T/CQJR 005-2023 Quantum secure application specification for mobile financial services business

Scope

Scope: This document specifies the overall architecture and component standards for quantum security protection adopted by mobile financial services, as well as the technical requirements for encrypting data using quantum secure channels and quantum secure data encryption respectively. This document is applicable to mobile financial service scenarios. Main technical content: 1. Components of quantum security protection for mobile financial services. The components of quantum security protection for mobile financial services include a quantum secure service platform, quantum access devices, and quantum secure gateways. The quantum secure service platform includes a quantum key generation system and a quantum key scheduling system, while the quantum access devices and quantum secure gateways constitute the quantum key application end. 2. Requirements for quantum access devices. When using quantum security technology, business terminals integrate quantum security modules to form quantum access devices, enabling wireless encrypted data transmission based on quantum security technology on the business side. 3. Requirements for quantum secure gateways: a) Provide quantum key encryption and traditional encryption functions; b) Support encrypting and protecting transmitted data with quantum keys; c) Support symmetric encryption algorithms such as China's national standard SM4; d) Preferably support session-key acquisition based on one-time passwords; e) Offer secure and convenient maintenance and management methods, such as a graphical management interface; f) The device should have status indicators and an auto-check function upon startup. 4. Establish a quantum secure encryption channel based on the SSL protocol. 5. Establish a quantum secure encryption channel based on the IPsec protocol. 6. Data encryption using secure media. When encrypting business data using secure media + SDK, the security requirements for the secure me

Development Information

Related Standards