CN116055042A - A quantum key encryption method, device, equipment and storage medium - Google Patents

Abstract

The application discloses a quantum key encryption method, a device, equipment and a storage medium, comprising the following steps: the quantum key management server obtains a quantum key; the quantum key management server distributes the quantum key to a client passing authentication based on a quantum key filling machine, and the client passing authentication has data to be encrypted; and the client side passing the authentication encrypts the data to be encrypted based on the quantum key. In this way, in order to cope with the brute force cracking of the quantum computer, the application proposes to encrypt the data to be encrypted by using the quantum key, so that the brute force cracking from the quantum computer can be resisted effectively, and the safety of data communication in the data transmission process is improved.

Description

A quantum key encryption method, device, equipment and storage medium

technical field

The present application relates to the fields of quantum communication technology and information science technology, in particular to a quantum key encryption method, device, equipment and storage medium.

Background technique

In the power industry, the power communication network is a component of the power business system, and the safe operation of the power communication network is the guarantee for the stable operation of the power business system. Among them, the system operation instructions and control commands in the power communication network involve more privacy Therefore, the data needs to be encrypted during the data transmission to ensure the security of the data.

At present, the power industry uses traditional data encryption algorithms (such as asymmetric encryption algorithms) to encrypt data, encrypts data with public keys, and then decrypts data with private keys, and only transmits public keys during communication. However, with the rapid development of artificial intelligence, supercomputers, and quantum computers, communication based on traditional data encryption algorithms is at risk of being cracked by violence, resulting in low security of data communication.

Therefore, how to improve the security of data communication is a key issue concerned by those skilled in the art.

Contents of the invention

Based on the above problems, the present application provides a quantum key encryption method, device, equipment and storage medium to improve the security of data communication. The embodiment of the application discloses the following technical solutions:

In the first aspect, the application discloses a quantum key encryption method, including:

The quantum key management server obtains the quantum key;

The quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, and the authenticated client has data to be encrypted;

The authenticated client encrypts the data to be encrypted based on the quantum key.

Optionally, before the quantum key management server obtains the quantum key, it also includes:

The quantum key management server obtains a quantum random number;

The quantum key management server obtains the quantum key, including:

The quantum key management server obtains the quantum key based on the quantum random number.

Optionally, before the quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, it further includes:

The quantum key management server performs identity authentication with the client;

In response to passing the identity authentication, determine the client as the client passing the authentication.

Optionally, the quantum key management server and the client perform identity authentication, including:

The client initiates a first request message to the quantum key management server;

In response to passing the verification of the first request message, the quantum key management server returns a first response message to the client;

The client obtains a second request message based on the first response message, and initiates the second request message to the quantum key management server;

In response to the second request message passing the verification, the quantum key management server returns a second response message to the client.

Optionally, also include:

The quantum key management server encrypts the first request packet, the first response packet, the second request packet, and the second response packet using quantum key encryption technology.

Optionally, before the authenticated client encrypts the data to be encrypted based on the quantum key, it further includes:

The quantum key management server presets key usage parameters of the quantum key;

The client that has passed the authentication encrypts the data to be encrypted based on the quantum key, including:

The authenticated client uses the quantum key to encrypt the data to be encrypted based on the key usage parameter.

Optionally, the quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, including:

The quantum key management server writes the quantum key into the quantum TF card and the quantum Ukey of the quantum key filling machine;

Import the quantum key to the authenticated client by using the interface corresponding to the quantum TF card and the quantum Ukey.

In a second aspect, the present application discloses a quantum key encryption device, including:

Obtaining module, used for obtaining quantum key;

A distribution module, configured to distribute the quantum key to the authenticated client based on the quantum key filling machine, and the authenticated client has data to be encrypted;

An encryption module, configured to encrypt the data to be encrypted based on the quantum key.

Optionally, also include:

The first obtaining subunit is used to obtain quantum random numbers;

The acquisition module is specifically used for:

The quantum key is obtained based on the quantum random number.

Optionally, also include:

An authentication module, configured to enable the quantum key management server and the client to perform identity authentication;

A determining module, configured to, in response to passing the identity authentication, determine the client as the client passing the authentication.

Optionally, the authentication module is specifically used for:

The client initiates a first request message to the quantum key management server;

In response to passing the verification of the first request message, the quantum key management server returns a first response message to the client;

The client obtains a second request message based on the first response message, and initiates the second request message to the quantum key management server;

In response to the second request message passing the verification, the quantum key management server returns a second response message to the client.

Optionally, also include:

The first encryption subunit is configured to encrypt the first request packet, the first response packet, the second request packet, and the second response packet using quantum key encryption technology.

Optionally, also include:

A preset module, configured to preset key usage parameters of the quantum key;

The encryption module is specifically used for:

The quantum key is used to encrypt the data to be encrypted based on the key usage parameter.

Optionally, the distribution module is specifically used for:

Write the quantum key into the quantum TF card and the quantum Ukey of the quantum key filling machine;

Import the quantum key to the authenticated client by using the interface corresponding to the quantum TF card and the quantum Ukey.

In a third aspect, the embodiment of the present application provides an electronic device, including:

memory for storing computer programs;

A processor, configured to implement the steps of the above-mentioned quantum key encryption method when executing the computer program.

In a fourth aspect, the embodiment of the present application provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the above-mentioned quantum key encryption method are implemented.

Compared with the prior art, the present application has the following beneficial effects:

In this application, the quantum key is first obtained by the quantum key management server, and then the quantum key management server distributes the quantum key to the client who passes the authentication based on the quantum key filling machine, and the authentication passes There is data to be encrypted in the client, and finally the authenticated client encrypts the data to be encrypted based on the quantum key. In this way, in this application, in order to cope with the brute force cracking of the quantum computer, it is proposed to use the quantum key to encrypt the data to be encrypted, which can effectively resist the brute force cracking from the quantum computer, and improve the security of data communication during data transmission .

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present application. Those skilled in the art can also obtain other drawings based on these drawings without any creative effort.

Fig. 1 is the flowchart of a kind of quantum key encryption method that the embodiment of the present application provides;

Fig. 2 is a schematic diagram of the SM4-based quantum key encryption technology process framework provided by the embodiment of the present application;

FIG. 3 is a schematic flow diagram of the identity authentication provided by the embodiment of the present application;

FIG. 4 is a schematic structural diagram of a quantum key encryption device provided in an embodiment of the present application;

FIG. 5 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of this application.

It should be noted that a quantum key encryption method, device, device, and storage medium provided by this application are used in the fields of quantum communication technology and information science technology. The application field of the device and storage medium name is limited.

As described above, in the power industry, the power communication network is a component of the power business system, and the safe operation of the power communication network is the guarantee for the stable operation of the power business system. Among them, the system operation instructions and control commands in the power communication network all involve There is a lot of private data, so it is necessary to encrypt the data during the data transmission to ensure the security of the data. At present, the power industry uses traditional data encryption algorithms (such as asymmetric encryption algorithms) to encrypt data, encrypts data with public keys, and then decrypts data with private keys, and only transmits public keys during communication. However, with the rapid development of artificial intelligence, supercomputers, and quantum computers, communication based on traditional data encryption algorithms is at risk of being cracked by violence, resulting in low security of data communication. Therefore, how to improve the security of data communication is a key issue that those skilled in the art pay attention to.

Therefore, the inventor proposes the technical solution of this application. In this application, the quantum key is firstly obtained by the quantum key management server, and then the quantum key management server distributes the quantum key to the authenticator based on the quantum key filling machine. For the client that passes the authentication, the client that passes the authentication has data to be encrypted, and finally the client that passes the authentication encrypts the data to be encrypted based on the quantum key. In this way, in this application, in order to cope with the brute force cracking of the quantum computer, it is proposed to use the quantum key to encrypt the data to be encrypted, which can effectively resist the brute force cracking from the quantum computer, and improve the security of data communication during data transmission .

Next, technical terms that may appear in this application are explained.

Quantum random number generator: It is a special kind of random number generator, which is designed according to the probabilistic nature of quantum mechanics. It generates quantum signals through quantum random sources, samples the quantum signals, and obtains random numbers after post-processing. The random number generated by this method has natural randomness and is not affected by the initial conditions and the environment. It is a theoretically verified true random number.

Quantum key filling machine: It is the "endurance station" of quantum key resources. Security media such as quantum security U-shield and quantum security TF card can be safely and reliably connected to the quantum security communication network nearby through the quantum key filling machine. Update quantum key resources to support quantum mobile security.

In order to enable those skilled in the art to better understand the solution of the present application, the present application will be further described in detail below in conjunction with the drawings and specific implementation methods.

method embodiment

A quantum key encryption method provided by this application is described below through an embodiment.

Referring to Fig. 1, this figure is a flow chart of a quantum key encryption method provided in the embodiment of the present application, as shown in Fig. 1, the method includes:

S101: The quantum key management server acquires the quantum key.

In this step, the quantum random number generated by the quantum random number generator is first obtained by the quantum key management server, and then the quantum random number is managed centrally by the quantum key management server, and the quantum random number is subjected to compliance processing to obtain Quantum key. Among them, compliance processing includes using different protocol specifications to obtain quantum keys.

It is understandable that the quantum random number generator will continuously receive photons and obtain the direction of the photon passing through the quantum random number generator. If the direction is above the quantum random number generator, it can be recorded as bit 1. If the direction is in Below the quantum random number generator, it can be recorded as bit 0 to form a quantum random number. If 100 photons are obtained at one time, the final quantum key obtained will be 100 bits.

It should be noted that the quantum random number generator in this application is based on three generation schemes: amplified spontaneous emission, laser phase noise, and statistical fluctuation of vacuum state, which can realize real-time high-speed quantum true random output. Random numbers are generated by the quantum random number generator to meet the requirements of true randomness, and the random number generation rate can reach more than 500Mbps.

In a realizable implementation, the quantum key management server distributes and stores the obtained quantum keys in N quantum key service libraries through quantum key encryption technology, so that the N quantum key service library nodes Mutual backup of data improves concurrent access performance, and each quantum key service library node supports large-capacity storage, improving the reliability of quantum keys. The quantum key encryption technology may be an SM4-based quantum key encryption technology.

Referring to FIG. 2, FIG. 2 is a schematic diagram of the SM4-based quantum key encryption technology process framework provided by the embodiment of the present application.

QK_i属于量子密钥的一部分，其中

x_i属于明文输入的一部分，其中

Step S2.1: MK _i is part of the preset root key, where

QK _i is part of the quantum key, where

x _i is part of the plaintext input, where

其中FK_i为系统参数，K_i用于密钥扩展算法中生成轮密钥rk_i；Step S2.2:

Among them, FK _i is a system parameter, and K _i is used to generate round key rk _i in the key expansion algorithm;

其中CK_i为固定参数。rk_i用于后续的轮函数中；Step S2.3:

Among them, CK _i is a fixed parameter. rk _i is used in subsequent round functions;

Step S2.4: The method of generating the round function F is as follows:

Step S2.5: Transform the results generated by the last four iterations of the round function in reverse order, that is, R(X ₃₂ , X ₃₃ , X ₃₄ , X ₃₅ )=X ₃₅ X ₃₄ X ₃₃ X ₃₂ , the result of the transformation is for the final ciphertext.

S102: The quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, and the authenticated client has data to be encrypted.

In this step, first insert an authorized administrator device and one or more Quantum UKEY or Quantum TF cards that need to be filled on the quantum key filling machine. After the mutual authentication of the key management server passes, the quantum key management server calls the quantum security SDK to write the quantum key information into the quantum UKEY or quantum TF card in turn, and then writes the quantum key information through the API interface of the quantum UKEY and quantum TF card. Import to authenticated clients. In this way, the client can directly obtain the encryption/decryption handle to encrypt and decrypt business data or secure channel data, and the quantum key plaintext does not appear anywhere on the client, ensuring the security of the data transmission process.

It should be noted that before importing the quantum key to the authenticated client, the quantum key management server will perform identity authentication with the client. It sends the quantum key. Specifically, firstly, the client will send the first request message to the quantum key management server, and the quantum key management server will verify the first request message, if the verification is passed, the client will return the first response message, and the second A request message and the first response message include the user name agreed by both parties; then the client calculates the first response message to obtain the second request message, and sends the second request message to the sub-key management server , the quantum key management server verifies the second request message, and if the verification passes, the client returns a second response message. If both verifications pass, the client is determined as the client that passed the authentication. Among them, the quantum key management server uses SM4-based quantum key encryption technology to encrypt the first request message, the first response message, the second request message, and the second response message to ensure security. Further, when the quantum key management server obtains the first request message and the second request message, it will first decrypt the first request message and the second request message, and then verify; correspondingly, After obtaining the first response message and the second response message, the client first decrypts the first response message and the second response message before calculating.

Among them, the identity authentication methods of the quantum key filling machine and the quantum key management server are similar to the identity authentication methods of the client and the quantum key management server, and will not be repeated here.

Referring to FIG. 3, FIG. 3 is a schematic flowchart of identity authentication provided by the embodiment of the present application.

Step S3.1: The client sends a first request message to the quantum key management server, the main content of which is: UserName|Client-nonce, and uses the SM4-based quantum key encryption technology to encrypt the first request message ;

Step S3.2: The quantum key management server returns the first response message to the client, the main content of which is: UserName|Salt|Iteration-count|Server-nonce, and uses SM4-based quantum key encryption technology to Authentication challenge packet encryption;

其中Key＝PBKDF2(QK′,Salt,Iteration-count)，Auth＝UserName||Client-nonce||Salt||Iteration-count||Server-nonce(||表示拼接)，客户端向量子密钥管理服务器发起第二请求报文，该报文主要内容为：UserName|ClientProof，并使用基于SM4的量子密钥加密技术对认证应答报文加密；Step S3.3: Client Computation

Among them, Key＝PBKDF2(QK′, Salt, Iteration-count), Auth＝UserName||Client-nonce||Salt||Iteration-count||Server-nonce (|| indicates splicing), and the client vector sub-key management The server initiates a second request message, the main content of which is: UserName|ClientProof, and uses SM4-based quantum key encryption technology to encrypt the authentication response message;

Key＝PBKDF2(QK′,Salt,Iteration-count),Auth＝UserName||Client-nonce||Salt||Iteration-count||Server-nonce(||表示拼接)，量子密钥管理服务器向客户端返回第二应答报文，该报文主要内容为：UserName|ServerProof，并使用基于SM4的量子密钥加密技术对认证确认报文加密；Step S3.4: Quantum key management server verifies whether the ClientProof is correct, and after the verification is passed, calculates ServerProof=HMAC(Key', Auth), where

Key＝PBKDF2(QK′,Salt,Iteration-count), Auth＝UserName||Client-nonce||Salt||Iteration-count||Server-nonce (||indicates concatenation), the quantum key management server sends the client Return the second response message, the main content of which is: UserName|ServerProof, and use SM4-based quantum key encryption technology to encrypt the authentication confirmation message;

Step S3.5: After passing the authentication, the quantum key management server distributes the quantum key to the client, and encrypts the quantum key using SM4-based quantum key encryption technology.

S103: The authenticated client encrypts the data to be encrypted based on the quantum key.

In this step, the authenticated client uses the quantum key to encrypt the data to be encrypted. Further, the client includes a power business system server and a power business system server. After the power business system server and the quantum key management server pass the authentication, the power business system server obtains the quantum key and key usage parameters, and sends the key usage parameters to the business system client, so that the power business system client can obtain a consistent Quantum keys, which can further improve the security of data communication. For example, there are 20 bits (13~33) in the quantum key, and the key usage parameters are preset as 13~20, then in the data communication process, the power business system server and the power business system client can only use 13~20 Quantum keys for data communication.

The client also includes an access gateway. After the access gateway and the quantum key management server are authenticated, the quantum key management server distributes the quantum key to the access gateway. After the access gateway obtains the quantum key, it is used to encrypt the established The number of services in the secure tunnel.

It can be seen that this optional scheme mainly explains how to improve the security of data communication. Specifically, in this optional solution, the quantum key management server first obtains the quantum key, and then the quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine , the authenticated client has data to be encrypted, and finally the authenticated client encrypts the to-be-encrypted data based on the quantum key.

To sum up, in this embodiment, in order to cope with the brute force cracking of the quantum computer, it is proposed to use the quantum key to encrypt the data to be encrypted, which can effectively resist the brute force cracking from the quantum computer, and improve the security of data communication during the data transmission process sex. In addition, it also adopts a distributed architecture to store quantum keys, supports large-capacity storage, supports high concurrency, supports mutual backup between multiple quantum key service library nodes, and uses quantum keys to encrypt important information during communication and transmission. It enhances the confidentiality of important information in the power business system during communication and transmission.

Device embodiment

A quantum key encryption device provided in the embodiment of the present application is introduced below. The quantum key encryption device described below and the quantum key encryption method described above can be referred to in correspondence.

Referring to FIG. 4, this figure is a schematic structural diagram of a quantum key encryption device provided in the embodiment of the present application. As shown in FIG. 4, the device includes:

Obtaining module 100, for obtaining the quantum key;

The distribution module 200 is used for distributing the quantum key to the authenticated client based on the quantum key filling machine, and the authenticated client has data to be encrypted;

An encryption module 300, configured to encrypt the data to be encrypted based on the quantum key.

Optionally, also include:

The first obtaining subunit is used to obtain quantum random numbers;

The acquisition module 100 is specifically used for:

The quantum key is obtained based on the quantum random number.

Optionally, also include:

An authentication module, configured to enable the quantum key management server and the client to perform identity authentication;

A determining module, configured to, in response to passing the identity authentication, determine the client as the client passing the authentication.

Optionally, the authentication module is specifically used for:

The client initiates a first request message to the quantum key management server;

In response to passing the verification of the first request message, the quantum key management server returns a first response message to the client;

The client obtains a second request message based on the first response message, and initiates the second request message to the quantum key management server;

In response to the second request message passing the verification, the quantum key management server returns a second response message to the client.

Optionally, also include:

The first encryption subunit is configured to encrypt the first request packet, the first response packet, the second request packet, and the second response packet using quantum key encryption technology.

Optionally, also include:

A preset module, configured to preset key usage parameters of the quantum key;

The encryption module 300 is specifically used for:

The quantum key is used to encrypt the data to be encrypted based on the key usage parameter.

Optionally, the distribution module 200 is specifically used for:

Write the quantum key into the quantum TF card and the quantum Ukey of the quantum key filling machine;

Import the quantum key to the authenticated client by using the interface corresponding to the quantum TF card and the quantum Ukey.

The quantum key encryption device provided in the embodiment of the present application has the same beneficial effects as the quantum key encryption method provided in the above embodiments, so details are not repeated here.

Electronic device embodiment

Referring to Figure 5, this figure is a schematic structural diagram of an electronic device provided in the embodiment of the present application, as shown in Figure 5, including:

memory 11 for storing computer programs;

The processor 12 is configured to implement the steps of the quantum key encryption method in any of the above method embodiments when executing the computer program.

In this embodiment, the device may be a vehicle-mounted computer, a PC (Personal Computer, personal computer), or a terminal device such as a smart phone, a tablet computer, a palmtop computer, or a portable computer.

The device may include a memory 11 , a processor 12 and a bus 13 . Wherein, the memory 11 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card-type memory (eg, SD or DX memory, etc.), magnetic memory, magnetic disk, optical disk, etc. The memory 11 may be an internal storage unit of the device in some embodiments, such as a hard disk of the device. Memory 11 can also be the external storage device of equipment in other embodiments, such as the plug-in hard disk equipped on the equipment, smart memory card (Smart Media Card, SMC), secure digital (SecureDigital, SD) card, flash memory card ( Flash Card), etc. Further, the memory 11 may also include both an internal storage unit of the device and an external storage device. The memory 11 can not only be used to store application software and various data installed in the device, such as program codes for executing fault prediction methods, but also can be used to temporarily store data that has been output or will be output.

In some embodiments, the processor 12 may be a central processing unit (Central Processing Unit, CPU), a controller, a microcontroller, a microprocessor or other data processing chips, for running program codes or processing data stored in the memory 11. , such as program codes for implementing fault prediction methods, etc.

The bus 13 may be a peripheral component interconnect standard (PCI for short) bus or an extended industry standard architecture (EISA for short) bus or the like. The bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 5 , but it does not mean that there is only one bus or one type of bus.

Further, the device can also include a network interface 14, and the network interface 14 can optionally include a wired interface and/or a wireless interface (such as a WI-FI interface, a bluetooth interface, etc.), which are usually used for communication between the device and other electronic devices Establish a communication connection.

Optionally, the device may further include a user interface 15. The user interface 15 may include a display (Display), an input unit such as a keyboard (Keyboard), and the optional user interface 15 may also include a standard wired interface and a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, and the like. Wherein, the display may also be properly referred to as a display screen or a display unit, and is used for displaying information processed in the device and for displaying a visualized user interface.

FIG. 5 only shows a device with components 11-15. Those skilled in the art can understand that the structure shown in FIG. 5 does not constitute a limitation on the device, and may include fewer or more components than those shown in the illustration. Or combine certain components, or different component arrangements.

Readable storage medium embodiment

The embodiment of the present application also provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the quantum key encryption method described in any of the above method embodiments is implemented. A step of. Wherein, the storage medium may include: U disk, mobile hard disk, read-only memory (Read-OnlyMemory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other various media that can store program codes .

It should be noted that a quantum key encryption method provided by the present invention can be used in the fields of quantum communication technology and information science technology. The above is only an example, and does not limit the application field of a quantum key encryption method provided by the present invention.

It should also be noted that the "first" and "second" in the names of "first" and "second" (if they exist) mentioned in the embodiments of this application are only used for name identification and do not represent First and second in order.

Each embodiment in the description is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for relevant details, please refer to the description of the method part.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application.

The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

A quantum key encryption method, device, equipment, and storage medium provided in this application have been introduced in detail above. In this paper, specific examples are used to illustrate the principles and implementation methods of the present application, and the descriptions of the above embodiments are only used to help understand the methods and core ideas of the present application. It should be pointed out that those skilled in the art can make some improvements and modifications to the application without departing from the principles of the application, and these improvements and modifications also fall within the protection scope of the claims of the application.

Claims (10)

1. A quantum key encryption method, characterized in that, comprising: The quantum key management server obtains the quantum key; The quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, and the authenticated client has data to be encrypted; The authenticated client encrypts the data to be encrypted based on the quantum key. 2. The method according to claim 1, wherein, before the quantum key management server obtains the quantum key, further comprising: The quantum key management server obtains a quantum random number; The quantum key management server obtains the quantum key, including: The quantum key management server obtains the quantum key based on the quantum random number. 3. The method according to claim 1, wherein, before the quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, it also includes: The quantum key management server performs identity authentication with the client; In response to passing the identity authentication, determine the client as the client passing the authentication. 4. The method according to claim 3, wherein said quantum key management server and the client carry out identity authentication, comprising: The client initiates a first request message to the quantum key management server; In response to passing the verification of the first request message, the quantum key management server returns a first response message to the client; The client obtains a second request message based on the first response message, and initiates the second request message to the quantum key management server; In response to the second request message passing the verification, the quantum key management server returns a second response message to the client. 5. The method according to claim 4, further comprising: The quantum key management server encrypts the first request packet, the first response packet, the second request packet, and the second response packet using quantum key encryption technology. 6. The method according to claim 1, wherein, before the authenticated client encrypts the data to be encrypted based on the quantum key, further comprising: The quantum key management server presets key usage parameters of the quantum key; The client that has passed the authentication encrypts the data to be encrypted based on the quantum key, including: The authenticated client uses the quantum key to encrypt the data to be encrypted based on the key usage parameter. 7. The method according to claim 1, wherein the quantum key management server distributes the quantum key to the authenticated client based on the quantum key filling machine, including: The quantum key management server writes the quantum key into the quantum TF card and the quantum Ukey of the quantum key filling machine; Import the quantum key to the authenticated client by using the interface corresponding to the quantum TF card and the quantum Ukey. 8. A quantum key encryption device, characterized in that it comprises: Obtaining module, used for obtaining quantum key; A distribution module, configured to distribute the quantum key to the authenticated client based on the quantum key filling machine, and the authenticated client has data to be encrypted; An encryption module, configured to encrypt the data to be encrypted based on the quantum key. 9. An electronic device, characterized in that it comprises: memory for storing computer programs; A processor, configured to implement the steps of the quantum key encryption method according to any one of claims 1 to 7 when executing the computer program. 10. A computer-readable storage medium, characterized in that, a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the quantum cryptography as described in any one of claims 1 to 7 is realized. The steps of the key encryption method.

Images