CN-122027309-A - Laser radar data safe transmission method and system based on quantum key distribution
Abstract
The invention discloses a laser radar data safety transmission method and a system based on quantum key distribution, which belong to the technical field of quantum communication and laser radar data safety, wherein a quantum key distribution channel is established between a collection end and a processing center, and a shared key is generated through a BB84 protocol and stored in a key pool; when transmitting point cloud data, the point cloud data is transmitted through a classical channel after the encryption of the disposable secret key is extracted; a dynamic balance mechanism of key consumption and supplementation is innovatively designed, and the key pool allowance is monitored and supplementation is triggered when the key pool allowance is lower than a threshold value; the method and the device for destroying the secret key after decryption ensure the one-time secret security, and are suitable for high security scenes such as military mapping, key infrastructure monitoring and the like.
Inventors
- ZHOU GAOFENG
Assignees
- 北京芯眸电子科技有限公司
Dates
- Publication Date
- 20260512
- Application Date
- 20260228
Claims (10)
- 1. The laser radar data safety transmission method based on quantum key distribution is characterized by comprising the following steps: Step S1, a quantum key distribution channel is established between a laser radar data acquisition end and a data processing center, a quantum key distribution module of the acquisition end randomly selects a linear base vector or a diagonal base vector to code a single photon in a polarization state and then sends the single photon to the data processing center through the quantum channel, a quantum key distribution module of the data processing center randomly selects a measurement base vector to measure received photons, the two parties publicly compare base vector information used by each party through a classical channel, bit matched with the base vector is reserved as an original key bit string, quantum bit error rate estimation, error correction and privacy amplification operations are carried out on the original key bit string to obtain a shared key sequence, and the shared key sequence is respectively stored in a key pool of the acquisition end and a key pool of the processing center for standby; step S2, when a laser radar acquisition end needs to transmit point cloud data, the point cloud data to be transmitted are subjected to block processing according to a preset data block length to obtain a plurality of point cloud data blocks, disposable key segments with the same length as each point cloud data block are sequentially extracted from a key pool of the acquisition end, exclusive-or encryption operation is carried out on each disposable key segment and the corresponding point cloud data block to generate a point cloud ciphertext block sequence, and the point cloud ciphertext block sequence is transmitted to a data processing center through a classical channel; Step S3, setting a real-time key consumption rate in the continuous acquisition point cloud data transmission process of a key consumption monitoring unit, calculating a key demand predicted value in a preset time window in the future according to the scanning frequency of the laser radar and single-frame point cloud data, comparing the current allowance of an acquisition end key pool with a preset key allowance threshold, and generating a key supplementing trigger signal when the current allowance is lower than the key allowance threshold, wherein the key supplementing trigger signal starts a quantum key distribution process in step S1 to generate a new shared key and supplement the new shared key to the key pools of both parties, so that dynamic balance of key consumption and supplementation is realized.
- 2. The method according to claim 1, wherein in the step S1, the collecting-side quantum key distribution module performs a quantum state encoding process of the BB84 protocol, which includes randomly generating an initial bit sequence, and randomly selecting a linear basis vector or a diagonal basis vector for each bit in the initial bit sequence to perform polarization state encoding, wherein under the linear basis vector, bit 0 is encoded into a horizontal polarization state and bit 1 is encoded into a vertical polarization state, and under the diagonal basis vector, bit 0 is encoded into a positive 45 degree polarization state and bit 1 is encoded into a negative 45 degree polarization state.
- 3. The method according to claim 1, wherein the step S1 is characterized in that the process of performing quantum error rate estimation on the original key bit string comprises randomly extracting a predetermined proportion of sample bits from the original key bit string, publicly comparing the values of the extracted sample bits through a classical channel, counting the number of inconsistent bits in the comparison result and calculating the quantum error rate, determining that eavesdropping exists and terminating the current key distribution process when the quantum error rate exceeds a predetermined error rate safety threshold, and performing error correction processing and privacy amplification operation on the remaining original key bit string when the quantum error rate does not exceed the error rate safety threshold.
- 4. The method for safely transmitting the laser radar data based on the quantum key distribution according to claim 1, wherein in the step S2, the partitioning processing process of the point cloud data comprises the steps of obtaining a point cloud data frame generated by laser radar single-frame scanning, wherein the point cloud data frame comprises a plurality of three-dimensional space coordinate points and corresponding reflection intensity information thereof, dividing the point cloud data frame into a plurality of point cloud data blocks according to a preset data block length, and adding serial number identification and data block length information for each point cloud data block to form a point cloud data block sequence to be encrypted.
- 5. The method for safely transmitting laser radar data based on quantum key distribution according to claim 1, wherein in the step S3, the calculation process of the key requirement prediction value includes obtaining a currently configured scanning frequency parameter of the laser radar and an average data amount of single-frame point cloud data, calculating a point cloud data generation rate in unit time according to a product of the scanning frequency and the single-frame data amount, multiplying the point cloud data generation rate by a preset time window length to obtain a key requirement basic value in the time window, and multiplying the key requirement basic value by a preset safety margin coefficient to obtain a final key requirement prediction value.
- 6. The method for securely transmitting laser radar data based on quantum key distribution according to claim 1, wherein the setting of the key margin threshold in step S3 includes calculating a minimum buffer amount required for key replenishment according to a key generation rate of a quantum key distribution channel and a maximum data transmission rate of the laser radar, and multiplying the minimum buffer amount by a preset threshold coefficient having a value ranging from 1.2 to 2.0.
- 7. The method for securely transmitting laser radar data based on quantum key distribution according to claim 1, wherein the dynamic balance mechanism in step S3 further comprises a key replenishment rate adjustment process for increasing the photon emission frequency of the quantum key distribution process to increase the key generation rate when the key pool margin is continuously lower than the key pool margin threshold value in a plurality of consecutive monitoring periods, and for decreasing the photon emission frequency to save the quantum channel resources when the key pool margin exceeds a preset proportion of the key pool capacity upper limit.
- 8. The laser radar data safety transmission method based on quantum key distribution according to claim 1, further comprising the steps of S4, after the data processing center receives the point cloud ciphertext block sequence, extracting corresponding disposable key segments from the processing center key pool according to the same sequence as the acquisition end, performing exclusive-or decryption operation on each disposable key segment and the corresponding point cloud ciphertext block to restore the point cloud data block, reorganizing the decrypted point cloud data block into complete point cloud data, permanently deleting the used disposable key segments from the processing center key pool after the decryption operation is completed, and synchronously deleting the corresponding used key segments by the acquisition end to ensure the absolute security of one-time pad; And the step S4 also comprises a data integrity verification process, namely calculating a verification value for each point cloud data block before encryption, adding the verification value to the tail end of the point cloud data block for encryption, re-calculating the verification value of each point cloud data block after decryption, comparing the verification value with the added verification value, and judging that an error occurs in the data transmission process and requesting retransmission of the corresponding point cloud ciphertext block when the verification value comparison is inconsistent.
- 9. The method for safely transmitting laser radar data based on quantum key distribution according to claim 8, further comprising a key synchronization mechanism, wherein a key pool of the acquisition end and a key pool of the processing center adopt the same key index numbering system, a starting index number and length information of a key segment used are added to the head of a point cloud ciphertext block sequence during encryption, and the corresponding key segment is positioned and extracted from the key pool of the processing center according to the starting index number and the length information during decryption.
- 10. A laser radar data security transmission system based on quantum key distribution, for implementing the laser radar data security transmission method based on quantum key distribution as set forth in any one of claims 1 to 9, comprising: The quantum key distribution module comprises a collection end quantum transmitting unit arranged at a laser radar data collection end and a processing end quantum receiving unit arranged at a data processing center, and is used for establishing a quantum key distribution channel through a quantum channel and generating a shared key sequence based on a BB84 protocol; The key pool management module comprises a collecting end key pool arranged at a collecting end and a processing center key pool arranged at a processing center and is used for storing the shared key sequence and providing key storing, extracting and destroying interfaces; the point cloud data encryption module is arranged at the laser radar data acquisition end and is used for conducting block processing on point cloud data, extracting a disposable key segment from a key pool at the acquisition end and conducting exclusive or encryption operation on each point cloud data block to generate a point cloud ciphertext block sequence; the classical channel transmission module is used for transmitting the point cloud ciphertext block sequence from the acquisition end to the data processing center; The key dynamic balance regulation and control module comprises a key consumption monitoring unit, a key demand prediction unit and a supplementation triggering unit, and is used for monitoring a key Chi Yuliang in real time, predicting the key demand and triggering the quantum key distribution module to supplement a new key when the margin is lower than a threshold value; The point cloud data decryption module is arranged in the data processing center, and is used for extracting the corresponding disposable key segments from the key pool of the processing center, executing exclusive or decryption operation on the point cloud ciphertext block sequence to restore the point cloud data, and deleting the used key segments from the key pool after decryption is completed.
Description
Laser radar data safe transmission method and system based on quantum key distribution Technical Field The invention relates to the technical field of quantum communication and laser radar data safety transmission, in particular to a laser radar data safety transmission method and system based on quantum key distribution. Background Along with the wide application of the laser radar technology in the fields of military mapping, automatic driving, key infrastructure monitoring and the like, the point cloud data collected by the laser radar bear a large amount of high-precision three-dimensional space information, and the information has high sensitivity and strategic value. In the military mapping application scene, the laser radar point cloud data directly reflects key information such as topography, facility layout and the like, and in the key infrastructure monitoring scene, the point cloud data comprises accurate structural parameters of important targets such as bridges, tunnels, electric power facilities and the like. Therefore, how to ensure the absolute safety of the laser radar point cloud data in the transmission process has become a core technical problem to be solved in the field. Traditional data encryption transmission schemes mainly rely on classical cryptosystems based on mathematical complexity assumptions, such as RSA algorithm based on large integer decomposition difficulty and elliptic curve encryption algorithm based on discrete logarithm problem. However, with the rapid development of quantum computing technology, the Shor algorithm has been demonstrated to be able to effectively break the above classical public key cryptosystem in polynomial time, which constitutes a serious threat to existing data security transmission schemes. In particular, for application scenarios with high security requirements, such as military mapping and critical infrastructure monitoring, it has been difficult for traditional encryption schemes to meet their stringent requirements for information theory security. The quantum key distribution technology provides a technical approach with information theory security guarantee for solving the security problem. The quantum key distribution utilizes the quantum mechanics basic principle, in particular the Hessenberg measurement inaccuracy principle and the quantum unclonable theorem, so that any eavesdropping action on a quantum channel inevitably leaves a detectable trace in the quantum bit error rate, thereby realizing effective perception and early warning of the eavesdropping action. However, the existing quantum key distribution technology still faces a plurality of technical challenges when applied to the laser radar data security transmission scene. In the prior art, china patent with the application publication number of CN116915402A discloses a data security transmission method and system based on quantum encryption. According to the technical scheme, the data suitable for quantum encryption transmission is screened by carrying out security detection and privacy value detection on the transmission data, and the key thought is that a security evaluation model of transmission personnel information and a privacy value calculation strategy of transmission contents are established, and quantum key distribution and encryption transmission operation is only carried out on the data meeting security and privacy threshold conditions. However, the technical scheme has the following technical defects that firstly, a general data transmission model is adopted, high-speed and large-data-volume characteristics of laser radar point cloud data are not specially optimized, transmission requirements of real-time point cloud data streams are difficult to adapt, secondly, a static strategy is adopted in a key management layer, namely unused quantum keys are stored to be used for next transmission, the multiplexing mechanism improves the key utilization efficiency, but the key utilization efficiency is against a core safety principle of a one-time-pad encryption system, absolute safety guarantee in the information theory sense cannot be provided, thirdly, a dynamic balance regulation mechanism between key generation speed and data transmission speed is lacked, and when continuous large-flow point cloud data generated by laser radar high-frequency scanning is faced, the problem that a key pool is exhausted and transmission is interrupted is extremely easy to occur. In addition, the existing quantum key distribution network research mainly focuses on the problems of general network layers such as key pool management, route optimization and load balancing, and the deep fusion research on a specific application scene of the laser radar is still in a blank state. The laser radar point cloud data has the remarkable characteristics of high acquisition frequency, large single-frame data volume, strict real-time requirements and the like, and the characteristics determine that the lase