CN106911474A - A kind of quantum key encryption method and device based on service attribute - Google Patents

Abstract

This application provides a quantum key encryption method and device based on business attributes. The quantum key encryption method based on business attributes includes: obtaining data to be encrypted for each business; determining the total amount of quantum key resources and the business of each business Attributes; allocate the total quantum key amount resources to each business, and obtain the quantum key amount resources of each business; determine the optimal quantum key update frequency of each business according to the quantum key amount resources and business attributes of each business; The optimal quantum key update frequency of each service is used to update the quantum key of each service, and the data to be encrypted of each service is encrypted by using the updated quantum key. In this application, the security and confidentiality of data can be improved through the above methods.

Description

A Quantum Key Encryption Method and Device Based on Business Attributes

technical field

The present application relates to the field of communication security, in particular to a quantum key encryption method and device based on business attributes.

Background technique

With the continuous progress of human civilization and the rapid development of science and technology, communication methods are also developing in a more civilized, advanced and intelligent direction. Today, with the rapid development of computing technology and communication technology, human society has entered the information age. In the information age, information occupies a vital position in all fields of human life such as politics, economy, military affairs, and science and technology. At the same time, with the continuous development of information science and technology, especially the emergence of the Internet and wireless networks, the issue of information leakage has attracted increasing attention. For individuals, information leakage will directly lead to violations and losses of personal privacy, economic interests, and scientific research results; for countries, this will lead to major losses in the fields of politics, economy, technology, and military affairs, especially in military affairs. In the field, information leakage will seriously threaten national security.

It can be seen from the above that how to further improve the security and confidentiality of information is a crucial issue faced by the field of information science and communication.

Contents of the invention

In order to solve the above technical problems, the embodiment of this application provides a quantum key encryption method and device based on business attributes, so as to achieve the purpose of improving data security and confidentiality. The technical solution is as follows:

A quantum key encryption method based on business attributes, including:

Obtain the data to be encrypted for each business;

Determine the total amount of quantum key resources and the business attributes of each of the services;

Allocating the total quantum key amount resources to each of the services to obtain the quantum key amount resources of each of the services;

Determine the optimal quantum key update frequency for each of the services according to the quantum key resources and service attributes of each of the services;

The optimal quantum key update frequency of each of the services is used to update the quantum keys of each of the services, and the data to be encrypted of each of the services is encrypted using the updated quantum keys.

Preferably, determining the total amount of quantum key resources includes:

Read the real-time coding rate of the quantum key from the quantum key generation device;

The real-time coding rate of the quantum key is multiplied by the preset time length to obtain the total quantum key resource.

Preferably, the service attributes of each service include: service data asset level and data transmission rate;

Determine the business attributes of each said business, including:

Query the business data asset level of each said business in the preset business data asset level database;

The data transmission rate of each of the services is read from the virtual private network used by each of the services.

Preferably, the total quantum key amount resources are allocated to each of the services to obtain the quantum key amount resources of each of the services, including:

Sorting the business data asset levels of each of the services described above to obtain the sorting results;

Using the sorting result to determine the key distribution weight of each of the services;

Use relation one Distribute the total quantum key amount resources to each of the services to obtain the quantum key amount resources of each of the services, Si is the quantum key amount resource of the _i -th business, Wi is the i-th business's Key distribution weight, i is an integer not less than 1 and not greater than n, n is an integer not less than 1, W1+W2+W3+...+Wn is the sum of the key distribution weights of each of the services, and S is The total amount of quantum key resources.

Preferably, the optimal quantum key update frequency for each of the services is determined according to the quantum key quantity resources and service attributes of each of the services, including:

use relation two Calculate the optimal quantum key update frequency of each of the services, fi is the optimal quantum key update frequency of the _i -th business, V _i is the data transmission rate of the i-th business, S _i is the i-th business's Quantum key resources, Q _i is the data transmission threshold of the i-th business.

A quantum key encryption device based on business attributes, including:

An acquisition module, configured to acquire the data to be encrypted of each business;

A first determination module, configured to determine the total quantum key amount resources and the service attributes of each of the services;

An allocation module, configured to allocate the total quantum key amount resources to each of the services, and obtain the quantum key amount resources of each of the services;

The second determining module is used to determine the optimal quantum key update frequency of each of the services according to the quantum key resources and service attributes of each of the services;

An encryption module, configured to update the quantum key of each of the services by utilizing the optimal quantum key update frequency of each of the services, and use the updated quantum key to encrypt the data to be encrypted of each of the services.

Preferably, the first determination module includes:

The first reading unit is used to read the real-time coding rate of the quantum key from the quantum key generation device;

The first calculation unit is configured to multiply the real-time coding rate of the quantum key and the preset time length to obtain the total quantum key resource.

Preferably, the service attributes of each service include: service data asset level and data transmission rate;

The first determination module includes:

A query unit, configured to query the service data asset levels of each of the services in the preset service data asset level library;

The second reading unit is configured to read the data transmission rate of each of the services from the virtual private network used by each of the services.

Preferably, the allocation module includes:

a sorting unit, configured to sort the business data asset levels of each of the businesses, and obtain the sorting results;

a determining unit, configured to determine the key distribution weights of each of the services by using the sorting results;

Allocation unit for utilizing the relation a Distributing the total quantum key amount resources to each of the services to obtain the quantum key amount resources of each of the services, Si is the quantum key amount resource of the _i -th business, Wi is the i-th business's Key distribution weight, i is an integer not less than 1 and not greater than n, n is an integer not less than 1, W1+W2+W3+...+Wn is the sum of the key distribution weights of each of the services, and S is The total amount of quantum key resources.

Preferably, the second determination module includes:

The second calculation unit is used to utilize the relation two Calculate the optimal quantum key update frequency of each of the services, fi is the optimal quantum key update frequency of the _i -th business, V _i is the data transmission rate of the i-th business, S _i is the i-th business's Quantum key resources, Q _i is the data transmission threshold of the i-th business.

Compared with the prior art, the beneficial effects of the present application are:

In this application, by obtaining the data to be encrypted for each business; determining the total quantum key amount resources and the business attributes of each said business; allocating said total quantum key amount resources to each of said businesses, each The quantum key amount resources of the business; according to the quantum key amount resources and business attributes of each of the business, determine the optimal quantum key update frequency of each of the business; use the optimal quantum key of each of the business The update frequency updates the quantum key of each of the services, and uses the updated quantum key to encrypt the data to be encrypted of each of the services to realize data encryption. Since the quantum key is a security key for quantum state observation based on the measurement principle of quantum mechanics, it has high security. Therefore, using quantum key to encrypt data can ensure the unconditional security of communication and improve the security and confidentiality of data.

Further, according to the quantum key resources and business attributes of each business, the optimal quantum key update frequency of each business is determined, so as to achieve the purpose of adaptively adjusting the quantum key update frequency of each business, so as to improve the use of quantum keys Efficiency, to ensure the efficient and safe operation of the power quantum secure communication network.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application. For those skilled in the art, other drawings can also be obtained based on these drawings without any creative effort.

Fig. 1 is a kind of flowchart of the quantum key encryption method based on business attribute provided by the present application;

Fig. 2 is a sub-flow chart of the quantum key encryption method based on business attributes provided by the present application;

Fig. 3 is another sub-flow chart of the business attribute-based quantum key encryption method provided by the present application;

Fig. 4 is another sub-flow chart of the quantum key encryption method based on business attributes provided by the present application;

Fig. 5 is a schematic diagram of a logical structure of a service attribute-based quantum key encryption device provided by the present application.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the application with reference to the drawings in the embodiments of the application. Apparently, the described embodiments are only some of the embodiments of the application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

Embodiment one

Please refer to Fig. 1, which shows a flow chart of the business attribute-based quantum key encryption method provided by the present application, which may include the following steps:

Step S11: Obtain the data to be encrypted of each service.

Step S12: Determine the total amount of quantum key resources and the service attributes of each of the services.

Since the execution purposes of each business are different, each business has different business attributes. However, since the business attribute is the attribute of the business itself, when the business is determined, the business attribute of the business can be determined.

Step S13: Allocating the total quantum key resource to each of the services to obtain the quantum key resource of each service.

Step S14: Determine the optimal quantum key update frequency for each of the services according to the quantum key amount resources and service attributes of each of the services.

Since the key update frequency determines the security level of data encryption, it is necessary to adjust the quantum key update frequency of each business in real time according to the quantum key resources and business attributes of each business to determine the optimal quantum key for each business update frequency. Based on this, since the service attributes of each service directly restrict the transmission of service data, it is necessary to determine the optimal quantum key update frequency that is compatible with the service attributes of each service.

Step S15: Utilize the optimal quantum key update frequency of each of the services to update the quantum keys of each of the services, and use the updated quantum keys to encrypt the data to be encrypted of each of the services.

In this embodiment, since the quantum key used for encryption is updated according to the optimal update frequency of the quantum key, the security level of data encryption is relatively high, and the security and encryption of encrypted data will be improved accordingly.

It should be noted that each business has a default key update frequency. After determining the optimal quantum key update frequency for each business, you can first compare the default key update frequency and the optimal quantum key update frequency for each business , when the two are different, adjust the default key update frequency to the optimal quantum key update frequency, and when the two are the same, just use the default key update frequency.

Of course, after determining the optimal quantum key update frequency, it is also possible to directly replace the default key update frequency with the optimal quantum key update frequency without comparing the default key update frequency of each business with the optimal quantum key update frequency. Key update frequency, just use the optimal quantum key update frequency.

In this application, by obtaining the data to be encrypted for each business; determining the total quantum key amount resources and the business attributes of each said business; allocating said total quantum key amount resources to each of said businesses, each The quantum key amount resources of the business; according to the quantum key amount resources and business attributes of each of the business, determine the optimal quantum key update frequency of each of the business; use the optimal quantum key of each of the business The update frequency updates the quantum key of each of the services, and uses the updated quantum key to encrypt the data to be encrypted of each of the services to realize data encryption. Since the quantum key is a security key for quantum state observation based on the measurement principle of quantum mechanics, it has high security. Therefore, using quantum key to encrypt data can ensure the unconditional security of communication and improve the security and confidentiality of data.

Further, according to the quantum key resources and business attributes of each business, the optimal quantum key update frequency of each business is determined, so as to achieve the purpose of adaptively adjusting the quantum key update frequency of each business, so as to improve the use of quantum keys Efficiency, to ensure the efficient and safe operation of the power quantum secure communication network.

In this embodiment, the above-mentioned specific process of determining the total quantum key amount resources can be referred to in FIG. 2, which may include the following steps:

Step S21: Read the real-time coding rate of the quantum key from the quantum key generation device.

Step S22: Multiply the quantum key real-time coding rate and the preset time length to obtain the total quantum key resources.

In this embodiment, the service attributes of the above-mentioned services may specifically include, but are not limited to, the following types: service data asset level and data transmission rate.

In the case where the service attributes of each of the services specifically include: service data asset level and data transmission rate, the specific process of determining the service attributes of each of the services can be referred to in FIG. 3 , and may include the following steps:

Step S31: query the business data asset level of each business in the preset business data asset level database.

Step S32: Read the data transmission rate of each of the services from the virtual private network used by each of the services.

In this embodiment, the allocation of the total quantum key amount resources to each of the services may be in an even distribution manner, specifically: dividing the total quantum key amount resources by the total number of services, Get the quantum key resources of each business.

Of course, the total quantum key resource is allocated to each of the services to obtain the quantum resource of each business, and the total quantum key resource can also be associated with the business attribute. According to the self-use of business attributes, it is allocated to each business. For details, please refer to Figure 4, which may include the following steps:

Step S41: Sort the business data asset levels of each business to obtain the sorting result.

Step S42: Using the sorting result to determine the key distribution weight of each of the services.

Step S43: Using relational formula 1 Allocating the total quantum key amount resources to each of the services to obtain the quantum key amount resources of each of the services.

Among them, S _i is the quantum key resource of the i-th business, Wi is the key distribution weight of the i-th business, i is an integer not less than 1 and not greater than n, n is an integer not less than 1, W1+ W2+W3+...+Wn is the sum of the key distribution weights of each service, and S is the total quantum key resource.

In this embodiment, since the business data asset level represents the importance of the business data, the use of the business data asset level to allocate quantum key resources can ensure more secure encryption of important business data. Among them, the higher the level of business data assets, the greater the weight of the key distribution of the business, and correspondingly, the more resources of the quantum key amount allocated to the business.

Based on the distribution method of quantum key amount resources shown in FIG. 4 , since the key update frequency is relatively high for services with high level of service data assets. Therefore, the reciprocal of the key resources of each business can be used, that is, As one of the weight parameters for calculating the key update frequency;

And, the key is updated in a time-division manner (that is, the operation of the service is performed according to the time-separated operation), so the speed of the data transmission rate V _i determines the amount of service data transmitted by the line. Assuming that the key is updated when the amount of transmitted data of a service reaches the data transmission threshold Q _i , the key update period T corresponding to the service is

Combining the above two factors, the quantum key update frequency (times/second) is

Based on the above content, according to the quantum key resources and business attributes of each of the services, the specific process of determining the optimal quantum key update frequency of each of the services can be as follows: using the relationship formula 2 Calculate the optimal quantum key update frequency of each of the services, fi is the optimal quantum key update frequency of the _i -th business, V _i is the data transmission rate of the i-th business, S _i is the i-th business's Quantum key resources, Q _i is the data transmission threshold of the i-th business.

Of course, the business attributes of each business may not only include business data asset level and data transmission rate, but also include: business priority, data importance, real-time transmission, data block size, data transmission accuracy, etc. Therefore, this embodiment is not limited to determine the optimal quantum key update frequency of each business only based on the quantum key amount resources of each business, the business data asset level and the data transmission rate, and can also be based on the quantum key amount of each business Resources, business priority, data importance, real-time transmission, data block size, data transmission accuracy and other business attributes are used to determine the optimal quantum key update frequency for each business. The specific determination process needs to be determined according to the specific business attributes.

Embodiment two

Corresponding to the above method embodiment, this embodiment provides a quantum key encryption device based on business attributes, please refer to FIG. 5 , the quantum key encryption device based on business attributes includes: an acquisition module 11, a first determination module 12 , an allocation module 13 , a second determination module 14 and an encryption module 15 .

The acquiring module 11 is configured to acquire the data to be encrypted of each service.

The first determination module 12 is configured to determine the total amount of quantum key resources and the service attributes of each of the services.

The allocation module 13 is configured to allocate the total quantum key resource to each of the services, and obtain the quantum key resource of each service.

The second determination module 14 is configured to determine the optimal quantum key update frequency for each of the services according to the quantum key resources and service attributes of each of the services.

The encryption module 15 is configured to use the optimal quantum key update frequency of each of the services to update the quantum keys of each of the services, and use the updated quantum keys to encrypt the data to be encrypted of each of the services.

In this embodiment, the first determining module 12 may specifically include: a first reading unit and a first calculating unit.

The first reading unit is used to read the real-time coding rate of the quantum key from the quantum key generating device.

The first calculation unit is configured to multiply the real-time coding rate of the quantum key and the preset time length to obtain the total quantum key resource.

In this embodiment, the service attributes of the above-mentioned services may specifically include: service data asset level and data transmission rate.

In the case that the service attributes of each service may specifically include: service data asset level and data transmission rate, the first determining module 12 specifically includes: a query unit and a second reading unit.

The query unit is configured to query the service data asset class of each service in the preset service data asset class library.

The second reading unit is configured to read the data transmission rate of each of the services from the virtual private network used by each of the services.

In this embodiment, the allocation module 13 may specifically include: a sorting unit, a determination unit, and an allocation unit.

The sorting unit is configured to sort the service data asset levels of each of the services from high to low to obtain a sorting result.

A determining unit, configured to determine key distribution weights for each of the services by using the sorting result.

Allocation unit for utilizing the relation a Distribute the total quantum key amount resources to each of the services to obtain the quantum key amount resources of each of the services, Si is the quantum key amount resource of the _i -th business, Wi is the i-th business's Key distribution weight, i is an integer not less than 1 and not greater than n, n is an integer not less than 1, W1+W2+W3+...+Wn is the sum of the key distribution weights of each of the services, and S is The total amount of quantum key resources.

The above-mentioned second determination module 14 may specifically include: a second calculation unit, configured to use the relational expression 2 Calculate the optimal quantum key update frequency of each of the services, f _i is the optimal quantum key update frequency of the i-th business, V _i is the data transmission rate of the i-th business, S _i is the i-th business's Quantum key resources, Q _i is the data transmission threshold of the i-th business.

It should be noted that each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. For the same and similar parts in each embodiment, refer to each other, that is, Can. As for the device-type embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to part of the description of the method embodiments.

Finally, it should also be noted that in this text, relational terms such as first and second etc. are only used to distinguish one entity or operation from another, and do not necessarily require or imply that these entities or operations, any such actual relationship or order exists. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

For the convenience of description, when describing the above devices, functions are divided into various units and described separately. Of course, when implementing the present application, the functions of each unit can be implemented in one or more pieces of software and/or hardware.

It can be known from the above description of the implementation manners that those skilled in the art can clearly understand that the present application can be implemented by means of software plus a necessary general-purpose hardware platform. Based on this understanding, the essence of the technical solution of this application or the part that contributes to the prior art can be embodied in the form of software products, and the computer software products can be stored in storage media, such as ROM/RAM, disk , CD, etc., including several instructions to make a computer device (which may be a personal computer, server, or network device, etc.) execute the methods described in various embodiments or some parts of the embodiments of the present application.

The above is a detailed introduction to a quantum key encryption method and device based on business attributes provided by this application. In this paper, specific examples are used to illustrate the principle and implementation of this application. The description of the above embodiments is only for To help understand the method and its core idea of this application; at the same time, for those of ordinary skill in the art, according to the idea of this application, there will be changes in the specific implementation and application scope. In summary, the content of this specification It should not be construed as a limitation of the application.

Claims (10)

1. a kind of quantum key encryption method based on service attribute, it is characterised in that including：

Obtain the be-encrypted data of each business；

It is determined that the service attribute of total quantum key amount resource and each business；

Each described business is given by total quantum key amount resource allocation, the quantum key amount money of each business is obtained Source；

Quantum key amount resource and service attribute according to each business, determine the optimal quantum key of each business Renewal frequency；

The quantum key of each business is updated using the optimal amount sub-key update frequency of business each described, and using more Quantum key after new is encrypted to the be-encrypted data of business each described.

2. method according to claim 1, it is characterised in that it is determined that total quantum key amount resource, including：

Quantum key is read from quantum key generation equipment in real time into code check；

Multiplication operation is carried out into code check and preset duration in real time to the quantum key, total quantum key amount resource is obtained.

3. method according to claim 1 and 2, it is characterised in that the service attribute of each business includes：Business number According to asset level and message transmission rate；

Determine the service attribute of each business, including：

The business datum asset level of each business is inquired about in pre-set business data assets grade storehouse；

The message transmission rate of each business is read from the VPN that business each described is used.

4. method according to claim 3, it is characterised in that by total quantum key amount resource allocation to described in each Business, obtains the quantum key amount resource of each business, including：

Business datum asset level to business each described carries out height sequence, obtains ranking results；

The encryption key distribution weight of each business is determined using the ranking results；

Using relational expression oneEach institute is given by total quantum key amount resource allocation Business is stated, the quantum key amount resource of each business, S is obtained_iIt is i-th quantum key amount resource of business, Wi is i-th The encryption key distribution weight of individual business, i is not less than the 1 and no more than integer of n, and n is the integer not less than 1, W1+W2+W3+...+ Wn is the encryption key distribution weight sum of each business, and S is total quantum key amount resource.

5. method according to claim 4, it is characterised in that quantum key amount resource and industry according to each business Business attribute, determines the optimal amount sub-key update frequency of each business, including：

Using relational expression twoCalculate the optimal amount sub-key update frequency of each business, f_iIt is i-th industry The optimal amount sub-key update frequency of business, V_iIt is i-th message transmission rate of business, S_iIt is i-th quantum key amount of business Resource, Q_iIt is i-th data transfer threshold value of business.

6. a kind of quantum key encryption device based on service attribute, it is characterised in that including：

Acquisition module, the be-encrypted data for obtaining each business；

First determining module, the service attribute for determining total quantum key amount resource and each business；

Distribute module, for giving each described business by total quantum key amount resource allocation, obtains each business Quantum key amount resource；

Second determining module, for quantum key amount resource and service attribute according to each business, determines described in each The optimal amount sub-key update frequency of business；

Encrypting module, the quantum of each business is updated for the optimal amount sub-key update frequency using business each described Key, and the be-encrypted data of business each described is encrypted using the quantum key after renewal.

7. device according to claim 6, it is characterised in that first determining module includes：

First reading unit, for reading quantum key from quantum key generation equipment in real time into code check；

First computing unit, for carrying out multiplication operation into code check and preset duration in real time to the quantum key, obtains described Total quantum key amount resource.

8. the device according to claim 6 or 7, it is characterised in that the service attribute of each business includes：Business number According to asset level and message transmission rate；

First determining module includes：

Query unit, for inquiring about business datum assets of each business etc. in pre-set business data assets grade storehouse Level；

Second reading unit, the number for reading each business from the VPN that business each described is used According to transmission rate.

9. device according to claim 8, it is characterised in that the distribute module includes：

Sequencing unit, height sequence is carried out for the business datum asset level to business each described, obtains ranking results；

Determining unit, the encryption key distribution weight for determining each business using the ranking results；

Allocation unit, for utilizing relational expression oneTotal quantum key amount is provided Each business is distributed in source, obtains the quantum key amount resource of each business, S_iIt is i-th quantum key of business Amount resource, Wi is i-th encryption key distribution weight of business, and i is not less than the 1 and no more than integer of n, and n is whole not less than 1 Number, W1+W2+W3+...+Wn is the encryption key distribution weight sum of each business, and S is total quantum key amount resource.

10. device according to claim 9, it is characterised in that second determining module includes：

Second computing unit, for utilizing relational expression twoCalculate the optimal amount sub-key update of each business Frequency, f_iIt is i-th optimal amount sub-key update frequency of business, V_iIt is i-th message transmission rate of business, S_iIt is i-th The quantum key amount resource of business, Q_iIt is i-th data transfer threshold value of business.