Method for quantum-resistant security enhancement to internet key exchange protocol

Abstract

A method for quantum-resistant security enhancement to an Internet key exchange protocol, comprising: (011) performing key agreement with a second network device to generate an initial key; (012) acquiring a quantum key from a first network node; (013) performing post-quantum password encryption on the quantum key, and sending to the second network device a first encryption result that has undergone encryption; (014) performing decryption on a received second encryption result, and obtaining a second decryption result; and, (015) on the basis of a first quantum key, a first encryption key, a first verification key, a first derivation key, the first encryption result, and the second decryption result, generating a second encryption key, a second verification key, and a second derivation key, so as to encrypt communication between a first network device and the second network device.

Description

Anti-quantum security enhancement method for internet key exchange protocol

[0001] Priority information

[0002] The present application claims priority to and the benefit of the filing date of Chinese Patent Application No. 202411007782.1, filed July 25, 2024, and is hereby incorporated by reference in its entirety. TECHNICAL FIELD

[0003] The present application relates to the technical field of network security, and in particular to an anti-quantum security enhancement method for an internet key exchange protocol of a communication network. BACKGROUND

[0004] The leap in computing power represented by quantum computing has a significant impact on related algorithms in classical cryptography in terms of security. Understandably, with the advent of large-scale quantum computers, there will be some impact on key agreement, encryption, signature, and other applications in classical cryptography. Therefore, providing a cryptographic technology that can resist quantum computing attacks has become a pressing problem.

[0005] SUMMARY

[0006] The present application provides an anti-quantum security enhancement method for an internet key exchange protocol of a communication network.

[0007] The present application provides an anti-quantum security enhancement method for an internet key exchange protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used for the first network device, and the method comprising:

[0008] performing key agreement with the second network device to generate an initial key, the initial key comprising a first encryption key, a first verification key, and a first derived key;

[0009] obtaining a first quantum key from a first network node connected to the first network device;

[0010] performing post-quantum cryptographic encryption processing on the first quantum key and sending a first encryption result of the post-quantum cryptographic encryption processing to the second network device;

[0011] performing decryption processing on a second encryption result received from the second network device to obtain a second decryption result; and generating a second encryption key, a second verification key, and a second derived key based on the first quantum key, the first encryption key, the first verification key, the first derived key, the first encryption result, and the second decryption result, to encrypt communication between the first network device and the second network device.

[0012] Thus, in the communication process of the first network device and the second network device, the first network device and the second network device apply for quantum keys, and use a post-quantum cryptographic algorithm to encrypt the quantum keys to generate keys that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating keys with anti-quantum computing attack capability, the first network device and the second network device share the keys by communicating, and use these keys, quantum keys and other keys in the communication between the first network device and the second network device. In this way, the anti-quantum capability of network communication between network devices is enhanced.

[0013] In some embodiments, the method further comprises:

[0014] accessing the first network node through a pre-established channel;

[0015] loading a security certificate of the first network device or a security certificate of the second network device.

[0016] Thus, before key negotiation with the second network device, the first network device is accessed through a pre-established channel, which can protect data during data transmission and reduce the risk of unauthorized access. Then, a security certificate of the first network device or a security certificate of the second network device is loaded. After the security certificate is loaded, it will be used to establish and maintain a secure communication channel, enhancing the security of data during transmission.

[0017] In some embodiments, the first network node accessing the first network device obtains a first quantum key, comprising:

[0018] sending a quantum key application to the first network node accessing the first network device;

[0019] receiving a first quantum key and a quantum key identifier distributed by the first network node according to the quantum key application, wherein the quantum key identifier is obtained by the first network node by labeling the first quantum key with an identification code of the first network device.

[0020] Thus, a first quantum key application is sent to the first network node accessing the first network device. Then, a first quantum key distributed by the first network node according to the first quantum key application is received. Then, the first quantum key is labeled with an identification code of the first network device to obtain a quantum key identifier. In this way, a quantum key identifier with the identification code of the first network device is obtained, which helps to use and manage quantum keys.

[0021] In some embodiments, the post-quantum cryptographic encryption processing is performed on the first quantum key, and a first encrypted result of the post-quantum cryptographic encryption processing is sent to the second network device, including:

[0022] The post-quantum cryptographic encryption processing is performed on the quantum key identifier to obtain a first encrypted result.

[0023] According to the first encryption key and the first verification key, the first encrypted result is encrypted, and the first encrypted result after the encryption is sent to the second network device.

[0024] In this way, after obtaining the quantum key identifier, the post-quantum cryptographic encryption processing is performed on the quantum key identifier to obtain a first encrypted result. Then, the first encrypted result is encrypted by using the first encryption key and the first verification key and sent to the second network device, so as to ensure the security of the first encrypted result after the encryption in the transmission process of sending to the second network device. By using the post-quantum cryptographic algorithm to encrypt the quantum key identifier, the quantum key distribution technology and the post-quantum cryptography technology are combined to increase the complexity of the quantum key identifier.

[0025] In some embodiments, the post-quantum cryptographic encryption processing is performed on the quantum key identifier to obtain a first encrypted result, including:

[0026] The quantum key identifier and a first random number generated randomly are spliced to obtain a first session message;

[0027] The post-quantum cryptographic derivation processing is performed on the first session message to generate a first session key in the first encrypted result;

[0028] The post-quantum cryptographic encryption processing is performed on the first session message to generate a first encrypted message in the first encrypted result;

[0029] The post-quantum cryptographic signature processing is performed on the quantum key identifier to generate a first signature message in the first encrypted result.

[0030] Thus, the quantum key identifier is spliced with the first random number generated at random to obtain a first session message, and the first session message is subjected to post-quantum cryptographic derivation processing to generate a first session key in the first encrypted result. Then, the first session message is subjected to post-quantum cryptographic encryption processing to generate a first encrypted message in the first encrypted result. And the quantum key identifier is subjected to post-quantum cryptographic signature processing to generate a first signature message in the first encrypted result. In this way, by using various post-quantum cryptographic techniques to process the first session message, such as encryption processing, signature processing and derivation processing, the combination of quantum key distribution technology and post-quantum cryptography technology increases the complexity of the first session message and ensures the security of the first session message.

[0031] In some embodiments, the decryption processing on the received second encrypted result sent by the second network device obtains a second decrypted result, and the second decrypted result comprises the quantum key identifier, a second session message and a second signature message.

[0032] The second encrypted result sent by the second network device is received, and the second encrypted result is obtained by the second network device performing encryption processing on a first decrypted result, and the first decrypted result is obtained by the second network device performing decryption processing on the first encrypted result.

[0033] The decryption processing on the second encrypted result obtains a second decrypted result, and the second decrypted result comprises the quantum key identifier, a second session message and a second signature message.

[0034] Thus, the second encrypted result sent by the second network device is received, and the decryption processing on the second encrypted result obtains a second decrypted result, and the second decrypted result comprises the quantum key identifier, a second session message and a second signature message. In this way, the first network device determines the availability of the channel for communication with the second network device and obtains the key information of the second network device, and the key information can be combined with the relevant key information of the network device to generate a higher security key.

[0035] In some embodiments, the method further comprises:

[0036] The second session key is obtained according to the second session message and the quantum key identifier.

[0037] Thus, the second session key is obtained according to the second session message and the quantum key identifier, and the second session key has quantum computing attack resistance by combining quantum key distribution technology and post-quantum cryptography technology.

[0038] In some embodiments, the method further comprises:

[0039] The quantum key identifier is subjected to post-quantum cryptographic signature verification processing according to the second signature message.

[0040] Thus, the quantum key identifier is post-quantum cryptographically verified according to the second signed message. In this way, the integrity and legitimacy of the received data are confirmed, and it is ensured that the correct quantum key identifier is received.

[0041] In some embodiments, the generating, according to the first quantum key, the first encryption key, the first verification key, the first derived key, the first encryption result and the second decryption result, of a second encryption key, a second verification key and a second derived key for encrypting communication between the second network device and the first network device, comprises:

[0042] generating a second encryption key according to the first encryption key, the first quantum key, the first session key and the second session key;

[0043] generating a second verification key according to the first verification key, the first quantum key, the first session key and the second session key;

[0044] generating a second derived key according to the first derived key, the first quantum key, the first session key and the second session key;

[0045] encrypting communication between the first network device and the second network device according to the second encryption key, the second verification key and the second derived key.

[0046] Thus, the second encryption key is generated according to the first encryption key, the first quantum key, the first session key and the second session key, which has good anti-quantum computing attack ability and is used to encrypt data in the communication process between the first network device and the second network device, ensuring the security of the data in the transmission process. The second verification key is generated according to the first verification key, the first quantum key, the first session key and the second session key, which has good anti-quantum computing attack ability and is used to ensure the integrity and legitimacy of the data in the communication process between the first network device and the second network device. The second derived key is generated according to the first derived key, the first quantum key, the first session key and the second session key, which has good anti-quantum computing attack ability and is used to ensure other security purposes in the communication process between the first network device and the second network device, such as deriving a more complex key. The communication between the first network device and the second network device is encrypted according to the second encryption key, the second verification key and the second derived key, which enhances the ability of the communication between the network devices to resist quantum computing attacks by using the keys generated by combining quantum key distribution technology and post-quantum cryptography technology, and protects the data transmitted in the communication process.

[0047] The embodiment of the present application provides a method for anti-quantum security enhancement of an Internet Key Exchange protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used for the second network device, and the method comprising the following steps:

[0048] generating an initial key through key negotiation with the first network device, wherein the initial key comprises a first encryption key, a first authentication key and a first derivation key;

[0049] receiving a first encryption result of post-quantum cryptographic encryption processing of a first quantum key by the first network device, wherein the first quantum key is obtained by the first network device from a first network node accessed by the first network device;

[0050] decrypting the first encryption result to obtain a first decryption result, and encrypting the first decryption result to obtain a second encryption result;

[0051] generating a second encryption key, a second authentication key and a second derivation key according to a second quantum key, the first encryption key, the first authentication key, the first derivation key, the second encryption result and the first decryption result, so as to encrypt the communication between the second network device and the first network device.

[0052] In this way, in the communication process of the first network device and the second network device, the first network device and the second network device apply for obtaining a quantum key, and encrypt the quantum key by using a post-quantum cryptographic algorithm to generate a key capable of resisting quantum computing attacks, wherein the post-quantum cryptographic algorithm is a series of encryption algorithms aiming at resisting quantum computing attacks. After the key with the anti-quantum computing attack capability is generated, the first network device and the second network device share the key through communication, and fuse the key, the quantum key and other keys for use in the communication between the first network device and the second network device. In this way, the anti-quantum capability of the network communication between the network devices is enhanced.

[0053] In some embodiments, the first decryption result comprises a first signed message, and the method further comprises the following steps:

[0054] performing post-quantum cryptographic signature verification processing on the quantum key identifier according to the first signed message;

[0055] if the signature verification processing result is correct, obtaining the second quantum key from a second network node accessed by the second network device.

[0056] Thus, the quantum key identifier is post-quantum cryptographically verified according to the first signature message, so that the correct quantum key identifier is ensured, and the integrity of the data and the legality of the source are ensured. In the case of correct verification result, the second quantum key is obtained from the second network node accessing the second network device, so that the obtained second quantum key matches the first quantum key of the first network device, and the quantum key is used to generate a higher security key.

[0057] In some embodiments, the first decryption result includes a quantum key identifier, and the encryption of the first decryption result obtains a second encryption result, including:

[0058] The quantum key identifier and a second random number generated randomly are spliced to obtain a second session message;

[0059] The second session message is post-quantum cryptographically derived to generate a second session key in the second encryption result;

[0060] The second session message is post-quantum cryptographically encrypted to generate a second encrypted message in the second encryption result;

[0061] The quantum key identifier is post-quantum cryptographically signed to generate a second signature message in the second encryption result;

[0062] The second encryption result is encrypted according to the first encryption key and the first verification key.

[0063] Thus, the quantum key identifier and a second random number generated randomly are spliced to obtain a second session message, and then the second session message is post-quantum cryptographically derived to generate a second session key in the second encryption result. The second session message is post-quantum cryptographically encrypted to generate a second encrypted message in the second encryption result, and the quantum key identifier is post-quantum cryptographically signed to generate a second signature message in the second encryption result. The second encryption result is encrypted according to the first encryption key and the first verification key. In this way, the quantum key distribution technology and the post-quantum cryptography technology are combined by using the post-quantum cryptography technology to process the second session message, such as encryption, signature and derivation, which increases the complexity of the second session message and ensures the security of the second session message in the transmission process.

[0064] In some embodiments, the first decryption result comprises a first session message, and the generating, according to the second quantum key, the first encryption key, the first verification key, the first derived key, the second encryption result and the first decryption result, of a second encryption key, a second verification key and a second derived key for encrypting communication between the second network device and the first network device comprises:

[0065] generating, according to the first encryption key, the second quantum key, the first session key and the second session key, of a second encryption key;

[0066] generating, according to the first verification key, the second quantum key, the first session key and the second session key, of a second verification key;

[0067] generating, according to the first derived key, the second quantum key, the first session key and the second session key, of a second derived key;

[0068] encrypting, according to the second encryption key, the second verification key and the second derived key, communication between the second network device and the first network device.

[0069] Thus, the second encryption key is generated according to the first encryption key, the first quantum key, the first session key and the second session key, and has good anti-quantum computing attack capability, and is used to encrypt data in the communication process between the first network device and the second network device, thereby ensuring the security of the data in the transmission process. The second verification key is generated according to the first verification key, the first quantum key, the first session key and the second session key, and has good anti-quantum computing attack capability, and is used to ensure the integrity and legality of the data in the communication process between the first network device and the second network device. The second derived key is generated according to the first derived key, the first quantum key, the first session key and the second session key, and has good anti-quantum computing attack capability, and is used to ensure other security purposes in the communication process between the first network device and the second network device, such as deriving a more complex key. The communication between the first network device and the second network device is encrypted according to the second encryption key, the second verification key and the second derived key, so that the anti-quantum computing attack capability of the communication between the network devices is enhanced by using the keys generated by combining the quantum key distribution technology and the post-quantum cryptography technology, and the data transmitted in the communication process is protected.

[0070] The embodiments of the present application provide a first network device used in a communication network based on an Internet Key Exchange protocol, the communication network further comprising a second network device, and the first network device is configured to:

[0071] perform key agreement with the second network device to generate an initial key, the initial key comprising a first encryption key, a first authentication key, and a first derivation key;

[0072] obtain a first quantum key from a first network node connected to the first network device;

[0073] perform post-quantum cryptographic encryption processing on the first quantum key, and send a first encryption result of the post-quantum cryptographic encryption processing to the second network device;

[0074] perform decryption processing on a second encryption result received from the second network device to obtain a second decryption result;

[0075] generate a second encryption key, a second authentication key, and a second derivation key based on the first quantum key, the first encryption key, the first authentication key, the first derivation key, the first encryption result, and the second decryption result, to encrypt communication between the first network device and the second network device.

[0076] In this way, in the communication process between the first network device and the second network device, the first network device and the second network device apply for a quantum key, and use a post-quantum cryptographic algorithm to encrypt the quantum key to generate a key that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating a key with the ability to resist quantum computing attacks, the first network device and the second network device share the key through communication, and use these keys, quantum keys, and other keys in the communication between the first network device and the second network device. In this way, the anti-quantum ability of network communication between network devices is enhanced.

[0077] The application provides a second network device for a communication network based on an Internet Key Exchange protocol, the communication network further comprising a first network device, the second network device being configured to:

[0078] perform key agreement with the first network device to generate an initial key, the initial key comprising a first encryption key, a first authentication key, and a first derivation key;

[0079] receive a first encryption result of post-quantum cryptographic encryption processing on a first quantum key by the first network device, the first quantum key being obtained by the first network device from a connected first network node;

[0080] perform decryption processing on the first encryption result to obtain a first decryption result;

[0081] perform encryption processing on the first decryption result to obtain a second encryption result;

[0082] According to the second quantum key, the first encryption key, the first verification key, the first derived key, the second encryption result and the first decryption result, a second encryption key, a second verification key and a second derived key are generated to encrypt the communication between the second network device and the first network device.

[0083] In this way, in the communication process of the first network device and the second network device, the first network device and the second network device apply for obtaining a quantum key, and use a post-quantum cryptography algorithm to encrypt the quantum key to generate a key capable of resisting quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the key with the ability to resist quantum computing attacks, the first network device and the second network device share the key by communicating, and use the key, the quantum key and other keys in the communication between the first network device and the second network device. In this way, the quantum resistance of the network communication between the network devices is enhanced.

[0084] The embodiment of the application provides a communication system based on an Internet key exchange protocol, the communication system comprising the first network device, the second network device and a quantum key distribution network, the quantum key distribution network being configured to distribute a quantum key to the first network device or the second network device.

[0085] In this way, in the communication process of the first network device and the second network device, the first network device and the second network device apply for obtaining a quantum key, and use a post-quantum cryptography algorithm to encrypt the quantum key to generate a key capable of resisting quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the key with the ability to resist quantum computing attacks, the first network device and the second network device share the key by communicating, and use the key, the quantum key and other keys in the communication between the first network device and the second network device. In this way, the quantum resistance of the network communication between the network devices is enhanced.

[0086] The embodiment of the application provides a network device, the network device comprising one or more processors and a memory, the memory storing a computer program, and the computer program being executed by the processor to implement the method in any of the above embodiments.

[0087] Thus, in the communication process of the first network device and the second network device, the first network device and the second network device apply for obtaining quantum keys, and use a post-quantum cryptography algorithm to encrypt the quantum keys to generate keys capable of resisting quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the keys with the ability to resist quantum computing attacks, the first network device and the second network device share the keys by communicating, and use the keys, the quantum keys and other keys in the communication between the first network device and the second network device. In this way, the quantum resistance of network communication between network devices is enhanced.

[0088] The computer readable storage medium of the embodiments of the present application stores a computer program, and the program is executed by a processor to implement the method of any of the embodiments.

[0089] Thus, in the communication process of the first network device and the second network device, the first network device and the second network device apply for obtaining quantum keys, and use a post-quantum cryptography algorithm to encrypt the quantum keys to generate keys capable of resisting quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the keys with the ability to resist quantum computing attacks, the first network device and the second network device share the keys by communicating, and use the keys, the quantum keys and other keys in the communication between the first network device and the second network device. In this way, the quantum resistance of network communication between network devices is enhanced.

[0090] Additional aspects and advantages of the present application will be in part apparent and in part pointed out hereinafter. BRIEF DESCRIPTION OF DRAWINGS

[0091] The above and / or additional aspects and advantages of the present application will become apparent and be readily appreciated from the following description, including the appended drawings, wherein:

[0092] Fig. 1 is one of flow schematic diagrams of the method of the embodiments of the present application;

[0093] Fig. 2 is an architecture diagram of the method of the embodiments of the present application;

[0094] Fig. 3 is a signaling diagram of the method of the embodiments of the present application;

[0095] Fig. 4 is another of flow schematic diagrams of the method of the embodiments of the present application;

[0096] Fig. 5 is a third of flow schematic diagrams of the method of the embodiments of the present application;

[0097] Fig. 6 is a fourth flowchart of a method according to an embodiment of the present application;

[0098] Fig. 7 is a fifth flowchart of a method according to an embodiment of the present application;

[0099] Fig. 8 is a sixth flowchart of a method according to an embodiment of the present application;

[0100] Fig. 9 is a seventh flowchart of a method according to an embodiment of the present application;

[0101] Fig. 10 is an eighth flowchart of a method according to an embodiment of the present application;

[0102] Fig. 11 is a ninth flowchart of a method according to an embodiment of the present application;

[0103] Fig. 12 is a tenth flowchart of a method according to an embodiment of the present application;

[0104] Fig. 13 is an eleventh flowchart of a method according to an embodiment of the present application;

[0105] Fig. 14 is a twelfth flowchart of a method according to an embodiment of the present application;

[0106] Fig. 15 is a thirteenth flowchart of a method according to an embodiment of the present application. DETAILED DESCRIPTION

[0107] Embodiments of the present application are described in detail below with reference to the attached drawing figures, wherein the same or like reference numerals and characters designate the same or like components throughout the drawings. The embodiments described below are presented by way of example only, and are not intended to limit the present application as defined by the appended claims and their equivalents.

[0108] The leap of computing power represented by quantum computing has a great impact on related algorithms in classical cryptography in terms of security. That is, quantum computing poses a more direct and urgent threat to the cracking of classical cryptography. For example, Shor's quantum algorithm can solve complex mathematical problems such as large integer factorization and discrete logarithm solving in polynomial time, and quickly crack widely used public key cryptography algorithms such as RSA, ECC, DSA, and ElGamal. Understandably, with the implementation of large quantum computers, there will be some impact on key agreement, encryption, signature, and other applications in classical cryptography.

[0109] Currently, the technologies to cope with the threat of quantum computing in the world are mainly divided into two categories: "classic against quantum - post-quantum cryptography algorithm" and "quantum against quantum - quantum cryptography technology". Post-quantum cryptography (PQC) is designed based on the mathematical difficult problems that known quantum algorithms cannot solve in polynomial time, and its security depends on the computational complexity. However, from the perspective of development, the mathematical problems on which the post-quantum cryptography algorithm depends are still uncertain whether they will remain difficult to solve in the future, whether the algorithm security will be long-term effective, and whether they will still be immune to new quantum attacks. These all indicate that PQC has certain fragility and uncertainty factors. Quantum key distribution (QKD) is based on the realization principle of single quantum indivisibility and quantum state cloning to achieve the goal of classical cryptography. This technology refers to the method and process of generating and distributing information theory secure keys through transmitting quantum states between the two communicating parties, but the application cost of quantum key distribution technology is relatively high. Both technologies have the ability to resist quantum computing attacks, but they have their limitations. Therefore, it is an urgent problem to provide a relatively low-cost and highly secure cryptographic technology that can resist quantum computing attacks.

[0110] Based on the above possible situations, referring to FIG. 1, the embodiment of the application provides a method for enhancing the quantum security of the Internet Key Exchange protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used for the first network device, and the method comprising:

[0111] 011: performing key negotiation with the second network device to generate an initial key, the initial key comprising a first encryption key, a first verification key, and a first derived key;

[0112] 012: obtaining a first quantum key from a first network node connected to the first network device;

[0113] 013: performing post-quantum cryptography encryption processing on the first quantum key, and sending the first encryption result of the post-quantum cryptography encryption processing to the second network device;

[0114] 014: performing decryption processing on the second encryption result received from the second network device to obtain a second decryption result;

[0115] 015: generating a second encryption key, a second verification key, and a second derived key based on the first quantum key, the first encryption key, the first verification key, the first derived key, the first encryption result, and the second decryption result, to encrypt the communication between the first network device and the second network device.

[0116] The embodiment of the application further provides a network device comprising a memory and a processor. The method of the embodiment of the application can be implemented by the network device of the embodiment of the application. Specifically, the memory stores a computer program, and the processor is configured to perform the following operations: performing key negotiation with a second network device to generate an initial key, the initial key comprising a first encryption key, a first authentication key and a first derivation key; obtaining a first quantum key from a first network node connected to the first network device; performing post-quantum cryptographic encryption processing on the first quantum key, and sending a first encryption result of the post-quantum cryptographic encryption processing to the second network device; and performing decryption processing on a second encryption result received from the second network device to obtain a second decryption result. The processor is further configured to generate a second encryption key, a second authentication key and a second derivation key based on the first quantum key, the first encryption key, the first authentication key, the first derivation key, the first encryption result and the second decryption result, so as to encrypt communication between the first network device and the second network device.

[0117] The embodiment of the application further provides a first network device. The method of the embodiment of the application can be implemented by the first network device of the embodiment of the application. Specifically, the first network device comprises a negotiation module, an obtaining module, an encryption module, a decryption module and a derivation module. The negotiation module is configured to perform key negotiation with a second network device to generate an initial key, the initial key comprising a first encryption key, a first authentication key and a first derivation key. The obtaining module is configured to obtain a first quantum key from a first network node connected to the first network device. The encryption module is configured to perform post-quantum cryptographic encryption processing on the first quantum key, and send a first encryption result of the post-quantum cryptographic encryption processing to the second network device. The decryption module is configured to perform decryption processing on a second encryption result received from the second network device to obtain a second decryption result. The derivation module is configured to generate a second encryption key, a second authentication key and a second derivation key based on the first quantum key, the first encryption key, the first authentication key, the first derivation key, the first encryption result and the second decryption result, so as to encrypt communication between the first network device and the second network device.

[0118] The application provides a communication system based on an Internet Key Exchange protocol, the communication system comprising the first network device, the second network device and the quantum key distribution network of the above-mentioned embodiments, and the quantum key distribution network is configured to distribute quantum keys to the first network device or the second network device. Specifically, the quantum key distribution network comprises network nodes and a quantum network link control center, the network nodes are configured to store quantum keys in the quantum key distribution network. The quantum network link center can establish quantum key distribution and relay links between the network nodes according to the names of the network nodes, and the relay links are used for data transfer and other functions. The quantum key distribution network is used to implement quantum key generation, quantum key relay, quantum key provision and other services.

[0119] Referring to FIG. 2, in some embodiments, the first network device and the second network device communicate through an IPSec encrypted channel, such as an IKE key exchange, which refers to the use of the Internet Protocol Security (IPsec) protocol to protect the transmission of IP packets. Each network device has an access network node, and the network device applies for a quantum key from the network node through a trusted channel. When the quantum key application is passed, the network node sends the quantum key to the network device through the trusted channel. When the first network device successfully applies for and obtains the quantum key distributed by the network node accessing the first network device, the quantum network link control center synchronously controls the network node accessed by the second network device to generate a quantum key, but does not immediately send it to the second network device. The above-mentioned corresponding relationship of the first network device, the second network device and the network node is provided by the management and control platform.

[0120] It should be noted that the embodiments of the present application take the FIPS203 Module-Lattice-based Key-Encapsulation Mechanism Standard as the PQC key encapsulation algorithm, and the FIPS204 Module-Lattice-Based Digital Signature Standard as the PQC digital signature algorithm as an example for explanation and description. The following description of the operations related to the PQC algorithm is based on the above FIPS standard. Of course, in other embodiments, other algorithms such as the NewHope algorithm, the Sidh algorithm, and the HQC algorithm can also be used as the related algorithm of PQC.

[0121] Specifically, in the embodiments of the present application, first, the first network device and the second network device perform key negotiation to generate an initial key, which includes a first encryption key, a first verification key, and a first derived key. Among them, the first encryption key and the first verification key are used to protect the data in the communication process, and the first derived key can be used for other security purposes, such as deriving a higher security key.

[0122] Next, the first network device obtains a first quantum key from the first network node accessing the first network device, and the first quantum key is used to generate a higher security key to resist quantum computing attacks. The first network device then performs post-quantum cryptographic encryption processing on the first quantum key, and sends the first encryption result of the post-quantum cryptographic encryption processing to the second network device. By combining the use of post-quantum cryptography and quantum key distribution technology, the confidentiality of the key is improved, and the encryption result is sent to the second network device for sharing, so that the first network device and the second network device ensure the consistency of the data in the communication network.

[0123] Then, the second network device receives a first encryption result of the first network device performing post-quantum cryptographic encryption processing on the first quantum key, which is obtained by the first network device from the accessed first network node. Next, the first encryption result is decrypted to obtain a first decryption result. The first decryption result is then encrypted to obtain a second encryption result. After obtaining the second encryption result, the second network device sends the second encryption result to the first network device.

[0124] Thereafter, the first network device decrypts the received second encryption result sent by the second network device to obtain a second decryption result, thereby sharing the information of the second network device and ensuring the consistency of data in communication between the first network device and the second network device in the communication network.

[0125] Finally, the first network device generates a second encryption key, a second verification key, and a second derived key based on the first quantum key, the first encryption key, the first verification key, the first derived key, the first encryption result, and the second decryption result, to encrypt the communication between the first network device and the second network device. In this way, the post-quantum cryptography technology and the quantum key distribution technology are combined to enhance the ability of the key to resist quantum computing attacks.

[0126] In the above method, during the communication between the first network device and the second network device, the first network device and the second network device apply for obtaining a quantum key, and use a post-quantum cryptographic algorithm to encrypt the quantum key to generate a key that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the key with the ability to resist quantum computing attacks, the first network device and the second network device share the key by communicating, and use these keys, quantum keys, and other keys in the communication between the first network device and the second network device. In this way, the anti-quantum ability of the network communication between the network devices is enhanced.

[0127] In some embodiments, it is noted that in the embodiments of the present application, the initiator IPSec VPN gateway refers to the first network device, and the responder IPSec VPN gateway refers to the second network device. Please refer to FIG. 3, in which the initiator IPSec VPN gateway (hereinafter referred to as the initiator gateway) and the responder IPSec VPN gateway (hereinafter referred to as the responder gateway) perform key negotiation in the IKE security association initialization phase (IKE_SA_INIT phase) according to the IKEv2 (Internet Key Exchange version 2) protocol, and the process finally obtains a first encryption key SK_e for encrypting data, a first derivation key SK_d for deriving other keys, and a first authentication key SK_a for authentication and integrity protection. Both the initiator gateway and the responder gateway store the above three keys. The IPSec VPN gateway is a network security device that obtains a session key through the IKEv2 key exchange protocol and establishes an IPSec encryption channel to perform encryption and decryption processing on service data transmitted through the network by using the session key.

[0128] After completing the IKE security association initialization phase, the IKE authentication phase (IKE_AUTH phase) of the IKEv2 protocol is completed. Then the initiator gateway obtains a first quantum key QK_UUID from the first quantum network node, which is the nearest and authorized quantum network node to the initiator gateway. The quantum network node is a network node. The first quantum key QK_UUID distributed to the initiator gateway is subjected to a series of post-quantum cryptographic encryption processing to obtain a first encryption result with signature information, key encapsulation information and other related information, and the first encryption result is sent to the responder gateway.

[0129] After the responder gateway completes the corresponding operation, the second encryption result sent back by the responder gateway is received, and the result is subjected to corresponding decryption processing to obtain a second decryption result. The initiator gateway generates a second encryption key, a second shared key and a second authentication key with quantum computing attack resistance according to the first quantum key QK_UUID, the first encryption result, the second encryption result, the first encryption key SK_e generated after key negotiation, the first derivation key SK_d generated after key negotiation, and the first authentication key SK_a generated after key negotiation. These keys with quantum computing attack resistance will be used in the subsequent communication process. In the subsequent description herein, the above-mentioned names will continue to be used, including but not limited to the initiator gateway, the responder gateway, the first quantum key QK_UUID, the quantum network node, etc.

[0130] In summary, in the anti-quantum security enhancement method of the Internet Key Exchange protocol of the communication network, the network device and the network communication encryption device, in the communication process of the first network device and the second network device, the first network device and the second network device apply for quantum keys, and use a post-quantum cryptographic algorithm to encrypt the quantum keys to generate keys that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating keys with anti-quantum computing attack capabilities, the first network device and the second network device share the keys through communication, and use these keys, quantum keys and other keys in the communication between the first network device and the second network device. In this way, the anti-quantum ability of network communication between network devices is enhanced.

[0131] Referring to FIG. 4, in some embodiments, the method further comprises:

[0132] 016: Access the first network node through the pre-established channel;

[0133] 017: Load the security certificate of the first network device or the security certificate of the second network device.

[0134] In some embodiments, the access module is configured to access the first network node through the pre-established channel, and the loading module is configured to load the security certificate of the first network device or the security certificate of the second network device.

[0135] In some embodiments, the processor is configured to access the first network node through the pre-established channel, and load the security certificate of the first network device or the security certificate of the second network device.

[0136] Specifically, before the first network device performs key negotiation with the second network node, the first network device accesses the first network node through a pre-established channel. The pre-established channel can protect data during data transmission and reduce the risk of unauthorized access. Then, the first network device loads the security certificate of the first network device or the security certificate of the second network device. After the security certificate is loaded, it will be used to establish and maintain a secure communication channel, enhancing the security of data during transmission.

[0137] In some embodiments, referring to FIG. 3, before the initiator gateway and the responder gateway perform key negotiation, the initiator gateway accesses the quantum network node closest in physical distance and authorized to complete through a trusted channel, which refers to a mechanism or protocol that provides a secure communication path between two communication entities, and one way of establishment is that the initiator gateway and the responder gateway are directly connected in the same cabinet and shielded network cable. Such a channel ensures the confidentiality, integrity and availability of data during transmission, preventing unauthorized access, tampering or eavesdropping. At the same time, through offline import, the initiator gateway and the responder gateway load the public key of the key pair of the other party's post-quantum cryptography algorithm or the certificate of their own post-quantum cryptography algorithm issued by the certificate system, which includes encryption certificate and signature certificate. Through offline import, it means that the transmission of the key or certificate will not pass through the Internet or other network paths that may be monitored or attacked.

[0138] In this way, the first network device accesses the quantum network node through the trusted channel and loads the security certificate through offline import, both of which ensure the confidentiality of the data of the first network device and reduce the risk of data leakage.

[0139] Referring to FIG. 5, in some embodiments, step 012 (obtaining a first quantum key from a first network node accessed to the first network device) includes:

[0140] 0121: sending a first quantum key application to the first network node accessed to the first network device;

[0141] 0122: receiving the first quantum key distributed by the first network node according to the first quantum key application;

[0142] 0123: labeling the first quantum key according to the identification code of the first network device to obtain a quantum key identifier.

[0143] In some embodiments, the application module is configured to send a first quantum key application to the first network node accessed to the first network device, the receiving module is configured to receive the first quantum key distributed by the first network node according to the first quantum key application, and the labeling module is configured to label the first quantum key according to the identification code of the first network device to obtain a quantum key identifier.

[0144] In some embodiments, the processor is further configured to send a first quantum key application to the first network node accessed to the first network device, receive the first quantum key distributed by the first network node according to the first quantum key application, and label the first quantum key according to the identification code of the first network device to obtain a quantum key identifier.

[0145] Specifically, the first network device sends a first quantum key application to a first network node connected to the first network device. Then, the first network device receives a first quantum key distributed by the first network node according to the first quantum key application. Then, the first network device labels the first quantum key according to an identification code of the first network device to obtain a quantum key identifier. In this way, the quantum key identifier with the identification code of the first network device is obtained, which is helpful for using and managing the quantum key.

[0146] In some embodiments, referring to FIG. 3, the initiator gateway applies for a quantum key to a first quantum network node, which is the nearest and authorized quantum network node to the initiator gateway. When the first quantum network node generates and distributes a first quantum key QK_UUID (128 bits or more) through a quantum key distribution network, a second quantum network node, which is the nearest and authorized quantum network node to the responder gateway, synchronously generates a matching second quantum key QK_UUID, but the quantum key is not immediately distributed to the responder gateway. The first quantum key QK_UUID needs to be 128 bits or more because the commonly used symmetric encryption algorithm SM4, AES, etc. uses a 128-bit key. The initiator gateway receives the first quantum key QK_UUID distributed by the first quantum network node to the initiator gateway, and then labels the first quantum key QK_UUID with a unique universal identification code of the initiator itself to obtain a quantum key identifier, which can be used to identify and track the quantum key, facilitating the management and use of the quantum key in subsequent communication processes.

[0147] In this way, through this process, the first network device can safely receive and process the quantum key, providing a basis for establishing a secure communication channel.

[0148] Referring to FIG. 6, in some embodiments, step 013 (post-quantum cryptographic encryption processing is performed on the first quantum key, and the first encryption result of the post-quantum cryptographic encryption processing is sent to the second network device) includes:

[0149] 0131: performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result;

[0150] 0132: performing encryption processing on the first encryption result according to the first encryption key and the first verification key, and sending the encrypted first encryption result to the second network device.

[0151] In some embodiments, the encryption module is further configured to perform post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result, and the sending module is configured to perform encryption processing on the first encryption result according to the first encryption key and the first verification key, and send the encrypted first encryption result to the second network device.

[0152] In some embodiments, the processor is further configured to perform post-quantum cryptographic encryption on the quantum key identifier to obtain a first encrypted result, and perform encryption on the first encrypted result according to the first encryption key and the first authentication key, and send the encrypted first encrypted result to the second network device.

[0153] Specifically, after obtaining the quantum key identifier, the first network device performs post-quantum cryptographic encryption on the quantum key identifier to obtain a first encrypted result. Then, the first network device sends the first encrypted result to the second network device after performing encryption on the first encrypted result using the first encryption key and the first authentication key. In this way, the security of the encrypted first encrypted result during transmission to the second network device is ensured. By using a post-quantum cryptographic algorithm to encrypt the quantum key identifier, the complexity of the quantum key identifier is increased by combining quantum key distribution technology and post-quantum cryptography technology.

[0154] In some embodiments, referring again to FIG. 3, the initiator gateway uses a post-quantum cryptographic algorithm to encrypt the quantum key identifier to obtain a first encrypted result, thereby protecting the confidentiality of the quantum key identifier and ensuring that the quantum key identifier cannot be cracked by an unauthorized third party even if it is intercepted during transmission. On the basis of IKEv2, the messages AUTH_PQC and KE_PQC are extended, AUTH_PQC includes PQC signature information, KE_PQC includes PQC key encapsulation information, and the first encrypted result is sent to the responder gateway under the encryption and integrity protection of the first encryption key SK_e and the first authentication key SK_a. The message structure is as follows:

[0155] HDR, SK{IDi, [CERT_PQC,] [IDr,] AUTH_PQC, KE_PQC}

[0156] HDR is the IKEv2 protocol header, and SK{} indicates that the data content is encrypted and integrity protected. When PQC certificates are available, CERT_PQC indicates PQC encryption certificates and PQC signature certificates. When no certificates are available, the initiator gateway and the responder gateway import each other's encryption public key and signature public key offline. In this way, by superimposing the key encapsulation and authentication process using post-quantum cryptographic algorithms and quantum key distribution technology on the basis of the method used in the original key exchange and authentication messages of IKEv2, the quantum resistance of the protocol is improved, and the security and reliability of the first encrypted result during transmission are ensured.

[0157] In this way, the first network device ensures the security and integrity of the quantum key identifier and establishes a secure foundation for subsequent communication.

[0158] Referring to FIG. 7, in some embodiments, the step 0131 (post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result) comprises:

[0159] 01311: post-quantum cryptographic processing on the quantum key identifier and the randomly generated first random number to obtain a first session message;

[0160] 01312: post-quantum cryptographic derivation processing on the first session message to generate a first session key in the first encryption result;

[0161] 01313: post-quantum cryptographic encryption processing on the first session message to generate a first encrypted message in the first encryption result;

[0162] 01314: post-quantum cryptographic signature processing on the quantum key identifier to generate a first signature message in the first encryption result.

[0163] In some embodiments, the splicing module is configured to perform post-quantum cryptographic processing on the quantum key identifier and the randomly generated first random number to obtain a first session message, the derivation module is further configured to perform post-quantum cryptographic derivation processing on the first session message to generate a first session key in the first encryption result, the encryption module is further configured to perform post-quantum cryptographic encryption processing on the first session message to generate a first encrypted message in the first encryption result, and the signature module is configured to perform post-quantum cryptographic signature processing on the quantum key identifier to generate a first signature message in the first encryption result.

[0164] In some embodiments, the processor is further configured to perform post-quantum cryptographic processing on the quantum key identifier and the randomly generated first random number to obtain a first session message, perform post-quantum cryptographic derivation processing on the first session message to generate a first session key in the first encryption result, perform post-quantum cryptographic encryption processing on the first session message to generate a first encrypted message in the first encryption result, and perform post-quantum cryptographic signature processing on the quantum key identifier to generate a first signature message in the first encryption result.

[0165] Specifically, the first network device splices the quantum key identifier with the randomly generated first random number to obtain a first session message, and then performs post-quantum cryptographic derivation processing on the first session message to generate a first session key in the first encryption result. Next, the first network device performs post-quantum cryptographic encryption processing on the first session message to generate a first encrypted message in the first encryption result, and performs post-quantum cryptographic signature processing on the quantum key identifier to generate a first signature message in the first encryption result. In this way, by using post-quantum cryptographic technology to perform various processing such as encryption processing, signature processing, and derivation processing on the first session message, the combination of quantum key distribution technology and post-quantum cryptography technology increases the complexity of the first session message and also ensures the security of the first session message.

[0166] In some embodiments, referring to FIG. 3 again, the initiator gateway randomly generates a 128-bit random number r1 and directly splices the quantum key identifier UUID QK to obtain the first session message m1. The splicing with the random number r1 increases the randomness and unpredictability of the quantum key identifier UUID QK. Then, the initiator gateway takes the first session message m1 as the encrypted message m in the PQC key encapsulation algorithm, runs the G function of the PQC algorithm to obtain the first session key K(K1), so that the generated first session key has good anti-quantum computing attack capability. The initiator gateway further performs PQC encryption encapsulation on m1 to obtain the first encrypted message m2, which ensures the confidentiality of data in the transmission process. Next, the initiator gateway uses the PQC digital signature algorithm to take UUID QK as M in the PQC signature algorithm to obtain the first signature message M1, which ensures the integrity and authenticity of the message, and any unauthorized access and tampering will be detected. In this way, the original IKEv2 based on the classical KPI algorithm is improved by using the post-quantum cryptography algorithm and quantum key distribution technology, and the anti-quantum computing attack capability of the original IKEv2 protocol is enhanced.

[0167] In this way, through this process, the first network device ensures the security, integrity and authenticity of data transmission, and establishes a secure foundation for subsequent communication.

[0168] Referring to FIG. 8, in some embodiments, step 014 (decrypting the received second encrypted result sent by the second network device to obtain a second decrypted result) comprises:

[0169] 0141: receiving the second encrypted result sent by the second network device, the second encrypted result being obtained by the second network device encrypting the first decrypted result, the first decrypted result being obtained by the second network device decrypting the first encrypted result;

[0170] 0142: decrypting the second encrypted result to obtain a second decrypted result, the second decrypted result comprising a quantum key identifier, a second session message and a second signature message.

[0171] In some embodiments, the receiving module is configured to receive the second encrypted result sent by the second network device, the second encrypted result being obtained by the second network device encrypting the first decrypted result, the first decrypted result being obtained by the second network device decrypting the first encrypted result; and the decrypting module is further configured to decrypt the second encrypted result to obtain a second decrypted result, the second decrypted result comprising a quantum key identifier, a second session message and a second signature message.

[0172] In some embodiments, the processor is further configured to receive a second encrypted result sent by the second network device, the second encrypted result being obtained by the second network device from encrypting the first decrypted result, the first decrypted result being obtained by the second network device from decrypting the first encrypted result, and decrypt the second encrypted result to obtain a second decrypted result, the second decrypted result comprising the quantum key identifier, a second session message, and a second signed message.

[0173] Specifically, the first network device receives the second encrypted result sent by the second network device, and decrypts the second encrypted result to obtain a second decrypted result, the second decrypted result comprising the quantum key identifier, a second session message, and a second signed message. In this way, the first network device determines the availability of the channel for communication with the second network device, and obtains the key information of the second network device, which can be combined with the relevant key information of the first network device to generate a higher security key.

[0174] In some embodiments, referring to FIG. 3, the initiator gateway receives the second encrypted result sent by the responder gateway, the second encrypted result being obtained by the responder gateway from encrypting the first decrypted result, the first decrypted result being obtained by the responder gateway from decrypting the first encrypted result. Then, the initiator gateway decrypts the second encrypted result to obtain a second decrypted result, the second decrypted result comprising the quantum key identifier UUID_QK, a second session message m3, and a second signed message M2.

[0175] In this way, through this process, the first network device and the second network device achieve secure data exchange and communication, ensuring the confidentiality, integrity, and authenticity of the data.

[0176] Referring to FIG. 9, in some embodiments, the method further comprises:

[0177] 018: obtaining a second session key according to the second session message and the quantum key identifier.

[0178] In some embodiments, the computing module is configured to obtain a second session key according to the second session message and the quantum key identifier.

[0179] In some embodiments, the processor is further configured to obtain a second session key according to the second session message and the quantum key identifier.

[0180] Specifically, the first network device obtains a second session key according to the second session message and the quantum key identifier, the second session key having quantum computing attack resistance by combining quantum key distribution technology and post-quantum cryptography technology.

[0181] In some embodiments, referring to FIG. 3 again, the initiator gateway calculates (by parameters and algorithms carried in the second decryption result) a second session key K2 from the second session message and the quantum key identifier UUID_QK in the second decryption result, which has good resistance to quantum computing attacks.

[0182] In this way, through this process, the first network device and the second network device can generate and exchange the second session key, and this key exchange and generation process ensures the security and reliability of the communication, providing a basis for establishing and maintaining a secure communication channel.

[0183] Referring to FIG. 10, in some embodiments, the method further comprises:

[0184] 019: performing post-quantum cryptographic signature verification on the quantum key identifier according to the second signature message.

[0185] In some embodiments, the verification module is configured to perform post-quantum cryptographic signature verification on the quantum key identifier according to the second signature message.

[0186] In some embodiments, the processor is further configured to perform post-quantum cryptographic signature verification on the quantum key identifier according to the second signature message.

[0187] Specifically, the first network device performs post-quantum cryptographic signature verification on the quantum key identifier according to the second signature message. In this way, the integrity and legitimacy of the received data are confirmed, and it is ensured that the correct quantum key identifier is received.

[0188] In some embodiments, referring to FIG. 3 again, the initiator gateway performs post-quantum cryptographic signature verification on the quantum key identifier according to the second signature message. By calculating the signature and verifying whether the signature is valid, it is confirmed whether the data has been tampered with during transmission, and the integrity and authenticity of the second session message are ensured.

[0189] In this way, through this process, the first network device can verify the source and integrity of the received message, and ensure the security and reliability of the communication.

[0190] Referring to FIG. 11, in some embodiments, step 015 (generating a second encryption key, a second verification key, and a second derived key according to the first quantum key, the first encryption key, the first verification key, the first derived key, the first encryption result, and the first decryption result, to encrypt the communication between the second network device and the first network device) comprises:

[0191] 0151: generating a second encryption key according to the first encryption key, the first quantum key, the first session key, and the second session key;

[0192] 0152: generating a second authentication key based on the first authentication key, the first quantum key, the first session key, and the second session key;

[0193] 0153: generating a second derived key based on the first derived key, the first quantum key, the first session key, and the second session key;

[0194] 0154: encrypting communications between the first network device and the second network device based on the second encryption key, the second authentication key, and the second derived key.

[0195] In some embodiments, the deriving module is further configured to generate a second encryption key based on the first encryption key, the first quantum key, the first session key, and the second session key. The deriving module is further configured to generate a second authentication key based on the first authentication key, the first quantum key, the first session key, and the second session key. The deriving module is further configured to generate a second derived key based on the first derived key, the first quantum key, the first session key, and the second session key. The communicating module is configured to encrypt communications between the first network device and the second network device based on the second encryption key, the second authentication key, and the second derived key.

[0196] In some embodiments, the processor is further configured to generate a second encryption key based on the first encryption key, the first quantum key, the first session key, and the second session key, and to generate a second authentication key based on the first authentication key, the first quantum key, the first session key, and the second session key, and to generate a second derived key based on the first derived key, the first quantum key, the first session key, and the second session key. The processor is further configured to encrypt communications between the first network device and the second network device based on the second encryption key, the second authentication key, and the second derived key.

[0197] Specifically, the first network device generates a second encryption key from the first encryption key, the first quantum key, the first session key and the second session key, which has good anti-quantum computing attack ability and is used to encrypt data in the communication process between the first network device and the second network device, ensuring the security of the data in the transmission process. Then, the first network device generates a second verification key from the first verification key, the first quantum key, the first session key and the second session key, which has good anti-quantum computing attack ability and is used to ensure the integrity and legitimacy of the data in the communication process between the first network device and the second network device. Then, the first network device generates a second derivation key from the first derivation key, the first quantum key, the first session key and the second session key, which has good anti-quantum computing attack ability and is used to ensure other security purposes in the communication process between the first network device and the second network device, such as deriving a more complex key. Finally, the first network device encrypts the communication between the first network device and the second network device according to the second encryption key, the second verification key and the second derivation key, so that the use of the keys generated by combining quantum key distribution technology and post-quantum cryptography technology enhances the anti-quantum computing attack ability of the communication between the network devices, protecting the data transmitted in the communication process.

[0198] In some embodiments, referring to FIG. 3, the initiator gateway generates a second encryption key by XORing the first encryption key SK_e, the first quantum key QK_UUID, the first session key K1 and the second session key K2, which is used to encrypt data in the communication process. A second verification key is generated by XORing the first verification key SK_a, the first quantum key QK_UUID, the first session key K1 and the second session key K2, which is used to ensure the integrity of the data. A second derivation key is generated by XORing the first derivation key, the first quantum key QK_UUID, the first session key and the second session key, which can be used for other security purposes, such as encrypting log data, backup data, etc. These keys combine quantum keys and post-quantum cryptography technology, and have excellent anti-quantum computing attack ability. The initiator gateway uses the second encryption key, the second verification key and the second derivation key for subsequent CREATE_CHILD_SA phase and rekeying, including message confidentiality and integrity protection and key derivation. The CREATE_CHILD_SA phase defines the encryption and authentication parameters of the actual data flow between the two network devices, while the rekeying is an important security mechanism in IPsec VPN, which is used to update and re-negotiate the existing security association.

[0199] Thus, the first network device generates keys for protecting subsequent communication data transmission between the communication networks. These keys combine quantum keys and post-quantum cryptography techniques, ensuring the security and reliability of the communication. The communication between the communication networks has good resistance to quantum computing attacks, ensuring the security of data transmission even in the case of quantum computers that can threaten existing encryption algorithms.

[0200] Referring to FIG. 12, the present embodiment provides a method for quantum-resistant security enhancement of an Internet Key Exchange protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used by the second network device, and the method comprising:

[0201] 021: performing key negotiation with the first network device to generate an initial key, the initial key comprising a first encryption key, a first authentication key, and a first derivation key;

[0202] 022: receiving a first encryption result of post-quantum cryptographic encryption processing of a first quantum key by the first network device, the first quantum key being obtained by the first network device from an accessed first network node;

[0203] 023: performing decryption processing on the first encryption result to obtain a first decryption result;

[0204] 024: performing encryption processing on the first decryption result to obtain a second encryption result;

[0205] 025: generating a second encryption key, a second authentication key, and a second derivation key according to a second quantum key, the first encryption key, the first authentication key, the first derivation key, the second encryption result, and the first decryption result, to encrypt communication between the second network device and the first network device.

[0206] The present embodiment also provides a network device comprising a memory and a processor. The method of the present embodiment can be implemented by the network device of the present embodiment. Specifically, the memory stores a computer program, and the processor is configured to perform key negotiation with a first network device to generate an initial key, the initial key comprising a first encryption key, a first authentication key, and a first derivation key, and receive a first encryption result of post-quantum cryptographic encryption processing of a first quantum key by the first network device, the first quantum key being obtained by the first network device from an accessed first network node, and perform decryption processing on the first encryption result to obtain a first decryption result and perform encryption processing on the first decryption result to obtain a second encryption result. The processor is further configured to generate a second encryption key, a second authentication key, and a second derivation key according to a second quantum key, the first encryption key, the first authentication key, the first derivation key, the second encryption result, and the first decryption result, to encrypt communication between the second network device and the first network device.

[0207] The method of the embodiments of the present application can be implemented by the second network device of the embodiments of the present application. Specifically, the second network device comprises a negotiation module, a receiving module, a decryption module, an encryption module, and a derivation module. The negotiation module is configured to perform key negotiation with the first network device to generate an initial key, wherein the initial key comprises a first encryption key, a first verification key, and a first derivation key. The receiving module is configured to receive a first encryption result of post-quantum cryptographic encryption processing of a first quantum key by the first network device, wherein the first quantum key is obtained by the first network device from an accessed first network node. The decryption module is configured to perform decryption processing on the first encryption result to obtain a first decryption result. The encryption module is configured to perform encryption processing on the first decryption result to obtain a second encryption result. The derivation module is configured to generate a second encryption key, a second verification key, and a second derivation key according to a second quantum key, the first encryption key, the first verification key, the first derivation key, the second encryption result, and the first decryption result, so as to encrypt communication between the second network device and the first network device.

[0208] Specifically, in the embodiments of the present application, first, the second network device performs key negotiation with the first network device to generate an initial key, wherein the initial key comprises a first encryption key, a first verification key, and a first derivation key, the first encryption key and the first verification key are used for protecting data in the communication process, and the derivation key can be used for other security purposes, such as deriving a higher security key. Next, the first network device applies for obtaining a quantum key, performs a series of operations on the quantum key to obtain a first encryption result, and sends the first encryption result to the second network device. Then, the second network device receives the first encryption result of post-quantum cryptographic encryption processing of a first quantum key by the first network device, wherein the first quantum key is obtained by the first network device from an accessed first network node. The second network device further performs decryption processing on the first encryption result to obtain a first decryption result. Thereafter, the second network device further performs encryption processing on the first decryption result to obtain a second encryption result.

[0209] Finally, the second network device generates a second encryption key, a second verification key, and a second derivation key according to a second quantum key, a first encryption key, a first verification key, a first derivation key, a second encryption result, and a first decryption result, so as to encrypt communication between the second network device and the first network device. The combination of post-quantum cryptography technology and quantum key distribution technology enhances the ability of the key to resist quantum computing attacks.

[0210] Through the above method, in the communication process of the second network device and the first network device, the second network device and the first network device apply for quantum keys, and use a post-quantum cryptography algorithm to encrypt the quantum keys to generate keys that can resist quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the keys with the ability to resist quantum computing attacks, the first network device and the second network device share the keys by communicating, and use these keys, quantum keys and other keys in the communication between the first network device and the second network device. In this way, the anti-quantum ability of network communication between network devices is enhanced.

[0211] In some embodiments, referring to FIG. 3, the responder IPSec VPN gateway, i.e., the second network device (hereinafter referred to as the responder gateway), and the initiator IPSec VPN gateway, i.e., the first network device (hereinafter referred to as the initiator gateway), perform key negotiation in the IKE security association initialization phase (IKE_SA_INIT phase) according to the IKEv2 (Internet Key Exchange version 2) protocol, and finally obtain a first encryption key SK_e for encrypting data, a first derivation key SK_d for deriving other keys, and a first authentication key SK_a for authentication and integrity protection. Both the responder gateway and the initiator gateway store the above three keys. The IPSec VPN gateway is a network security device that obtains session keys through the IKEv2 key exchange protocol and establishes an IPSec encryption channel to encrypt and decrypt business data transmitted through the network using the session keys.

[0212] After completing the IKE security association initialization phase, the IKE authentication phase (IKE_AUTH phase) of the IKEv2 protocol is completed. Then, the initiator gateway applies for a first quantum key QK_UUID, performs a series of operations on the first quantum key QK_UUID to obtain a first encryption result, and sends the first encryption result to the responder gateway. Then, the responder gateway receives the first encryption result of the initiator gateway, which is encrypted by the post-quantum cryptography algorithm, and the first quantum key QK_UUID is obtained by the initiator gateway from the accessed first quantum network node. The responder gateway decrypts the first encryption result to obtain a first decryption result, so that the responder gateway obtains the relevant data of the initiator gateway. The responder gateway encrypts the first decryption result to obtain a second encryption result, which increases the complexity of the data of the responder gateway.

[0213] Finally, the responder gateway generates a second encryption key, a second authentication key and a second derived key based on the second quantum key obtained from the second quantum network node, the first encryption key SK_e, the first authentication key SK_a, the first derived key SK_d, the second encryption result and the first decryption result. These keys with quantum computing attack resistance will be used in subsequent communication processes.

[0214] In summary, in the anti-quantum security enhancement method of the Internet Key Exchange protocol of the communication network, the network device and the network communication encryption device, the first network device and the second network device apply for quantum keys in the communication process, and use post-quantum cryptographic algorithms to encrypt the quantum keys to generate keys that can resist quantum computing attacks. The post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. After generating the keys with quantum computing attack resistance, the first network device and the second network device share the keys through communication, and fuse these keys, quantum keys and other keys for use in communication between the first network device and the second network device. In this way, the anti-quantum ability of network communication between network devices is enhanced.

[0215] Referring to FIG. 13, in some embodiments, the first decryption result includes a first signed message, and the method further includes:

[0216] 026: performing post-quantum cryptographic signature verification processing on the quantum key identifier according to the first signed message;

[0217] 027: in the case that the signature verification processing result is correct, obtaining a second quantum key from a second network node of the second network device.

[0218] In some embodiments, the signature verification module is configured to perform post-quantum cryptographic signature verification processing on the quantum key identifier according to the first signed message, and the obtaining module is configured to obtain a second quantum key from a second network node of the second network device in the case that the signature verification processing result is correct.

[0219] In some embodiments, the processor is further configured to perform post-quantum cryptographic signature verification processing on the quantum key identifier according to the first signed message, and obtain a second quantum key from a second network node of the second network device in the case that the signature verification processing result is correct.

[0220] Specifically, the second network device performs post-quantum cryptographic signature verification on the quantum key identifier according to the first signature message, so as to ensure that the correct quantum key identifier is obtained and the integrity of the data and the legality of the source are ensured. In the case that the verification result is correct, the second network device obtains the second quantum key from the second quantum network node accessed by the second network device, so as to ensure that the obtained second quantum key matches the first quantum key of the first network device, and the quantum key is used to generate a higher security key.

[0221] In some embodiments, referring to FIG. 3, the first decryption result obtained by the responder gateway after the decryption processing of the first encryption result includes the first signature message M1, and the quantum key identifier UUID_QK is verified according to the first signature message M1. It is determined that the received quantum key identifier UUID_QK is sent from the initiator and has not been accessed and modified by an unauthorized third party in the transmission process. After confirming that the received quantum key identifier is correct, the quantum key identifier is used to apply for obtaining the second quantum key from the second quantum network node accessed by the responder gateway. The second quantum key is generated at the same time as the first quantum key QK_UUID obtained by the initiator gateway and stored in the second quantum network node.

[0222] In this way, through this process, the second network device can verify the integrity and authenticity of the quantum key identifier, and ensure that the first network device has a matching quantum key, thereby providing security guarantee for subsequent communication.

[0223] Referring to FIG. 14, in some embodiments, the first decryption result includes the quantum key identifier, and the step 024 (encryption processing of the first decryption result to obtain the second encryption result) includes:

[0224] 0241: splicing the quantum key identifier and the second random number to obtain the second session message;

[0225] 0242: performing post-quantum cryptographic derivation processing on the second session message to generate the second session key in the second encryption result;

[0226] 0243: performing post-quantum cryptographic encryption processing on the second session message to generate the second encryption message in the second encryption result;

[0227] 0244: performing post-quantum cryptographic signature processing on the quantum key identifier to generate the second signature message in the second encryption result;

[0228] 0245: performing encryption processing on the second encryption result according to the first encryption key and the first verification key.

[0229] In some embodiments, the splicing module is configured to splice the quantum key identifier and a second random number to obtain a second session message. The derivation module is further configured to perform post-quantum cryptographic derivation on the second session message to obtain a second session key in the second encryption result. The encryption module is further configured to perform post-quantum cryptographic encryption on the second session message to obtain a second encrypted message in the second encryption result. The signature module is configured to perform post-quantum cryptographic signature on the quantum key identifier to obtain a second signature message in the second encryption result. The encryption module is further configured to encrypt the second encryption result according to the first encryption key and the first verification key.

[0230] In some embodiments, the processor is further configured to splice the quantum key identifier and a second random number to obtain a second session message, perform post-quantum cryptographic derivation on the second session message to obtain a second session key in the second encryption result, and perform post-quantum cryptographic encryption on the second session message to obtain a second encrypted message in the second encryption result, and perform post-quantum cryptographic signature on the quantum key identifier to obtain a second signature message in the second encryption result. The processor is further configured to encrypt the second encryption result according to the first encryption key and the first verification key.

[0231] Specifically, the second network device splices the quantum key identifier and a second random number to obtain a second session message, and then performs post-quantum cryptographic derivation on the second session message to obtain a second session key in the second encryption result. The second network device further performs post-quantum cryptographic encryption on the second session message to obtain a second encrypted message in the second encryption result, and performs post-quantum cryptographic signature on the quantum key identifier to obtain a second signature message in the second encryption result. The second network device encrypts the second encryption result according to the first encryption key and the first verification key. In this way, by using post-quantum cryptographic techniques to process the second session message, such as encryption, signature and derivation, the combination of quantum key distribution technology and post-quantum cryptography technology increases the complexity of the second session message and ensures the security of the second session message during transmission.

[0232] In some embodiments, referring to FIG. 3, the first decrypted result obtained by decrypting the first encrypted result includes a quantum key identifier UUID_QK, and the responder gateway directly splices the quantum key identifier UUID_QK and the second random number r2 generated randomly to obtain the second session message m3 in the second encrypted result, thereby increasing the randomness and unpredictability of the quantum key identifier by splicing with the random number r2. Then, the second session message m3 is taken as the encrypted message m in the PQC key encapsulation algorithm, and the G function in the PQC algorithm is run to obtain the second session key K(K2) in the second encrypted result, so that the first session key generated has good anti-quantum computing attack capability.

[0233] Then, the second session message is PQC encrypted and encapsulated to obtain the second encrypted message m4 in the second encrypted result, thereby ensuring the confidentiality of data in the transmission process. The responder gateway further adopts the PQC digital signature algorithm to take UUID_QK as M in the PQC signature algorithm to obtain the second signature message M2, thereby ensuring the integrity and authenticity of the message, and any unauthorized access and tampering will be detected. Finally, the responder gateway extends the messages AUTH_PQC and KE_PQC on the basis of the IKEv2, the AUTH_PQC includes the PQC signature information, the KE_PQC includes the PQC key encapsulation information, and the second encrypted result is sent to the initiator gateway under the encryption and integrity protection of the first encryption key SK_e and the first authentication key SK_a, and the message structure is as follows:

[0234] HDR, SK{IDr, [CERT_PQC,] AUTH_PQC, KE_PQC}

[0235] HDR is the IKEv2 protocol header, and SK{} indicates that the data content is encrypted and integrity protected. When the PQC certificate is available, CERT_PQC indicates the PQC encryption certificate and the PQC signature certificate, and when the certificate is not available, the initiator gateway and the responder gateway import the encryption public key and the signature public key of each other in an offline manner. In this way, the security and reliability of the second encrypted result in the transmission process are ensured.

[0236] In this way, through this process, the second network device ensures the security and integrity of the quantum key identifier, and establishes a secure foundation for subsequent communication.

[0237] Referring to FIG. 15, in some embodiments, the first decryption result comprises the first session message, the step 025 (generating the second encryption key, the second verification key and the second derivation key according to the second quantum key, the first encryption key, the first verification key, the first derivation key, the first encryption result and the first decryption result, to encrypt the communication between the second network device and the first network device) comprises:

[0238] 0251: performing post-quantum cryptographic derivation processing on the first session message to generate a first session key;

[0239] 0252: generating a second encryption key according to the first encryption key, the second quantum key, the first session key and the second session key;

[0240] 0253: generating a second verification key according to the first verification key, the second quantum key, the first session key and the second session key;

[0241] 0254: generating a second derivation key according to the first derivation key, the second quantum key, the first session key and the second session key;

[0242] 0255: encrypting the communication between the second network device and the first network device according to the second encryption key, the second verification key and the second derivation key.

[0243] In some embodiments, the derivation module is further configured to perform post-quantum cryptographic derivation processing on the first session message to generate a first session key. The derivation module is further configured to generate a second encryption key according to the first encryption key, the first quantum key, the first session key and the second session key. The derivation module is further configured to generate a second verification key according to the first verification key, the first quantum key, the first session key and the second session key. The derivation module is further configured to generate a second derivation key according to the first derivation key, the first quantum key, the first session key and the second session key. The communication module is configured to encrypt the communication between the first network device and the second network device according to the second encryption key, the second verification key and the second derivation key.

[0244] In some embodiments, the processor is further configured to perform post-quantum cryptographic derivation processing on the first session message to generate a first session key, and generate a second encryption key according to the first encryption key, the first quantum key, the first session key and the second session key, and generate a second verification key according to the first verification key, the first quantum key, the first session key and the second session key, and generate a second derivation key according to the first derivation key, the first quantum key, the first session key and the second session key. The processor is further configured to encrypt the communication between the first network device and the second network device according to the second encryption key, the second verification key and the second derivation key.

[0245] Specifically, the second network device generates a second encryption key according to the first encryption key, the first quantum key, the first session key and the second session key, the second encryption key having good anti-quantum computing attack capability and being used for encrypting data in a communication process between the first network device and the second network device, thereby ensuring the security of the data in the transmission process. Then, the second network device generates a second authentication key according to the first authentication key, the first quantum key, the first session key and the second session key, the second authentication key having good anti-quantum computing attack capability and being used for ensuring the integrity and legality of the data in the communication process between the first network device and the second network device. Then, the second network device generates a second derivation key according to the first derivation key, the first quantum key, the first session key and the second session key, the second derivation key having good anti-quantum computing attack capability and being used for ensuring other security purposes in the communication process between the first network device and the second network device, such as deriving a more complex key. Finally, the second network device encrypts the communication between the first network device and the second network device according to the second encryption key, the second authentication key and the second derivation key, so that the anti-quantum computing attack capability of the communication between the network devices is enhanced by using the keys generated by combining the quantum key distribution technology and the post-quantum cryptography technology, and the data transmitted in the communication process is protected.

[0246] In some embodiments, referring to FIG. 3, the responder gateway performs post-quantum cryptographic derivation processing on the first session message m1 to generate a first session key K1. Then, the responder gateway generates a second encryption key by performing XOR operation on the first encryption key SK_e, the first quantum key, the first session key and the second session key, the second encryption key being used for encrypting data in the communication process; generates a second authentication key by performing XOR operation on the first authentication key SK_a, the first quantum key, the first session key and the second session key, the second authentication key being used for ensuring the integrity of the data; and generates a second derivation key by performing XOR operation on the first derivation key SK_d, the first quantum key, the first session key and the second session key, the second derivation key being used for other security purposes (such as encrypting log data, backup data, etc.). These keys combine the quantum key and the post-quantum cryptography technology, and have excellent anti-quantum computing attack capability. The responder gateway uses the second encryption key, the second authentication key and the second derivation key to perform subsequent CREATE_CHILD_SA phase and rekeying, including message confidentiality and integrity protection and key derivation. The CREATE_CHILD_SA phase defines the encryption and authentication parameters of the actual data flow between the two network devices, and the rekeying is an important security mechanism in the IPsec VPN, which is used for updating and re-negotiating the existing security association.

[0247] Thus, the second network device generates keys for protecting subsequent communication data transmission between the communication networks. These keys combine quantum keys and post-quantum cryptography techniques, ensuring the security and reliability of the communication. The communication between the communication networks has good ability to resist quantum computing attacks, ensuring the security of data transmission even in the case that quantum computers may threaten existing encryption algorithms.

[0248] The present application also provides a computer-readable storage medium containing a computer program. When the computer program is executed by one or more processors, the one or more processors execute the method of the present application.

[0249] It can be understood that the computer program includes computer program code. The computer program code can be in the form of source code, object code, executable files or some intermediate forms. The computer-readable storage medium can include any entity or device capable of carrying computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution medium, etc.

[0250] In the description of the present application, the description referring to the terms "specifically", "further", "particularly", "it can be understood that", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiments or examples are included in at least one embodiment or example of the present application. In the present application, the illustrative description of the above terms does not mean to refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, the skilled in the art can combine and combine the different embodiments or examples described in the present application and the features of the different embodiments or examples without contradiction.

[0251] Any process or method descriptions in flow charts or otherwise described herein can be understood as representing code modules, segments, or portions of code that include one or more executable instructions for implementing specific logic functions (or steps) and / or that can be implemented in software and / or turned into a hardware implementation as can be necessary or desirable. The scope of preferred embodiments of the present application encompasses not only the described implementations but also equivalent implementations that are within the scope of the appended claims.

[0252] Although the embodiments of the present application have been shown and described above, it is understood that the above-described embodiments are exemplary and are not to be construed as limiting the present application, and that changes, modifications, substitutions and variations can be made by those skilled in the art without departing from the scope of the present application.

Claims

1. A method of quantum-resistant security enhancement of an Internet Key Exchange protocol of a communication network, characterized in that, The communication network comprises a first network device and a second network device, and the method is used for the first network device, and the method comprises: generating an initial key through key negotiation with the second network device, wherein the initial key comprises a first encryption key, a first authentication key and a first derived key; obtaining a first quantum key from a first network node accessing the first network device; performing post-quantum cryptographic encryption processing on the first quantum key, and sending a first encryption result of the post-quantum cryptographic encryption processing to the second network device; performing decryption processing on a received second encryption result sent by the second network device to obtain a second decryption result; generating a second encryption key, a second authentication key and a second derived key according to the first quantum key, the first encryption key, the first authentication key, the first derived key, the first encryption result and the second decryption result, so as to encrypt the communication between the first network device and the second network device.

2. The method of claim 1, wherein, The method further comprises: accessing the first network node through a pre-established channel; loading a security certificate of the first network device or a security certificate of the second network device.

3. The method of claim 1, wherein, The method of obtaining a first quantum key from a first network node accessing the first network device comprises: sending a first quantum key application to the first network node accessing the first network device; receiving a first quantum key distributed by the first network node according to the first quantum key application; annotating the first quantum key according to an identification code of the first network device to obtain a quantum key identifier.

4. The method of claim 3, wherein, The method of performing post-quantum cryptographic encryption processing on the first quantum key and sending a first encryption result of the post-quantum cryptographic encryption processing to the second network device comprises: performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result; performing encryption processing on the first encryption result according to the first encryption key and the first authentication key, and sending the first encryption result after the encryption processing to the second network device.

5. The method of claim 4, wherein, The method of performing post-quantum cryptographic encryption processing on the quantum key identifier to obtain a first encryption result comprises: splicing processing the quantum key identifier and a first random number generated at random to obtain a first session message; performing post-quantum cryptographic derivation processing on the first session message to generate a first session key in the first encryption result; performing post-quantum cryptographic encryption processing on the first session message to generate a first encrypted message in the first encryption result; performing post-quantum cryptographic signature processing on the quantum key identifier to generate a first signature message in the first encryption result.

6. The method of claim 5, wherein, The method of performing decryption processing on a received second encryption result sent by the second network device to obtain a second decryption result comprises: receiving the second encryption result sent by the second network device, wherein the second encryption result is obtained by performing encryption processing on a first decryption result by the second network device, and the first decryption result is obtained by performing decryption processing on the first encryption result by the second network device; decrypting the second encryption result to obtain a second decryption result, the second decryption result comprising the quantum key identifier, a second session message and a second signature message.

7. The method of claim 6, wherein, The method further comprises: obtaining a second session key according to the second session message and the quantum key identifier.

8. The method of claim 6, wherein, The method further comprises: performing post-quantum cryptographic signature verification on the quantum key identifier according to the second signature message.

9. The method of claim 7, wherein, The method further comprises: generating a second encryption key, a second verification key and a second derivation key according to the first quantum key, the first encryption key, the first verification key, the first derivation key, the first encryption result and the second decryption result, to encrypt communication between the second network device and the first network device. generating a second encryption key according to the first encryption key, the first quantum key, the first session key and the second session key; generating a second verification key according to the first verification key, the first quantum key, the first session key and the second session key; generating a second derivation key according to the first derivation key, the first quantum key, the first session key and the second session key; 10. A method of quantum-resistant enhancement of an Internet Key Exchange protocol of a communication network, c h a r a c t e r i s e d by, encrypting communication between the first network device and the second network device according to the second encryption key, the second verification key and the second derivation key. The communication network comprises a first network device and a second network device, and the method is used in the second network device, and the method comprises: performing key negotiation with the first network device to generate an initial key, the initial key comprising a first encryption key, a first verification key and a first derivation key; receiving a first encryption result of post-quantum cryptographic encryption processing on a first quantum key by the first network device, the first quantum key being obtained by the first network device from a first network node accessed by the first network device; decrypting the first encryption result to obtain a first decryption result; encrypting the first decryption result to obtain a second encryption result; 11. The method of claim 10, wherein, generating a second encryption key, a second verification key and a second derivation key according to a second quantum key, the first encryption key, the first verification key, the first derivation key, the second encryption result and the first decryption result, to encrypt communication between the second network device and the first network device. The first decryption result comprises a first signature message, and the method further comprises: performing post-quantum cryptographic signature verification on a quantum key identifier according to the first signature message; 12. The method of claim 11, wherein, in a case where the signature verification result is correct, obtaining the second quantum key from a second network node accessed by the second network device. The first decryption result comprises a quantum key identifier, and the encrypting the first decryption result to obtain a second encryption result comprises: splicing the quantum key identifier and a second random number generated randomly to obtain a second session message; performing post-quantum cryptographic derivation processing on the second session message to generate a second session key in the second encryption result; performing post-quantum cryptographic encryption processing on the second session message to generate a second encrypted message in the second encryption result; performing post-quantum cryptographic signature processing on the quantum key identifier to generate a second signature message in the second encryption result; performing encryption processing on the second encryption result according to the first encryption key and the first verification key.

13. The method of claim 12, wherein, The first decryption result includes a first session message, and the second encryption key, the second verification key and the second derived key are generated according to the second quantum key, the first encryption key, the first verification key, the first derived key, the second encryption result and the first decryption result, so as to encrypt the communication between the second network device and the first network device, including: performing post-quantum cryptographic derivation processing on the first session message to generate a first session key; generating a second encryption key according to the first encryption key, the second quantum key, the first session key and the second session key; generating a second verification key according to the first verification key, the second quantum key, the first session key and the second session key; generating a second derived key according to the first derived key, the second quantum key, the first session key and the second session key; encrypting the communication between the second network device and the first network device according to the second encryption key, the second verification key and the second derived key.

Images