CN108566292A - A kind of fiber optic quantum key distribution network failure recovery method and system - Google Patents
A kind of fiber optic quantum key distribution network failure recovery method and system Download PDFInfo
- Publication number
- CN108566292A CN108566292A CN201810182499.0A CN201810182499A CN108566292A CN 108566292 A CN108566292 A CN 108566292A CN 201810182499 A CN201810182499 A CN 201810182499A CN 108566292 A CN108566292 A CN 108566292A
- Authority
- CN
- China
- Prior art keywords
- optical fiber
- qkd
- fiber qkd
- node
- ground station
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 42
- 238000011084 recovery Methods 0.000 title claims abstract description 28
- 239000000835 fiber Substances 0.000 title claims abstract description 13
- 239000013307 optical fiber Substances 0.000 claims abstract description 256
- 238000004590 computer program Methods 0.000 claims description 9
- 238000004891 communication Methods 0.000 description 7
- 238000010586 diagram Methods 0.000 description 6
- 230000003287 optical effect Effects 0.000 description 6
- 230000008569 process Effects 0.000 description 4
- 230000008901 benefit Effects 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000001360 synchronised effect Effects 0.000 description 2
- 230000000694 effects Effects 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000005610 quantum mechanics Effects 0.000 description 1
- 230000008439 repair process Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0654—Management of faults, events, alarms or notifications using network fault recovery
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04B—TRANSMISSION
- H04B10/00—Transmission systems employing electromagnetic waves other than radio-waves, e.g. infrared, visible or ultraviolet light, or employing corpuscular radiation, e.g. quantum communication
- H04B10/03—Arrangements for fault recovery
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04B—TRANSMISSION
- H04B10/00—Transmission systems employing electromagnetic waves other than radio-waves, e.g. infrared, visible or ultraviolet light, or employing corpuscular radiation, e.g. quantum communication
- H04B10/70—Photonic quantum communication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04B—TRANSMISSION
- H04B7/00—Radio transmission systems, i.e. using radiation field
- H04B7/14—Relay systems
- H04B7/15—Active relay systems
- H04B7/155—Ground-based stations
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0852—Quantum cryptography
- H04L9/0855—Quantum cryptography involving additional nodes, e.g. quantum relays, repeaters, intermediate nodes or remote nodes
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Physics & Mathematics (AREA)
- Electromagnetism (AREA)
- Optics & Photonics (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Optical Communication System (AREA)
Abstract
The present invention provides a kind of fiber optic quantum key distribution network failure recovery method, including：When fiber optic quantum key distribution QKD network failures, the corresponding optical fiber QKD source nodes of impacted business and optical fiber QKD destination nodes are determined；Obtain the first object earth station of the optical fiber QKD source nodes connection and the second target floor station of optical fiber QKD destination nodes connection；Using the first object earth station, preset quantum satellite and second target floor station as the relay node between the optical fiber QKD source nodes and optical fiber QKD destination nodes, to restore the optical fiber QKD source nodes and the corresponding impacted business of optical fiber QKD destination nodes.The present invention by using the star between quantum satellite and earth station QKD, ground optical fiber QKD between combined ground station and optical fiber QKD networks, the fast quick-recovery of optical fiber QKD network failures of world collaboration may be implemented, the fault recovery efficiency for effectively improving optical fiber QKD networks solves the problems, such as that current optical fiber QKD network failures are difficult to respond rapidly to and restore in time.
Description
Technical Field
The invention relates to the field of optical fiber quantum key distribution, in particular to a method and a system for recovering a fault of an optical fiber quantum key distribution network.
Background
Quantum Key Distribution (QKD) refers to a process or method of generating and distributing symmetric keys using Quantum properties, which ensures principle security by Quantum information theory. QKD can be divided into optical fiber QKD and free space QKD according to the difference of transmission channels, wherein the technology of optical fiber QKD is mature and has a high degree of practicability, and the optical fiber QKD has gradually become a secret communication network for some government and financial departments.
As an important infrastructure for bearing the QKD, both nodes and links in the optical fiber QKD network can have faults or physical attacks, so that the QKD process is damaged, once the point-to-point optical fiber QKD cannot respond quickly and recover in time, the borne confidential service cannot be transmitted safely, and multiple service safety risks and long service waiting time delay are generated.
Therefore, a method for recovering the fault of the optical fiber quantum key distribution network is needed to solve the problem that the fault of the existing optical fiber QKD network is difficult to respond quickly and recover in time.
Disclosure of Invention
The invention provides a fault recovery method for an optical fiber quantum key distribution network, which comprises the following steps:
step S1, when the optical fiber quantum key distribution QKD network fails, determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service;
step S2, acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node;
step S3, using the first target ground station, the preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
Wherein, step S1 includes:
when the optical fiber QKD network fails, determining a failed link and/or a failed node of the network failure;
determining a number of services affected by the failed link and/or failed node;
and acquiring the optical fiber QKD source node and the optical fiber QKD sink node corresponding to each affected service.
Wherein, step S2 includes:
acquiring all ground stations connected with the optical fiber QKD source node and all ground stations connected with the optical fiber QKD sink node;
the first target ground station is determined among all ground stations to which the optical fiber QKD source node is connected, and the second target station is determined among all ground stations to which the optical fiber QKD sink node is connected.
Wherein said determining the first target ground station among all ground stations to which the optical fiber QKD source node is connected and determining the second target station among all ground stations to which the optical fiber QKD sink node is connected comprises:
calculating distances between all ground stations connected to the optical fiber QKD source node and between all ground stations connected to the optical fiber QKD sink node and the optical fiber QKD sink node;
and taking the ground station with the minimum distance between all ground stations connected with the optical fiber QKD source node and the optical fiber QKD source node as the first target ground station, and taking the ground station with the minimum distance between all ground stations connected with the optical fiber QKD sink node and the optical fiber QKD sink node as the second target ground station.
Wherein, step S3 specifically includes:
establishing a satellite-to-ground QKD link connection between the first target ground station and the quantum satellite, a satellite-to-ground QKD link connection between the second target ground station and the quantum satellite, an optical fiber QKD link connection between the first target ground station and the optical fiber QKD source node, and an optical fiber QKD link connection between the second target ground station and the optical fiber QKD sink node to recover the affected traffic corresponding to the optical fiber QKD source node and optical fiber QKD sink node.
According to a second aspect of the present invention, the present invention provides a fiber quantum key distribution network failure recovery system, including:
the determining module is used for determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service when the optical fiber quantum key distribution QKD network fails;
an obtaining module, configured to obtain a first target ground station to which the optical fiber QKD source node is connected and a second target ground station to which the optical fiber QKD sink node is connected;
and the recovery module is used for taking the first target ground station, a preset quantum satellite and the second target ground station as relay nodes between the optical fiber QKD source node and the optical fiber QKD sink node so as to recover the affected services corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
According to a third aspect of the present invention, there is provided a fiber quantum key distribution network failure recovery device, comprising:
a processor, a memory, a communication interface, and a bus; wherein,
the processor, the memory and the communication interface complete mutual communication through the bus;
the communication interface is used for information transmission between the test equipment and the communication equipment of the display device;
the memory stores program instructions executable by the processor, and the processor calls the program instructions to execute the method for recovering the fault of the optical fiber quantum key distribution network.
According to a fourth aspect of the present invention, there is provided a computer program product comprising program code for executing a method of fault recovery for a fiber optic quantum key distribution network as described above.
According to a fifth aspect of the invention, there is provided a non-transitory computer readable storage medium storing the computer program as described above.
According to the method and the system for restoring the optical fiber quantum key distribution network fault, the satellite-ground QKD between the quantum satellite and the ground station is utilized, and the ground station and the ground optical fiber QKD between the QKD source-sink nodes corresponding to the optical fiber QKD network fault service are combined, so that the optical fiber QKD network fault in cooperation with the ground can be quickly restored, the fault restoration efficiency of the optical fiber QKD network is effectively improved, and the problem that the existing optical fiber QKD network fault is difficult to quickly respond and timely restore is solved.
Drawings
Fig. 1 is a flowchart of a method for recovering a failure in an optical fiber quantum key distribution network according to an embodiment of the present invention;
fig. 2 is a schematic diagram of a world-wide collaborative QKD network architecture provided by an embodiment of the present invention;
fig. 3 is a schematic diagram of a failure recovery process of an optical fiber quantum key distribution network according to an embodiment of the present invention;
fig. 4 is a structural diagram of a failure recovery system of an optical fiber quantum key distribution network according to an embodiment of the present invention.
Detailed Description
The following detailed description of embodiments of the present invention is provided in connection with the accompanying drawings and examples. The following examples are intended to illustrate the invention but are not intended to limit the scope of the invention.
In the prior art, the safety of the optical fiber QKD network is ensured by the basic law of quantum mechanics of the 'measuring collapse theory', 'Heisenberg inaccurate measuring principle' and 'quantum unclonable law', and the optical fiber QKD network has the advantage of 'unconditional safety' in theory. In the optical fiber QKD network, a quantum transceiver, a quantum switch and a trusted relay are integrated in a QKD node; the QKD link is an optical fiber, multiple fibers or multiple wavelengths in a single fiber can be used as the quantum channel and negotiation channel, respectively, required for the QKD process. The QKD nodes bear quantum optical signals and synchronous optical signals through quantum channels, and information negotiation such as basis vector comparison, error code check and the like is carried out through a negotiation channel to complete distribution of quantum keys. The technology of the optical fiber QKD is mature and highly practical, and has gradually become a confidential communication network for some government and financial departments.
However, the current optical fiber QKD network lacks a fast and effective failure recovery method, and once a failure occurs in an optical fiber QKD link or node, long-time manual repair is required, which easily causes that the carried confidential service cannot be safely transmitted, and generates multiple service security risks and longer service waiting time delay.
Aiming at the problems in the prior art, the embodiment of the invention provides a method for recovering the optical fiber quantum key distribution network fault, which is characterized in that the satellite-ground QKD and the ground optical fiber QKD are utilized to cooperate to complete the timely recovery of the optical fiber QKD network fault. The satellite-ground QKD has the advantages of long distance, wide coverage, high efficiency and the like, can be conveniently butted with the ground station in the satellite-ground QKD by means of a quantum satellite, and then carries out ground optical fiber QKD butting on the ground station and a QKD source-host node corresponding to the optical fiber QKD network fault service to realize the fault recovery of the world-ground cooperation, thereby effectively improving the fault recovery efficiency of the optical fiber QKD network and solving the problem that the fault of the existing optical fiber QKD network is difficult to respond quickly and recover in time.
Fig. 1 is a flowchart of a method for recovering a failure in an optical fiber quantum key distribution network according to an embodiment of the present invention, where as shown in fig. 1, the method includes:
step S1, when the optical fiber quantum key distribution QKD network fails, determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service;
step S2, acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node;
step S3, using the first target ground station, the preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
It can be understood that the method for recovering from the failure of the optical fiber QKD network provided by the embodiment of the present invention is based on a cooperative recovery method between the satellite-ground QKD network and the optical fiber QKD network, and according to the method provided by the embodiment of the present invention, the embodiment of the present invention provides a network architecture of "world cooperation" to implement the method, wherein the world cooperation refers to "the sky" using the satellite-ground QKD network and "the ground" connecting the optical fiber QKD network and the ground station.
Fig. 2 is a schematic diagram of a world-wide collaborative QKD network architecture according to an embodiment of the present invention, and as shown in fig. 2, the world-wide collaborative QKD network architecture according to the embodiment of the present invention includes three layers: the system comprises a quantum satellite plane at the uppermost layer, a ground station plane in the middle and an optical fiber QKD network plane, wherein the optical fiber QKD network plane consists of a plurality of QKD nodes and a plurality of optical fiber QKD links; the ground station plane comprises a plurality of ground stations; the quantum satellite plane comprises a quantum satellite. The ground station is connected with the QKD nodes through one or more optical fiber QKD links, and meanwhile, the ground station can receive quantum signals transmitted by the quantum satellites to complete the satellite-ground QKD.
It should be noted that the connections between planes shown in fig. 2 are only used to indicate the association between the hierarchies, and the specific number and connection form of the connections in the embodiment of the present invention are not specifically limited, for example: one ground station may be connected to more than one optical fiber QKD node.
Specifically, in step S1, when it is monitored that the optical fiber QKD network has a fault, the service affected by the fault is determined in real time, it should be noted that the same fault may affect multiple services at the same time, and the scheme of the embodiment of the present invention may be adopted for each service.
Further, for each affected service, the embodiments of the present invention determine the source node and the sink node of its service, which are referred to as the optical fiber QKD source node and the optical fiber QKD sink node in the embodiments of the present invention because they are in the optical fiber QKD network.
The optical fiber QKD source node, i.e., the originating node from which traffic originates in the optical fiber QKD network, and the optical fiber QKD sink node, i.e., the terminating node from which traffic terminates in the optical fiber QKD network.
In step S2, as shown in fig. 2, through the connection relationship between the ground station and the QKD node, the embodiment of the present invention can determine a first target ground station corresponding to the optical fiber QKD source node and a second target ground station corresponding to the optical fiber QKD sink node, where the target ground stations are the ground stations serving as the trusted relay nodes provided in the embodiment of the present invention.
In step S3, as shown in fig. 2, through the connection relationship between the quantum satellite and the ground station, the first target ground station, the quantum satellite, and the second target ground station can be transmitted as a trusted relay between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the connection failure of the optical fiber QKD network caused by the network failure.
It should be noted that the quantum satellite has the unique advantage of conveniently covering the world, and the efficiency of the quantum satellite transmitting quantum signals and the ground receiving mode for entering the planetary ground QKD is far higher than that of the ground optical fiber QKD with the same distance from the ground. The quantum satellite and the ground station use the outer space and the near ground free space as a quantum channel and a negotiation channel required by the QKD, the quantum optical signal and the synchronous optical signal are borne by the quantum channel, and the negotiation channel is used for carrying out information negotiation such as basis vector comparison, error code check and the like to complete the satellite-ground QKD between the quantum satellite and the ground station. Based on the satellite-ground QKD, a key pair sequence X is negotiated between the quantum satellite and the first target ground station, a key pair sequence Y is negotiated between the quantum satellite and the second target ground station, the quantum satellite is used as a credible relay, the key pair sequence X is encrypted at the quantum satellite by using the key pair sequence Y (the length of the key pair sequence X is the same as that of the key pair sequence Y) in combination with an encryption algorithm of 'one-time pad' which is strictly proved to be absolutely safe, and the key pair sequence X is decrypted at the second target ground station by using the key, so that the key pair sequence X is shared between the first target ground station and the second target ground station.
The first target ground station, the quantum satellite, and the second target ground station can thus be used as a trusted relay between the optical fiber QKD source node and the optical fiber QKD sink node.
On the basis of the above embodiment, step S1 includes:
when the optical fiber QKD network fails, determining a failed link and/or a failed node of the network failure;
determining a number of services affected by the failed link and/or failed node;
and acquiring the optical fiber QKD source node and the optical fiber QKD sink node corresponding to each affected service.
It can be understood that there are generally two failure causes for the fiber QKD network failure, namely, a link failure and a node failure, which may occur simultaneously or independently, but only one of the failures affects the fiber QKD traffic.
Specifically, when the optical fiber QKD network fails, the location of the failed link and/or the failed node of the network failure is determined, and the number of affected services and the direction of the services can be queried according to the location of the failed link and/or the failed node, so as to obtain the optical fiber QKD source node and the optical fiber QKD sink node of each affected service.
On the basis of the above embodiment, all ground stations connected to the optical fiber QKD source node and all ground stations connected to the optical fiber QKD sink node are obtained;
the first target ground station is determined among all ground stations to which the optical fiber QKD source node is connected, and the second target station is determined among all ground stations to which the optical fiber QKD sink node is connected.
It will be appreciated that multiple ground stations may be connected to a node in each optical fiber QKD network, but embodiments of the present invention need only utilize two of the ground stations as relays when restoring connectivity, and thus need to determine the first and second target ground stations required by embodiments of the present invention among all the ground stations.
On the basis of the above embodiment, said determining the first target ground station among all ground stations to which the optical fiber QKD source node is connected and the second target station among all ground stations to which the optical fiber QKD sink node is connected, comprises:
calculating distances between all ground stations connected to the optical fiber QKD source node and between all ground stations connected to the optical fiber QKD sink node and the optical fiber QKD sink node;
and taking the ground station with the minimum distance between all ground stations connected with the optical fiber QKD source node and the optical fiber QKD source node as the first target ground station, and taking the ground station with the minimum distance between all ground stations connected with the optical fiber QKD sink node and the optical fiber QKD sink node as the second target ground station.
It should be noted that, the embodiments of the present invention provide a way to calculate distances between ground stations and nodes to determine a target ground station, and specifically, the embodiments of the present invention calculate distances between all ground stations connected to all optical fiber QKD source nodes and the optical fiber QKD source nodes and distances between all ground stations connected to the optical fiber QKD sink nodes and the optical fiber QKD sink nodes, and then select a ground station with the shortest distance as the target ground station, it can be understood that selecting a ground station with the shortest distance can save more resources and have a faster connection recovery effect.
Of course, if the fiber QKD node has only one ground station connected, then the connected ground station would be determined directly as the target ground station without having to calculate the distance.
On the basis of the foregoing embodiment, step S3 specifically includes:
establishing a satellite-to-ground QKD link connection between the first target ground station and the quantum satellite, a satellite-to-ground QKD link connection between the second target ground station and the quantum satellite, an optical fiber QKD link connection between the first target ground station and the optical fiber QKD source node, and an optical fiber QKD link connection between the second target ground station and the optical fiber QKD sink node to recover the affected traffic corresponding to the optical fiber QKD source node and optical fiber QKD sink node.
It will be appreciated that the establishment of the trusted relay node is essentially performed by establishing a connection between the optical fiber QKD source node and the ground station connected thereto and a connection between the optical fiber QKD sink node and the ground station connected thereto via the optical fiber QKD link, and establishing a connection between the ground station connected to the optical fiber QKD source node and the quantum satellite and a connection between the ground station connected to the optical fiber QKD sink node and the quantum satellite via the satellite-to-ground QKD link, respectively.
Then, the ground station connected with the source node of the optical fiber QKD, the quantum satellite and the ground station connected with the sink node of the optical fiber QKD after the connection is established can be used as a credible relay node, so that the fault rapid recovery of the optical fiber QKD network is realized.
Fig. 3 is a schematic diagram of a failure recovery process for an optical fiber quantum key distribution network according to an embodiment of the present invention, as shown in fig. 3, if a link failure of the optical fiber QKD network occurs on the optical fiber link connecting QKD node a and QKD node B and/or a node failure of the optical fiber QKD network occurs at QKD node B.
When the link fault and the node fault arrive, the optical fiber QKD service influenced by the fault is inquired, the fact that the optical fiber QKD service from the QKD node A to the QKD node C is influenced is known, and the optical fiber QKD process is interrupted, and then the source and the destination nodes of the optical fiber QKD service corresponding to the fault can be determined to be the QKD node A and the QKD node C respectively.
Thus obtaining the ground station connected to QKD node a: ground station a, and acquires the ground station connected to QKD node C: a ground station B and a ground station C; the distance of QKD node a from ground station a is then calculated: 50km, and calculating the distance between the QKD node C and the ground station B/C: 50km/70 km; thus selecting the ground station with the shortest distance to the QKD node a: and the ground station A is selected, and the ground station with the shortest distance to the QKD node C is selected: and a ground station B.
Establishing the connection between the QKD node A and the ground station A through the optical fiber QKD link, and establishing the connection between the QKD node C and the ground station B through the optical fiber QKD link; then, establishing connection between a ground station A and a quantum satellite through a satellite-ground QKD link, and establishing connection between a ground station B and the quantum satellite; and finally, the QKD node A establishes a QKD recovery connection with the QKD node C by using the ground station A, the quantum satellite and the ground station B as a trusted relay, and finally completes the fault recovery of the optical fiber QKD network.
According to the method and the system for restoring the optical fiber quantum key distribution network fault, the satellite-ground QKD between the quantum satellite and the ground station is utilized, and the ground station and the ground optical fiber QKD between the QKD source-sink nodes corresponding to the optical fiber QKD network fault service are combined, so that the optical fiber QKD network fault in cooperation with the ground can be quickly restored, the fault restoration efficiency of the optical fiber QKD network is effectively improved, and the problem that the existing optical fiber QKD network fault is difficult to quickly respond and timely restore is solved.
Fig. 4 is a structural diagram of a fiber quantum key distribution network fault recovery system according to an embodiment of the present invention, and as shown in fig. 4, the system includes: the device comprises a determining module 1, an obtaining module 2 and a recovering module 3, wherein:
the determining module 1 is used for determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to an affected service when the optical fiber quantum key distribution QKD network fails;
the acquisition module 2 is used for acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node;
the recovery module 3 is configured to use the first target ground station, a preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
For how to utilize the determining module 1, the obtaining module 2, and the recovering module 3 to recover the failure of the optical fiber quantum key distribution network, reference may be made to the above embodiments, and details of the embodiments of the present invention are not described herein again.
The embodiment of the invention provides a fault recovery system of an optical fiber quantum key distribution network, which comprises the following steps: at least one processor; and at least one memory communicatively coupled to the processor, wherein:
the memory stores program instructions executable by the processor, the processor calls the program instructions to perform the methods provided by the method embodiments, for example, including: step S1, when the optical fiber quantum key distribution QKD network fails, determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service; step S2, acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node; step S3, using the first target ground station, the preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
The present embodiment discloses a computer program product comprising a computer program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions which, when executed by a computer, enable the computer to perform the method provided by the above-mentioned method embodiments, for example, comprising: step S1, when the optical fiber quantum key distribution QKD network fails, determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service; step S2, acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node; step S3, using the first target ground station, the preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
The present embodiments provide a non-transitory computer-readable storage medium storing computer instructions that cause the computer to perform the methods provided by the above method embodiments, for example, including: step S1, when the optical fiber quantum key distribution QKD network fails, determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service; step S2, acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node; step S3, using the first target ground station, the preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node. Those of ordinary skill in the art will understand that: all or part of the steps for implementing the method embodiments may be implemented by hardware related to program instructions, and the program may be stored in a computer readable storage medium, and when executed, the program performs the steps including the method embodiments; and the aforementioned storage medium includes: various media that can store program codes, such as ROM, RAM, magnetic or optical disks.
Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments.
Finally, the method of the present application is only a preferred embodiment and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims (9)
1. A fault recovery method for an optical fiber quantum key distribution network is characterized by comprising the following steps:
step S1, when the optical fiber quantum key distribution QKD network fails, determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service;
step S2, acquiring a first target ground station connected with the optical fiber QKD source node and a second target ground station connected with the optical fiber QKD sink node;
step S3, using the first target ground station, the preset quantum satellite, and the second target ground station as a relay node between the optical fiber QKD source node and the optical fiber QKD sink node, so as to recover the affected traffic corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
2. The method according to claim 1, wherein step S1 includes:
when the optical fiber QKD network fails, determining a failed link and/or a failed node of the network failure;
determining a number of services affected by the failed link and/or failed node;
and acquiring the optical fiber QKD source node and the optical fiber QKD sink node corresponding to each affected service.
3. The method according to claim 1, wherein step S2 includes:
acquiring all ground stations connected with the optical fiber QKD source node and all ground stations connected with the optical fiber QKD sink node;
the first target ground station is determined among all ground stations to which the optical fiber QKD source node is connected, and the second target station is determined among all ground stations to which the optical fiber QKD sink node is connected.
4. The method of claim 1, wherein determining the first target ground station among all ground stations to which the optical fiber QKD source node is connected and determining the second target station among all ground stations to which the optical fiber QKD sink node is connected comprises:
calculating distances between all ground stations connected to the optical fiber QKD source node and between all ground stations connected to the optical fiber QKD sink node and the optical fiber QKD sink node;
and taking the ground station with the minimum distance between all ground stations connected with the optical fiber QKD source node and the optical fiber QKD source node as the first target ground station, and taking the ground station with the minimum distance between all ground stations connected with the optical fiber QKD sink node and the optical fiber QKD sink node as the second target ground station.
5. The method according to claim 1, wherein step S3 specifically comprises:
establishing a satellite-to-ground QKD link connection between the first target ground station and the quantum satellite, a satellite-to-ground QKD link connection between the second target ground station and the quantum satellite, an optical fiber QKD link connection between the first target ground station and the optical fiber QKD source node, and an optical fiber QKD link connection between the second target ground station and the optical fiber QKD sink node to recover the affected traffic corresponding to the optical fiber QKD source node and optical fiber QKD sink node.
6. A fiber quantum key distribution network failure recovery system, comprising:
the determining module is used for determining an optical fiber QKD source node and an optical fiber QKD sink node corresponding to the affected service when the optical fiber quantum key distribution QKD network fails;
an obtaining module, configured to obtain a first target ground station to which the optical fiber QKD source node is connected and a second target ground station to which the optical fiber QKD sink node is connected;
and the recovery module is used for taking the first target ground station, a preset quantum satellite and the second target ground station as relay nodes between the optical fiber QKD source node and the optical fiber QKD sink node so as to recover the affected services corresponding to the optical fiber QKD source node and the optical fiber QKD sink node.
7. A computer device, comprising a memory and a processor, wherein the processor and the memory communicate with each other via a bus; the memory stores program instructions executable by the processor, the processor invoking the program instructions to perform the method of any of claims 1 to 5.
8. A computer program product, characterized in that the computer program product comprises a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions which, when executed by a computer, cause the computer to carry out the method according to any one of claims 1 to 5.
9. A non-transitory computer-readable storage medium storing computer instructions that cause a computer to perform the method of any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810182499.0A CN108566292B (en) | 2018-03-06 | 2018-03-06 | Fault recovery method and system for optical fiber quantum key distribution network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810182499.0A CN108566292B (en) | 2018-03-06 | 2018-03-06 | Fault recovery method and system for optical fiber quantum key distribution network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108566292A true CN108566292A (en) | 2018-09-21 |
| CN108566292B CN108566292B (en) | 2020-06-12 |
Family
ID=63531377
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810182499.0A Active CN108566292B (en) | 2018-03-06 | 2018-03-06 | Fault recovery method and system for optical fiber quantum key distribution network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108566292B (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110166115A (en) * | 2019-04-19 | 2019-08-23 | 全球能源互联网研究院有限公司 | A kind of quantum optical network service fault recovery method and device based on pool of keys |
| CN110519146A (en) * | 2019-08-23 | 2019-11-29 | 北京邮电大学 | Service protecting method and controller based on air-ground integrated annular link structure |
| CN110662123A (en) * | 2019-08-23 | 2020-01-07 | 北京邮电大学 | Service protection method and controller for optical fiber link in air-ground integrated optical network |
| CN113572610A (en) * | 2021-08-20 | 2021-10-29 | 济南量子技术研究院 | Quantum communication network based on satellite relay and networking method |
| CN113826361A (en) * | 2019-03-21 | 2021-12-21 | 伊顿智能动力有限公司 | Bus configuration and method for operating a bus configuration |
| CN115103245A (en) * | 2022-06-24 | 2022-09-23 | 烽火通信科技股份有限公司 | Optical network fault analysis method and device |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101627575A (en) * | 2006-12-21 | 2010-01-13 | 维里逊服务运作有限公司 | Large scale quantum cryptographic key distribution network |
| US9306740B2 (en) * | 2011-03-11 | 2016-04-05 | The Aerospace Corporation | Systems, methods, and apparatus for a quantum key distribution telescope |
| CN107437995A (en) * | 2016-05-27 | 2017-12-05 | 西安电子科技大学 | Satellite-based wide area quantum communication network system and communication means |
| CN107508671A (en) * | 2017-08-18 | 2017-12-22 | 北京邮电大学 | Service communication method and device based on quantum key distribution |
| CN107566041A (en) * | 2017-08-29 | 2018-01-09 | 华南师范大学 | QKD metropolitan area network systems and its key distribution method based on Sagnac rings |
-
2018
- 2018-03-06 CN CN201810182499.0A patent/CN108566292B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101627575A (en) * | 2006-12-21 | 2010-01-13 | 维里逊服务运作有限公司 | Large scale quantum cryptographic key distribution network |
| US9306740B2 (en) * | 2011-03-11 | 2016-04-05 | The Aerospace Corporation | Systems, methods, and apparatus for a quantum key distribution telescope |
| CN107437995A (en) * | 2016-05-27 | 2017-12-05 | 西安电子科技大学 | Satellite-based wide area quantum communication network system and communication means |
| CN107508671A (en) * | 2017-08-18 | 2017-12-22 | 北京邮电大学 | Service communication method and device based on quantum key distribution |
| CN107566041A (en) * | 2017-08-29 | 2018-01-09 | 华南师范大学 | QKD metropolitan area network systems and its key distribution method based on Sagnac rings |
Non-Patent Citations (1)
| Title |
|---|
| 王为众等: "一种适用于天地一体化网络的卫星通信港设计", 《无线电通信技术》 * |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113826361A (en) * | 2019-03-21 | 2021-12-21 | 伊顿智能动力有限公司 | Bus configuration and method for operating a bus configuration |
| CN110166115A (en) * | 2019-04-19 | 2019-08-23 | 全球能源互联网研究院有限公司 | A kind of quantum optical network service fault recovery method and device based on pool of keys |
| CN110166115B (en) * | 2019-04-19 | 2020-07-28 | 全球能源互联网研究院有限公司 | Quantum optical network service fault recovery method and device based on key pool |
| CN110519146A (en) * | 2019-08-23 | 2019-11-29 | 北京邮电大学 | Service protecting method and controller based on air-ground integrated annular link structure |
| CN110662123A (en) * | 2019-08-23 | 2020-01-07 | 北京邮电大学 | Service protection method and controller for optical fiber link in air-ground integrated optical network |
| CN113572610A (en) * | 2021-08-20 | 2021-10-29 | 济南量子技术研究院 | Quantum communication network based on satellite relay and networking method |
| CN115103245A (en) * | 2022-06-24 | 2022-09-23 | 烽火通信科技股份有限公司 | Optical network fault analysis method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108566292B (en) | 2020-06-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108566292B (en) | Fault recovery method and system for optical fiber quantum key distribution network | |
| RU2580672C2 (en) | Protection for fibre-optic access networks | |
| US20160248581A1 (en) | Quantum key distribution system, method and apparatus based on trusted relay | |
| CN107437995A (en) | Satellite-based wide area quantum communication network system and communication means | |
| US9048995B2 (en) | Method and system for low latency radio frequency wave transmission | |
| CN109586786A (en) | Method and apparatus for detecting signal degradation using pre- forward error correction bit error rate at optical repeater | |
| CN102594646B (en) | A kind of internet protocol secure tunnel changing method, device and transmission system | |
| Brito et al. | Satellite-based photonic quantum networks are small-world | |
| CA2883444A1 (en) | System and method for quantum key distribution | |
| Pan et al. | Free-space quantum secure direct communication: Basics, progress, and outlook | |
| Stanley et al. | Recent progress in quantum key distribution network deployments and standards | |
| US11831763B2 (en) | Methods, systems, and computer readable media for utilizing predetermined encryption keys in a test simulation environment | |
| EP4278557B1 (en) | System and method for group key formation | |
| CN109120333B (en) | Service protection method, system, equipment and medium for quantum key distribution optical network | |
| Shirko et al. | A novel security survival model for quantum key distribution networks enabled by software-defined networking | |
| US20200412444A1 (en) | Method for configuring and operating redundant path in quantum communication network | |
| CN106464511B (en) | A kind of service protecting method and device | |
| KR20220047541A (en) | Quantum key distribution system and method via hybrid quantum channel | |
| CN108833380A (en) | The method of data exchange between a kind of system the superior and the subordinate platform | |
| Xu et al. | Secure federated learning in quantum autonomous vehicular networks | |
| US9998807B2 (en) | Method and apparatus for establishing trail network | |
| CN114337996A (en) | Satellite-ground integrated quantum network and key pool control method thereof | |
| CN204392260U (en) | A kind of building area of a room sub-communication device based on beam expanding lens-level crossing-telescopic system | |
| JP6021628B2 (en) | Route distribution method and apparatus for content distribution system | |
| Mannalath et al. | Entanglement routing and bottlenecks in grid networks |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |