CN108650090B - Quantum security fax machine and quantum security fax system - Google Patents

Quantum security fax machine and quantum security fax system Download PDF

Info

Publication number
CN108650090B
CN108650090B CN201810784009.4A CN201810784009A CN108650090B CN 108650090 B CN108650090 B CN 108650090B CN 201810784009 A CN201810784009 A CN 201810784009A CN 108650090 B CN108650090 B CN 108650090B
Authority
CN
China
Prior art keywords
quantum
module
quantum key
fax machine
fax
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810784009.4A
Other languages
Chinese (zh)
Other versions
CN108650090A (en
Inventor
赵良圆
薛梦驰
邱红康
倪文强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Jiangsu Hengtong Wentian Quantum Information Research Institute Co Ltd
Original Assignee
Jiangsu Hengtong Wentian Quantum Information Research Institute Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Jiangsu Hengtong Wentian Quantum Information Research Institute Co Ltd filed Critical Jiangsu Hengtong Wentian Quantum Information Research Institute Co Ltd
Priority to CN201810784009.4A priority Critical patent/CN108650090B/en
Publication of CN108650090A publication Critical patent/CN108650090A/en
Application granted granted Critical
Publication of CN108650090B publication Critical patent/CN108650090B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0852Quantum cryptography
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04BTRANSMISSION
    • H04B10/00Transmission systems employing electromagnetic waves other than radio-waves, e.g. infrared, visible or ultraviolet light, or employing corpuscular radiation, e.g. quantum communication
    • H04B10/70Photonic quantum communication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N1/00Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof
    • H04N1/32Circuits or arrangements for control or supervision between transmitter and receiver or between image input and image output device, e.g. between a still-image camera and its memory or between a still-image camera and a printer device

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Electromagnetism (AREA)
  • Theoretical Computer Science (AREA)
  • Optics & Photonics (AREA)
  • Multimedia (AREA)
  • Facsimiles In General (AREA)

Abstract

The invention relates to the technical field of fax machines, and provides a quantum secret fax machine and a quantum secret fax system. The fax machine comprises a control module, a photoelectric conversion module and a quantum key receiving and transmitting module. The photoelectric conversion module and the quantum key receiving and transmitting module are connected with the control module. The photoelectric conversion module is used for generating first fax information corresponding to the first fax content and sending the first fax information to the control module; the quantum key receiving and transmitting module is used for generating a quantum key and transmitting the quantum key to the control module; the control module is used for encrypting the first fax information by utilizing the quantum key, sending the first encrypted fax information to the opposite-end control module, and/or receiving the second encrypted fax information sent by the opposite-end control module, and decrypting the second encrypted fax information by utilizing the quantum key. The fax machine adopts the quantum key with higher security, supports one-time encryption algorithm, and can effectively avoid the disclosure of fax information.

Description

Quantum security fax machine and quantum security fax system
Technical Field
The invention relates to the technical field of fax machines, in particular to a quantum secret fax machine and a quantum secret fax system.
Background
Facsimile machine is a communication equipment for transmitting fixed image and characters in the form of simulation by using scanning technique, and can accurately transfer written information of file, newspaper, photo and graph, etc.. In recent years, along with the continuous progress of technology, fax machines are increasingly popular in politics, military, trade, travel, news and other industries, effectively improve the working efficiency and quality, and meet the social demands of people for remote, high-speed, accurate and visual file and data transmission, thereby becoming an indispensable modern office equipment for a plurality of institutions. However, along with the high frequency of fax machines, the phenomena of fax machine secret leakage are increasing.
Most of the fax machines at present do not have the function of encrypting fax information, and a small number of fax machines based on the traditional encryption algorithm have high possibility of cracking keys and cannot effectively protect files and data transmitted by users.
Disclosure of Invention
In view of the above, embodiments of the present invention provide a quantum security fax machine and a quantum security fax system, so as to solve the above technical problems.
The embodiment of the invention is realized by the following technical scheme:
In a first aspect, an embodiment of the present invention provides a quantum secret fax machine, including: the device comprises a control module, a photoelectric conversion module and a quantum key receiving and transmitting module;
The photoelectric conversion module and the quantum key receiving and transmitting module are connected with the control module;
The photoelectric conversion module is used for scanning the first fax content, performing photoelectric conversion, generating first fax information corresponding to the first fax content, and sending the first fax information to the control module;
The quantum key receiving and transmitting module is used for negotiating with the opposite-end quantum key receiving and transmitting module through a quantum channel to generate a quantum key and transmitting the quantum key to the control module;
The control module is used for encrypting the first fax information by utilizing the quantum key to generate first encrypted fax information, transmitting the first encrypted fax information to the opposite-end control module through the classical channel, and/or receiving the second encrypted fax information transmitted by the opposite-end control module through the classical channel, and decrypting the second encrypted fax information by utilizing the quantum key to generate second fax information.
In the quantum secret fax machine, the fax information is encrypted and decrypted by adopting the quantum key, the quantum key is generated based on the quantum random number, and the quantum random number is a true random number which is different from the random number used in the traditional encryption algorithm, so that the security of the quantum key is far higher than that of the key obtained by the traditional method. The quantum secret fax machine supports one-time secret algorithm by using the quantum secret key, so that the security in the fax process is further improved, and the secret leakage of fax information can be effectively avoided.
With reference to the first aspect, in a first possible implementation manner of the first aspect, the quantum key transceiver module includes: a quantum key transmitting module and/or a quantum key receiving module;
The quantum key sending module is used for generating a first quantum signal, sending the first quantum signal to the opposite-end quantum key receiving module through a quantum channel, and performing post-processing interaction with the opposite-end quantum key receiving module through a classical channel so as to generate a first quantum key based on the first quantum signal;
the quantum key receiving module is used for receiving the second quantum signal sent by the opposite-end quantum key sending module through the quantum channel and performing post-processing interaction with the opposite-end quantum key sending module through the classical channel so as to generate a second quantum key based on the second quantum signal.
The quantum key receiving and transmitting module only has the function of sending or receiving quantum signals, and can also be a receiving and transmitting integrated machine, the safe key rate of the quantum key can be improved by adopting the implementation mode of the receiving and transmitting integrated machine, and meanwhile, the quantum key sending module and the quantum key receiving module are mutually backed up, so that the reliability of the quantum secret fax machine can be improved.
With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner of the first aspect, the quantum key sending module includes: a first electrical module, a first optical module, and a first random number generator;
The first electrical module is respectively connected with the control module, the first optical module and the first random number generator, and the first optical module is connected with the first random number generator;
The first electrical module is used for controlling the first optical module to generate a first quantum signal and a first synchronous optical signal, controlling the first random number generator to generate a first quantum random number, and performing post-processing interaction with the opposite-end quantum key receiving module to generate a first quantum key and sending the first quantum key to the control module;
the first optical module is used for carrying out coded modulation on the first quantum signal by utilizing the first quantum random number and sending the first quantum signal and the first synchronous optical signal to the opposite-end quantum key receiving module.
With reference to the second possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, the quantum key sending module further includes: the first wavelength division multiplexer is connected with the first optical module and is used for multiplexing the first quantum signals and the first synchronous optical signals.
The first wavelength division multiplexer may reduce the number of quantum channels occupied by the quantum key transmission module.
With reference to the first possible implementation manner of the first aspect, in a fourth possible implementation manner of the first aspect, the quantum key receiving module includes: a second electrical module, a detector module, a second optical module, and a second random number generator;
The second optical module is respectively connected with the detector module and the second random number generator;
the second optical module is used for receiving the second quantum signal sent by the opposite-end quantum key sending module and carrying out demodulation measurement on the second quantum signal by utilizing the second quantum random number generated by the second random number generator;
the detector module is used for receiving the second synchronous optical signal sent by the opposite-end quantum key sending module and detecting the second synchronous optical signal and the second quantum signal;
The second electrical module is used for controlling the second random number generator to generate a second quantum random number, collecting an output signal of the detector module, and performing post-processing interaction with the opposite-end quantum key sending module to generate a second quantum key and send the second quantum key to the control module.
With reference to the fourth possible implementation manner of the first aspect, in a fifth possible implementation manner of the first aspect, the quantum key receiving module further includes: the second wavelength division multiplexer is respectively connected with the second optical module and the detector module, and is used for demultiplexing the second quantum signal and the second synchronous optical signal, outputting the second quantum signal to the second optical module and outputting the second synchronous optical signal to the detector module.
The second wavelength division multiplexer may reduce the number of quantum channels occupied by the quantum key receiving module.
With reference to the first aspect or any one of the first to fifth possible implementation manners of the first aspect, in a sixth possible implementation manner of the first aspect, the quantum secret fax machine further includes: the quantum key server is connected with the control module, and the control module is also used for sending the quantum key to the quantum key server for storage and management and reading from the quantum key server when the quantum key is needed.
The quantum key server can store the generated quantum key so as to be read and used at any time when needed. Meanwhile, the quantum key server can monitor and manage the use condition, the use rate, the use abnormal condition and the like of the quantum key so as to discover potential safety hazards in time.
With reference to the first aspect or any one of the first to fifth possible implementation manners of the first aspect, in a seventh possible implementation manner of the first aspect, the quantum secret fax machine further includes: and the modem is connected with the control module and is used for modulating the signal sent by the control module to the classical channel and demodulating the signal received by the control module from the classical channel.
In a second aspect, an embodiment of the present invention provides a quantum secure fax system, including: a management server, a first quantum secure fax machine, and a second quantum secure fax machine;
the first quantum secret fax machine and the second quantum secret fax machine are both in communication connection with the management server through classical channels, and the first quantum secret fax machine is also in communication connection with the second quantum secret fax machine through quantum channels;
The first quantum secret fax machine is used for sending the first identification information of the first quantum secret fax machine, the first identification information and the second identification information of the second quantum secret fax machine to the management server when the fax needs to be sent to the second quantum secret fax machine;
The management server is used for obtaining first registration identity information of the first quantum secret fax machine stored on the management server based on the first identification information, verifying whether the first identity information is matched with the first registration identity information, and if so, sending an identity verification notification to the second quantum secret fax machine based on the second identification information;
the second quantum secret fax machine is used for sending second identity information of the second quantum secret fax machine to the management server after receiving the identity verification notification;
The management server is further used for obtaining second registration identity information of a second quantum secret fax machine stored on the management server based on the second identification information, verifying whether the second identity information is matched with the second registration identity information, and if so, sending an identity verification success notification to the first quantum secret fax machine based on the first identification information;
The first quantum secret fax machine is also used for negotiating with the second quantum secret fax machine to generate a quantum key after receiving the authentication success notice, and transmitting faxes to the second quantum secret fax machine by utilizing the quantum key.
The quantum secret fax machine in the quantum secret fax system has the advantages as described above, so that the quantum secret fax system can realize safe transmission of fax information and avoid revealing of fax information. Meanwhile, when the fax process is started, firstly, identity verification is carried out on the fax receiving and sending parties through the management server, and the problem that a third party is fake or falsifies the identity to communicate is effectively avoided.
With reference to the second aspect, in a first possible implementation manner of the second aspect, the quantum secure fax system further includes: the quantum key distribution relay station is arranged on the quantum channel, and the first quantum secret fax machine and the second quantum secret fax machine are both in communication connection with the quantum key distribution relay station through the quantum channel;
the quantum key distribution relay station is used as a transmission relay of quantum signals in the process of negotiating and generating the quantum key by the first quantum secret fax machine and the second quantum secret fax machine.
When the first quantum security fax machine is far away from the second quantum security fax machine, one or more quantum key distribution relay stations can be arranged between the first quantum security fax machine and the second quantum security fax machine to serve as transmission relays of quantum signals, so that the transmission quality of the quantum signals is improved.
In order to make the above objects, technical solutions and advantageous effects of the present invention more comprehensible, embodiments accompanied with the accompanying drawings are described in detail below.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings that are needed in the embodiments will be briefly described below, it being understood that the following drawings only illustrate some embodiments of the present invention and therefore should not be considered as limiting the scope, and other related drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a schematic diagram of a first architecture of a quantum secure fax system according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a second architecture of a quantum secure fax system according to an embodiment of the present invention;
FIG. 3 is a schematic diagram of a quantum security fax machine according to an embodiment of the present invention;
Fig. 4 is a schematic structural diagram of a quantum key transceiver module according to an embodiment of the present invention.
In the figure: 100-a first quantum secure facsimile machine; a 110-photoelectric conversion module; 120-a control module; 130-a quantum key transceiver module; 132-a quantum key transmission module; 132 a-a first electrical module; 132 b-a first optical module; 132 c-a first random number generator; 132 d-a first wavelength division multiplexer; 134-a quantum key receiving module; 134 a-a second electrical module; 134 b-a detector module; 134 c-a second random number generator; 134 d-a second optical module; 134 e-a second wavelength division multiplexer; 140-modems; 150-a quantum key server; 200-a second quantum secure facsimile machine; 300-a management server; 400-quantum key distribution relay station.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. The components of the embodiments of the present invention generally described and illustrated in the figures herein may be arranged and designed in a wide variety of different configurations.
Thus, the following detailed description of the embodiments of the invention, as presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
It should be noted that: like reference numerals and letters denote like items in the following figures, and thus once an item is defined in one figure, no further definition or explanation thereof is necessary in the following figures.
In the description of the present invention, it should be noted that, directions or positional relationships indicated by terms such as "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., are directions or positional relationships based on those shown in the drawings, or are directions or positional relationships conventionally put in use of the inventive product, are merely for convenience of describing the present invention and simplifying the description, and are not indicative or implying that the apparatus or element to be referred to must have a specific direction, be constructed and operated in a specific direction, and thus should not be construed as limiting the present invention. Furthermore, the terms "first," "second," "third," and the like are used merely to distinguish between descriptions and should not be construed as indicating or implying relative importance.
Furthermore, the terms "horizontal," "vertical," "overhang," and the like do not denote a requirement that the component be absolutely horizontal or overhang, but rather may be slightly inclined. As "horizontal" merely means that its direction is more horizontal than "vertical", and does not mean that the structure must be perfectly horizontal, but may be slightly inclined.
In the description of the present invention, it should also be noted that, unless explicitly specified and limited otherwise, the terms "disposed," "mounted," "connected," and "connected" are to be construed broadly, and may be, for example, fixedly connected, detachably connected, or integrally connected; can be mechanically or electrically connected; can be directly connected or indirectly connected through an intermediate medium, and can be communication between two elements. The specific meaning of the above terms in the present invention can be understood by those of ordinary skill in the art according to the specific circumstances.
Additional features and advantages of the invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the embodiments of the invention. The objectives and other advantages of the invention will be realized and attained by the structure particularly pointed out in the written description and claims thereof as well as the appended drawings.
Fig. 1 is a schematic diagram of a first structure of a quantum secret fax system according to an embodiment of the present invention. Referring to fig. 1, the quantum secure fax system includes a management server 300, a first quantum secure fax machine 100, and a second quantum secure fax machine 200.
The first quantum security fax machine 100 and the second quantum security fax machine 200 are both communicatively connected to the management server 300 via a classical channel, while the first quantum security fax machine 100 and the second quantum security fax machine 200 are communicatively connected via a quantum channel.
The management server 300 may be one server, a combination of a plurality of servers, a physical server, or a cloud server. The first quantum security fax machine 100 and the second quantum security fax machine 200 are two quantum security fax machines that need to transmit and receive faxes, and for the sake of brevity, it is assumed that the first quantum security fax machine 100 transmits faxes to the second quantum security fax machine 200 in the following description. It will be appreciated that the quantum secure fax system includes at least two quantum secure fax machines, and may include more quantum secure fax machines.
Classical channels may be various common channels currently used for communication, quantum channels being used for transmitting quantum signals, which are typically single photon signals, and thus quantum channels are typically fibre channel. In some embodiments, the classical channel is also a fibre channel, where the quantum signal and the fax signal may be multiplexed on a single optical fiber.
Before starting fax, the first quantum secure fax machine 100 and the second quantum secure fax machine 200 first register identities on the management server 300. Taking the first quantum secure fax machine 100 as an example, the first quantum secure fax machine 100 sends first identity information representing the identity of the first quantum secure fax machine and the first identification information to the management server 300 for associated storage, where the stored first identity information is referred to as first registered identity information, where the first identity information may be a hash function value related to the identity of the first quantum secure fax machine 100, and the first identification information may be a code number, for example, "01". Similarly, the second quantum secret fax machine 200 sends the second identity information characterizing the identity of the second quantum secret fax machine and the second identification information to the management server 300 for associated storage, and the stored second identity information is called second registration identity information.
At the beginning of the authentication, an authentication step is first performed on the management server 300. Specifically, the first quantum secret fax machine 100 first transmits the first identification information, and the second identification information known in advance to the management server 300.
After receiving the information, the management server 300 queries and obtains the first registration identity information stored on the management server 300 based on the first identification information, and then verifies whether the first identity information is matched with the first registration identity information, if not, it indicates that the current first identity information is possibly forged, and the management server 300 terminates the fax process, that is, does not respond to the subsequent request of the first quantum secret fax machine 100 any more. If so, an authentication notification is sent to the second quantum secure fax machine 200 based on the second identification information.
The second quantum secure fax machine 200, upon receiving the authentication notification, transmits second identity information of the second quantum secure fax machine 200 to the management server 300.
After receiving the second identity information, the management server 300 obtains second registration identity information stored on the management server 300 based on the second identity information, and verifies whether the second identity information is matched with the second registration identity information, if not, it indicates that the current second identity information is likely to be forged, and the management server 300 terminates the fax process, that is, does not respond to the subsequent request of the second quantum secret fax machine 200 any more. If so, an authentication success notification is sent to the first quantum secure fax machine 100 based on the first identification information.
After receiving the notification of successful authentication, the first quantum secure fax machine 100 negotiates with the second quantum secure fax machine 200 through the quantum channel and the classical channel to generate a quantum key (a copy of a quantum key is generated on the first quantum secure fax machine 100 and the second quantum secure fax machine 200 respectively), encrypts the fax information by using the quantum key in the process of sending the fax to the second quantum secure fax machine 200, sends the encrypted fax information to the second quantum secure fax machine 200 through the classical channel, and the second quantum secure fax machine 200 decrypts the received encrypted fax information by using the quantum key to obtain the original fax information. The encryption algorithm may be one-time pad algorithm, national pad SM4 algorithm, AES algorithm, etc.
The quantum secret fax system is built based on a quantum secret fax machine, the quantum secret fax machine encrypts fax information by using a quantum key, the quantum key is generated based on a quantum random number, and the quantum random number is a true random number which is different from a random number used in a traditional encryption algorithm, so that the security of the quantum key is far higher than that obtained by a traditional method. Meanwhile, as the quantum key is the result of negotiation between the first quantum secret fax machine 100 and the second quantum secret fax machine 200, a key only aiming at the transmission process can be negotiated before each fax, namely, one-time encryption algorithm encryption is supported, so that the security in the fax process is further improved, and the disclosure of fax information can be effectively avoided. In addition, when the fax is started, firstly, the authentication is performed on both sides of the fax transceiver through the management server 300, and if the authentication cannot be passed, the fax process is terminated, so that the system can also effectively avoid the problem of counterfeiting or falsifying the identity of a third party for communication.
In an alternative embodiment, the communications between the first secure fax machine, the second secure fax machine, and the management server 300 may also be encrypted. For example, the public key provided by the management server 300 may be used to encrypt the information when the first secure fax machine or the second secure fax machine sends the information to the management server 300, and the received information may be decrypted by the corresponding private key on the management server 300 to further improve security.
It should be noted that, in the transmission process of the fax information through the classical channel, the management server 300 may or may not be used, and the manner of passing through the management server 300 may be used, so that the service provider can conveniently monitor the fax information or control the fax process.
Fig. 2 is a schematic diagram of a second structure of a quantum secret fax system according to an embodiment of the present invention. Referring to fig. 2, in some embodiments, a quantum key distribution relay station 400 may be further disposed on a quantum channel between the first secure fax machine and the second secure fax machine, and the first quantum secure fax machine 100 and the second quantum secure fax machine 200 are communicatively connected to the quantum key distribution relay station 400 through the quantum channel, and the quantum key distribution relay station 400 may be implemented as a device having a quantum signal transceiving function.
Such an embodiment is often used in a case where the first secure fax machine is far from the second secure fax machine and the quantum signal attenuation is large, and by providing the quantum key distribution relay station 400 as a transmission relay of the quantum signal in the process of negotiating to generate the quantum key, the transmission quality of the quantum signal can be improved. It will be appreciated that the number of quantum key distribution relay stations 400 may be one or more, as determined by the actual requirements.
In addition, the quantum key distribution relay station 400 may be independently arranged as shown in fig. 2, or may be connected with the management server 300 or even installed together, so that the management server 300 can conveniently supervise the quantum key distribution relay station 400.
Fig. 3 is a schematic structural diagram of a quantum secure fax machine according to an embodiment of the present invention, where the first secure fax machine and the second secure fax machine of the quantum secure fax system may both use the implementation in fig. 3. Referring to fig. 3, the quantum security facsimile control module 120, the photoelectric conversion module 110, and the quantum key transmitting/receiving module 130, and the photoelectric conversion module 110 and the quantum key transmitting/receiving module 130 are connected to the control module 120.
The photoelectric conversion module 110 scans and photoelectrically converts the first fax content, generates first fax information corresponding to the first fax content, and sends the first fax information to the control module 120. The first fax content here may be a document, a material, a picture, or the like. The photoelectric conversion module 110 is similar to the corresponding module of the existing facsimile machine, and is not specifically described herein.
The quantum key transceiver module 130 negotiates with the opposite-end quantum key transceiver module 130 through a quantum channel to generate a quantum key, and sends the quantum key to the control module 120. In practice, the generation of quantum keys may also involve classical channels, as will be explained in more detail later. The opposite end is called herein, for a quantum secret fax machine for transmitting fax, the quantum secret fax machine for receiving fax; for a quantum secure fax machine receiving fax, it is the quantum secure fax machine sending fax. For example, the first secure fax machine and the second secure fax machine are quantum secure fax machines that are mutually opposite. A module of the peer, such as control module 120, is referred to as the peer control module 120 when illustrated.
The control module 120 encrypts the first fax information by using the quantum key to generate first encrypted fax information, and sends the first encrypted fax information to the opposite control module 120 through a classical channel, which is a fax sending function of the quantum secret fax machine.
The control module 120 may also receive the second encrypted fax information sent by the peer control module 120 through the classical channel, and decrypt the second encrypted fax information by using the quantum key to generate second fax information, which is the fax receiving function of the quantum secure fax machine.
In the implementation, the quantum secret fax machine can have the function of transmitting fax only, the function of receiving fax only or both the functions. Obviously, if the quantum secret fax machine only has the fax sending function, the opposite end of the quantum secret fax machine at least has the fax receiving function; if the quantum secret fax machine only has the function of receiving fax, the opposite end of the quantum secret fax machine at least has the function of transmitting fax.
After the quantum secure fax machine receives the second fax information, the control module 120 may take various processing manners, for example, send the second fax information to a printer for printing (in some embodiments, the quantum secure fax machine may include a printing module, or may directly complete printing by the quantum secure fax machine), or send the second fax information to a mailbox of a user in a mail manner (a mailbox address is configured on the quantum secure fax machine in advance).
The control module 120 may be implemented by a general-purpose processor in combination with corresponding peripheral circuits, such as a CPU, a single-chip microcomputer, a DSP chip, an FPGA chip, an ASIC chip, and the like.
With continued reference to fig. 3, in one embodiment, the quantum secret fax machine further includes a quantum key server 150 connected to the control module 120, where the control module 120 obtains the quantum key from the quantum key transceiver module and then uses it directly or stores it in the quantum key server 150 for reading when needed. The quantum key server 150 can monitor and manage the saved key, and the management scope of the quantum key server can include the use condition, the use rate, the abnormal use condition and the like of the quantum key, so that the potential safety hazard of the quantum key can be timely discovered in the management process, and facsimile information disclosure is avoided.
With continued reference to fig. 3, in one embodiment, the quantum secure fax machine further includes a modem 140, where the modem 140 is connected to the control module 120, and the control module 120 may modulate the signal by the modem 140 before sending it to the classical channel, convert it to a form suitable for transmission on the classical channel, and demodulate the signal received by the control module 120 from the classical channel by the modem 140, and convert it to a form suitable for processing by the control module 120.
Further, the quantum key transceiver module 130 may include a quantum key transmitting module 132 and/or a quantum key receiving module 134, i.e. may be configured to transmit quantum signals only, or to receive quantum signals only, or may be configured to transmit quantum signals as well as to receive quantum signals. Fig. 4 is a schematic structural diagram of a quantum key transceiver module 130 according to an embodiment of the present invention. Referring to fig. 4, fig. 4 illustrates a case where the quantum key transceiving module 130 includes both the quantum key transmitting module 132 and the quantum key receiving module 134, and a case where the quantum key transceiving module 130 includes only the quantum key transmitting module 132 or the quantum key receiving module 134 is similar thereto, and will not be described in detail.
Specifically, in the process of negotiating the quantum key, the quantum key sending module 132 generates a first quantum signal, sends the first quantum signal to the opposite-end quantum key receiving module 134 through a quantum channel, and performs post-processing interaction with the opposite-end quantum key receiving module 134 through a classical channel to generate a first quantum key based on the first quantum signal.
The quantum key receiving module 134 receives the second quantum signal sent by the opposite-end quantum key sending module 132 through the quantum channel, and performs post-processing interaction with the opposite-end quantum key sending module 132 through the classical channel to generate a second quantum key based on the second quantum signal.
The first quantum key and the second quantum key are merely for convenience of distinguishing functions of the quantum key transmitting module 132 and the quantum key receiving module 134 in description, and have no other special significance.
The integrated receiving and transmitting function of the quantum key receiving module 130 can improve the security key rate of the quantum key (the number of bits of the quantum key generated in unit time is twice that of the quantum key generated during single transmission or reception), and meanwhile, the quantum key transmitting module 132 and the quantum key receiving module 134 are mutually backup, for example, even if the quantum key transmitting module 132 cannot work normally, the quantum key can still be obtained through negotiation between the quantum key receiving module 134 and the opposite-end quantum key transmitting module 132, so that the reliability of the quantum secret fax machine can be improved.
With continued reference to fig. 4, the quantum key transmission module 132 may include a first electrical module 132a, a first optical module 132b, and a first random number generator 132c. The first electrical module 132a is connected to the control module 120, the first optical module 132b, and the first random number generator 132c, respectively, and the first optical module 132b is connected to the first random number generator 132c.
The first electrical module 132a is configured to control the first optical module 132b to generate a first quantum signal and a first synchronous optical signal, control the first random number generator 132c to generate a first quantum random number, and perform post-processing interaction with the opposite quantum key receiving module 134 to generate a first quantum key and send the first quantum key to the control module 120. The first quantum random number is one of true random numbers, and generally includes two parts for selecting a coding basis and a basis vector of the first quantum signal, respectively. The post-processing interaction refers to data interaction between the first electrical module 132a and the opposite-end quantum key receiving module 134 through a classical channel, and is used for post-processing the first quantum signal, and may specifically include steps such as back-end, error correction, security enhancement, etc., after the post-processing interaction is completed, the first electrical module 132a generates the first quantum key, and meanwhile, the opposite-end quantum key receiving module 134 also generates the first quantum key. So that the quantum secret fax machine can fax with the opposite terminal by using the first quantum key.
It should be noted that the first electrical module 132a interacts with the opposite quantum key receiving module 134, and in fact interacts with the second electrical module 134a of the opposite quantum key receiving module 134, and in the same way, the second electrical module 134a interacts with the opposite quantum key transmitting module 132, and in fact interacts with the first electrical module 132a of the opposite quantum key transmitting module 132.
The first electrical module 132a may be implemented using a general-purpose processor in combination with corresponding peripheral circuitry, such as a CPU, a single-chip microcomputer, a DSP chip, an FPGA chip, an ASIC chip, or the like.
The first optical module 132b code-modulates the first quantum signal with the first quantum random number, and transmits the first quantum signal and the first synchronous optical signal to the counterpart quantum key receiving module 134.
In an alternative embodiment, the quantum key transmitting module 132 may further include a first wavelength division multiplexer 132d connected to the first optical module 132b, the first wavelength division multiplexer 132d being capable of multiplexing the first quantum signal and the first synchronous optical signal, thereby reducing the number of quantum channels required by the quantum key transmitting module 132 from two to one.
With continued reference to fig. 4, the quantum key receiving module 134 includes a second electrical module 134a, a detector module 134b, a second optical module 134d, and a second random number generator 134c. The second electrical module 134a is connected to the control module 120, the detector module 134b, and the second random number generator 134c, respectively, and the second optical module 134d is connected to the detector module 134b and the second random number generator 134c, respectively.
The second optical module 134d receives the second quantum signal sent by the opposite quantum key sending module 132, and performs demodulation measurement on the second quantum signal by using the second quantum random number generated by the second random number generator 134c, where the second quantum random number is used to randomly select a measurement base.
The detector receives the second synchronous optical signal sent by the opposite-end quantum key sending module 132, and detects the second synchronous optical signal and the second quantum signal, where the detection is a photoelectric conversion process, and various common photoelectric detectors can be used for detecting the second synchronous optical signal, and a single photon detector is needed for detecting the second quantum signal.
The second electrical module 134a is configured to control the second random number generator 134c to generate a second quantum random number, collect an output signal of the detector module 134b, and perform post-processing interaction with the peer quantum key transmission module 132 to generate a second quantum key and transmit the second quantum key to the control module 120. The post-processing interactions have been previously described and will not be repeated here.
The second electrical module 134a may be implemented by a general-purpose processor in combination with corresponding peripheral circuits, such as a CPU, a single-chip microcomputer, a DSP chip, an FPGA chip, an ASIC chip, etc.
In an alternative embodiment, the quantum key receiving module 134 may further include a second wavelength division multiplexer 134e connected to the second optical module 134d and the detector module 134b, respectively, the second wavelength division multiplexer 134e being capable of demultiplexing the second quantum signal and the second synchronous optical signal on the quantum channel and outputting the second quantum signal to the second optical module 134d and the second synchronous optical signal to the detector module 134b, thereby reducing the number of quantum channels required by the quantum key receiving module 134 from two to one.
Further, as shown in fig. 4, the first wavelength division multiplexer 132d and the second wavelength division multiplexer 134e may be cascaded together to further reduce the number of quantum channels required by the quantum key transceiver module 130 to one. In some embodiments, the first wavelength division multiplexer 132d and the second wavelength division multiplexer 134e may also be integrated into one wavelength division multiplexing device.
In summary, the quantum secret fax machine provided by the embodiment of the invention encrypts fax information based on the quantum encryption technology, supports various encryption algorithms including one-time secret, and has higher security.
It is to be understood that the above examples of the present invention are provided for clarity of illustration only and are not limiting of the embodiments of the present invention. Other variations or modifications of the above teachings will be apparent to those of ordinary skill in the art. It is not necessary here nor is it exhaustive of all embodiments. Any modification, equivalent replacement, improvement, etc. which come within the spirit and principles of the invention are desired to be protected by the following claims.

Claims (9)

1. A quantum security facsimile machine, comprising: the device comprises a control module, a photoelectric conversion module and a quantum key receiving and transmitting module;
the photoelectric conversion module and the quantum key receiving-transmitting module are connected with the control module;
the photoelectric conversion module is used for scanning first fax contents and performing photoelectric conversion, generating first fax information corresponding to the first fax contents, and sending the first fax information to the control module;
The quantum key receiving and transmitting module is used for negotiating with the opposite-end quantum key receiving and transmitting module through a quantum channel to generate a quantum key and transmitting the quantum key to the control module;
the control module is used for encrypting the first fax information by utilizing the quantum key to generate first encrypted fax information, sending the first encrypted fax information to the opposite-end control module through a classical channel, and/or receiving second encrypted fax information sent by the opposite-end control module through the classical channel, and decrypting the second encrypted fax information by utilizing the quantum key to generate second fax information;
The quantum key transceiver module includes: a quantum key transmitting module and a quantum key receiving module; the quantum key sending module and the quantum key receiving module are mutually backed up; the quantum key receiving and transmitting module is used for improving the safety key rate of the quantum key;
The quantum key sending module is used for generating a first quantum signal, sending the first quantum signal to the opposite-end quantum key receiving module through the quantum channel, and performing post-processing interaction with the opposite-end quantum key receiving module through the classical channel so as to generate a first quantum key based on the first quantum signal;
The quantum key receiving module is used for receiving a second quantum signal sent by the opposite-end quantum key sending module through the quantum channel and performing post-processing interaction with the opposite-end quantum key sending module through the classical channel so as to generate a second quantum key based on the second quantum signal.
2. The quantum secure fax machine according to claim 1, wherein said quantum key transmission module comprises: a first electrical module, a first optical module, and a first random number generator;
The first electrical module is respectively connected with the control module, the first optical module and the first random number generator, and the first optical module is connected with the first random number generator;
the first electrical module is used for controlling the first optical module to generate the first quantum signal and a first synchronous optical signal, controlling the first random number generator to generate a first quantum random number, and performing post-processing interaction with the opposite-end quantum key receiving module to generate the first quantum key and sending the first quantum key to the control module;
The first optical module is configured to code-modulate the first quantum signal with the first quantum random number, and send the first quantum signal and the first synchronous optical signal to the opposite-end quantum key receiving module.
3. The quantum secure fax machine according to claim 2, wherein said quantum key transmission module further comprises: the first wavelength division multiplexer is connected with the first optical module and is used for multiplexing the first quantum signal and the first synchronous optical signal.
4. The quantum secure fax machine according to claim 1, wherein said quantum key receiving module comprises: a second electrical module, a detector module, a second optical module, and a second random number generator;
The second electrical module is respectively connected with the control module, the detector module and the second random number generator, and the second optical module is respectively connected with the detector module and the second random number generator;
The second optical module is used for receiving the second quantum signal sent by the opposite-end quantum key sending module and carrying out demodulation measurement on the second quantum signal by utilizing a second quantum random number generated by the second random number generator;
The detector module is used for receiving the second synchronous optical signal sent by the opposite-end quantum key sending module and detecting the second synchronous optical signal and the second quantum signal;
The second electrical module is used for controlling the second random number generator to generate the second quantum random number, collecting the output signal of the detector module, and performing post-processing interaction with the opposite-end quantum key sending module to generate the second quantum key and send the second quantum key to the control module.
5. The quantum secure fax machine according to claim 4, wherein said quantum key receiving module further comprises: the second wavelength division multiplexer is respectively connected with the second optical module and the detector module, and is used for demultiplexing the second quantum signal and the second synchronous optical signal, outputting the second quantum signal to the second optical module and outputting the second synchronous optical signal to the detector module.
6. The quantum secure fax machine according to any of claims 1-5, further comprising: the quantum key server is connected with the control module, and the control module is also used for sending the quantum key to the quantum key server for storage and management and reading from the quantum key server when the quantum key is required to be used.
7. The quantum secure fax machine according to any of claims 1-5, further comprising: and the modem is connected with the control module and is used for modulating signals sent by the control module to the classical channel and demodulating signals received by the control module from the classical channel.
8. A quantum secure facsimile system, comprising: a management server, a first quantum secure fax machine, and a second quantum secure fax machine;
The first quantum secret fax machine and the second quantum secret fax machine are both in communication connection with the management server through classical channels, and the first quantum secret fax machine and the second quantum secret fax machine are also in communication connection through quantum channels;
The first quantum secret fax machine is used for sending the first identification information, the first identification information and the second identification information of the second quantum secret fax machine to the management server when the first quantum secret fax machine needs to send a fax to the second quantum secret fax machine;
The management server is used for obtaining first registration identity information of the first quantum secret fax machine stored on the management server based on the first identification information, verifying whether the first identity information is matched with the first registration identity information, and sending an identity verification notification to the second quantum secret fax machine based on the second identification information if the first registration identity information is matched with the first registration identity information;
the second quantum secret fax machine is used for sending second identity information of the second quantum secret fax machine to the management server after receiving the identity verification notification;
the management server is further configured to obtain second registration identity information of the second quantum secret fax machine stored on the management server based on the second identification information, and verify whether the second identity information is matched with the second registration identity information, and if so, send an identity verification success notification to the first quantum secret fax machine based on the first identification information;
The first quantum secret fax machine is also used for negotiating with the second quantum secret fax machine to generate a quantum key after receiving the authentication success notification, and transmitting faxes to the second quantum secret fax machine by utilizing the quantum key.
9. The quantum secure fax system according to claim 8, further comprising: the quantum key distribution relay station is arranged on the quantum channel, and the first quantum secret fax machine and the second quantum secret fax machine are both in communication connection with the quantum key distribution relay station through the quantum channel;
the quantum key distribution relay station is used for being used as a transmission relay of quantum signals in the process of negotiating and generating the quantum key by the first quantum secret fax machine and the second quantum secret fax machine.
CN201810784009.4A 2018-07-17 2018-07-17 Quantum security fax machine and quantum security fax system Active CN108650090B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810784009.4A CN108650090B (en) 2018-07-17 2018-07-17 Quantum security fax machine and quantum security fax system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810784009.4A CN108650090B (en) 2018-07-17 2018-07-17 Quantum security fax machine and quantum security fax system

Publications (2)

Publication Number Publication Date
CN108650090A CN108650090A (en) 2018-10-12
CN108650090B true CN108650090B (en) 2024-05-03

Family

ID=63751257

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810784009.4A Active CN108650090B (en) 2018-07-17 2018-07-17 Quantum security fax machine and quantum security fax system

Country Status (1)

Country Link
CN (1) CN108650090B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111930325B (en) * 2020-08-13 2022-09-23 长春大学 Safe printing method based on quantum key
CN112332987B (en) * 2021-01-06 2021-03-23 成都信息工程大学 Cloud quantum privacy query method based on user agent
CN113111372B (en) * 2021-05-06 2023-09-22 安徽华典大数据科技有限公司 Terminal data cloud loading system and method based on quantum key encryption

Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101051967A (en) * 2006-04-04 2007-10-10 华为技术有限公司 Communication system and its method for user's device in user's network
CN101388766A (en) * 2008-04-30 2009-03-18 北京大秦兴宇电子有限公司 Data ciphering and deciphering module and use thereof
CN202268897U (en) * 2011-09-02 2012-06-06 天津光电通信技术有限公司 Fax data encryption system based on USB interface
CN103840905A (en) * 2014-02-20 2014-06-04 安徽问天量子科技股份有限公司 Full optical fiber communication system and method of QKD system
CN104518866A (en) * 2013-09-30 2015-04-15 安徽量子通信技术有限公司 QKD (quantum key distribution) terminal and system
CN104734846A (en) * 2015-04-06 2015-06-24 安徽问天量子科技股份有限公司 Quantum cryptographic key distribution control device and method
CN106850185A (en) * 2016-12-28 2017-06-13 清华大学 A kind of method and system for being encrypted communication
CN107135072A (en) * 2017-06-05 2017-09-05 三峡大学 A kind of wireless sensor network system based on quantum cryptography
CN107276753A (en) * 2017-06-27 2017-10-20 浙江九州量子信息技术股份有限公司 The quantum key distribution system and method for a kind of channel multiplexing
CN107786334A (en) * 2017-12-15 2018-03-09 浙江科易理想量子信息技术有限公司 A kind of quantum key distribution all-in-one machine realization method
CN107947930A (en) * 2017-12-29 2018-04-20 中南大学 The modulation compensated system of continuous variable quantum key distribution and its implementation
CN108259167A (en) * 2017-12-28 2018-07-06 国家电网公司 A kind of fiber optic quantum key distribution system and control method
CN208353356U (en) * 2018-07-17 2019-01-08 江苏亨通问天量子信息研究院有限公司 Quantum secure facsimile machine and quantum secure fasystem

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7246240B2 (en) * 2001-04-26 2007-07-17 Massachusetts Institute Of Technology Quantum digital signatures
TW201201556A (en) * 2010-06-29 2012-01-01 Chunghwa Telecom Co Ltd Construction structure of quantum encryption service network

Patent Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101051967A (en) * 2006-04-04 2007-10-10 华为技术有限公司 Communication system and its method for user's device in user's network
CN101388766A (en) * 2008-04-30 2009-03-18 北京大秦兴宇电子有限公司 Data ciphering and deciphering module and use thereof
CN202268897U (en) * 2011-09-02 2012-06-06 天津光电通信技术有限公司 Fax data encryption system based on USB interface
CN104518866A (en) * 2013-09-30 2015-04-15 安徽量子通信技术有限公司 QKD (quantum key distribution) terminal and system
CN103840905A (en) * 2014-02-20 2014-06-04 安徽问天量子科技股份有限公司 Full optical fiber communication system and method of QKD system
CN104734846A (en) * 2015-04-06 2015-06-24 安徽问天量子科技股份有限公司 Quantum cryptographic key distribution control device and method
CN106850185A (en) * 2016-12-28 2017-06-13 清华大学 A kind of method and system for being encrypted communication
CN107135072A (en) * 2017-06-05 2017-09-05 三峡大学 A kind of wireless sensor network system based on quantum cryptography
CN107276753A (en) * 2017-06-27 2017-10-20 浙江九州量子信息技术股份有限公司 The quantum key distribution system and method for a kind of channel multiplexing
CN107786334A (en) * 2017-12-15 2018-03-09 浙江科易理想量子信息技术有限公司 A kind of quantum key distribution all-in-one machine realization method
CN108259167A (en) * 2017-12-28 2018-07-06 国家电网公司 A kind of fiber optic quantum key distribution system and control method
CN107947930A (en) * 2017-12-29 2018-04-20 中南大学 The modulation compensated system of continuous variable quantum key distribution and its implementation
CN208353356U (en) * 2018-07-17 2019-01-08 江苏亨通问天量子信息研究院有限公司 Quantum secure facsimile machine and quantum secure fasystem

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
Practical Considerations on Quantum Key Distribution (QKD);Wajdi Al-Khateeb等;2013 International Conference on Advanced Computer Science Applications and Technologies;20140619;全文 *
一种新传真加密方案研究与实现;王春红;万珍珠;谢聪;;舰船电子工程;20100220(02);全文 *
基于QKD的组密钥服务协议研究;栾欣;郭义喜;王帅;;中原工学院学报;20141225(06);全文 *
量子保密通信系统及交换技术研究;郝辉;中国优秀硕士学位论文全文数据库;20140115;全文 *

Also Published As

Publication number Publication date
CN108650090A (en) 2018-10-12

Similar Documents

Publication Publication Date Title
CN108574569B (en) Authentication method and authentication device based on quantum key
US6748529B2 (en) Method and apparatus for effecting secure document format conversion
CN108650090B (en) Quantum security fax machine and quantum security fax system
CN111079128A (en) Data processing method and device, electronic equipment and storage medium
JPH03214834A (en) Multi-medium network system
CN101742508A (en) System and method for transmitting files between WAPI terminal and application server
CN101335627B (en) Network facsimile system and using method thereof
CN113872762A (en) Quantum encryption communication system based on power distribution terminal equipment and use method thereof
CN102340455A (en) Transmission method of E-mail encrypted by fingerprint data and receiving method thereof
CN100568801C (en) By method and the corresponding intrument of exchange of encryption information through the network security transmission data
US8290160B1 (en) Method and apparatus for secured facsimile transmission
US20040111601A1 (en) System and method for the exchange of cryptographic keys
CN102231883A (en) Teledata transmission content encrypting system and method based on RFID (radio frequency identification)-SIM (subscriber identity module) card
US20040165723A1 (en) Image processing apparatus, image processing system, and image information transmission method
JPH1141280A (en) Communication system, vpn repeater and recording medium
CN110380848A (en) Sensor node and mobile sink node safety communicating method are fixed in underwater sound communication
CN208353356U (en) Quantum secure facsimile machine and quantum secure fasystem
CN110061978A (en) Binary Cooperative Security client framework
US20070070399A1 (en) FAX communication system
JP2003179589A (en) Data communication equipment, data communication system, data communication program and program storage medium storing data communication program
CN201479154U (en) BGP routing system and apparatus
EA016739B1 (en) Method and apparatus for secured facsimile transmission
JP2003087232A (en) Method for detecting copied terminal
JP4034946B2 (en) COMMUNICATION SYSTEM, COMMUNICATION METHOD, AND RECORDING MEDIUM
CN113572755A (en) Intelligent media terminal data secure transmission method

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant