] Preferably, the quantum security device is connected with the communication terminal through a USB interface.

[0017] Preferably, the authentication module is connected with the data encryption and decryption module through a UART interface.

[0018] Preferably, the authentication module is a biometric recognition module or a password keyboard.

[0019] Preferably, the authentication module is a fingerprint recognition module.

[0020] Preferably, the quantum key storage module adopts an EMMC memory.

[0021] The utility model discloses beneficial technical effect:

[0022] The utility model discloses a dynamic quantum encryption communication system adopts quantum security device to realize quantum key storage and data encryption and decryption's function, when automatic monitoring quantum security device memory's quantum key use will be exhausted (that is K > T, K is stored quantum key amount, T is set threshold value), and user can utilize communication terminal through network to quantum key management terminal sends quantum key fills request, realizes quantum key's online filling, and it is convenient and fast. BRIEF DESCRIPTION OF DRAWINGS

[0023] Figure 1 It is module connection schematic drawing of the utility model;

[0024] Among them: 1, communication terminal;2, quantum security device;21, data encryption and decryption module;22, quantum key storage module;23, authentication module;3, quantum key management terminal;31, quantum key distribution device;32, server. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical scheme and advantages of the utility model more clearly, the utility model will be further described in detail below in combination with embodiments, but the scope of the utility model claimed is not limited to the following specific embodiments.

[0026] Embodiment 1

[0027] As Figure 1 shown, a dynamic quantum encryption communication system, comprising a communication terminal 1, a quantum security device 2 and a quantum key management terminal 3;

[0028] The quantum security device 2 is connected with the communication terminal 1 through a communication interface, and the communication terminal 1 is connected with the quantum key management terminal 3 through a cellular network.

[0029] In the specific implementation process, the quantum security device 2 is used to realize the functions of quantum key storage and data encryption and decryption, when the quantum key stored in the quantum security device 2 is about to be used up, the user can send a quantum key charging request to the quantum key management terminal 3 through the network by using the communication terminal 1, so as to realize online filling of the quantum key, which is convenient and fast.

[0030] Embodiment 2

[0031] A dynamic quantum encryption communication system, comprising a communication terminal 1, a quantum security device 2 and a quantum key management terminal 3;

[0032] The quantum security device 2 is connected with the communication terminal 1 through a communication interface, and the communication terminal 1 is connected with the quantum key management terminal 3 through a cellular network.

[0033] More specifically, the quantum security device 2 is a secure UKEY or a secure TF card.

[0034] More specifically, the quantum security device 2 comprises a data encryption and decryption module 21 and a quantum key storage module 22.

[0035] The quantum key storage module 22 is connected with the data encryption and decryption module 21, and the data encryption and decryption module 21 is connected with the communication terminal 1 through a communication interface.

[0036] In the specific implementation process, the quantum security device 2 is used to realize the functions of quantum key storage and data encryption and decryption, and the communication terminal 1 can be a mobile phone, a PC or other communication equipment, which is more conducive to market promotion.

[0037] More specifically, the quantum security device 2 further comprises an authentication module 23, and the authentication module 23 is connected with the data encryption and decryption module 21.

[0038] In the implementation process, when using the quantum security device 2, the user needs to complete the use authentication through the authentication module 23 first, and unlock the function of the data encryption and decryption module 21. If the authentication fails, the data encryption and decryption module 21 cannot be normally used and is in a standby state.

[0039] More specifically, the quantum key management terminal 3 comprises a quantum key distribution device 31 and a server 32.

[0040] The communication terminal 1 is connected with the server 32 through a cellular network, and the server 32 is connected with the quantum key distribution device 31.

[0041] More specifically, the quantum security device 2 is connected with the communication terminal 1 through a USB interface.

[0042] More specifically, the authentication module 23 is connected with the data encryption and decryption module 21 through a UART interface.

[0043] More specifically, the authentication module 23 is a biometric identification module or a password keyboard.

[0044] More specifically, the authentication module 23 is a fingerprint identification module.

[0045] In the implementation process, the use authentication is performed by fingerprint identification through a biometric identification module (such as a fingerprint identification module) or by inputting a correct PIN code through a password keyboard.

[0046] More specifically, the quantum key storage module 22 adopts an EMMC memory.

[0047] In the implementation process, when used, the communication terminal 1 is first connected with the quantum security device 2 through a communication interface (such as a USB interface); one party of communication (the calling party of the two parties of communication) performs user authentication through the authentication module 23. If the authentication is passed, the authentication module 23 sends the authentication passing information to the data encryption and decryption module 21 through a communication interface (such as a UART interface), and the data encryption and decryption module 21 enters a normal working state after receiving the information.

[0048] Then, the communication terminal 1 sends a call request to the quantum key management terminal 3 through a cellular network, randomly selects a key for communication from the quantum key storage module 22, encrypts the unique device serial number of the encryption security chip used by the data encryption and decryption module 21, inserts the ID label of the selected key in the header of the encrypted data frame, and then sends it to the quantum key management terminal 3.

[0049] After the quantum key management terminal 3 receives the information sent by the communication terminal 1, the corresponding quantum key is found according to the ID label of the data frame header for decryption, and the encrypted communication request is sent to the communication terminal 1 of the other communication party (the called party of the communication party) according to the unique device serial number of the encryption security chip of the communication terminal 1. After the called party agrees, the quantum key management terminal 3 randomly selects the exclusive session key and the initial vector in the memory and sends them to the communication parties. When sending, the quantum key management terminal 3 finds the quantum keys respectively belonging to the communication parties in the memory and uses them to encrypt the sent information. The communication parties find the corresponding quantum key according to the received data frame header key ID label for decryption, take out the session key and the initial vector, and transmit them to the data encryption and decryption module 21, and then the communication information of the communication parties is encrypted and decrypted by the data encryption and decryption module 21 using the session key and the initial vector, and the end-to-end communication is performed through the two communication terminals 1.

[0050] By integrating the key management function into the quantum key management terminal 3, the user only needs to know the ID identification of the other party when sending a communication request. When the user group is expanded, there is no need to fill new quantum keys to all existing terminal devices, greatly improving the convenience.

[0051] The data encryption and decryption module 21 uses the existing encryption algorithm, which can be an international encryption algorithm such as RSA or a domestic SM2 algorithm, which is not described in detail here. After the communication parties complete the communication each time, the quantum key used this time is automatically deleted, strictly guaranteeing the principle of “one-time encryption”.

[0052] When the quantum keys in the quantum key storage module 22 will be used up, the user can send a key replenishment request to the quantum key management terminal 3 through the network (also can send a key replenishment request to the quantum key management terminal 3 by inserting the quantum security device 2 into other network devices through the network). When sending the key replenishment request, the exclusive quantum key pre-installed by the original factory of the quantum key storage module 22 needs to be used for encryption. After the quantum key management terminal 3 receives the information sent by the user, the corresponding key is used for decryption by the server 32, and a large number of quantum keys and updated exclusive keys are sent by the user according to the key replenishment request, and this part of information is encrypted using the exclusive key of the quantum key storage module 22. The quantum key storage module 22 receives the key information and decrypts it, and then stores these quantum keys in the corresponding storage unit and updates the exclusive quantum key of the quantum key storage module 22. The original factory pre-installed exclusive quantum key used this time will be destroyed.

[0053] When the quantum key usage in the server 32 in the quantum key management terminal 3 will be exhausted, the server 32 controls the quantum key distribution device 31 to generate a large number of quantum key pairs, and puts the quantum key pairs into the corresponding storage area inside the server 32.

[0054] According to the disclosure and teaching of the above description, the skilled in the art of the present application can also change and modify the above embodiments. Therefore, the present application is not limited to the specific embodiments disclosed and described above, and some modifications and changes of the present application should fall within the protection scope of the claims of the present application. In addition, although some specific terms are used in the specification, these terms are only for convenience and do not constitute any limitation on the present application.

Claims

1. A dynamic quantum encrypted communication system, characterized in that, This includes communication terminals, quantum security devices, and quantum key management terminals; The quantum security device is connected to a communication terminal via a communication interface, and the communication terminal is connected to a quantum key management terminal via a cellular network.

2. The dynamic quantum encrypted communication system according to claim 1, characterized in that, The quantum security device is a secure U-key or a secure TF card.

3. A dynamic quantum encrypted communication system according to claim 1 or 2, characterized in that, The quantum security device includes a data encryption / decryption module and a quantum key storage module; the quantum key storage module is connected to the data encryption / decryption module, and the data encryption / decryption module is connected to a communication terminal through a communication interface.

4. The dynamic quantum encrypted communication system according to claim 3, characterized in that, The quantum security device also includes an authentication module, which is connected to the data encryption / decryption module.

5. A dynamic quantum encrypted communication system according to claim 1, characterized in that, The quantum key management terminal includes a quantum key distribution device and a server; the communication terminal is connected to the server via a cellular network, and the server is connected to the quantum key distribution device.

6. A dynamic quantum encrypted communication system according to claim 1, characterized in that, The quantum-safe device is connected to the communication terminal via a USB interface.

7. A dynamic quantum encrypted communication system according to claim 4, characterized in that, The authentication module is connected to the data encryption / decryption module via a UART interface.

8. A dynamic quantum encrypted communication system according to claim 4, characterized in that, The authentication module is either a biometric recognition module or a password keyboard.

9. A dynamic quantum encrypted communication system according to claim 8, characterized in that, The authentication module is a fingerprint recognition module.

10. A dynamic quantum encrypted communication system according to claim 3, characterized in that, The quantum key storage module uses an EMMC memory.

Images