Quantum-resistant security enhancement method for cryptographic device secure channel protocol

Abstract

The present application discloses a quantum-resistant security enhancement method for a cryptographic device secure channel protocol of a communication network. The method comprises: performing key agreement with a second network device to obtain an initial session key; acquiring a first quantum key and a quantum key identifier from a service node accessing a first network device; performing post-quantum cryptography encryption processing on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device; decrypting a received second encryption result sent by the second network device, to obtain a second decryption result; and generating a final session key on the basis of the initial session key, the first encryption result, the second decryption result and the first quantum key, so as to encrypt the communication between the first network device and the second network device. The communication between the first network device and the second network device is encrypted using a post-quantum cryptography algorithm and quantum key distribution technology, significantly enhancing the capability to resist quantum computing attacks.

Description

Quantum-resistant security enhancement methods for secure channel protocols for cryptographic devices

[0001] This application claims priority to Chinese Patent Application No. 202411191841.5, filed on August 28, 2024, entitled “Method for Enhancing Quantum Security of Secure Channel Protocol for Cryptographic Devices”, the entire contents of which are incorporated herein by reference. Technical Field

[0002] This application relates to the field of network security, and more specifically, to a method for enhancing the quantum-resistant security of a cryptographic device secure channel protocol for a communication network. Background Technology

[0003] The leap in computing power, exemplified by quantum computing, has significantly impacted the security of algorithms in classical cryptography. Understandably, the realization of large-scale quantum computers will affect applications in classical cryptography such as key negotiation, encryption, and signature. Therefore, providing cryptographic techniques resistant to quantum computing attacks has become an urgent problem to solve. Summary of the Invention

[0004] This application provides a method for enhancing the quantum-resistant security of a secure channel protocol for cryptographic devices in a communication network.

[0005] In a first aspect, embodiments of this application provide a method for enhancing the quantum security of a cryptographic device secure channel protocol in a communication network, wherein the communication network includes a first network device and a second network device, and the method is used in the first network device, the method comprising:

[0006] The initial session key is obtained through key negotiation with the second network device;

[0007] Obtain the first quantum key and quantum key identifier from the service node that accesses the first network device;

[0008] The quantum key identifier is subjected to post-quantum cryptographic encryption to obtain a first encryption result, and the first encryption result is sent to the second network device;

[0009] The second encryption result received from the second network device is decrypted to obtain a second decryption result. The second encryption result is obtained by the second network device performing post-quantum encryption on the first decryption result. The first decryption result is obtained by the second network device decrypting the first encryption result.

[0010] A final session key is generated based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt the communication between the first network device and the second network device.

[0011] Thus, during communication between the first and second network devices, they negotiate a key to obtain an initial session key. Subsequently, the first and second network devices request a quantum key and use a post-quantum cryptography algorithm to encrypt the quantum key identifier, generating a first encrypted result resistant to quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device decrypts the second encrypted result sent by the second network device to obtain a second decrypted result. Finally, the first network device generates a final session key based on the initial session key, the first encrypted result, the second decrypted result, and the quantum key to encrypt communication between the first and second network devices. In this way, quantum key distribution technology and post-quantum cryptography algorithms enhance the resistance to quantum computing attacks during the communication process of the first network device requesting access to the resources of the second network device.

[0012] In some embodiments, the method further includes:

[0013] The second network device is authenticated to obtain a second identity identifier of the second network device.

[0014] In this way, the first network device authenticates with the second network device, obtaining a second identity identifier from the second network device. This second identity identifier is then used by the first network device to generate a first signed message for verifying the message's origin in subsequent processes.

[0015] In some implementations, obtaining the first quantum key and quantum key identifier from the service node accessing the first network device includes:

[0016] The service node is used to fill the cryptographic module of the first network device with multiple keys;

[0017] A quantum key request is sent to the service node. The quantum key request is protected by a protection key, which is one of a plurality of keys randomly used from the cryptographic modules.

[0018] The service node receives a quantum key encryption result obtained by encrypting the first quantum key and the quantum key identifier according to the protection key. The first quantum key is generated and distributed to the service node by a first network node connected to the service node. The quantum key identifier is obtained by the first network node identifying the first quantum key according to the identification code of the first network node.

[0019] The quantum key encryption result is decrypted to obtain the first quantum key and the quantum key identifier.

[0020] Thus, the first network device uses the service node to fill its cryptographic module with multiple keys. Next, based on the authorization code received from the second network device, the first network device sends a quantum key request to the service node. This quantum key request is protected by a protection key, which is randomly selected from the multiple keys filled into the cryptographic module. Then, the first network device receives the quantum key encryption result obtained by the service node encrypting the first quantum key using the protection key. The first quantum key is generated and distributed to the service node by the first network node connected to the service node. Finally, the first network device decrypts the quantum key encryption result to obtain the first quantum key. The first network device obtains the first quantum key and a quantum key identifier, which can be used to generate keys with stronger resistance to quantum computing attacks.

[0021] In some embodiments, the step of performing post-quantum cryptographic encryption on the quantum key identifier to obtain a first encryption result and sending the first encryption result to the second network device includes:

[0022] The quantum key identifier and the first random number randomly generated by the first network device are concatenated to obtain a first concatenated body;

[0023] The first concatenation and the initial session key are XORed to obtain the first XOR message.

[0024] The first encryption key is obtained by performing post-quantum encryption processing on the first XOR message;

[0025] The first encapsulated message in the first temporary encryption result is obtained by performing post-quantum cryptographic encapsulation processing on the first XOR message.

[0026] The quantum key identifier, the first identity identifier of the first network device, and the second identity identifier are concatenated to obtain a first verification concatenation.

[0027] The first signature message in the first temporary encryption result is obtained by performing post-quantum signature processing on the first verification splice.

[0028] The first encrypted result is obtained by encrypting the first temporary encryption result according to the initial session key;

[0029] The first encryption result is sent to the second network device.

[0030] Thus, the first network device concatenates the quantum key identifier and a first random number randomly generated by the first network device to obtain a first concatenated body. Next, the first network device XORs the first concatenated body and the initial session key to obtain a first XOR message. Then, the first network device performs post-quantum encryption on the first XOR message to obtain a first encryption key. Furthermore, the first XOR message undergoes post-quantum encryption encapsulation to obtain a first encapsulated message in the first temporary encryption result. The first network device then concatenates the quantum key identifier, the first identity identifier, and the second identity identifier of the first network device to obtain a first verification concatenated body. Finally, the first verification concatenated body undergoes post-quantum signature processing to obtain a first signature message in the first temporary encryption result. Subsequently, the first network device encrypts the first temporary encryption result according to the initial session key to obtain a first encrypted result. Finally, the first network device sends the first encrypted result to the second network device. In this way, the first network device obtains a first encryption key with good quantum resistance by utilizing the quantum key identifier, the randomly generated first random number, and the initial session key, which can be used to generate the subsequent final session key. A first signed message is also generated to verify the message's origin and correctness, preventing unauthorized access and tampering of data during transmission. Furthermore, the first encryption result is sent to the second network device under the protection of the initial session key, enhancing the confidentiality of the first encryption result.

[0031] In some embodiments, the step of decrypting the received second encryption result sent by the second network device to obtain a second decryption result includes:

[0032] Receive the second encryption result sent by the second network device;

[0033] The second encryption result is obtained by decrypting the second encryption result using the initial session key;

[0034] The second temporary encryption result is decrypted to obtain a second decryption result, which includes a second encrypted encapsulated message and a second signature message.

[0035] Thus, the first network device receives the second encrypted result sent by the second network device. Next, the first network device decrypts the second encrypted result using the initial session key to obtain a second temporary encrypted result. It then decrypts the second temporary encrypted result to obtain a second decrypted result, which includes a second encrypted encapsulated message and a second signature message. In this way, the first network device determines the availability of the communication channel with the second network device and obtains the second encrypted encapsulated message and the second signature message. The second encryption key can be obtained from the second encrypted encapsulated message and used to generate the final session key. The second signature message can be used to verify the correctness of the second encrypted result.

[0036] In some embodiments, the method further includes:

[0037] The second XOR message is obtained based on the second encrypted encapsulated message;

[0038] The second XOR message is subjected to post-quantum encryption processing to obtain the second encryption key;

[0039] The second concatenation is obtained by performing an XOR operation on the second XOR message and the initial session key;

[0040] The quantum key identifier is obtained from the second splice.

[0041] Thus, the first network device obtains the second XOR message based on the second encrypted encapsulated message. Next, the first network device performs post-quantum encryption on the second XOR message to obtain the second encryption key. The first network device then performs an XOR operation on the second XOR message and the initial session key to obtain the second concatenation. Finally, the first network device obtains the quantum key identifier based on the second concatenation. In this way, the first network device obtains the second encryption key used to generate the final session key, which has good quantum resistance. It also obtains the quantum key identifier, which can be used to verify that the quantum key identifier received by the second network device is correct.

[0042] In some embodiments, the method further includes:

[0043] The second verification concatenation is obtained based on the second signature message;

[0044] The second signature message is subjected to post-quantum cryptographic verification processing to confirm the correctness of the second verification concatenation. The second verification concatenation is obtained by the second network device by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier.

[0045] Thus, the first network device obtains the second verification concatenation based on the second signature message. It then performs post-quantum cryptographic verification processing on the second signature message to confirm the correctness of the second verification concatenation. The second verification concatenation is obtained by the second network device by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier. In this way, by performing post-quantum cryptographic verification processing on the second signature message, the correctness of the quantum key identifier, the first identity identifier, and the second identity identifier received by the first network device from the second network device is confirmed, providing security for subsequent data transmission.

[0046] In some implementations, generating a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt communication between the first network device and the second network device includes:

[0047] The initial session key, the first encryption key, the second encryption key, and the first quantum key are XORed to obtain the final session key, which is used to encrypt the communication between the first network device and the second network device.

[0048] Thus, the first network device XORs the initial session key, the first encryption key, the second encryption key, and the first quantum key to obtain the final session key, which is then used to encrypt the communication between the first and second network devices. In this way, by combining quantum key distribution technology and post-quantum cryptography, the final session key is generated, enhancing the resistance to quantum computing attacks in the communication between the first and second network devices and protecting the data transmitted during communication.

[0049] In some embodiments, the method further includes:

[0050] Receive the second session key verification message sent by the second network device;

[0051] The first session key verification message is obtained by calculating the first verification concatenation based on the final session key.

[0052] The first session key verification message and the second session key verification message are compared to determine whether the final session key obtained by the first network device and the final session key obtained by the second network device are consistent.

[0053] Thus, the first network device receives the second session key verification message sent by the second network device. Next, the first network device calculates the first session key verification message based on the final session key and the first verification concatenation. Finally, the first network device compares the first session key verification message and the second session key verification message to determine that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device. In this way, by calculating the first session key verification message and comparing it with the second session key verification message, it is determined that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device, thus avoiding communication failure.

[0054] Secondly, embodiments of this application also provide a method for enhancing the quantum security of a cryptographic device secure channel protocol in a communication network, wherein the communication network includes a first network device and a second network device, and the method is used in the second network device, the method comprising:

[0055] The initial session key is obtained through key negotiation with the first network device;

[0056] The first network device receives a first encryption result after performing post-quantum cryptographic encryption on a quantum key identifier, wherein the quantum key identifier is obtained by the first network device from a service node connected to the first network device.

[0057] The first encryption result is decrypted to obtain the first decryption result;

[0058] The first decryption result is subjected to post-quantum cryptographic encryption to obtain a second encryption result, and the second encryption result is sent to the first network device;

[0059] A final session key is generated based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the first network device and the second network device.

[0060] Thus, during communication between the first and second network devices, they negotiate a key to obtain an initial session key. Subsequently, the first and second network devices request a quantum key and use a post-quantum cryptography algorithm to encrypt the quantum key identifier, generating a first encrypted result resistant to quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device decrypts the second encrypted result sent by the second network device to obtain a second decrypted result. Finally, the first network device generates a final session key based on the initial session key, the first encrypted result, the second decrypted result, and the quantum key to encrypt communication between the first and second network devices. In this way, quantum key distribution technology and post-quantum cryptography algorithms enhance the resistance to quantum computing attacks during the communication process of the first network device requesting access to the resources of the second network device.

[0061] In some embodiments, the method further includes:

[0062] Access to the second network node via a pre-established channel;

[0063] Load the security certificate of the first network device or the security certificate of the second network device.

[0064] Thus, the second network device accesses the second network node through a pre-established channel. Next, the second network device loads either the security certificate of the first network device or the security certificate of the second network device. In this way, the second network device can obtain the second quantum key by accessing the network node through the channel. Furthermore, the second network device also obtains a security certificate for encrypting and decrypting data transmitted during communication.

[0065] In some embodiments, the method further includes:

[0066] The identity is authenticated with the first network device to obtain the first identity identifier of the first network device.

[0067] In this way, the second network device authenticates with the first network device and obtains the first network device's first identity identifier. This first identity identifier is then used by the second network device to verify the first signed message and generate the subsequent second session key verification message.

[0068] In some implementations, the first decryption result includes a first encrypted encapsulated message, and the method further includes:

[0069] The first XOR message is obtained based on the first encrypted encapsulated message;

[0070] The first encryption key is obtained by performing post-quantum encryption processing on the first XOR message;

[0071] The quantum key identifier is obtained by XORing the first message and the initial session key.

[0072] Thus, the second network device obtains the first XOR message based on the first encrypted encapsulated message. Next, the second network device performs post-quantum encryption on the first XOR message to obtain the first encryption key. The second network device then obtains a quantum key identifier by combining the first XOR message and the initial session key. In this way, the second network device obtains the first encryption key, which can be used to subsequently generate a final session key with good quantum resistance. It also obtains the quantum key identifier, which can be used to subsequently apply for a second quantum key.

[0073] In some implementations, the first decryption result includes a first signature message, and the method further includes:

[0074] The first verification concatenation is obtained based on the first signature message;

[0075] The first signature message is subjected to post-quantum cryptographic verification processing to confirm that the correct first verification concatenation is obtained. The first verification concatenation is obtained by the second network device by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier of the second network device.

[0076] If the quantum key identifier is correct, a quantum key request is sent to the second network node based on the quantum key identifier;

[0077] Receive the second quantum key sent by the second network node according to the quantum key request.

[0078] Thus, the second network device obtains the first verification concatenation based on the first signature message. Next, the second network device performs post-quantum cryptographic verification processing on the first signature message to confirm the correct first verification concatenation. The first verification concatenation is obtained by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier of the second network device. Then, if the obtained quantum key identifier is correct, the second network device sends a quantum key request to the second network node based on the quantum key identifier. Finally, the second network device receives the second quantum key sent by the second network node based on the quantum key request. In this way, the second network device, through post-quantum cryptographic verification processing of the first signature message, confirms that the data information received from the first network device is correct and has not been accessed without authorization. Furthermore, by requesting a second quantum key matching the first quantum key from the second network node using the quantum key identifier, the second quantum key exhibits good resistance to quantum computing attacks and can be used to generate the final session key.

[0079] In some embodiments, the step of performing post-quantum cryptographic encryption on the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device, includes:

[0080] The quantum key identifier and the second random number randomly generated by the second network device are concatenated to obtain a second concatenated body;

[0081] The second concatenation and the initial session key are XORed to obtain the second XOR message.

[0082] The second XOR message is subjected to post-quantum encryption processing to obtain the second encryption key;

[0083] The second encapsulated message in the second temporary encryption result is obtained by performing post-quantum cryptographic encapsulation processing on the second XOR message.

[0084] The quantum key identifier, the first identity identifier, and the second identity identifier are concatenated to obtain a second verification concatenation.

[0085] The second signature message in the second temporary encryption result is obtained by performing post-quantum signature processing on the second verification concatenation.

[0086] The second temporary encryption result is obtained by encrypting the second encryption result according to the initial session key;

[0087] The second encryption result is sent to the first network device.

[0088] Thus, the second network device concatenates the quantum key identifier and a second random number randomly generated by the second network device to obtain a second concatenated body. Next, the second network device XORs the second concatenated body and the initial session key to obtain a second XOR message. Then, the second network device performs post-quantum encryption on the second XOR message to obtain a second encryption key. It then performs post-quantum encryption encapsulation on the second XOR message to obtain a second encapsulated message in the second temporary encryption result. Subsequently, the second network device concatenates the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification concatenated body. The second network device then performs post-quantum signature processing on the second verification concatenated body to obtain a second signature message in the second temporary encryption result. Subsequently, the second network device encrypts the second temporary encryption result according to the initial session key to obtain a second encrypted result. Finally, the second network device sends the second encrypted result to the first network device. In this way, the second network device obtains a second encryption key with good quantum resistance by utilizing the quantum key identifier, the randomly generated second random number, and the initial session key, which can be used to generate the subsequent final session key. It also generates a second signed message that can be used to verify the source and correctness of the message, and to prevent unauthorized access and tampering of the data during transmission.

[0089] In some implementations, generating a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt communication between the first network device and the second network device includes:

[0090] The initial session key, the first encryption key, the second encryption key, and the second quantum key are XORed to obtain the final session key, which is used to encrypt the communication between the first network device and the second network device.

[0091] Thus, the second network device XORs the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain the final session key, which is then used to encrypt the communication between the first and second network devices. In this way, by combining quantum key distribution technology and post-quantum cryptography, a final session key is generated, enhancing the resistance of communication between the first and second network devices to quantum computing attacks and protecting the data transmitted during communication.

[0092] In some embodiments, the method further includes:

[0093] The second verification concatenation is encrypted using the final session key to obtain the second session key verification message.

[0094] The second session key verification message is sent to the first network device, and the second session key verification message is encrypted and protected by the initial session key.

[0095] Thus, the second network device encrypts the second verification concatenation using the final session key to obtain the second session key verification message. This second session key verification message is then sent to the first network device, where it is encrypted and protected by the initial session key. In this way, the second network device sends the generated second session key verification message to the first network device under the protection of the initial session key, enabling the first network device to verify the consistency between the final session key generated by the first network device and the final session key generated by the second network device.

[0096] Thirdly, embodiments of this application provide a computing processing device, comprising: a memory storing computer-readable code; and one or more processors, wherein when the computer-readable code is executed by the one or more processors, the computing processing device executes the quantum-resistant security enhancement method for the cryptographic device secure channel protocol of the communication network as proposed in the first and second aspects above.

[0097] Fourthly, embodiments of this application provide a computer program including computer-readable code, which, when executed on a computing processing device, causes the computing processing device to execute the quantum-resistant security enhancement method for the cryptographic device secure channel protocol of the communication network as described in the first and second aspects above.

[0098] Fifthly, this application proposes a computer-readable medium storing the computer program as described in the fourth aspect above.

[0099] Additional aspects and advantages of embodiments of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of embodiments of this application. Attached Figure Description

[0100] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the description of the embodiments taken in conjunction with the following drawings, wherein:

[0101] Figure 1 is one of the flowcharts illustrating a quantum-resistant security enhancement method for a secure channel protocol for cryptographic devices proposed in this application.

[0102] Figure 2 is an architecture diagram of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in an embodiment of this application;

[0103] Figure 3 is a signaling diagram of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in an embodiment of this application;

[0104] Figure 4 is a second schematic flowchart of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in an embodiment of this application;

[0105] Figure 5 is a third flowchart illustrating a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application embodiment;

[0106] Figure 6 is a fourth flowchart illustrating a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application embodiment;

[0107] Figure 7 is a fifth flowchart illustrating a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application.

[0108] Figure 8 is a schematic flowchart of the sixth method for enhancing the quantum security of a cryptographic device secure channel protocol according to an embodiment of this application;

[0109] Figure 9 is a flowchart of the seventh method for enhancing the quantum security of a cryptographic device secure channel protocol according to an embodiment of this application;

[0110] Figure 10 is the eighth flowchart of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application embodiment;

[0111] Figure 11 is a flowchart of the ninth embodiment of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application.

[0112] Figure 12 is a schematic flowchart of the tenth of the quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in the embodiments of this application;

[0113] Figure 13 is an eleventh flowchart illustrating a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in an embodiment of this application;

[0114] Figure 14 is a schematic flowchart of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in an embodiment of this application.

[0115] Figure 15 is a flowchart of the method for enhancing the quantum security of a cryptographic device secure channel protocol according to an embodiment of this application.

[0116] Figure 16 is a schematic flowchart of the fourteenth embodiment of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application.

[0117] Figure 17 is a flowchart of the fifteenth embodiment of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application.

[0118] Figure 18 is a schematic flowchart of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in an embodiment of this application.

[0119] Figure 19 is a flowchart of the seventeenth embodiment of a quantum-resistant security enhancement method for a cryptographic device secure channel protocol proposed in this application.

[0120] Figure 20 is a schematic diagram of the structure of a computing device for a quantum-resistant security enhancement method of a cryptographic device secure channel protocol proposed in an embodiment of this application.

[0121] Figure 21 is a schematic diagram of the structure of a computer program for a quantum-resistant security enhancement method of a cryptographic device secure channel protocol proposed in an embodiment of this application. Detailed Implementation

[0122] The embodiments of this application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the embodiments of this application, and should not be construed as limiting the embodiments of this application.

[0123] The leap in computing power, exemplified by quantum computing, has significantly impacted the security of algorithms in classical cryptography. In other words, quantum computing poses a more direct and pressing threat to classical cryptography. For instance, Shor's quantum algorithm can solve complex mathematical problems such as large integer factorization and discrete logarithm solving in polynomial time, and can quickly break widely used public-key cryptographic algorithms such as RSA, ECC, DSA, and ElGamal. Understandably, as large-scale quantum computers become available, they will have some impact on applications of classical cryptography such as key negotiation, encryption, and signatures.

[0124] Thus, the security of the Internet, which uses classical cryptographic algorithms to protect communication processes, is heavily threatened by quantum computing attacks. For example, the secure channel protocol for cryptographic devices, defined in GM / T0050 "Technical Specification for Cryptographic Device Management," is used for secure communication between cryptographic devices and the device management center. This protocol employs the SM2 digital signature algorithm and the SM2 asymmetric encryption / decryption algorithm for authentication and key exchange between the communicating parties, providing relatively strong security and forward secrecy. However, SM2 is still an elliptic curve algorithm and lacks resistance to quantum computing.

[0125] Currently, international technologies for addressing quantum computing attacks mainly fall into two categories: one focuses on scenarios where (symmetric) key negotiation is performed using asymmetric algorithms, followed by encrypted transmission using symmetric algorithms. This involves researching the use of quantum key distribution (QKD) networks for symmetric key negotiation to protect key security. The other category researches post-quantum cryptography (PQC) algorithms to directly replace existing asymmetric algorithms. Quantum key distribution technology utilizes quantum mechanics principles to generate keys that cannot be intercepted by third parties, ensuring the security of key transmission. It is particularly suitable for key exchange scenarios and can replace existing asymmetric key negotiation algorithms, such as RSA or ECC, to improve key security. However, quantum key distribution technology cannot currently completely replace all applications of asymmetric algorithms. For example, in scenarios involving signature verification, integrity protection, and non-repudiation, asymmetric algorithms are still required.

[0126] Post-quantum cryptography algorithms are asymmetric cryptographic algorithms designed based on new mathematical problems, aiming to resist the potential threats posed by quantum computers. NIST has published the first batch of four proposed standardized post-quantum cryptographic algorithms: Kyber, Dilithium, Falcon, and SPHINCS+. These algorithms cover multiple technical approaches to reduce the risk of a single technique being compromised. Theoretically, post-quantum cryptography algorithms can replace all asymmetric algorithms and are more universal. However, the security of post-quantum cryptography algorithms still depends on the complexity of the computational problem, and they may face new methods of breaking them in the future or become insecure as computing power increases. Furthermore, post-quantum cryptography standards have not yet been officially published, and the production and certification of related products will take time; therefore, their large-scale application will require a considerable period.

[0127] Both post-quantum cryptography algorithms and quantum key distribution technologies have the ability to resist quantum computing attacks, but each has its limitations. Therefore, providing a relatively low-cost and highly secure cryptographic technology that can resist quantum computing attacks has become an urgent problem to be solved.

[0128] Based on the above problems, please refer to Figure 1. This application provides a method for enhancing the quantum security of a secure channel protocol for cryptographic devices in a communication network. The communication network includes a first network device and a second network device. The method is used in the first network device and includes:

[0129] 011: Obtain the initial session key through key negotiation with the second network device;

[0130] 012: Obtain the first quantum key and quantum key identifier from the service node that has accessed the first network device;

[0131] 013: Perform post-quantum cryptographic encryption on the quantum key identifier to obtain the first encryption result, and send the first encryption result to the second network device;

[0132] 014: The second encryption result received from the second network device is decrypted to obtain the second decryption result;

[0133] 015: Generate a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt the communication between the first network device and the second network device.

[0134] This application also provides a first network device, including a memory and a processor. The method of this application can be implemented by the first network device. Specifically, the memory stores a computer program, and the processor is used to negotiate a key with a second network device to obtain an initial session key, and to obtain a first quantum key and a quantum key identifier from a service node connected to the first network device. The processor then performs post-quantum cryptography encryption on the quantum key identifier to obtain a first encryption result, and sends the first encryption result to the second network device. The processor is also used to decrypt a second encryption result received from the second network device to obtain a second decryption result. The processor is further used to generate a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key, to encrypt communication between the first network device and the second network device.

[0135] This application also provides a first network device quantum security enhancement device. The method of this application can be implemented by the first network device quantum security enhancement device of this application. Specifically, the first network device quantum security enhancement device includes a negotiation module, an acquisition module, an encryption module, a decryption module, and a derivation module. The negotiation module is used to negotiate a key with a second network device to obtain an initial session key. The acquisition module is used to obtain a first quantum key and a quantum key identifier from the service node connected to the first network device. The encryption module is used to perform post-quantum cryptography encryption processing on the quantum key identifier to obtain a first encryption result, and send the first encryption result to the second network device. The decryption module is used to decrypt the received second encryption result sent by the second network device to obtain a second decryption result. The derivation module is used to generate a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key, so as to encrypt the communication between the first network device and the second network device.

[0136] This application provides a communication system based on a cryptographic device secure channel protocol. The communication system includes a first network device, a second network device, and a quantum key distribution network as described in the above embodiments. The quantum key distribution network is configured to distribute quantum keys to the first network device or the second network device.

[0137] Specifically, a quantum key distribution network (QKD) includes network nodes and a quantum network link control center. Network nodes are used to store and distribute quantum keys. The quantum network link control center can establish quantum key distribution and relay links between network nodes according to their names. These links are used for data transfer and other functions. The QKD network provides services such as quantum key generation, quantum key relay, and quantum key provision.

[0138] Referring to Figure 2, in some embodiments, the first network device and the second network device communicate through a secure channel. The secure channel is an encrypted communication path used to securely transmit data, instructions, and control information between the first and second network devices. This channel ensures the confidentiality, integrity, and authenticity of data during transmission, preventing unauthorized access and data leakage. The first network device connects to a service node, which acts as a relay station for connecting the first network device to network nodes, used to supply keys to the first network device and to relay and store quantum keys. When the first network device sends a quantum key request, the network node sends the quantum key generated by the quantum key distribution network to the service node connected to the first network device, and the service node then sends the quantum key back to the first network device. The simplified process of the first and second network devices obtaining quantum keys is as follows: First, the first network device sends a quantum key request to the service node connected to the first network device. Then, the service node requests a quantum key from the first network node connected to the service node. Next, the first network node distributes the quantum key generated according to the quantum key request to the service node, and the service node then distributes the quantum key to the first network device. Simultaneously, the quantum network link control center enables the second network node connected to the second network device to generate a quantum key. However, this quantum key is not immediately distributed to the second network device; instead, it is first stored in the network node. The correspondence between the first network device, the second network device, the service node, and the network node is provided by the management platform.

[0139] It should be noted that this application uses the FIPS203 Module-Lattice-based Key-Encapsulation Mechanism Standard as the PQC key encapsulation algorithm and the FIPS204 Module-Lattice-Based Digital Signature Standard as the PQC digital signature algorithm for explanation and illustration. All subsequent descriptions of PQC algorithm-related operations refer to the aforementioned FIPS standards. Of course, in other embodiments, other algorithms such as the NewHope algorithm, Sidh algorithm, and HQC algorithm can also be used as the relevant PQC algorithms. It should also be noted that the embodiments of this application refer to the cryptographic device security channel protocol defined in GM / T0050 "Technical Specification for Cryptographic Device Management", hereinafter referred to as the security channel protocol.

[0140] Specifically, the first network device and the second network device negotiate a key, and both obtain an initial session key. Next, the first network device sends a quantum key request to a first network node connected to it, and then obtains a first quantum key and a quantum key identifier from the first network node. The first quantum key and quantum key identifier can be used to generate a key resistant to quantum computing attacks, and the quantum key identifier helps in the use and management of the quantum key. After obtaining the first quantum key and quantum key identifier, the first network device performs post-quantum cryptography encryption on the quantum key identifier to obtain a first encryption result, and sends the first encryption result to the second network device. By performing post-quantum cryptography encryption on the quantum key identifier, quantum key distribution technology is combined with a post-quantum cryptography algorithm to increase the complexity of the key, and the encryption result is shared with the second network device to ensure that the communication data of the first and second network devices in the communication network remains consistent.

[0141] Then, the second network device receives the first encryption result sent by the first network device, decrypts the first encryption result to obtain a first decryption result. The second network device then performs post-quantum cryptography encryption on the first decryption result to obtain a second encryption result. After obtaining the second encryption result, the second network device sends the second encryption result to the first network device so that the first network device can also share the information of the second network device and the generated key. The second network device then generates a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the first network device and the second network device.

[0142] Simultaneously, the first network device receives the second encryption result sent by the second network device and decrypts it to obtain the second decryption result. The first network device then generates a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt the communication between the first network device and the second network device.

[0143] The following example illustrates the method of this application's implementation. In the embodiments described, the first network device is a managed cryptographic device, hereinafter referred to as the cryptographic device. The cryptographic device interacts with the device management center through a device management agent running on the cryptographic device. It should be emphasized that in the embodiments described, communication between the cryptographic device and the device management center is accomplished through the device management agent running on the cryptographic device. The second network device is the device management center, which queries the basic configuration and operating information of the cryptographic device and sends specific management instructions to the cryptographic device. The quantum network node is a network node that stores and provides the generated quantum key to the device management center through a trusted channel or provides the generated quantum key to the cryptographic device through a key service node. The key service node is a service node that connects to the quantum network node to provide pre-shared key injection and quantum key services to multiple cryptographic devices.

[0144] Referring to Figure 3, the cryptographic device and the device management center negotiate keys according to the secure channel protocol process, and both obtain a shared initial session key H1, which is the session key in the secure channel protocol. Next, the cryptographic device sends a quantum key request to the first quantum network node connected to it, and then obtains the first quantum key QK_UUID-1 and quantum key identifier UUID_QK from the first quantum network node. The first quantum key QK_UUID-1 and quantum key identifier UUID_QK can be used to generate keys resistant to quantum computing attacks, and the quantum key identifier UUID_QK is helpful for using and managing quantum keys. After obtaining the first quantum key QK_UUID-1 and quantum key identifier UUID_QK, the cryptographic device performs post-quantum cryptographic encryption processing on the quantum key identifier UUID_QK to obtain the first encryption result, and sends the first encryption result to the device management center. By performing post-quantum cryptographic encryption on the quantum key identifier UUID_QK, quantum key distribution technology is combined with post-quantum cryptographic algorithms to increase the complexity of the key. The encryption result is then sent to the device management center for sharing, ensuring that the communication data between the cryptographic device and the device management center in the communication network remains consistent.

[0145] Then, the device management center receives the first encryption result sent by the cryptographic device, decrypts it to obtain the first decryption result. The device management center then performs post-quantum cryptographic encryption on the first decryption result to obtain the second encryption result. After obtaining the second encryption result, the device management center sends it to the cryptographic device so that the cryptographic device can also share the device management center's information and the generated key. The device management center then generates a final session key based on the initial session key H1, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the cryptographic device and the device management center.

[0146] Simultaneously, the cryptographic device receives the second encryption result sent by the device management center and decrypts it to obtain the second decryption result. The cryptographic device then generates a final session key based on the initial session key H1, the first encryption result, the second decryption result, and the first quantum key QK_UUID-1 to encrypt communication between the cryptographic device and the device management center.

[0147] In summary, in the quantum-resistant security enhancement method, communication system, first network device, and second network device of the communication network cryptographic device secure channel protocol according to the embodiments of this application, during the communication process between the first network device and the second network device, the first network device and the second network device negotiate a key to obtain an initial session key. Subsequently, the first network device and the second network device request a quantum key and use a post-quantum cryptography algorithm to encrypt the quantum key identifier to generate a first encryption result resistant to quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device decrypts the second encryption result sent by the second network device to obtain a second decryption result. Finally, the first network device generates a final session key based on the initial session key, the first encryption result, the second decryption result, and the quantum key to encrypt the communication between the first network device and the second network device. Thus, the quantum key distribution technology and the post-quantum cryptography algorithm enhance the quantum-resistant capability of the communication process in which the first network device requests access to the resources of the second network device.

[0148] Please refer to Figure 4. In some embodiments, the method further includes:

[0149] 016: Authenticate with the second network device to obtain the second identity identifier of the second network device.

[0150] In some implementations, the acquisition module is used to authenticate with the second network device to obtain a second identity identifier of the second network device.

[0151] In some implementations, the processor is also used to authenticate with the second network device to obtain a second identity identifier of the second network device.

[0152] Specifically, the first network device authenticates with the second network device to obtain a second identity identifier from the second network device. In this way, the first network device obtains the second identity identifier from the second network device, which can be used in subsequent processes to generate a first signed message for verifying the message's origin.

[0153] Continuing with the example above, identity authentication includes certificate authentication and identity verification. The second identity identifier is the device management center identifier ID_Center. Please refer to Figure 3 again. The cryptographic device and the device management center perform certificate authentication and identity verification according to the secure channel protocol process. The cryptographic device obtains the device management center identifier ID_Center from the device management center.

[0154] In this way, the cryptographic device obtains the Device Management Center ID_Center from the Device Management Center, which can be used in subsequent processes to generate the first signed message for verifying the source of the message.

[0155] Please refer to Figure 5. In some embodiments, step 012 (obtaining the first quantum key and quantum key identifier from the service node accessing the first network device) includes:

[0156] 0121: Use the service node to fill the cryptographic module of the first network device with multiple keys;

[0157] 0122: Send a quantum key request to the service node;

[0158] 0123: The quantum key encryption result obtained by the receiving service node encrypting the first quantum key and the quantum key identifier according to the protection key;

[0159] 0124: Decrypt the quantum key encryption result to obtain the first quantum key and quantum key identifier.

[0160] In some implementations, the charging module is used to charge multiple keys into the cryptographic module of the first network device using the service node. The sending module is used to send a quantum key request to the service node. The receiving module is used to receive the quantum key encryption result obtained by the service node encrypting the first quantum key and the quantum key identifier according to the protection key. The decryption module is used to decrypt the quantum key encryption result to obtain the first quantum key and the quantum key identifier.

[0161] In some embodiments, the processor is further configured to use the service node to fuel the cryptographic module of the first network device with multiple keys, and to send a quantum key request to the service node. The processor is also configured to receive a quantum key encryption result obtained by the service node encrypting a first quantum key and a quantum key identifier using a protection key, and to decrypt the quantum key encryption result to obtain the first quantum key and the quantum key identifier.

[0162] Specifically, the first network device uses a service node to fill its cryptographic module with multiple keys. Next, based on an authorization code received from a second network device, the first network device sends a quantum key request to the service node. This quantum key request is protected by a protection key, which is randomly selected from the multiple keys filled into the cryptographic module. Then, the first network device receives the quantum key encryption result obtained by the service node encrypting the first quantum key using the protection key. The first quantum key is generated and distributed to the service node by the first network node connected to the service node. Finally, the first network device decrypts the quantum key encryption result to obtain the first quantum key. The first network device obtains the first quantum key and a quantum key identifier, which can be used to generate keys with stronger resistance to quantum computing attacks.

[0163] Continuing with the example above, please refer to Figure 3 again. The cryptographic device uses the cryptographic service node to pre-fill its personal cryptographic module with a 1M-bit (128-bit) key. The personal cryptographic module includes, but is not limited to, a Smart Cryptographic Key (HSM) and a Virtual Security Module (VSM). Next, the cryptographic device sends a quantum key request to the cryptographic service node and randomly selects one of the Smart Cryptographic Keys as the protection key. The cryptographic device performs a hash operation (Hash-based Message Authentication Code, HMAC) on the key ID and request content using the SM3 algorithm and the protection key. Subsequently, the cryptographic service node also performs a hash operation on the key ID and request content using the SM3 algorithm and the protection key to verify the integrity and authenticity of the data. HMAC is a method that uses a hash function and a key to provide data integrity and source authentication.

[0164] After the quantum key application is successful, the cryptographic device receives the quantum key encryption result obtained by the cryptographic service node through encryption of the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK using the protection key. The first quantum key QK_UUID-1 is generated and distributed to the cryptographic service node by the first quantum network node connected to the cryptographic service node. The quantum key identifier UUID_QK is obtained by the first quantum network node identifying the first quantum key using a unique identifier common to the first quantum network node. The cryptographic device then decrypts the quantum key encryption result using the protection key to obtain the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK.

[0165] In this way, the cryptographic device obtains the first quantum key QK_UUID-1 and the quantum key identifier UUID_QK, which can be used to generate keys with stronger resistance to quantum computing attacks.

[0166] Referring to Figure 6, in some embodiments, step 013 (performing post-quantum cryptographic encryption on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device) includes:

[0167] 0131: The quantum key identifier and the first random number randomly generated by the first network device are concatenated to obtain the first concatenated body;

[0168] 0132: Perform an XOR operation on the first concatenation and the initial session key to obtain the first XOR message;

[0169] 0133: The first encryption key is obtained by performing post-quantum encryption processing on the first XOR message;

[0170] 0134: Perform post-quantum encryption encapsulation on the first XOR message to obtain the first encapsulated message in the first temporary encryption result;

[0171] 0135: The quantum key identifier, the first identity identifier and the second identity identifier of the first network device are concatenated to obtain the first verification concatenation;

[0172] 0136: Perform post-quantum signature processing on the first verification concatenation to obtain the first signature message in the first temporary encryption result;

[0173] 0137: The first temporary encryption result is obtained by encrypting the first encryption result according to the initial session key;

[0174] 0138: Send the first encryption result to the second network device.

[0175] In some implementations, the splicing module concatenates the quantum key identifier and a first random number randomly generated by the first network device to obtain a first spliced ​​body. The processing module performs an XOR operation on the first spliced ​​body and an initial session key to obtain a first XOR message. The encryption module performs post-quantum encryption on the first XOR message to obtain a first encryption key. The encryption encapsulation module performs post-quantum encryption encapsulation on the first XOR message to obtain a first encapsulated message in the first temporary encryption result. The splicing module also concatenates the quantum key identifier, a first identity identifier, and a second identity identifier of the first network device to obtain a first verification spliced ​​body. The signing module further performs post-quantum signing on the first verification spliced ​​body to obtain a first signature message in the first temporary encryption result. The encryption module further encrypts the first temporary encryption result according to the initial session key to obtain a first encryption result. The sending module sends the first encryption result to a second network device.

[0176] In some embodiments, the processor is further configured to concatenate the quantum key identifier and a first random number randomly generated by the first network device to obtain a first concatenated body; and to XOR the first concatenated body and an initial session key to obtain a first XOR message; and to perform post-quantum encryption processing on the first XOR message to obtain a first encryption key. The processor is further configured to perform post-quantum encryption encapsulation processing on the first XOR message to obtain a first encapsulated message in the first encryption result; and to concatenate the quantum key identifier, a first identity identifier, and a second identity identifier of the first network device to obtain a first verification concatenated body. The processor is further configured to perform post-quantum signature processing on the first verification concatenated body to obtain a first signature message in the first encryption result; and to encrypt the first temporary encryption result according to the initial session key to obtain a first encryption result; and to send the first encryption result to the second network device.

[0177] Specifically, the first network device concatenates the quantum key identifier and a first random number randomly generated by the first network device to obtain a first concatenated body. Next, the first network device XORs the first concatenated body and the initial session key to obtain a first XOR message. Then, the first network device performs post-quantum encryption on the first XOR message to obtain a first encryption key. Furthermore, the first XOR message undergoes post-quantum encryption encapsulation to obtain a first encapsulated message in the first temporary encryption result. The first network device then concatenates the quantum key identifier, the first identity identifier, and the second identity identifier of the first network device to obtain a first verification concatenated body. Finally, the first verification concatenated body undergoes post-quantum signature processing to obtain a first signature message in the first temporary encryption result. Finally, the first network device sends the first encryption result to the second network device, and the first encryption result is encrypted and protected by the initial session key. In this way, the first network device obtains a first encryption key with good quantum resistance by utilizing the quantum key identifier, the randomly generated first random number, and the initial session key, which can be used to generate the subsequent final session key. A first signature message is also generated, which can be used to verify the source and correctness of the message, preventing unauthorized access and tampering of data during transmission. Furthermore, the first encryption result is sent to the second network device under the protection of the initial session key, which enhances the confidentiality of the first encryption result.

[0178] Continuing the example above, the first identifier of the cryptographic device is the cryptographic device identifier ID_Device. Referring again to Figure 3, the cryptographic device concatenates the 128-bit quantum key identifier UUID_QK and a randomly generated 128-bit first random number R1 to obtain the first concatenation body P1, i.e., UUID_QK|R1. Next, the cryptographic device XORs the first concatenation body P1 and the initial session key H1 to obtain the first XOR message Y1, i.e., P1⊕H1. Then, the cryptographic device performs post-quantum encryption processing on the first XOR message Y1 to obtain the first encryption key K1. Furthermore, it performs post-quantum encryption encapsulation processing on the first XOR message Y1 to obtain the first encapsulated message F1 in the first temporary encryption result. The cryptographic device then concatenates the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device, and the device management center identifier ID_Center to obtain the first verification concatenation body P2, i.e., UUID_QK|ID_Center|ID_Device. Furthermore, the first verification concatenation P2 undergoes post-quantum signature processing to obtain the first signature message M1 in the first temporary encryption result. Subsequently, the cryptographic device uses the initial session key H1 and the SM4 block cipher algorithm to perform symmetric encryption on the first temporary encryption result to obtain the first encryption result, that is, to perform symmetric encryption on the first encrypted encapsulated message and the first signature message using the initial session key H1 and the SM4 block cipher algorithm. Finally, the cryptographic device sends the first encryption result to the device management center.

[0179] Thus, the cryptographic device obtains a first quantum-resistant encryption key K1 using the quantum key identifier UUID_QK, a randomly generated first random number R1, and an initial session key H1, which can be used to generate the subsequent final session key. A first signed message M1 is also generated to verify the message's origin and correctness, preventing unauthorized access and tampering of data during transmission.

[0180] Referring to Figure 7, in some embodiments, step 014 (decrypting the received second encryption result sent by the second network device to obtain a second decryption result) includes:

[0181] 0141: Receive the second encryption result sent by the second network device;

[0182] 0142: Decrypt the second encryption result using the initial session key to obtain the second temporary encryption result;

[0183] 0143: Decrypt the second temporary encryption result to obtain the second decryption result.

[0184] In some implementations, the receiving module is used to receive a second encryption result sent by a second network device. The decryption module is used to decrypt the second encryption result according to the initial session key to obtain a second temporary encryption result. The decryption module is also used to decrypt the second temporary encryption result to obtain a second decrypted result.

[0185] In some embodiments, the processor is further configured to receive a second encryption result sent by a second network device, and to decrypt the second encryption result according to the initial session key to obtain a second temporary encryption result. The processor also decrypts the second temporary encryption result to obtain a second decryption result, the second decryption result including a second encrypted encapsulated message and a second signature message.

[0186] Specifically, the first network device receives the second encrypted result sent by the second network device. Then, the first network device decrypts the second encrypted result using the initial session key to obtain a second temporary encrypted result. The second temporary encrypted result is then decrypted to obtain a second decrypted result, which includes a second encrypted encapsulated message and a second signature message. In this way, the first network device determines the availability of the communication channel with the second network device and obtains the second encrypted encapsulated message and the second signature message. The second encryption key can be obtained from the second encrypted encapsulated message and used to generate the final session key. The second signature message can be used to verify the correctness of the second encrypted result.

[0187] Continuing with the example above, the cryptographic device receives the second encryption result sent by the device management center. Next, the cryptographic device decrypts the second encryption result using the initial session key H1 to obtain a second temporary encryption result. The second temporary encryption result is then decrypted to obtain a second decrypted result, which includes a second encrypted encapsulated message F2 and a second signature message M2.

[0188] In this way, the cryptographic device determines the availability of the communication channel between itself and the device management center, and obtains the second encrypted encapsulation message F2 and the second signature message M2. The second encryption key K2 can be obtained from the second encrypted encapsulation message and used to generate the final session key. The second signature message M2 can be used to verify the correctness of the second encryption result.

[0189] Please refer to Figure 8. In some embodiments, the method further includes:

[0190] 017: Obtain the second XOR message based on the second encrypted encapsulated message;

[0191] 018: The second encryption key is obtained by performing post-quantum encryption on the second XOR message;

[0192] 019: Perform an XOR operation on the second XOR message and the initial session key to obtain the second concatenation;

[0193] 020: Obtain the quantum key identifier based on the second concatenation.

[0194] In some implementations, the processing module is used to obtain a second XOR message based on the second encrypted encapsulated message. The encryption module is used to perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The processing module is also used to perform XOR processing on the second XOR message and the initial session key to obtain a second concatenation identifier, and to obtain a quantum key identifier based on the second concatenation.

[0195] In some embodiments, the processor is further configured to obtain a second XOR message based on the second encrypted encapsulation message, and to perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The processor is also configured to perform XOR processing on the second XOR message and the initial session key to obtain a second concatenation, and to obtain a quantum key identifier based on the second concatenation.

[0196] Specifically, the first network device obtains a second XOR message based on the second encrypted encapsulated message. Next, the first network device performs post-quantum encryption processing on the second XOR message to obtain a second encryption key. The first network device then performs an XOR operation on the second XOR message and the initial session key to obtain a second concatenation. Finally, the first network device obtains a quantum key identifier based on the second concatenation. In this way, the first network device obtains a second encryption key used to generate the final session key, which has good quantum resistance. It also obtains a quantum key identifier, which can be used to verify that the quantum key identifier received by the second network device is correct.

[0197] Continuing with the example above, please refer to Figure 3 again. The cryptographic device obtains the second XOR message Y2 based on the second encrypted encapsulation message F2. Next, the cryptographic device performs post-quantum encryption processing on the second XOR message Y2 to obtain the second encryption key K2. The cryptographic device then performs XOR processing on the second XOR message Y2 and the initial session key H1 to obtain the second concatenation P3. Finally, the cryptographic device obtains the quantum key identifier UUID_QK based on the second concatenation P3.

[0198] Thus, the cryptographic device obtains a second encryption key K2 for generating the final session key, which has good quantum resistance. It also obtains a quantum key identifier UUID_QK, which can be used to verify that the quantum key identifier UUIID_QK received by the device management center is correct.

[0199] Please refer to Figure 9. In some embodiments, the method further includes:

[0200] 021: Obtain the second verification concatenation based on the second signature message;

[0201] 022: Perform post-quantum cryptographic verification on the second signature message to confirm the correctness of the second verification concatenation.

[0202] In some implementations, the processing module is further configured to obtain a second verification concatenation based on the second signature message, and the verification module is configured to perform post-quantum cryptographic verification processing on the second signature message to confirm the correctness of the second verification concatenation.

[0203] In some implementations, the processor is further configured to obtain a second verification concatenation based on the second signature message, and to perform post-quantum cryptographic verification processing on the second signature message to confirm the correctness of the second verification concatenation.

[0204] Specifically, the first network device obtains the second verification concatenation based on the second signature message. It then performs post-quantum cryptographic verification processing on the second signature message to confirm the correctness of the second verification concatenation. The second verification concatenation is obtained by the second network device by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier. In this way, by performing post-quantum cryptographic verification processing on the second signature message, the correctness of the quantum key identifier, the first identity identifier, and the second identity identifier received by the first network device from the second network device is confirmed, providing security for subsequent data transmission.

[0205] Continuing with the example above, please refer to Figure 3 again. The cryptographic device obtains the second verification concatenation P4 based on the second signature message M2. It then performs post-quantum cryptographic verification processing on the second signature message M2 to confirm the correctness of the second verification concatenation P4. The second verification concatenation P4 is obtained by the device management center by concatenating the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device, and the device management center identifier ID_Center.

[0206] Thus, by performing post-quantum cryptographic verification on the second signature message M2, the correctness of the quantum key identifier UUID_QK, cryptographic device identifier ID_Device, and device management center identifier ID_Center sent by the device management center and received by the cryptographic device is determined, providing security for subsequent data transmission.

[0207] Referring to Figure 10, in some embodiments, step 015 (generating a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt communication between the first network device and the second network device) includes:

[0208] 0151: The initial session key, the first encryption key, the second encryption key, and the first quantum key are XORed to obtain the final session key, which is used to encrypt the communication between the first network device and the second network device.

[0209] In some implementations, the derived module is also used to XOR the initial session key, the first encryption key, the second encryption key, and the first quantum key to obtain the final session key, so as to encrypt the communication between the first network device and the second network device.

[0210] In some implementations, the processor is further configured to perform an XOR operation on the initial session key, the first encryption key, the second encryption key, and the first quantum key to obtain a final session key, so as to encrypt the communication between the first network device and the second network device.

[0211] Specifically, the first network device XORs the initial session key, the first encryption key, the second encryption key, and the first quantum key to obtain the final session key, which is then used to encrypt the communication between the first network device and the second network device. In this way, by combining quantum key distribution technology and post-quantum cryptography, the final session key is generated, enhancing the resistance to quantum computing attacks in the communication between the first and second network devices and protecting the data transmitted during communication.

[0212] Continuing with the example above, the cryptographic device performs an XOR operation on the initial session key H1, the first encryption key K1, the second encryption key K2, and the first quantum key QK_UUID-1 to obtain the final session key H2, i.e., H2 = H1⊕K1⊕K2⊕QK_UUID-1. The generated final session key H2 is then used to encrypt communication between the cryptographic device and the device management center.

[0213] In this way, by combining quantum key distribution technology and post-quantum cryptography, the final session key H2 is generated, which can enhance the ability of communication between cryptographic devices and device management centers to resist quantum computing attacks and protect the data transmitted during communication.

[0214] Please refer to Figure 11. In some embodiments, the method further includes:

[0215] 023: Receive the second session key verification message sent by the second network device;

[0216] 024: Calculate the first session key verification message by analyzing the first verification concatenation based on the final session key;

[0217] 025: Compare the first session key verification message and the second session key verification message to determine whether the final session key obtained by the first network device and the final session key obtained by the second network device are consistent.

[0218] In some embodiments, the receiving module is further configured to receive a second session key verification message sent by the second network device. The calculation module is configured to calculate a first session key verification message based on the final session key and the first verification concatenation. The processing module is further configured to compare the first session key verification message and the second session key verification message to determine that the final session key obtained by the first network device and the final session key obtained by the second network device are consistent.

[0219] In some embodiments, the processor is further configured to receive a second session key verification message sent by a second network device, and to calculate a first session key verification message based on the final session key from the first verification concatenation. The processor also performs a comparison process between the first session key verification message and the second session key verification message to determine that the final session key obtained by the first network device and the final session key obtained by the second network device are consistent.

[0220] Specifically, the first network device receives a second session key verification message sent by the second network device. Next, the first network device calculates a first session key verification message based on the final session key and the first verification concatenation. Finally, the first network device compares the first session key verification message and the second session key verification message to determine that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device. Thus, by calculating the first session key verification message and comparing it with the second session key verification message, it is determined that the final session key obtained by the first network device is consistent with the final session key obtained by the second network device, and can be used for communication.

[0221] Continuing with the example above, please refer to Figure 3 again. The cryptographic device receives the second session key verification message Z2 sent by the device management center. Next, the cryptographic device calculates the first session key verification message Z1 from the first verification concatenation P2 based on the final session key H2. Finally, the cryptographic device compares the first session key verification message Z1 and the second session key verification message Z2 to determine that the final session key H2 obtained by the cryptographic device is consistent with the final session key H2 obtained by the device management center.

[0222] In this way, by calculating the first session key verification message Z1 and comparing it with the second session key verification message Z2, it is determined that the final session key H2 obtained by the cryptographic device and the final session key H2 obtained by the device management center are consistent, thus avoiding communication failure.

[0223] Please refer to Figure 12. This application provides a method for enhancing the quantum-resistant security of a secure channel protocol for cryptographic devices in a communication network. The communication network includes a first network device and a second network device. The method is used on the second network device and includes:

[0224] 031: Obtain the initial session key through key negotiation with the first network device;

[0225] 032: Receive the first encryption result of the quantum key identifier after post-quantum cryptographic encryption processing by the first network device;

[0226] 033: Decrypt the first encrypted result to obtain the first decrypted result;

[0227] 034: Perform post-quantum cryptographic encryption on the first decryption result to obtain a second encryption result, and send the second encryption result to the first network device;

[0228] 035: Generate a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the first network device and the second network device.

[0229] This application also provides a second network device, including a memory and a processor. The method of this application can be implemented by the second network device. Specifically, the memory stores a computer program, and the processor is used to negotiate a key with a first network device to obtain an initial session key, and to receive a first encryption result from the first network device performing post-quantum cryptographic encryption on a quantum key identifier. The processor is also used to decrypt the first encryption result to obtain a first decryption result, perform post-quantum cryptographic encryption on the first decryption result to obtain a second encryption result, and send the second encryption result to the first network device. Finally, it generates a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt communication between the first and second network devices.

[0230] This application also provides a second network device quantum security enhancement device. The method of this application can be implemented by the second network device quantum security enhancement device of this application. Specifically, the second network device quantum security enhancement device includes a negotiation module, a receiving module, a decryption module, an encryption module, and a derivation module. The negotiation module is used to negotiate a key with a first network device to obtain an initial session key. The receiving module is used to receive a first encryption result from the first network device performing post-quantum cryptographic encryption on a quantum key identifier. The decryption module is used to decrypt the first encryption result to obtain a first decryption result. The encryption module is used to perform post-quantum cryptographic encryption on the first decryption result to obtain a second encryption result and send the second encryption result to the first network device. The derivation module is used to generate a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the first network device and the second network device.

[0231] Specifically, the quantum security enhancement method of this embodiment is basically the same as the quantum security enhancement method of the aforementioned embodiment that takes the first network device as the execution object. For details, please refer to the explanation of the corresponding part. The difference is that this embodiment takes the second network device as the execution object, which will not be repeated here.

[0232] In summary, in the quantum-resistant security enhancement method, communication system, second network device, and first network device of the communication network cryptographic device secure channel protocol of the embodiments of this application, for the communication process between the first network device and the second network device, the first network device and the second network device negotiate a key to obtain an initial session key. Subsequently, the first network device and the second network device request a quantum key and use a post-quantum cryptography algorithm to encrypt the quantum key identifier to generate a first encryption result that can resist quantum computing attacks. The post-quantum cryptography algorithm is a series of encryption algorithms designed to resist quantum computing attacks. Next, the first network device decrypts the second encryption result sent by the second network device to obtain a second decryption result. Finally, the first network device generates a final session key based on the initial session key, the first encryption result, the second decryption result, and the quantum key to encrypt the communication between the first network device and the second network device. In this way, the quantum key distribution technology and the post-quantum cryptography algorithm enhance the resistance to quantum computing attacks in the communication process of the first network device requesting access to the resources of the second network device.

[0233] Please refer to Figure 13. In some embodiments, the method further includes:

[0234] 036: Access the second network node through a pre-established channel;

[0235] 037: Load the security certificate of the first network device or the security certificate of the second network device.

[0236] In some implementations, the access module accesses the second network node via a pre-established channel. The loading module is used to load the security certificate of the first network device or the security certificate of the second network device.

[0237] In some implementations, the processor is also used to access a second network node via a pre-established channel and to load the security certificate of either the first or second network device.

[0238] Specifically, the second network device accesses the second network node through a pre-established channel. Then, the second network device loads either the security certificate of the first network device or the security certificate of the second network device. In this way, the second network device can obtain the second quantum key by accessing the network node through the channel. Furthermore, the second network device also obtains a security certificate for encrypting and decrypting data transmitted during communication.

[0239] Continuing with the example above, please refer to Figure 3. Before communicating with the cryptographic device, the device management center accesses the closest physically authorized second quantum network node through a trusted channel. A trusted channel refers to a mechanism or protocol that provides a secure communication path between two communicating entities. One way to establish this channel is for the authentication server and the second quantum network node to be located in the same rack and directly connected by shielded network cables. This channel ensures the confidentiality, integrity, and availability of data during transmission, preventing unauthorized access, tampering, or eavesdropping. Next, the device management center and the cryptographic device import and load each other's PQC public keys (encryption and signing public keys) or PQC certificates (encryption and signing certificates issued by a certificate system) offline or online.

[0240] Thus, the device management center can access the second quantum network node through the channel and obtain the second quantum key. In addition, the device management center also obtains a security certificate for encrypting and decrypting data transmitted during communication.

[0241] Please refer to Figure 1:4. In some embodiments, the method further includes:

[0242] 038: Perform identity authentication with the first network device to obtain the first identity identifier of the first network device.

[0243] In some implementations, the processing module is also used to authenticate with the first network device to obtain the first identity identifier of the first network device.

[0244] In some implementations, the processor is also used to authenticate with the first network device to obtain a first identity identifier of the first network device.

[0245] Specifically, the second network device authenticates with the first network device to obtain the first network device's first identity identifier. This first identity identifier is then used by the second network device to verify the first signed message and generate the subsequent second session key verification message.

[0246] Continuing with the example above, please refer to Figure 3. The device management center authenticates the cryptographic device to obtain the first identity identifier of the cryptographic device.

[0247] Thus, the device management center obtains the cryptographic device identifier ID_Device, which can be used in subsequent processes to verify the first signature message M1 and generate the subsequent second session key verification message Z2.

[0248] Please refer to Figure 15. In some embodiments, the first decryption result includes a first encrypted encapsulated message, and the method further includes:

[0249] 039: Obtain the first XOR message based on the first encrypted encapsulated message;

[0250] 040: Perform post-quantum encryption processing on the first XOR message to obtain the first encryption key;

[0251] 041: Obtain the quantum key identifier from the first XOR message and the initial session key.

[0252] In some implementations, the processing module utilizes a first XOR message obtained from a first encrypted encapsulated message. The encryption module is further configured to perform post-quantum encryption processing on the first XOR message to obtain a first encryption key. The processing module is configured to obtain a quantum key identifier from the first XOR message and the initial session key.

[0253] In some embodiments, the processor is further configured to obtain a first XOR message based on a first encrypted encapsulation message; to perform post-quantum encryption processing on the first XOR message to obtain a first encryption key; and to obtain a quantum key identifier from the first XOR message and the initial session key.

[0254] Specifically, the second network device obtains a first XOR message based on the first encrypted encapsulated message. Next, the second network device performs post-quantum encryption processing on the first XOR message to obtain a first encryption key. The second network device then obtains a quantum key identifier by combining the first XOR message and the initial session key. In this way, the second network device obtains the first encryption key, which can be used to subsequently generate a final session key with good quantum resistance. It also obtains the quantum key identifier, which can be used to subsequently apply for a second quantum key.

[0255] Continuing with the example above, please refer to Figure 3 again. The device management center obtains the first XOR message Y1 based on the first encrypted encapsulation message F1. Next, the device management center performs post-quantum encryption processing on the first XOR message Y1 to obtain the first encryption key K1. The device management center then obtains the quantum key identifier UUID_QK from the first XOR message Y1 and the initial session key H1.

[0256] Thus, the device management center obtained the first encryption key K1, which can be used to generate the final session key with good quantum resistance. It also obtained the quantum key identifier UUID_QK, which can be used to apply for the second quantum key.

[0257] Please refer to Figure 16. In some embodiments, the first decryption result includes a first signature message, and the method further includes:

[0258] 042: Obtain the first verification concatenation based on the first signature message;

[0259] 043: Perform post-quantum cryptographic verification on the first signed message to confirm that the correct first verification concatenation has been obtained;

[0260] 044: If the quantum key identifier is correct, send a quantum key request to the second network node based on the quantum key identifier;

[0261] 045: Receive the second quantum key sent by the second network node according to the quantum key request.

[0262] In some implementations, the processing module is used to obtain a first verification concatenation based on the first signature message. The signature verification module is used to perform post-quantum cryptographic signature verification processing on the first signature message to confirm that the correct first verification concatenation has been obtained. The sending module is used to send a quantum key request to the second network node based on the quantum key identifier, provided that the quantum key identifier is correct. The receiving module is used to receive the second quantum key sent by the second network node based on the quantum key request.

[0263] In some implementations, the processor is further configured to obtain a first verification concatenation based on the first signature message, and to perform post-quantum cryptographic verification processing on the first signature message to confirm that a correct first verification concatenation has been obtained. The processor is also configured to, if the quantum key identifier is correct, send a quantum key request to the second network node based on the quantum key identifier, and receive a second quantum key sent by the second network node based on the quantum key request.

[0264] Specifically, the second network device obtains a first verification concatenation based on the first signature message. Next, the second network device performs post-quantum cryptographic verification processing on the first signature message to confirm the correct first verification concatenation. This first verification concatenation is obtained by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier of the second network device. Then, if the obtained quantum key identifier is correct, the second network device sends a quantum key request to the second network node based on the quantum key identifier. Finally, the second network device receives the second quantum key sent by the second network node based on the quantum key request. In this way, the second network device, through post-quantum cryptographic verification of the first signature message, confirms that the data information received from the first network device is correct and has not been accessed without authorization. Furthermore, by requesting a second quantum key matching the first quantum key from the second network node using the quantum key identifier, the second quantum key exhibits strong resistance to quantum computing attacks and can be used to generate the final session key.

[0265] Continuing with the example above, please refer to Figure 3 again. The device management center obtains the first verification concatenation P2 based on the first signature message M1. Next, the device management center performs post-quantum cryptographic verification processing on the first signature message M1 to confirm the correct first verification concatenation P2. The first verification concatenation P2 is obtained by the device management center by concatenating the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device, and the device management center identifier ID_Center. Then, if the obtained quantum key identifier UUID_QK is correct, the device management center sends a quantum key request to the second quantum network node based on the quantum key identifier. Finally, the device management center receives the second quantum key QK_UUID-2 sent by the second quantum network node based on the quantum key request.

[0266] Thus, the device management center verifies the data sent by the cryptographic device by performing post-quantum cryptographic verification on the first signed message M1, confirming that the data has been correct and has not been accessed without authorization. Furthermore, a second quantum key QK_UUID-2, matching the first quantum key QK_UUID-1, is obtained from the second quantum network node using the quantum key identifier UUID_QK. The second quantum key QK_UUID-2 possesses strong resistance to quantum computing attacks and can be used to generate the final session key.

[0267] Referring to Figure 17, in some embodiments, the first decryption result includes a second handshake message. Step 034 (performing post-quantum cryptographic encryption on the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device) includes:

[0268] 0341: The quantum key identifier and the second random number randomly generated by the second network device are concatenated to obtain the second concatenated body;

[0269] 0342: Perform an XOR operation on the second concatenation and the initial session key to obtain the second XOR message;

[0270] 0343: Perform post-quantum encryption processing on the second XOR message to obtain the second encryption key;

[0271] 0344: Perform post-quantum encryption encapsulation on the second XOR message to obtain the second encapsulated message in the second temporary encryption result;

[0272] 0345: The quantum key identifier, the first identity identifier, and the second identity identifier are concatenated to obtain the second verification concatenation;

[0273] 0346: Perform post-quantum signature processing on the second verification concatenation to obtain the second signature message in the second temporary encryption result;

[0274] 0347: The second temporary encryption result is obtained by encrypting the second encryption result according to the initial session key;

[0275] 0348: Send the second encryption result to the first network device.

[0276] In some implementations, the splicing module is used to splice the quantum key identifier and a second random number randomly generated by the second network device to obtain a second spliced ​​body. The processing module is used to XOR the second spliced ​​body and the initial session key to obtain a second XOR message. The encryption module is used to perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The encryption encapsulation module is used to perform post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in the second temporary encryption result. The splicing module is also used to splice the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification spliced ​​body. The signing module is also used to perform post-quantum signing processing on the second verification spliced ​​body to obtain a second signature message in the second temporary encryption result. The encryption module is also used to encrypt the second temporary encryption result according to the initial session key to obtain a second encryption result. The sending module is used to send the second encryption result to the first network device.

[0277] In some embodiments, the processor is further configured to concatenate the quantum key identifier and a second random number randomly generated by the second network device to obtain a second concatenated body; and to XOR the second concatenated body and the initial session key to obtain a second XOR message; and to perform post-quantum encryption processing on the second XOR message to obtain a second encryption key. The processor is further configured to perform post-quantum encryption encapsulation processing on the second XOR message to obtain a second encapsulated message in the second temporary encryption result; and to concatenate the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification concatenated body. The processor is further configured to perform post-quantum signature processing on the second verification concatenated body to obtain a second signature message in the second temporary encryption result; and to encrypt the second temporary encryption result according to the initial session key to obtain a second encryption result; and to send the second encryption result to the first network device.

[0278] Specifically, the second network device concatenates the quantum key identifier and a second random number randomly generated by the second network device to obtain a second concatenated body. Next, the second network device XORs the second concatenated body and the initial session key to obtain a second XOR message. Then, the second network device performs post-quantum encryption on the second XOR message to obtain a second encryption key. It then performs post-quantum encryption encapsulation on the second XOR message to obtain a second encapsulated message in the second temporary encryption result. Subsequently, the second network device concatenates the quantum key identifier, the first identity identifier, and the second identity identifier to obtain a second verification concatenated body. The second network device then performs post-quantum signature processing on the second verification concatenated body to obtain a second signature message in the second temporary encryption result. Finally, the second network device encrypts the second temporary encryption result according to the initial session key to obtain a second encrypted result. Finally, the second network device sends the second encrypted result to the first network device. In this way, the second network device obtains a second encryption key with good quantum resistance by utilizing the quantum key identifier, the randomly generated second random number, and the initial session key, which can be used to generate the subsequent final session key. It also generates a second signed message that can be used to verify the source and correctness of the message, and to prevent unauthorized access and tampering of the data during transmission.

[0279] Continuing with the example above, please refer to Figure 3 again. The device management center concatenates the quantum key identifier UUID_QK and the 128-bit random number R2 randomly generated by the device management center to obtain the second concatenation body P3, i.e., UUID_QK|R2. Next, the device management center XORs the second concatenation body P3 and the initial session key H1 to obtain the second XOR message Y2, i.e., P3⊕H1. Then, the device management center performs post-quantum encryption processing on the second XOR message Y2 to obtain the second encryption key K2. And performs post-quantum encryption encapsulation processing on the second XOR message Y2 to obtain the second encapsulated message F2 in the second temporary encryption result. Subsequently, the device management center concatenates the quantum key identifier UUID_QK, the cryptographic device identifier ID_Device, and the device management center identifier ID_Center to obtain the second verification concatenation body P4, i.e., UUID_QK|ID_Center|ID_Device. The device management center then performs post-quantum signature processing on the second verification concatenation P4 to obtain the second signature message M2 in the second temporary encryption result. Subsequently, the cryptographic device uses the initial session key H1 and the SM4 block cipher algorithm to perform symmetric encryption on the second temporary encryption result to obtain the second encryption result, that is, to perform symmetric encryption on the second encrypted encapsulated message and the second signature message using the initial session key H1 and the SM4 block cipher algorithm. Finally, the device management center sends the second encryption result to the cryptographic device.

[0280] Thus, the device management center obtains a second encryption key K2 with good quantum resistance by using the quantum key identifier UUID_QK, the randomly generated second random number R2, and the initial session key H1, which can be used to generate the subsequent final session key. A second signed message M2 is also generated to verify the message's origin and correctness, preventing unauthorized access and tampering of data during transmission.

[0281] Referring to Figure 18, in some embodiments, step 035 (generating a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt communication between the first network device and the second network device) includes:

[0282] 0351: The initial session key, the first encryption key, the second encryption key, and the second quantum key are XORed to obtain the final session key, which is used to encrypt the communication between the first network device and the second network device.

[0283] In some implementations, the derived module is used to XOR the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain the final session key, so as to encrypt the communication between the first network device and the second network device.

[0284] In some implementations, the processor is further configured to perform an XOR operation on the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain a final session key, so as to encrypt the communication between the first network device and the second network device.

[0285] Specifically, the second network device XORs the initial session key, the first encryption key, the second encryption key, and the second quantum key to obtain the final session key, which is then used to encrypt the communication between the first and second network devices. In this way, by combining quantum key distribution technology and post-quantum cryptography, the final session key is generated, enhancing the resistance to quantum computing attacks in the communication between the first and second network devices and protecting the data transmitted during communication.

[0286] Continuing with the example above, please refer to Figure 3. The device management center performs an XOR operation on the initial session key H1, the first encryption key K1, the second encryption key K2, and the second quantum key QK_UUID-2 to obtain the final session key H2, i.e., H2 = H1⊕K1⊕K2⊕QK_UUID-2. The generated final session key H2 is used to encrypt the communication between the cryptographic device and the device management center.

[0287] Thus, by combining quantum key distribution technology and post-quantum cryptography, the final session key H2 was generated, which enhances the resistance to quantum computing attacks in communication between cryptographic devices and device management centers, and protects the data transmitted during communication.

[0288] Please refer to Figure 19. In some embodiments, the method further includes:

[0289] 046: Encrypt the second verification concatenation based on the final session key to obtain the second session key verification message;

[0290] 047: Send the second session key verification message to the first network device. The second session key verification message is encrypted and protected by the initial session key.

[0291] In some implementations, the encryption module is used to encrypt the second verification concatenation based on the final session key to obtain a second session key verification message. The sending module is used to send the second session key verification message to the first network device, and the second session key verification message is encrypted and protected by the initial session key.

[0292] In some implementations, the processor is further configured to encrypt the second verification concatenation based on the final session key to obtain a second session key verification message, and to send the second session key verification message to the first network device, wherein the second session key verification message is encrypted and protected by the initial session key.

[0293] Specifically, the second network device encrypts the second verification concatenation based on the final session key to obtain a second session key verification message. This second session key verification message is then sent to the first network device, where it is protected by the initial session key. Thus, the second network device sends the generated second session key verification message to the first network device under the protection of the initial session key, enabling the first network device to verify the consistency between the final session key generated by the first network device and the final session key generated by the second network device.

[0294] Continuing with the example above, please refer to Figure 3 again. The device management center encrypts the second verification concatenation p4 according to the final session key H2 to obtain the second session key verification message Z2. The second session key verification message Z2 is sent to the cryptographic device, and the second session key verification message Z2 is encrypted and protected by the initial session key H1.

[0295] Thus, the device management center sends the generated second session key verification message Z2 to the cryptographic device under the protection of the initial session key H1, enabling the cryptographic device to verify the consistency between the final session key H2 generated by the cryptographic device and the final session key H2 generated by the device management center based on the second session key verification message Z2.

[0296] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0297] The various component embodiments of this application can be implemented in hardware, or as software modules running on one or more processors, or a combination thereof. Those skilled in the art will understand that microprocessors or digital signal processors (DSPs) can be used in practice to implement some or all of the functions of some or all of the components in the computing processing device according to the embodiments of this application. This application can also be implemented as a device or apparatus program (e.g., a computer program and computer program product) for performing part or all of the methods described herein. Such an implementation of this application can be stored on a computer-readable medium, or can be in the form of one or more signals. Such signals can be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

[0298] For example, Figure 20 illustrates a computing processing device that can implement the methods according to this application. This computing processing device conventionally includes a processor 1010 and a computer program product or computer-readable medium in the form of a memory 1020. The memory 1020 can be an electronic memory such as flash memory, EEPROM (Electrically Erasable Programmable Read-Only Memory), EPROM, hard disk, or ROM. The memory 1020 has a storage space 1030 for program code 1031 for performing any of the method steps described above. For example, the storage space 1030 for the program code may include various program codes 1031 for implementing the various steps in the methods described above. These program codes can be read from or written to one or more computer program products. These computer program products include program code carriers such as hard disks, compact discs (CDs), memory cards, or floppy disks. Such computer program products are typically portable or fixed storage units as described with reference to Figure 21. This storage unit may have storage segments, storage spaces, etc., arranged similarly to the memory 1020 in the computing processing device of Figure 20. The program code may be compressed, for example, in a suitable form. Typically, the storage unit includes computer-readable code 1031', which is code that can be read by a processor such as 1010, which, when run by a computing processing device, causes the computing processing device to perform the various steps in the method described above.

[0299] It is understood that a computer program includes computer program code. Computer program code can be in the form of source code, object code, executable files, or some intermediate form. Computer-readable storage media can include: any entity or device capable of carrying computer program code, recording media, USB flash drives, external hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution media, etc.

[0300] In this specification, the terms "specifically," "furthermore," "particularly," "understandably," etc., refer to specific features, structures, materials, or characteristics described in connection with embodiments or examples that are included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0301] Any process or method described in the flowchart or otherwise herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order depending on the function involved, as will be understood by those skilled in the art to which embodiments of this application pertain.

[0302] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A method for enhancing quantum-resistant security of a secure channel protocol for cryptographic devices in a communication network, wherein, The communication network includes a first network device and a second network device, and the method is used on the first network device, the method comprising: The initial session key is obtained through key negotiation with the second network device; Obtain the first quantum key and quantum key identifier from the service node that accesses the first network device; The quantum key identifier is subjected to post-quantum cryptographic encryption to obtain a first encryption result, and the first encryption result is sent to the second network device; The second encryption result received from the second network device is decrypted to obtain a second decryption result. The second encryption result is obtained by the second network device performing post-quantum encryption on the first decryption result. The first decryption result is obtained by the second network device decrypting the first encryption result. A final session key is generated based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt the communication between the first network device and the second network device.

2. The method according to claim 1, wherein, The method further includes: The second network device is authenticated to obtain a second identity identifier of the second network device.

3. The method according to claim 1, wherein, The step of obtaining the first quantum key and quantum key identifier from the service node accessing the first network device includes: The service node is used to fill the cryptographic module of the first network device with multiple keys; A quantum key request is sent to the service node. The quantum key request is protected by a protection key, which is one of a plurality of keys randomly used from the cryptographic modules. The service node receives a quantum key encryption result obtained by encrypting the first quantum key and the quantum key identifier according to the protection key. The first quantum key is generated and distributed to the service node by a first network node connected to the service node. The quantum key identifier is obtained by the first network node identifying the first quantum key according to the identification code of the first network node. The quantum key encryption result is decrypted to obtain the first quantum key and the quantum key identifier.

4. The method according to claim 2, wherein, The step of performing post-quantum cryptographic encryption on the quantum key identifier to obtain a first encryption result, and sending the first encryption result to the second network device, includes: The quantum key identifier and the first random number randomly generated by the first network device are concatenated to obtain a first concatenated body; The first concatenation and the initial session key are XORed to obtain the first XOR message. The first encryption key is obtained by performing post-quantum encryption processing on the first XOR message. The first encapsulated message in the first temporary encryption result is obtained by performing post-quantum cryptographic encapsulation processing on the first XOR message. The quantum key identifier, the first identity identifier of the first network device, and the second identity identifier are concatenated to obtain a first verification concatenation. The first signature message in the first temporary encryption result is obtained by performing post-quantum signature processing on the first verification splice. The first encrypted result is obtained by encrypting the first temporary encryption result according to the initial session key; The first encryption result is sent to the second network device.

5. The method according to claim 4, wherein, The step of decrypting the received second encryption result sent by the second network device to obtain the second decryption result includes: Receive the second encryption result sent by the second network device; The second encryption result is obtained by decrypting the second encryption result using the initial session key; The second temporary encryption result is decrypted to obtain a second decryption result, which includes a second encrypted encapsulated message and a second signature message.

6. The method according to claim 5, wherein, The method further includes: The second XOR message is obtained based on the second encrypted encapsulated message; The second XOR message is subjected to post-quantum encryption processing to obtain the second encryption key; The second concatenation is obtained by performing an XOR operation on the second XOR message and the initial session key; The quantum key identifier is obtained from the second splice.

7. The method according to claim 5, wherein, The method further includes: The second verification concatenation is obtained based on the second signature message; The second signature message is subjected to post-quantum cryptographic verification processing to confirm the correctness of the second verification concatenation. The second verification concatenation is obtained by the second network device by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier.

8. The method according to claim 6, wherein, The step of generating a final session key based on the initial session key, the first encryption result, the second decryption result, and the first quantum key to encrypt communication between the first network device and the second network device includes: The initial session key, the first encryption key, the second encryption key, and the first quantum key are XORed to obtain the final session key, which is used to encrypt the communication between the first network device and the second network device.

9. The method according to claim 8, wherein, The method further includes: Receive the second session key verification message sent by the second network device; The first session key verification message is obtained by calculating the first verification concatenation based on the final session key. The first session key verification message and the second session key verification message are compared to determine whether the final session key obtained by the first network device and the final session key obtained by the second network device are consistent.

10. A method for enhancing quantum-resistant security of a cryptographic device secure channel protocol in a communication network, wherein, The communication network includes a first network device and a second network device, and the method is used on the second network device, the method comprising: The initial session key is obtained through key negotiation with the first network device; The first network device receives a first encryption result after performing post-quantum cryptographic encryption on a quantum key identifier, wherein the quantum key identifier is obtained by the first network device from a service node connected to the first network device. The first encryption result is decrypted to obtain the first decryption result; The first decryption result is subjected to post-quantum cryptographic encryption to obtain a second encryption result, and the second encryption result is sent to the first network device; A final session key is generated based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt the communication between the first network device and the second network device.

11. The method according to claim 10, wherein, The method further includes: Access to the second network node via a pre-established channel; Load the security certificate of the first network device or the security certificate of the second network device.

12. The method according to claim 11, wherein, The method further includes: The identity is authenticated with the first network device to obtain the first identity identifier of the first network device.

13. The method according to claim 12, wherein, The first decryption result includes a first encrypted encapsulated message, and the method further includes: The first XOR message is obtained based on the first encrypted encapsulated message; The first encryption key is obtained by performing post-quantum encryption processing on the first XOR message. The quantum key identifier is obtained by XORing the first message and the initial session key.

14. The method according to claim 13, wherein, The first decryption result includes a first signature message, and the method further includes: The first verification concatenation is obtained based on the first signature message; The first signature message is subjected to post-quantum cryptographic verification processing to confirm that the correct first verification concatenation is obtained. The first verification concatenation is obtained by the second network device by concatenating the quantum key identifier, the first identity identifier, and the second identity identifier of the second network device. If the quantum key identifier is correct, a quantum key request is sent to the second network node based on the quantum key identifier; Receive the second quantum key sent by the second network node according to the quantum key request.

15. The method according to claim 14, wherein, The step of performing post-quantum cryptographic encryption on the first decryption result to obtain a second encryption result, and sending the second encryption result to the first network device, includes: The quantum key identifier and the second random number randomly generated by the second network device are concatenated to obtain a second concatenated body; The second concatenation and the initial session key are XORed to obtain the second XOR message. The second XOR message is subjected to post-quantum encryption processing to obtain the second encryption key; The second encapsulated message in the second temporary encryption result is obtained by performing post-quantum cryptographic encapsulation processing on the second XOR message. The quantum key identifier, the first identity identifier, and the second identity identifier are concatenated to obtain a second verification concatenation. The second signature message in the second temporary encryption result is obtained by performing post-quantum signature processing on the second verification concatenation. The second temporary encryption result is obtained by encrypting the second encryption result according to the initial session key; The second encryption result is sent to the first network device.

16. The method according to claim 15, wherein, The step of generating a final session key based on the initial session key, the first decryption result, the second encryption result, and the second quantum key to encrypt communication between the first network device and the second network device includes: The initial session key, the first encryption key, the second encryption key, and the second quantum key are XORed to obtain the final session key, which is used to encrypt the communication between the first network device and the second network device.

17. The method according to claim 16, wherein, The method further includes: The second verification concatenation is encrypted using the final session key to obtain the second session key verification message. The second session key verification message is sent to the first network device, and the second session key verification message is encrypted and protected by the initial session key.

18. A computing processing device, wherein, include: Memory containing computer-readable code; One or more processors, when the computer-readable code is executed by the one or more processors, the computing processing device performs a quantum-resistant security enhancement method for a cryptographic device secure channel protocol of a communication network as described in any one of claims 1-9 or 10-17.

19. A computer program comprising computer-readable code, which, when executed on a computing processing device, causes the computing processing device to perform a quantum-resistant security enhancement method for a cryptographic device secure channel protocol of a communication network according to any one of claims 1-9 or 10-17.

20. A computer-readable medium storing the computer program as claimed in claim 19.

Images