WO2019128753A1 - Quantum key mobile service method with low delay - Google Patents

Abstract

Disclosed in the present invention is a quantum key mobile service method with low delay, for use in solving the problems in the security, efficiency and scale access of a quantum key mobile service. The steps of the present invention are that: an application terminal applies for registration from a quantum node and obtains quantum key flow; a quantum network management server queries associated calling and called quantum nodes and a relay node according to a request; the node concurrently sends an exclusive or value of a shared quantum key between the node and two adjacent nodes to a quantum key relay server; the quantum key relay server performs exclusive or calculation on the received corresponding exclusive or value to obtain an exclusive or value of the quantum keys of two application terminals; and the application terminal implements key sharing on the basis of the exclusive or value. The method of the present invention has the advantages of security, high efficiency, low delay, and no performance bottleneck; and the present invention has important application value in the fields such as mobile communication, mobile office, and industrial control network security systems.

Description

Low-latency quantum key mobile service method Technical field

The invention belongs to the field of quantum secure communication and mobile communication, and particularly relates to a low-latency quantum key mobile service method.

Background technique

Quantum key distribution (QKD) is a new method for secure key distribution through quantum channels. QKD is based on quantum mechanical principles such as quantum state inexact cloning, and can realize unconditionally secure quantum key distribution. However, since the QKD network requires a dedicated fiber channel, the technical problems of the quantum relay technology and the quantum routing are difficult, and the quantum link has a problem of large-scale concurrency conflict. Therefore, it is difficult to construct a quantum network with a complex topology.

Chinese Patent Authorization No. CN 104243143 B and Application Publication No. CN 106972922 A disclose a mobile secret communication method based on a quantum key distribution network, which comprises a quantum key distribution network composed of a centralized control station, each centralized control station It can be bound to at least one terminal device, and the unicast and key single-hop forwarding route addressing relay method is used to deliver the encrypted information to the terminal device bound to the remote centralized control station. However, its ciphertext and key relay have security diffusion problems, scale application concurrency conflicts and delay problems; since the service key (or session key) must be generated by a centralized control station, in the case of scale application, a large number of real-time generation The random number will occupy more system resources.

Summary of the invention

In order to reduce the dependency of the session key on the random number generator, improve the key relay security and the efficiency of the mobile service, the present invention discloses a novel session key generation and concurrent relay method and a method based on the same A low-latency quantum key mobility service method, including but not limited to the following steps:

(1-1) Applying a quantum service node (referred to as a node, referred to as QKN) in the application terminal vector subkey distribution network to apply for registration into the network, and obtain a unique quantum ID;

(1-2) At least one quantum service node in the registered application terminal vector subkey distribution network applies for quantum key traffic (the quantum key flow is recorded as QKP, and QKP can generate a certain amount of random numbers from the noise source, and the random number is After the randomness test, the user divides into multiple subkeys according to a certain length and format, and creates a corresponding key identifier or number), and realizes quantum key traffic sharing between the application terminal and the quantum service node, and establishes the quantum. a service association list of the service node and the application terminal; the quantum service node sends the service association list to a quantum network management server of the quantum key distribution network; (1-3) after the communication service is initiated (or before the communication service starts, According to specific service characteristics, not strictly defined, the application terminal vector subkey distribution network requests the session key service of the current communication (the calling and called application terminals of the communication are MT_U and MT_V respectively);

(1-4) After receiving the request, the quantum network management server in the quantum key distribution network searches for the corresponding service association list according to the quantum IDs of the application terminals MT_U and MT_V, respectively, and obtains the associated calling quantum service node. (denoted as QKN_A) and called quantum service node (denoted as QKN_B) (assuming MT_U uses a subkey QKP_AUi in the quantum key traffic shared with QKN_A (i is not greater than the number of subkeys in quantum key traffic) Natural number), MT_V uses a subkey QKP_BVi in the quantum key traffic shared with QKN_B (i is not greater than the natural number of the number of subkeys in the quantum key traffic, and can be selected according to the encryption and decryption rate of the specific service data. The length of the key) and the address of the relay node participating in the session key service;

(1-5) The quantum network management server performs the following operations according to the stored relay routing table and the current state indicator of the associated quantum service node:

(1-5-1) If MT_U and MT_V are associated with the same quantum service node QKN_A (ie, QKN_A and QKN_B are the same quantum service node), the quantum network management server directly specifies QKN_A to provide the session key service; QKN_A respectively Select subkeys QKP_AUi and QKP_BVj of MT_U and MT_V, and calculate R=QKP_AUi⊕QKP_BVj (where ⊕ is an exclusive OR operation, i and j may be the same or different, the same below); QKN_A puts R and QKP_AUi and QKP_BVj dense The key identifier is sent to the quantum key relay server, and the quantum key relay server sends the key identifiers of R and QKP_AUi to MT_U, and the key identifiers of R and QKP_BVj to MT_V; MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as a shared session key, correspondingly, MT_V calculates R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj);

Optionally, QKN_A selects subkeys QKP_AUi and QKP_BVj of MT_U and MT_V, respectively, and calculates R=QKP_AUi⊕QKP_BVj; the QKN_A sends the key identifiers of R and QKP_AUi to MT_U through the wireless communication network, and MT_U calculates R⊕QKP_AUi =QKP_BVj; the QKN_A sends the key identifier of QKP_BVj to MT_V through the wireless communication network; MT_U and MT_V adopt QKP_BVj as the session key of the communication;

(1-5-2) If QKN_A and QKN_B are adjacent nodes where a point-to-point quantum key distribution connection exists, the quantum network management server directly specifies QKN_A and QKN_B to use a previously shared shared quantum key or Real-time negotiated shared quantum key Kab; QKN_A sends the key identifiers of Kab⊕QKP_AUi and QKP_AUi to the quantum key relay server; QKN_B sends the key identifiers of Kab⊕QKP_BVj and QKP_BVj to the quantum key relay server; The key relay server calculates Kab⊕QKP_AUi⊕Kab⊕QKP_BVj=QKP_AUi⊕QKP_BVj=R; the quantum key relay server sends the key identifiers of R and QKP_AUi to MT_U, and sends the key identifiers of R and QKP_BVj to MT_V. MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as the shared session key, and correspondingly, MT_V calculates R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj);

Optionally, the quantum network management server directly specifies that the QKN_A and QKN_B use a shared quantum key buffered in advance or a shared quantum key R negotiated in real time; QKN_A calculates an exclusive OR value of the R and the MT_U subkey QKP_AUi R⊕QKP_AUi, QKN_A sends the key identifiers of R⊕QKP_AUi and QKP_AUi to MT_U through the wireless communication network, MT_U calculates R⊕QKP_AUi⊕QKP_AUi=R; QKN_B calculates the exclusive OR value R of the R and MT_V subkey QKP_BVj QKP_BVj, QKN_B sends the key identifiers of R⊕QKP_BVj and QKP_BVj to MT_V through the wireless communication network, MT_V calculates R⊕QKP_BVj⊕QKP_BVj=R; MT_U and MT_V use R as the session key of the communication;

(1-5-3) If QKN_A and QKN_B are two quantum service nodes that are not adjacent, the quantum network management server selects n (n is a natural number greater than 0) relay nodes participating in the quantum key relay, And causing each of the relay nodes to calculate an exclusive OR value of the shared quantum key between the two adjacent nodes and transmitting the same to the quantum key relay server;

It is assumed that all quantum service nodes participating in the relay are sequentially recorded as QKN_A, ..., QKN_Ci, ..., QKN_B (where i is a natural number and 0 < i < n + 1, when there is a relay node, n = 1 , i=1; when there are two relay nodes, n=2, i=1, 2, and so on), assuming that K1, ..., Ki, ..., K are sequentially selected between adjacent nodes of the node (n+1) as the quantum key of the relay service, where K1 is a shared quantum key previously cached between node A and node C1 or a shared quantum key negotiated in real time, and Ki is node C (i- 1) a shared quantum key previously buffered with the node Ci or a shared quantum key negotiated in real time (where i is a natural number and 1 < i < n + 1), and K (n + 1) is a node Cn and a node a shared quantum key cached in advance between B or a shared quantum key negotiated in real time, a key identifier of the quantum key used between adjacent nodes is confirmed and a quantum key identified by the same key is used;

The quantum network management server causes QKN_A to calculate R0=QKP_AUi⊕K1, and sends the key identifiers of the calculation results R0 and QKP_AUi to the quantum key relay server together; let QKN_B calculate R(n+1)=K(n+1) ⊕QKP_BVj, and send the key identifiers of the calculation results R(n+1) and QKP_BVj together to the quantum key relay server; respectively, let the node QKN_Ci calculate the two shared quantum between the two adjacent nodes The XOR operation of the key (denoted as ⊕), that is, the node QKN_Ci calculates Ri=Ki⊕K(i+1), and sends the calculation result Ri and the ID of its corresponding node QKN_Ci to the quantum key relay server, respectively. (where i is a natural number and 0<i<n+1); if the quantum key relay server does not receive the calculation result of some nodes within a limited time, the quantum key relay server requests the corresponding node to Corresponding calculation results are sent until the n+2 XOR operation results are received; the quantum key relay server performs an exclusive OR operation on the n+2 XOR operation results, that is, calculates R0⊕R1 ⊕...Ri...⊕Rn⊕R(n+1)=QKP_AUi⊕QKP_BVj=R (where i is a natural number and 0<i<n); The sub-key relay server sends the key identifiers of R and QKP_AUi to MT_U, and sends the key identifiers of R and QKP_BVj to MT_V; MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as the shared session key, and accordingly, MT_V calculates R⊕QKP_BVj= QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj);

(1-6) The MT_U and MT_V use the session key R obtained in the step (1-5) to perform secure communication through the original data link of the communication service.

Further, the content of the service association list in the foregoing step (1-2) includes, but is not limited to, the quantum ID of the application terminal, the verification password, the address of the associated quantum service node, and the service account identifier; wherein, the quantum of the registered application terminal The ID is unique in the entire quantum key distribution network; the above verification password is used for identity confirmation when the application terminal connects to the quantum key distribution network; the service account identifier is the type supported by the application terminal and the quantum key distribution network. A collection of accounts for a communication service that contains one or more accounts for different services.

Further, the above method further includes a quantum network management server, and the features thereof include but are not limited to:

(3-1) storing, maintaining, and querying a service association list and a relay routing table between the quantum service node and the application terminal;

(3-2) Maintaining a classic network connection with each quantum service node;

(3-3) the vector sub-key relay server sends a relay service command according to the received relay request information;

(3-4) summarizing the current state indicators of the nodes participating in the trusted relay, and determining the nodes participating in the relay;

(3-5) Communicating with the quantum service node, the vector sub-service node sends an instruction.

Further, the foregoing method further includes a quantum key relay server, and the features thereof include, but are not limited to, real-time response to an instruction of the quantum network management server, receiving relay related data of the relay node, and transmitting the relay secret to the source node and the target node. Key related data.

Further, the above method further includes that the quantum service node includes but is not limited to: a QKD system, a quantum key server, and a secure storage server, and is characterized by:

(5-1) The QKD system includes one or more QKD transceivers or QKD transmitters and/or receivers, a quantum service node QKD and other adjacent quantum services with point-to-point quantum channel connections. The QKD of the node can form at least one set of quantum key distribution systems (the same type of QKD system is used between adjacent relay nodes to form a quantum key distribution link);

(5-2) the quantum key server is configured to provide a registration service and a quantum key traffic service for the application terminal and create a corresponding service association list, and is further configured to respond to the instruction of the quantum network management server and report the node status information and provide The trusted relay service is also used to send the user registration information and the service association list to the quantum network management server; and is also used for negotiating and confirming the quantum key used by the adjacent node;

(5-3) The secure storage server is configured to cache a quantum key negotiated between the QKD system and other QKD systems of adjacent quantum service nodes having a direct connection relationship, and is also used to store and serve the application terminal. Shared quantum key traffic between.

It should be noted that if there is a point-to-point quantum channel connection between two nodes and quantum key distribution is possible, it is called an adjacent node (in addition, the two ground nodes of the quantum satellite also belong to each other. Neighbor nodes; the quantum keys may be buffered in advance or a certain amount of quantum keys may be negotiated in real time, and the corresponding nodes may group the quantum keys and perform randomness tests on each group to pass randomness. The tested packet is divided into a plurality of subkeys (for example, one packet 10 MB, divided into 10 1 MB subkeys, or divided into a plurality of 32B, 64B, or 128B subkeys), and the subkey is performed. Number and cache, create the corresponding key identifier.

Further, in the step (1-4) of the foregoing method, the method for the quantum network management server to obtain the address of the relay node participating in the session key service is characterized by:

The quantum network management server searches for the corresponding service association list according to the received quantum IDs of the calling application terminal and the called application terminal, and obtains the address of the calling quantum service node and the called quantum service node address in the current communication; The stored relay routing table is further queried to obtain the address of each relay quantum service node between the calling quantum service node and the called quantum service node in the current communication.

It should be noted that the relay routing table needs to consider whether there is a pre-cached quantum key between adjacent nodes, whether the quantum key can be negotiated in real time, if there is a pre-cached quantum key between adjacent nodes or can be negotiated in real time. The quantum key, then the route between the adjacent nodes is accessible; otherwise, it is nowhere.

Further, the method further includes: if a registered application terminal acquires quantum key traffic from a plurality of quantum service nodes, and both have a service association relationship and a corresponding plurality of service association lists are saved, The application terminal sorts the plurality of service association lists by priority (for example, the node where the registration is located, the node of the current location using the traffic, etc., which is not limited by the present invention), and preferentially selects the association according to the ranking selection. The quantum service node uses the corresponding quantum key traffic.

Further, the "relay routing table" in the step (1-5) in the above method includes, but is not limited to:

(8-1) The relay routing table is composed of a plurality of records, and the contents of each record include but are not limited to: a local address, a destination address, and a next hop address;

(8-2) Each quantum service node of the quantum key distribution network stores its own relay routing table;

(8-3) a current relay routing table of each quantum service node is stored in the quantum network management server;

(8-4) After the topology of the quantum key distribution network changes, the session key relay routing table is also updated.

Further, the current state indicator of the quantum service node in the above method includes, but is not limited to:

(9-1) An indicator reflecting the heavy state of the relay task currently burdened by the quantum service node, which is a quantitative indicator including but not limited to:

(9-1-1) a nominal quantum key distribution rate of the quantum service node;

(9-1-2) how many relay tasks the quantum service node is currently participating in, and the quantum key consumption rate of each relay task;

(9-2) an indicator reflecting the current position state of the quantum service node in the quantum key distribution network, the indicator being a quantitative indicator including but not limited to:

(9-2-1) There is an effective quantum channel between the quantum service node and how many other quantum service nodes, and quantum key negotiation is possible;

(9-2-2) The number of hops between the quantum service node and other quantum service nodes.

Further, the application terminal in the above method comprises an intelligent portable communication device (including but not limited to: a smart phone, a tablet with a network communication function and a notebook computer) having a wireless communication function, and a key data forwarding device having a wireless communication function ( Including but not limited to: a key injection device with wireless communication function, a secure tablet with wireless communication function for directly importing a key for a fixed password terminal) and using quantum key traffic and the method to obtain and other devices Shared key device (including but not limited to: network IP encryption device that obtains quantum key traffic through mobile storage media and negotiates shared key using the method, various VPN encryption gateway devices, channel encryption devices, and running encryption) Software PC), which is characterized by:

(10-1) The intelligent portable communication device having a wireless communication function is configured to perform service data encryption and decryption communication using a session key obtained by the method;

(10-2) The key data forwarding device having a wireless communication function is configured to forward the session key obtained by the method to another encrypted communication device and use the service data between the other encrypted communication devices. Encryption and decryption communication;

(10-3) The apparatus for acquiring a shared key with another device by using quantum key traffic and the method is characterized in that the device obtains quantum key traffic by using an offline route, and adopts the method and Other devices negotiate a shared key and perform encrypted communication based on the shared key.

When the quantum key flow of an application terminal is used up, it can apply for a new quantum key traffic to any quantum service node and create a new service association list.

Further, the above method further includes quantum key traffic, wherein the quantum key traffic comprises a length of a random number sequence having a specific data format and a sequenced random key sequence, characterized in that: the specific data format The random number sequence is a random number sequence that is tested by randomness and can be divided into multiple subkeys by a certain length; the arranged random key sequence is composed of multiple sub-densions with key identification by randomness test Key composition (quantum key traffic generates a certain amount of random numbers from the noise source. After passing the randomness test, the random number is divided into multiple subkeys according to a certain length and format, and a corresponding key identifier or number is created, and QKP includes multiple a sub-key and its key identifier. The key identifier includes an application terminal ID, an associated node ID, a key number, and a key data length. For example, a key identifier is KeyIndex_U1_A_2_1MB, indicating that the key is U1 and node A. The shared key between the number 1 and 1M bytes).

Compared with the prior art, the present invention has a more flexible and efficient quantum key service mode, and has significant innovations in the following aspects:

(1) The session key of the present invention is directly generated by the quantum key of the calling and called nodes, and does not require an additional noise source; the efficiency is higher, and there is no performance bottleneck;

(2) The key relay adopts the concurrent relay mode, and the relay node directly transmits the relay key XOR value of the adjacent node to the quantum key relay server, thereby overcoming the usual "single-hop routing addressing". Following the process delay and security diffusion problem, the relay efficiency is higher, the security is higher, and there is no quantum link size concurrency conflict problem;

The invention has very important practical application value in the fields of mobile secure communication, mobile office systems, network control systems of industrial control systems (finance, electric power, energy, transportation, etc.).

DRAWINGS

Figure 1 is a schematic diagram of the principle of the method of the present invention;

2 is a schematic flowchart of an application terminal registration and communication according to an embodiment of the present invention;

3 is a schematic diagram of a principle of using a shared key between adjacent nodes according to an embodiment of the present invention;

4 is a schematic diagram of a quantum key mobility service method according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an application principle of a key data forwarding device with a wireless communication function according to an embodiment of the present invention; FIG.

6 is a schematic diagram of an extended application principle of a key data forwarding device with a wireless communication function according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of an application principle of a device for acquiring a shared key with other devices by using quantum key traffic and the method of the present invention according to an embodiment of the present invention.

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

The communication channel involved in the solution of the present invention includes a quantum key distribution channel between quantum service nodes and a traditional communication network channel (including wired and wireless networks, wherein the wireless network includes but is not limited to 4G/5G network, WIFI, satellite communication network a conventional communication network channel between the wireless communication network channel between the application terminals, the application terminal and the quantum service node, and the quantum network management server (quantum key relay server). Among them, in addition to the quantum key distribution needs to occupy the quantum channel, other network communication uses the traditional communication network channel, including wired and wireless channels, and the communication between the mobile terminal and the quantum service node and the quantum network management server preferentially selects the wireless channel.

The key involved in the solution of the present invention mainly comprises three parts: (1) a shared key between adjacent quantum service nodes (or quantum relay nodes), which is composed of adjacent quantum service nodes (or quantum relay nodes). The quantum key distribution system is generated and stored in the quantum service node; (2) the quantum key traffic between the application terminal and the associated quantum service node, which is generated and saved by the quantum service node, and the application terminal is wired Download to the storage device; (3) Session key negotiated in real time for each communication; these keys are used only once and are deleted after use.

The embodiment of the present invention shown in FIG. 1 and the reference symbols in FIG. 1 are the same as the corresponding descriptions in the above-mentioned "[0004]", and are not described here. The detailed embodiment of the present invention will be described below by taking the process of completing the secure communication between the application terminal initial registration and the application terminals using the method of the present invention as an example. As shown in FIG. 2, the application terminals MT_U and MT_V respectively apply for registration and obtain quantum IDs to adjacent QKN_A and QKN_B (process 1 in FIG. 2, for example, an application terminal holder (which may be a personal or application terminal) The production equipment manufacturer first goes to the confidentiality certification center to go through the network registration procedure, and the confidential certification center audits the user's network application. If the application is approved, each application terminal that applies for the network access obtains a network distributed by the quantum network management server. A unique quantum ID, which is stored in a permanent storage medium (such as an SD password card, etc.) of an application terminal that is applied to the network, and sets a password for obtaining identity authentication of the service, respectively, and applies for and obtains quantum key traffic. QKP_AU and QKP_BV (process 2 in Figure 2);

QKN_A and QKN_B respectively create service association lists of associated application terminals MT_U and MT_V and upload them to the quantum network management server (process 3 in FIG. 2); wherein the service association list is composed of several records, each record representing one registered The associated information of the application terminal, the format of which includes but is not limited to the following format:

The application terminal MT_U requests the session key with the MT_V through the traditional communication network vector sub-network management server (process 4 in FIG. 2); the quantum network management server first authenticates the identity (for example, requires the application terminal to input the quantum ID and corresponding The password, or the associated quantum service node ID and business account (such as mobile phone number, mailbox), etc., if the information does not match, you need to re-enter; if the quantum ID does not exist or has been deactivated, you need to re-apply or activate) After the identity authentication, the corresponding service association list is searched according to the quantum IDs of the application terminals MT_U and MT_V, and the associated QKN_A and QKN_B are found according to the service association list;

The quantum network management server directly specifies (process 5 in Fig. 2) that QKN_A and QKN_B use a shared quantum key cached in advance or a shared quantum key Kab negotiated in real time (using the process 6 in Fig. 2 to negotiate a shared quantum key) Key); QKN_A sends the key identifiers of Kab⊕QKP_AUi and QKP_AUi to the quantum key relay server (Process 7 in Figure 2); QKN_B sends the key identifiers of Kab⊕QKP_BVj and QKP_BVj to the quantum key relay server (Process 7 in Figure 2); the quantum key relay server calculates Kab⊕QKP_AUi⊕Kab⊕QKP_BVj=QKP_AUi⊕QKP_BVj=R; the quantum key relay server sends the key identifiers of R and QKP_AUi to MT_U (Figure Process 8) in 2, the key identification of R and QKP_BVj is sent to MT_V (Process 8 in Figure 2); MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as the shared session key (Process 9 in Figure 2) Accordingly, MT_V calculates R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj).

It should be noted that, in this embodiment, in addition to the communication process other than acquiring the quantum key traffic, the application terminal does not need to connect to the QKN or the quantum network management server through a wired connection, and does not limit the geographical location where the application terminal is located. However, there is a need for a traditional communication network (including wired and wireless communication networks) between the application terminal and the quantum network management server, between the quantum network management server and the QKN.

3 is an embodiment of a method for confirming a key identifier of a quantum key used between adjacent nodes according to the present invention, wherein node C(i-1) (where i is a natural number greater than 0, where Used only to indicate different nodes) to send a key identifier of a shared key Ki among the selected shared keys to the node Ci (process 1 in FIG. 3), the node Ci to the node C (i-1) transmitting confirmation information for selecting Ki (Process 3 in FIG. 3); node Ci transmits to node C(i+1) one of the shared keys between the selected two of them The key identifier of K(i+1) (Process 2 in Fig. 3), the node C(i+1) sends a confirmation message of selection K(i+1) to the node Ci (Process 4 in Fig. 3). If the quantum key margin between adjacent nodes is insufficient, a certain amount of shared quantum key needs to be negotiated in real time, and then a subkey is negotiated to be used for the current key relay service.

4 is a schematic diagram of a quantum key mobility service method according to an embodiment of the present invention. The quantum network management server selects three relay nodes QKN_C1, QKN_C2, and QKN_C3 (the quantum network management server first sends and uploads respective current state indicators to QKN_C1, QKN_C2, and QKN_C3. The instructions, then, the quantum network management server collects the current state metrics of the nodes, such as the nominal quantum key distribution rate of each node, how many relay tasks are currently participating, and whether quantum channels are available between other nodes. And the corresponding number of relay hops, etc., in particular, whether there is a cached quantum key between each node and the adjacent node or a link that can negotiate the quantum key in real time, and according to this, the relay in the current communication is judged. Node), let QKN_A calculate R0=QKP_AUi⊕K1, and send the key identifiers of the calculation results R0 and QKP_AUi together to the quantum key relay server; let QKN_B calculate R4=K4⊕QKP_BVj, and calculate the results R4 and QKP_BVj The key identifier is sent to the quantum key relay server together; let QKN_C1, QKN_C2, and QKN_C3 calculate R1=K1⊕K2, R2=K2, respectively. ⊕K3, R3=K3⊕K4, and send R1, R2, and R3 to the quantum key relay server respectively; the quantum key relay server calculates R=R0⊕R1⊕R2⊕R3⊕R4=QKP_AUi⊕QKP_BVj; quantum The key relay server then sends the key identifiers of R and QKP_AUi to MT_U, and sends the key identifiers of R and QKP_BVj to MT_V; MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as the shared session key, and correspondingly, MT_V Calculate R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj); MT_U and MT_V use QKP_AUi (or QKP_BVj) as the session key for the communication and perform secure communication.

FIG. 5 is a schematic diagram of an application principle of a key data forwarding device with a wireless communication function according to an embodiment of the present invention, wherein the mobile terminal is respectively a secure mobile phone 501 and a wireless communication function for directly importing a key for a fixed password terminal. The tablet 502; the secure mobile phone 501 and the secure tablet 502 respectively apply the quantum key traffic to the vector sub-service node A 503 and the quantum service node B 504, and the secure mobile phone 501 and the secure tablet 502 acquire the shared session key by using the method in FIG. Passing the session key into the password server 506 through a dedicated security interface (such as a one-way USB cable, an SD password card or a wireless injection adapter);

The secure mobile phone 501 encrypts the data to be uploaded by using the session key, and uploads it to the password server 506 via the VPN gateway 505. The password server 506 decrypts the session key and uploads it to the enterprise OA system 507. Similarly, the secure mobile phone 501 is from the enterprise. When the data is downloaded by the OA system 507, first, the downloaded data needs to be encrypted by the password server 506, and then downloaded to the secure mobile phone 501 via the VPN gateway 505. The secure mobile phone 501 decrypts the session key and decrypts it. The data. In a similar way, the shared session key can be obtained first and securely communicated between the two secure phones.

6 is a schematic diagram of an extended application principle of a key data forwarding device with a wireless communication function according to an embodiment of the present invention, wherein a security tablet 601 and 602 for directly importing a key for a fixed password terminal having a wireless communication function, a security tablet The 601 and the security tablet 602 respectively apply the quantum key traffic to the vector sub-service node A 603 and the quantum service node B 604. The security tablet 601 and the security tablet 602 acquire the shared session key by using the method in FIG. 1 and respectively pass the dedicated security interface (for example, The one-way USB cable, the SD cryptographic card or the wireless injection adapter) injects the session key into the cryptographic servers 605 and 606, respectively; the service communication between the industrial control system A 607 and the industrial control system B 607 is encrypted and decrypted based on the shared session key. .

FIG. 7 is a schematic diagram of an application principle of a device for acquiring a shared key with another device by using the quantum key traffic and the method of the present invention, wherein 701 and 702 are respectively bound to the cryptographic servers 605 and 606, respectively. The removable storage medium is used to inject quantum key traffic for the cryptographic servers 605 and 606, respectively; the cryptographic servers 605 and 606 acquire the shared session key using the method of FIG. 1, and perform encryption and decryption communication based on the shared session key.

The method of the invention can be widely used in mobile secure communication, mobile office systems, and also in network security systems of industrial control systems (financial, electric power, energy, transportation, etc.).

The embodiments described above are only a part of the embodiments of the invention, and not all of the embodiments. Further embodiments can be obtained based on various modifications and combinations of the embodiments of the present invention, and other embodiments directly employed by those skilled in the art without the inventive work are all of the present invention. The scope of protection.

Claims (10)

1. A low-latency quantum key mobile service method, comprising the steps of:

   (1-1) Applying a quantum service node (referred to as a node, hereinafter referred to as QKN) in the application terminal vector subkey distribution network to apply for registration into the network, and obtain a unique quantum ID;

   (1-2) at least one quantum service node in the registered application terminal vector subkey distribution network applies for quantum key traffic, and realizes quantum key traffic sharing between the application terminal and the quantum service node, and establishes the quantum a service association list of the service node and the application terminal; the quantum service node sends the service association list to a quantum network management server of the quantum key distribution network;

   (1-3) After the communication service is initiated, the application terminal vector subkey distribution network requests the session key service of the current communication (the calling and called application terminals of the communication are respectively MT_U and MT_V);

   (1-4) After receiving the request, the quantum network management server in the quantum key distribution network searches for the corresponding service association list according to the quantum IDs of the application terminals MT_U and MT_V, respectively, and obtains the associated calling quantum service node. (denoted as QKN_A) and called quantum service node (denoted as QKN_B) (assuming MT_U uses a subkey QKP_AUi in the quantum key traffic shared with QKN_A (i is not greater than the number of subkeys in quantum key traffic) Natural number), MT_V uses one of the quantum key traffic shared with QKN_B QKP_BVi (i is not greater than the natural number of the number of subkeys in the quantum key traffic), and participates in the session key service Following the address of the node;

   (1-5) The quantum network management server performs the following operations according to the stored relay routing table and the current state indicator of the associated quantum service node:

   (1-5-1) If MT_U and MT_V are associated with the same quantum service node QKN_A (ie, QKN_A and QKN_B are the same quantum service node), the quantum network management server directly specifies QKN_A to provide the session key service; QKN_A respectively Select subkeys QKP_AUi and QKP_BVj of MT_U and MT_V, and calculate R=QKP_AUi⊕QKP_BVj (where ⊕ is an exclusive OR operation, i and j may be the same or different, the same below); QKN_A puts R and QKP_AUi and QKP_BVj dense The key identifier is sent to the quantum key relay server, and the quantum key relay server sends the key identifiers of R and QKP_AUi to MT_U, and the key identifiers of R and QKP_BVj to MT_V; MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as a shared session key, correspondingly, MT_V calculates R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj);

   (1-5-2) If QKN_A and QKN_B are adjacent nodes where a point-to-point quantum key distribution connection exists, the quantum network management server directly specifies QKN_A and QKN_B to use a previously shared shared quantum key or Real-time negotiated shared quantum key Kab; QKN_A sends the key identifiers of Kab⊕QKP_AUi and QKP_AUi to the quantum key relay server; QKN_B sends the key identifiers of Kab⊕QKP_BVj and QKP_BVj to the quantum key relay server; The key relay server calculates R=Kab⊕QKP_AUi⊕Kab⊕QKP_BVj=QKP_AUi⊕QKP_BVj; the quantum key relay server sends the key identifiers of R and QKP_AUi to MT_U, and sends the key identifiers of R and QKP_BVj to MT_V. MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as the shared session key. Accordingly, MT_V calculates R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj); (1-5-3) if QKN_A and QKN_B are If two quantum service nodes are not adjacent, the quantum network management server selects n (n is a natural number greater than 0) relay nodes participating in the quantum key relay, and causes each of the relay nodes to calculate the same Two adjacent nodes The XOR value of the shared quantum key and sent to the quantum key relay server;

   It is assumed that all quantum service nodes participating in the relay are sequentially recorded as QKN_A, ..., QKN_Ci, ..., QKN_B (where i is a natural number and 0 < i < n + 1, when there is a relay node, n = 1 , i=1; when there are two relay nodes, n=2, i=1, 2, and so on), assuming that K1, ..., Ki, ..., K are sequentially selected between adjacent nodes of the node (n+1) as the quantum key of the secondary relay service, where K1 is a shared quantum key of QKN_A and QKN_C1, and Ki is a shared quantum key of QKN_C(i-1) and QKN_Ci (where 1<i <n+1), K(n+1) is a shared quantum key of QKN_Cn and QKN_B, and the key identifier of the used quantum key is confirmed between adjacent nodes and the quantum key identified by the same key is used. ;

   The quantum network management server causes QKN_A to calculate R0=QKP_AUi⊕K1, and sends the key identifiers of the calculation results R0 and QKP_AUi to the quantum key relay server together; let QKN_B calculate R(n+1)=K(n+1) ⊕QKP_BVj, and send the key identifiers of the calculation results R(n+1) and QKP_BVj together to the quantum key relay server; respectively, let the node QKN_Ci calculate the two shared quantum between the two adjacent nodes The XOR operation of the key (denoted as ⊕), that is, the node QKN_Ci calculates Ri=Ki⊕K(i+1), and sends the calculation result Ri and the ID of its corresponding node QKN_Ci to the quantum key relay server, respectively. (where i is a natural number and 0<i<n+1); if the quantum key relay server does not receive the calculation result of some nodes within a limited time, the quantum key relay server requests the corresponding node to Corresponding calculation results are sent until the n+2 XOR operation results are received; the quantum key relay server performs an exclusive OR operation on the n+2 XOR operation results, that is, calculates R=R0 ⊕R1⊕...Ri...⊕Rn⊕R(n+1)=QKP_AUi⊕QKP_BVj (where i is a natural number and 0<i<n); The sub-key relay server sends the key identifiers of R and QKP_AUi to MT_U, and sends the key identifiers of R and QKP_BVj to MT_V; MT_U negotiates with MT_V to use QKP_AUi (or QKP_BVj) as the shared session key, and accordingly, MT_V calculates R⊕QKP_BVj=QKP_AUi (or MT_U calculates R⊕QKP_AUi=QKP_BVj);

   (1-6) The MT_U and the MT_V use the session key obtained in the step (1-5) to perform secure communication through the original data link of the communication service.
2. The method according to claim 1, wherein the content of the service association list in the step (1-2) comprises: a quantum ID of the application terminal, a verification password, an address of the associated quantum service node, and a service account identifier; The quantum ID of the registered application terminal is unique in the entire quantum key distribution network; the verification password is used for identity confirmation when the application terminal connects to the quantum key distribution network; the service account identifier is the application terminal and A collection of accounts for various types of communication services supported by a quantum key distribution network, which contains one or more accounts for different services.
3. The method of claim 1 wherein said quantum network management server is characterized by:

   (3-1) storing, maintaining, and querying a service association list and a relay routing table between the quantum service node and the application terminal;

   (3-2) Maintaining a classic network connection with each quantum service node;

   (3-3) the vector sub-key relay server sends a relay service command according to the received relay request information;

   (3-4) summarizing the current state indicators of the nodes participating in the trusted relay, and determining the nodes participating in the relay;

   (3-5) Communicating with the quantum service node, the vector sub-service node sends an instruction.
4. The method according to claim 1, wherein the quantum key relay server is configured to: in response to an instruction of the quantum network management server, receive relay related data of the relay node, and send a relay to the source node and the target node. Key related data.
5. The method of claim 1, the quantum service node comprising a quantum key distribution (QKD) system, a quantum key server, and a secure storage server, wherein:

   (5-1) The QKD system includes one or more QKD transceivers or QKD transmitters and/or receivers, a quantum service node QKD and other adjacent quantum services with point-to-point quantum channel connections. The QKD of the node can form at least one set of quantum key distribution systems;

   (5-2) the quantum key server is configured to provide a registration service and a quantum key traffic service for the application terminal and create a corresponding service association list, and is further configured to respond to the instruction of the quantum network management server and report the node status information and provide The trusted relay service is also used to send the user registration information and the service association list to the quantum network management server; and is also used for negotiating and confirming the quantum key used by the adjacent node;

   (5-3) The secure storage server is configured to cache a quantum key negotiated between the QKD system and other QKD systems of adjacent quantum service nodes having a direct connection relationship, and is also used to store and serve the application terminal. Shared quantum key traffic between.
6. The method according to claim 1, wherein the quantum network management server in the step (1-4) obtains an address of a relay node participating in the session key service, and is characterized by:

   The quantum network management server searches for the corresponding service association list according to the received quantum IDs of the calling application terminal and the called application terminal, and obtains the address of the calling quantum service node and the called quantum service node address in the current communication; The stored relay routing table is further queried to obtain the address of each relay quantum service node between the calling quantum service node and the called quantum service node in the current communication.
7. The method according to claim 1, wherein if a registered application terminal acquires quantum key traffic from a plurality of quantum service nodes, and both have a service association relationship and a corresponding plurality of service association lists are saved Then, the application terminal sorts the plurality of service association lists by priority, and preferentially selects the associated quantum service nodes according to the order and uses corresponding quantum key traffic.
8. The method according to claim 1, wherein the "relay routing table" in the step (1-5) is characterized by:

   (8-1) The relay routing table is composed of a plurality of records, and the contents of each record include: a local address, a destination address, and a next hop address;

   (8-2) Each quantum service node of the quantum key distribution network stores its own relay routing table;

   (8-3) a current relay routing table of each quantum service node is stored in the quantum network management server;

   (8-4) After the topology of the quantum key distribution network changes, the session key relay routing table is also updated.
9. The method according to claim 1 or claim 3, wherein the current state indicator of the quantum service node is characterized by:

   (9-1) An indicator reflecting the heavy state of the relay task currently burdened by the quantum service node, which is a quantitative indicator, including:

   (9-1-1) a nominal quantum key distribution rate of the quantum service node;

   (9-1-2) how many relay tasks the quantum service node is currently participating in, the quantum key consumption rate of each relay task; (9-2) reflecting the current location of the quantum service node in the quantum key distribution network An indicator of the positional state of the indicator, which is a quantitative indicator, including:

   (9-2-1) There is an effective quantum channel between the quantum service node and how many other quantum service nodes, and quantum key negotiation is possible;

   (9-2-2) The number of hops between the quantum service node and other quantum service nodes.
10. The method according to claim 1, wherein the application terminal comprises an intelligent portable communication device having a wireless communication function, a key data forwarding device having a wireless communication function, using quantum key traffic, and the method of claim 1 to acquire A device for sharing a key between other devices, which is characterized by:

    (10-1) The intelligent portable communication device having a wireless communication function is configured to perform service data encryption and decryption communication using a session key obtained by the method;

    (10-2) The key data forwarding device having a wireless communication function is configured to forward the session key obtained by the method to another encrypted communication device and use the service data between the other encrypted communication devices. Encryption and decryption communication;

    (10-3) The apparatus for acquiring a shared key with another device by using the quantum key traffic and the method of claim 1 is characterized in that the device obtains quantum key traffic by using an offline route, and adopts The method negotiates a shared key with other devices and performs encrypted communication based on the shared key.

Images