CN112311542A - Quantum secret communication system and method meeting power business isolation requirement - Google Patents

Quantum secret communication system and method meeting power business isolation requirement Download PDF

Info

Publication number
CN112311542A
CN112311542A CN202011283514.4A CN202011283514A CN112311542A CN 112311542 A CN112311542 A CN 112311542A CN 202011283514 A CN202011283514 A CN 202011283514A CN 112311542 A CN112311542 A CN 112311542A
Authority
CN
China
Prior art keywords
quantum
quantum key
electric power
power service
vpn
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202011283514.4A
Other languages
Chinese (zh)
Other versions
CN112311542B (en
Inventor
周晓东
王晟
黄泽文
冯宝
卞宇翔
胡倩倩
陆兆頔
李源灏
贾玮
张天兵
张强强
马亚妮
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nanjing Nanrui Guodun Quantum Technology Co ltd
State Grid Corp of China SGCC
NARI Group Corp
Nari Information and Communication Technology Co
Information and Telecommunication Branch of State Grid Fujian Electric Power Co Ltd
Original Assignee
Nanjing Nanrui Guodun Quantum Technology Co ltd
State Grid Corp of China SGCC
NARI Group Corp
Nari Information and Communication Technology Co
Information and Telecommunication Branch of State Grid Fujian Electric Power Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nanjing Nanrui Guodun Quantum Technology Co ltd, State Grid Corp of China SGCC, NARI Group Corp, Nari Information and Communication Technology Co, Information and Telecommunication Branch of State Grid Fujian Electric Power Co Ltd filed Critical Nanjing Nanrui Guodun Quantum Technology Co ltd
Priority to CN202011283514.4A priority Critical patent/CN112311542B/en
Publication of CN112311542A publication Critical patent/CN112311542A/en
Application granted granted Critical
Publication of CN112311542B publication Critical patent/CN112311542B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0852Quantum cryptography
    • H04L9/0855Quantum cryptography involving additional nodes, e.g. quantum relays, repeaters, intermediate nodes or remote nodes
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y04INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
    • Y04SSYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
    • Y04S40/00Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
    • Y04S40/20Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

The invention discloses a quantum secret communication system and method meeting the isolation requirement of a power service. The quantum key distribution layer realizes remote distribution of quantum keys; the quantum key management and control layer realizes the full life cycle management and control of the quantum key, and adopts time division multiplexing and independent storage technology to realize the physical isolation of quantum keys in different security large areas; the power business application layer realizes the use of quantum keys. The invention realizes the physical isolation of quantum keys among different safety areas of electric power, provides the quantum keys for services of different safety areas based on a quantum secret communication network, and greatly reduces the network construction and operation and maintenance cost.

Description

Quantum secret communication system and method meeting power business isolation requirement
Technical Field
The invention belongs to the technical field of quantum privacy, and particularly relates to a quantum privacy communication system meeting the power business isolation requirement, and a quantum privacy communication method meeting the power business isolation requirement.
Background
The power system is related to the national civilization and has extremely high requirements on information safety. Therefore, a safety protection strategy of 'safety partition, network exclusive, transverse isolation and longitudinal authentication' is established for the electric power secondary system, and electric power services are correspondingly divided into production control services located in an I/II area (a high-safety-level large area) and management information services located in a III/IV area (a low-safety-level large area).
When the power communication network simultaneously bears the power services of two safe large areas, the physical isolation requirement needs to be met. Currently, when the same communication network is adopted to carry different safety large-area services, physical isolation is mainly realized through different fiber cores, wavelengths or time slots.
However, corresponding to quantum key distribution, two quantum secret communication networks are constructed mainly by independently deploying quantum secret communication devices in different security areas so as to meet the service isolation requirements of different security areas, and the problems of high construction cost, high operation and maintenance difficulty and the like exist.
Disclosure of Invention
The invention aims to overcome the defects in the prior art, provides a quantum secret communication system and method meeting the power business isolation requirement, provides quantum keys for different safety large-area businesses based on a quantum secret communication network, and greatly reduces the network construction and operation and maintenance cost.
In order to solve the above technical problem, the present invention provides a quantum secure communication system satisfying the power service isolation requirement, comprising:
the system comprises at least one pair of quantum key distribution terminals deployed on a quantum key distribution layer, at least one pair of quantum key management and control terminals deployed on a quantum key management and control layer, and at least one pair of electric power dedicated quantum VPN and electric power service terminals deployed on an electric power service application layer;
the power service terminals include two types: the power grid production control service is positioned in the I/II area, and the power grid management information service is positioned in the III/IV area; correspondingly, the power-dedicated quantum VPN also includes two types: the system comprises a quantum VPN (virtual private network) special for electric power, which supports an encryption algorithm special for electric power dispatching and is interconnected with an electric power service terminal in an I/II area; and the special quantum VPN for electric power, which supports the national secret standard IPSec or SSL protocol and is interconnected with the III/IV area electric power service terminal;
the quantum key distribution terminal is correspondingly interconnected with the quantum key control terminal one by one, the quantum key control terminal is interconnected with the electric power special quantum VPN,
the quantum key distribution terminal is used for remote distribution of quantum keys;
the quantum key management and control terminal is used for controlling the interconnected quantum key distribution terminals to carry out quantum key remote distribution by using a time division multiplexing technology, and managing and physically isolating and storing the quantum keys received from the quantum key distribution terminals; the quantum key comprises an I/II region quantum key and a III/IV region quantum key;
the electric power service terminals are used for sending the borne electric power service to the interconnected electric power special quantum VPN, and the two electric power service terminals belonging to the same security zone encrypt and transmit the electric power service through the electric power special quantum VPN;
the quantum VPN is used for acquiring quantum keys of corresponding security areas from the quantum key control terminal according to different security areas to which the interconnected power service terminals belong, and encrypting and transmitting the power service by adopting the quantum keys.
Furthermore, the quantum key management and control terminal comprises two physically isolated independent storage devices which are respectively used for storing the I/II area quantum key and the III/IV area quantum key.
Furthermore, the quantum key management and control terminal is respectively connected with the I/II area electric power special quantum VPN and the III/IV area electric power special quantum VPN through different ports.
Correspondingly, the quantum secure communication method for meeting the power service isolation requirement according to the system comprises the following steps:
the quantum key management and control terminal controls the interconnected quantum key distribution terminals to distribute the quantum keys by adopting a time division multiplexing technology; the quantum key comprises an I/II region quantum key and a III/IV region quantum key;
the quantum key management and control terminal manages and physically isolates and stores the quantum key;
the quantum VPN special for electric power obtains the quantum key of the corresponding security domain from the quantum key management and control terminal according to the different security domains to which the interconnected electric power service terminals belong, and encrypts and transmits the electric power service obtained from the interconnected electric power service terminals by adopting the quantum key.
Further, the quantum key management and control terminal controls the quantum key distribution terminal to distribute the quantum key by using a time division multiplexing technology, and the method includes the following steps:
a quantum key distribution period is divided into two time slots, wherein one time slot is used for distributing the I/II area quantum key, and the other time slot is used for distributing the III/IV area quantum key.
Further, when the quantum key distribution terminal distributes the quantum key remotely, the same ID is used for identifying the same quantum key and then the same ID is sent to the interconnected quantum key management and control terminals.
Further, the quantum key management and control terminal performs physical isolation storage on the quantum key, including:
and the quantum key distribution terminal respectively stores the I/II area quantum key and the III/IV area quantum key in two physically isolated independent storage devices in corresponding time slots.
Further, the acquiring, by the quantum VPN according to the different security domains to which the power service terminal belongs, the quantum key of the corresponding security domain from the quantum key management and control terminal includes:
the method comprises the steps that a quantum VPN special for electric power corresponding to an electric power service terminal in an I/II area obtains a quantum key from an independent storage device of the quantum key in the I/II area of a quantum key control terminal;
and the quantum VPN special for the electric power corresponding to the electric power service terminal in the III/IV area acquires the quantum key from the independent storage device of the quantum key in the III/IV area of the quantum key control terminal.
Further, the quantum VPN for electric power obtains the quantum key of the corresponding security domain from the quantum key management and control terminal according to the different security domains to which the electric power service terminal belongs, and further includes: and the quantum VPN special for electric power corresponding to different electric power service terminals in the same security zone acquires the quantum key from the quantum key independent storage device in the I/II zone or the quantum key independent storage device in the III/IV zone of the corresponding quantum key control terminal in a logic isolation mode.
Further, the quantum VPN for electric power uses a quantum key to encrypt and transmit electric power traffic, and includes:
the method comprises the steps that a quantum VPN special for electric power corresponding to an electric power service terminal in an I/II area carries out electric power service encryption transmission in a one-time pad mode based on a quantum key;
and the quantum VPN special for the electric power corresponding to the electric power service terminal in the III/IV area performs electric power service encryption transmission by adopting a one-time pad or one-time pad mode based on a quantum key.
Compared with the prior art, the invention has the following beneficial effects:
1) a quantum secret communication network is used for providing quantum keys for different security large-area services, and the network construction and operation and maintenance costs are greatly reduced.
2) The physical isolation of the quantum key in the security large area is realized by adopting the time division multiplexing and independent storage technology, the physical isolation of the power service in the I/II area and the power service in the III/IV area is ensured, and the safety protection requirement of a power system is met.
3) The method adopts a one-time pad mode to carry out service encryption transmission on the I/II area power service, and adopts a one-time pad mode or a one-call pad mode to carry out service encryption transmission on the III/IV area power service according to the service importance degree, thereby fully improving the safety of the power service.
Drawings
In order that the present disclosure may be more readily and clearly understood, reference is now made to the following detailed description of the present disclosure taken in conjunction with the accompanying drawings, in which:
FIG. 1 is a schematic diagram of the system of the present invention.
Detailed Description
The invention is further described below with reference to the accompanying drawings. The following examples are only for illustrating the technical solutions of the present invention more clearly, and the protection scope of the present invention is not limited thereby.
Aiming at the problems that in the current power system, quantum secret communication equipment is independently deployed in different security areas, two quantum secret communication networks are built to meet the service isolation requirements of different security areas, the building cost is high, the operation and maintenance difficulty is high and the like, the invention aims to provide the quantum secret communication system and the method meeting the power service isolation requirements.
The quantum secret communication system meeting the power service isolation requirement comprises a quantum key distribution terminal and a switch device which are deployed in a quantum key distribution layer, a quantum key management and control terminal which is deployed in a quantum key management and control layer, and a power-dedicated quantum VPN and a power service terminal which are deployed in a power service application layer, as shown in an attached drawing 1.
(1) Quantum key distribution layer
The system at least comprises a pair of quantum key distribution terminals connected through communication media such as optical fibers and wireless, the quantum key distribution terminals are respectively controlled by a pair of quantum key control terminals, each quantum key distribution terminal is networked directly or through an optical quantum switch, the remote distribution of quantum keys can be realized by adopting networking modes such as point-to-point, point-to-multipoint, multipoint-multipoint, remote relay and the like, and the quantum keys are transmitted to the corresponding quantum key control terminals.
(2) Quantum key management and control layer
The system at least comprises a pair of quantum key management and control terminals, a quantum key distribution layer (specifically a pair of quantum key distribution terminals) is connected below the pair of quantum key management and control terminals, and the quantum key management and control terminals are used for controlling the distribution of quantum keys; the upper connection power business application layer is used for controlling the quantum key to be used; the method realizes key management processes of storage, updating, destruction and the like of the quantum key, thereby realizing the full life cycle management of the quantum key.
Specifically, a time division multiplexing technology is adopted when quantum key distribution is controlled, one quantum key distribution cycle is divided into two time slots, one time slot is used for distributing I/II region quantum keys, and the other time slot is used for distributing III/IV region quantum keys;
further, an independent storage device is adopted, and the I/II area quantum key and the III/IV area quantum key are stored in the physically isolated independent storage device in the corresponding time slot, so that the physical isolation of the quantum keys of different security areas is realized;
furthermore, the quantum key management and control terminal is respectively connected with the I/II area electric power special quantum VPN and the III/IV area electric power special quantum VPN through different ports.
(3) Power business application layer
The system at least comprises a pair of electric power special quantum VPN and an electric power service terminal which are connected with a quantum key management and control terminal. The power service terminal specifically includes two types: firstly, the power grid production control type service is positioned in an I/II area; secondly, the power grid management information service in the III/IV area; the corresponding quantum VPN for electric power specifically includes two types: the system comprises a quantum VPN (virtual private network) special for electric power, an encryption algorithm special for electric power dispatching and an interconnection with an electric power service terminal in an I/II area; and the quantum VPN special for electric power supports the national secret standard IPSec or SSL protocol and is interconnected with the III/IV area electric power service terminal.
When two power service terminals in the same security zone transmit power services, a tunnel is established between two power-dedicated VPNs interconnected with the power service terminals, and the power services encrypted by quantum keys are transmitted. The quantum key is derived from a quantum key management and control terminal/layer; the power service originates from a power service terminal.
Specifically, the power grid production control service in the I/II area acquires a quantum key from an I/II area quantum key independent storage device of a quantum key control terminal through a power-dedicated quantum VPN; and the power grid management information service of the III/IV area acquires the quantum key from the III/IV area quantum key independent storage device of the quantum key control terminal through the electric power special quantum VPN.
Furthermore, a one-time pad mode is adopted for carrying out service encryption transmission on the I/II area power service, and a one-time pad mode or a one-time pad mode can be adopted for carrying out service encryption transmission on the III/IV area power service according to the service importance degree. Wherein, the 'one time pad' mode satisfies three conditions: firstly, the quantum key and the service data are equal in length; secondly, a quantum key is randomly generated; thirdly, the quantum key is destroyed after being used once; the one-word one-secret mode meets three conditions: first, a session uses a set of quantum keys; secondly, the quantum key adopts a key expansion algorithm to reach the same length as the service data under the condition of ensuring the randomness; and thirdly, after the session is ended, the quantum key is destroyed.
The quantum secret communication method meeting the power business isolation requirement based on the system comprises the following steps:
step 1: quantum key distribution control process
The quantum key management and control terminal adopts a time division multiplexing technology to control the quantum key distribution terminal, and divides a quantum key distribution period into two time slots, wherein one time slot is used for distributing the I/II area quantum key, and the other time slot is used for distributing the III/IV area quantum key.
Step 2: quantum key distribution process
The quantum key distribution terminal receives a control instruction of the quantum key management and control terminal, remote distribution of the quantum key is achieved based on a quantum secret communication technology, and the same quantum key is identified by the same ID and then sent to the corresponding quantum key management and control terminal for storage.
And step 3: quantum key storage procedure
The quantum key management and control terminal adopts an independent storage device, and stores the I/II area quantum key and the III/IV area quantum key in two physically isolated independent storage devices in corresponding time slots, so that physical isolation of quantum keys in different security areas is realized.
And 4, step 4: and (4) repeating the steps 1-3 to realize the remote distribution and storage of the quantum key.
And 5: quantum key usage process
(1) I/II area power service encryption transmission
And the power service terminal in the I/II area acquires the quantum key from the I/II area quantum key independent storage device of the quantum key control terminal through the interconnected power special quantum VPN supporting the power dispatching special encryption algorithm, and performs power service encryption transmission by adopting a one-time pad mode. For different electric power professional quantum VPNs in the I/II area, the quantum key can be acquired from the I/II area quantum key independent storage device of the corresponding quantum key management and control terminal in a logic isolation mode.
(2) I/II area power service encryption transmission
And the power service terminal in the III/IV area acquires the quantum key from the independent storage device of the quantum key in the III/IV area of the quantum key control terminal through the interconnected special power quantum VPN supporting the national security standard IPSec or SSL protocol, and performs service encryption transmission by adopting a one-time pad mode or a one-by-one pad mode. The one-time pad mode is adopted for services with small service data volume and high importance level, and the one-time pad mode is adopted for services with large service data volume and low importance level. For different power professional quantum VPNs in the III/IV area, the quantum key can be acquired from the III/IV area quantum key independent storage device of the corresponding quantum key management and control terminal in a logic isolation mode.
The invention realizes the physical isolation of quantum keys in different security areas by utilizing time division multiplexing and independent storage technologies, provides the quantum keys for services in different security areas based on one quantum secret communication network, and greatly reduces the network construction and operation and maintenance costs.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The above description is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, several modifications and variations can be made without departing from the technical principle of the present invention, and these modifications and variations should also be regarded as the protection scope of the present invention.

Claims (10)

1. A quantum secure communication system meeting the isolation requirement of power services, comprising:
the system comprises at least one pair of quantum key distribution terminals deployed on a quantum key distribution layer, at least one pair of quantum key management and control terminals deployed on a quantum key management and control layer, and at least one pair of electric power dedicated quantum VPN and electric power service terminals deployed on an electric power service application layer;
the power service terminals include two types: the power grid production control service is positioned in the I/II area, and the power grid management information service is positioned in the III/IV area; correspondingly, the power-dedicated quantum VPN also includes two types: the system comprises a quantum VPN (virtual private network) special for electric power, which supports an encryption algorithm special for electric power dispatching and is interconnected with an electric power service terminal in an I/II area; and the special quantum VPN for electric power, which supports the national secret standard IPSec or SSL protocol and is interconnected with the III/IV area electric power service terminal;
the quantum key distribution terminal is correspondingly interconnected with the quantum key control terminal one by one, the quantum key control terminal is interconnected with the electric power special quantum VPN,
the quantum key distribution terminal is used for remote distribution of quantum keys;
the quantum key management and control terminal is used for controlling the interconnected quantum key distribution terminals to distribute the quantum keys by using a time division multiplexing technology, and managing and physically isolating and storing the quantum keys received from the quantum key distribution terminals; the quantum key comprises an I/II region quantum key and a III/IV region quantum key;
the electric power service terminals are used for sending the borne electric power service to the interconnected electric power special quantum VPN, and the two electric power service terminals belonging to the same security zone encrypt and transmit the electric power service through the electric power special quantum VPN;
the quantum VPN is used for acquiring quantum keys of corresponding security areas from the quantum key control terminal according to different security areas to which the interconnected power service terminals belong, and encrypting and transmitting the power service by adopting the quantum keys.
2. The quantum secure communication system meeting the isolation requirement of the power service as claimed in claim 1, wherein the quantum key management and control terminal comprises two physically isolated independent storage devices for storing the I/II quantum key and the III/IV quantum key, respectively.
3. The quantum secure communication system meeting the power service isolation requirement of claim 1, wherein the quantum key management and control terminal is connected with the I/II region power dedicated quantum VPN and the III/IV region power dedicated quantum VPN through different ports.
4. A quantum secure communication method for meeting the isolation requirement of power service according to any one of the systems of claims 1-3, comprising:
the quantum key management and control terminal controls the interconnected quantum key distribution terminals to remotely distribute the quantum keys by adopting a time division multiplexing technology; the quantum key comprises an I/II region quantum key and a III/IV region quantum key;
the quantum key management and control terminal manages and physically isolates and stores the quantum key;
the quantum VPN special for electric power obtains the quantum key of the corresponding security domain from the quantum key management and control terminal according to the different security domains to which the interconnected electric power service terminals belong, and encrypts and transmits the electric power service obtained from the interconnected electric power service terminals by adopting the quantum key.
5. The quantum secure communication method meeting the power service isolation requirement of claim 4, wherein the quantum key management and control terminal controls the quantum key distribution terminal to remotely distribute the quantum key by adopting a time division multiplexing technology, and the method comprises the following steps:
a quantum key distribution period is divided into two time slots, wherein one time slot is used for distributing the I/II area quantum key, and the other time slot is used for distributing the III/IV area quantum key.
6. The quantum secure communication method meeting the power business isolation requirement of claim 4, wherein when the quantum key distribution terminal performs remote distribution of the quantum key, the same quantum key is identified by the same ID and then sent to the interconnected quantum key management and control terminals.
7. The quantum secure communication method meeting the isolation requirement of the power service according to claim 5, wherein the quantum key management and control terminal performs physical isolation storage on the quantum key, and comprises:
and the quantum key distribution terminal respectively stores the I/II area quantum key and the III/IV area quantum key in two physically isolated independent storage devices in corresponding time slots.
8. The quantum secure communication method meeting the power service isolation requirement of claim 7, wherein the power-dedicated quantum VPN acquires the quantum key of the corresponding security domain from the quantum key management and control terminal according to the different security domains to which the power service terminal belongs, and the method comprises:
the method comprises the steps that a quantum VPN special for electric power corresponding to an electric power service terminal in an I/II area obtains a quantum key from an independent storage device of the quantum key in the I/II area of a quantum key control terminal;
and the quantum VPN special for the electric power corresponding to the electric power service terminal in the III/IV area acquires the quantum key from the independent storage device of the quantum key in the III/IV area of the quantum key control terminal.
9. The quantum secure communication method meeting the power service isolation requirement of claim 8, wherein the power-dedicated quantum VPN acquires the quantum key of the corresponding security domain from the quantum key management and control terminal according to the different security domains to which the power service terminal belongs, further comprising: and the quantum VPN special for electric power corresponding to different electric power service terminals in the same security zone acquires the quantum key from the quantum key independent storage device in the I/II zone or the quantum key independent storage device in the III/IV zone of the corresponding quantum key control terminal in a logic isolation mode.
10. The quantum secure communication method for meeting the isolation requirement of the power service as claimed in claim 9, wherein the power-dedicated quantum VPN uses a quantum key to perform encrypted transmission on the power service, and comprises:
the method comprises the steps that a quantum VPN special for electric power corresponding to an electric power service terminal in an I/II area carries out electric power service encryption transmission in a one-time pad mode based on a quantum key;
and the quantum VPN special for the electric power corresponding to the electric power service terminal in the III/IV area performs electric power service encryption transmission by adopting a one-time pad or one-time pad mode based on a quantum key.
CN202011283514.4A 2020-11-17 2020-11-17 Quantum secret communication system and method for meeting electric power business isolation requirement Active CN112311542B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011283514.4A CN112311542B (en) 2020-11-17 2020-11-17 Quantum secret communication system and method for meeting electric power business isolation requirement

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011283514.4A CN112311542B (en) 2020-11-17 2020-11-17 Quantum secret communication system and method for meeting electric power business isolation requirement

Publications (2)

Publication Number Publication Date
CN112311542A true CN112311542A (en) 2021-02-02
CN112311542B CN112311542B (en) 2023-06-20

Family

ID=74335820

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011283514.4A Active CN112311542B (en) 2020-11-17 2020-11-17 Quantum secret communication system and method for meeting electric power business isolation requirement

Country Status (1)

Country Link
CN (1) CN112311542B (en)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090279698A1 (en) * 2006-07-03 2009-11-12 Austrian Research Centers Gmbh-Arc Hub Device for a Network Comprising Quantum Cryptographic Connections and Node Module for Said Hub Device
US20100136943A1 (en) * 2008-12-01 2010-06-03 At&T Mobility Ii Llc Content management for wireless digital media frames
US20180109377A1 (en) * 2016-10-14 2018-04-19 Alibaba Group Holding Limited Method and system for data security based on quantum communication and trusted computing
CN109150527A (en) * 2018-11-02 2019-01-04 国家电网有限公司 A kind of switched telephone network quantum cryptography system and encryption communication method
CN111756530A (en) * 2019-03-28 2020-10-09 广东国盾量子科技有限公司 Quantum service mobile engine system, network architecture and related equipment
CN111934784A (en) * 2020-06-22 2020-11-13 南京南瑞信息通信科技有限公司 Satellite-ground integrated quantum key distribution system suitable for power system

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090279698A1 (en) * 2006-07-03 2009-11-12 Austrian Research Centers Gmbh-Arc Hub Device for a Network Comprising Quantum Cryptographic Connections and Node Module for Said Hub Device
US20100136943A1 (en) * 2008-12-01 2010-06-03 At&T Mobility Ii Llc Content management for wireless digital media frames
US20180109377A1 (en) * 2016-10-14 2018-04-19 Alibaba Group Holding Limited Method and system for data security based on quantum communication and trusted computing
CN109150527A (en) * 2018-11-02 2019-01-04 国家电网有限公司 A kind of switched telephone network quantum cryptography system and encryption communication method
CN111756530A (en) * 2019-03-28 2020-10-09 广东国盾量子科技有限公司 Quantum service mobile engine system, network architecture and related equipment
CN111934784A (en) * 2020-06-22 2020-11-13 南京南瑞信息通信科技有限公司 Satellite-ground integrated quantum key distribution system suitable for power system

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
XUEZHI HONG 等: "Selectively Providing Virtual Private Network (VPN) Services in TDM-PONs with Manchester Coding", OSA/ CLEO 2011 *
贾耕涛;倪玮栋;吴佳伟;卞宇翔;: "面向能源互联网的电力量子保密通信关键技术研究及应用", 电力信息与通信技术 *

Also Published As

Publication number Publication date
CN112311542B (en) 2023-06-20

Similar Documents

Publication Publication Date Title
CN109412794B (en) Quantum key automatic charging method and system suitable for power business
CN110581763B (en) Quantum key service block chain network system
CN103475464B (en) A kind of power special quantum encryption gateway system
CN109842485B (en) Centralized quantum key service network system
CN102142958B (en) Communication system and communication device
CN101420686B (en) Industrial wireless network security communication implementation method based on cipher key
CN104780069B (en) A kind of key-course towards SDN and data Layer communication port self-configuration method and its system
CN101420303B (en) Communication method for audio data and apparatus thereof
CN103491531A (en) Method for using quantum keys to improve safety of electric power information transmission in power system WiMAX wireless communication network
WO2023082599A1 (en) Blockchain network security communication method based on quantum key
CN110430053B (en) Quantum key distribution method, device and system
CN106411715B (en) A kind of security instant communication method and system based on cloud
CN110808834B (en) Quantum key distribution method and quantum key distribution system
CN115632779B (en) Quantum encryption communication method and system based on power distribution network
CN109428665A (en) Wavelength-division multiplex sending device, receiving device, trunking and Transmission system
CN109842442B (en) Quantum key service method taking airport as regional center
CN113207121A (en) Key management method and system for intelligent power distribution network communication system
CN101431453B (en) Method for implementing secret communication between communication terminal and wireless access point
CN103888940A (en) Multi-level encryption and authentication type WIA-PA network handheld device communication method
CN110417706B (en) Switch-based secure communication method
CN101431455B (en) Method for implementing secret communication of wireless local area network
KR101359789B1 (en) System and method for security of scada communication network
CN101431409B (en) Method for implementing secret communication in different wireless local area network
CN112311542B (en) Quantum secret communication system and method for meeting electric power business isolation requirement
CN106656493A (en) Software-defined network security communication method based on quantum key distribution

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant