Blockchain network security communication method based on quantum key
Disclosed in the present disclosure is a blockchain network security communication method based on a quantum key. On the basis of a blockchain network formed by means of combining quantum key distribution technology and blockchain technology, the method implements the process of quantum key distribution, acquisition and encryption transmission with simple steps which are easy to control and implement, to ensure the secure conduction of communication services in the blockchain network.
1. A secure communication method, applied to a quantum-secured blockchain network, wherein the blockchain network comprises a blockchain subnet and a quantum key distribution subnet, the blockchain subnet comprises a plurality of blockchain nodes, the quantum key distribution subnet comprises a plurality of quantum key distribution nodes deployed in the blockchain nodes and connected to the blockchain nodes respectively, and the secure communication method comprises:
a quantum key distribution step for generating a shared quantum key between two of the quantum key distribution nodes;
a connection information upload step for uploading correspondence of the blockchain node to a quantum key management device in the quantum key distribution node connected to the blockchain node to the blockchain subnet;
a quantum key acquisition step for acquiring the shared quantum key by the blockchain node from the quantum key distribution node connected to the blockchain node, based on a communication service; and
a secure communication step for securely transmitting transmission data by the blockchain nodes using the shared quantum key, wherein the quantum key acquisition step comprises: acquiring an identity of the quantum key management device in a receiver from the blockchain subnet by a sender, and acquiring the shared quantum key for the sender and the receiver based on the identity by the sender from the quantum key management device in the quantum key distribution node deployed in the sender; and acquiring the shared quantum key from the quantum key management device by the receiver based on the identity, wherein the sender and the receiver are among the blockchain nodes.
2. The secure communication method according to claim 1 , wherein the blockchain nodes comprise a terminal device and a blockchain node server, and the quantum key acquisition step comprises:
injecting, by the same quantum key distribution node, a quantum random number or a quantum key to the terminal device and the blockchain node as the shared quantum key, in a case that the terminal device and the blockchain node server are connected to the same quantum key distribution node; or
distributing the shared quantum key to the terminal device and the blockchain node server by quantum key management devices in the respective quantum key distribution nodes, in a case that the terminal device and the blockchain node server are connected to the different quantum key distribution nodes.
3. The secure communication method according to claim 2 , wherein the secure communication step comprises:
encrypting communication data using the shared quantum key for the blockchain node server to generate ciphertext data, and generating a message authentication code based on the shared quantum key and the communication data, by the terminal device; and
decrypting the ciphertext data using the shared quantum key to obtain the communication data, generating a message authentication code based on the shared quantum key and the communication data, and comparing the generated message authentication code with the received message authentication code, by the blockchain node server.
4. The secure communication method according to claim 1 , wherein the secure communication step comprises:
encrypting the communication data using the shared quantum key for the receiver to generate ciphertext data, and generating a message authentication code based on the shared quantum key and the communication data, by the sender; and
decrypting the ciphertext data using the shared quantum key to obtain the communication data, generating a message authentication code based on the shared quantum key and the communication data, and comparing the generated message authentication code with the received message authentication code, by the receiver.
5. The secure communication method according to claim 3 , wherein
the communication data is encrypted with one-time pad using an XOR encryption algorithm; and/or
the message authentication code is generated using a (hash-based message authentication code) (HMAC) algorithm or a cipher block chaining message authentication code (CBC MAC) algorithm; and/or
the communication data comprises one or more of transaction information broadcast data, transaction information verification broadcast data, and shared data.
6. The secure communication method according to claim 1 , wherein the quantum key distribution subnet comprises:
a user terminal node for providing the shared quantum key to a user device;
a trusted relay node for relaying the shared quantum key between two quantum key distribution nodes that are not directly connected; and
a centralized control node, wherein the centralized control node is a trusted relay node where a control server is deployed.
7. The secure communication method according to claim 6 , wherein
the centralized control node and the trusted relay node are further for providing the shared quantum key to the user device; and/or
at least two of the quantum key distribution nodes comprise a quantum satellite ground station for establishing a free space link with a quantum satellite.
8. The secure communication method according to claim 1 , wherein adjacent quantum key distribution nodes communicate with each other through an optical fiber link or a free space link.
9. The secure communication method according to claim 1 , wherein
a quantum key distribution node comprising a mobile quantum satellite ground station is deployed in a mobile blockchain node.
10. The secure communication method according to claim 4 , wherein
the communication data is encrypted with one-time pad using an XOR encryption algorithm; and/or
the message authentication code is generated using a (hash-based message authentication code) (HMAC) algorithm or a cipher block chaining message authentication code (CBC MAC) algorithm; and/or
the communication data comprises one or more of transaction information broadcast data, transaction information verification broadcast data, and shared data.