WO2017196545A1 - Method and system for detecting eavesdropping during data transmission - Google Patents
Method and system for detecting eavesdropping during data transmission Download PDFInfo
- Publication number
- WO2017196545A1 WO2017196545A1 PCT/US2017/029818 US2017029818W WO2017196545A1 WO 2017196545 A1 WO2017196545 A1 WO 2017196545A1 US 2017029818 W US2017029818 W US 2017029818W WO 2017196545 A1 WO2017196545 A1 WO 2017196545A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- quantum
- optical signal
- control sequence
- eavesdropping
- quantum state
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/606—Protecting data by securing the transmission between two devices or processes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1416—Event detection, e.g. attack signature detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1441—Countermeasures against malicious traffic
- H04L63/1475—Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0852—Quantum cryptography
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0866—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
Definitions
- This disclosure is generally related to secure data transmission technologies. More specifically, this disclosure is related to a secure data transmission system that uses quantum states to detect eavesdropping.
- Asymmetric encryption also called public key encryption
- Public key encryption does not have the key distribution problem, because different keys (public and private) are used to encrypt and decrypt data.
- Public key encryptions are often used for secure exchange of symmetric encryption keys.
- Public key cryptography systems are considered more secure, because they rely on cryptographic algorithms based on mathematical problems that currently admit no efficient solution, particularly those inherent in certain integer factorization, discrete logarithm, and elliptic curve relationships.
- HTTPS Hypertext Transfer Protocol Secure
- the client may generate a pre-master key, encrypt the pre-master key using the server's public key, and send the encrypted pre-master key to the server.
- Both the server and client can then generate a master key (also known as the session key) based on the pre-master key.
- the session key can then be used to encrypt data flows between the client and server.
- One embodiment provide a system and method for detecting eavesdropping while establishing secure communication between a local node and a remote node.
- the local node generates a random key and a regular optical signal based on the random key.
- the local node also generates a quantum optical signal based on a control sequence and a set of quantum state bases, and multiplexes the regular optical signal and the quantum optical signal to produce a hybrid optical signal.
- the local node transmits the hybrid optical signal to the remote node, sends information associated with the control sequence and information associated with the set of quantum state bases to the remote node, and receives an eavesdropping-detection result from the remote node based on measurement of the quantum optical signal, the information associated with the control sequence, and the information associated with the set of quantum state bases.
- the local node encrypts the random key.
- generating the quantum optical signal comprises: generating a random binary string as the control sequence; selecting, from a quantum- state-basis library, the set of quantum state bases; assigning a length value for each selected quantum state basis; and encoding a number of single photons based on the control sequence, the set of quantum state bases, and the length values assigned to the quantum state bases. A sum of length values of the selected quantum state bases equals a length of the control sequence.
- encoding the single photons comprises: associating a bit in the control sequence with a quantum state basis within the selected set of quantum state bases based on a position of the bit and assigned lengths of the selected set of quantum state bases, and modulating a polarization state of a single photon based on a value of the bit and the associated quantum state basis.
- the information associated with the control sequence includes a length of the control sequence and bit values of the control sequence.
- the information associated with the set of quantum state bases comprises quantum-state-basis identifiers (QIDs) of the set of quantum state bases and length values corresponding to the QIDs.
- the system in response to the eavesdropping-detection result indicating that no eavesdropping is detected, the system establishes a secure
- One embodiment described herein provides a system and method for detecting eavesdropping while establishing secure communication between a local node and a remote node.
- the local node receives from the remote node a hybrid optical signal comprising a regular optical signal multiplexed with a quantum optical signal.
- the regular optical signal carries information associated with a random key, and the quantum optical signal is generated based on a control sequence and s first set of quantum state basis.
- the local node demultiplexes the received hybrid optical signal to obtain the regular optical signal and the quantum optical signal, processes the regular optical signal to obtain the random key, and performs measurement on the quantum optical signal using a second set of quantum state bases.
- the local node receives from the remote node information associated with the control sequence and information associated with the first set of quantum state bases and generates an
- One embodiment described herein provides a system and method for detecting eavesdropping while establishing secure communication between a local node and a remote node.
- the local node generates a regular optical signal based on data to be transmitted, generates a quantum optical signal based on a control sequence and a set of quantum state bases, and multiplexes the regular optical signal and the quantum optical signal to produce a hybrid optical signal.
- the local node then transmits the hybrid optical signal to the remote node and sends information associated with the control sequence and information associated with the set of quantum state bases to the remote node.
- the local node receives an eavesdropping- detection result from the remote node based on measurement of the quantum optical signal, the information associated with the control sequence, and the information associated with the set of quantum state bases.
- FIG. 1 illustrates a time-state diagram describing the process of establishing a conventional HTTPS channel.
- FIG. 2 presents a time-state diagram describing the process of establishing a quantum-enhanced HTTPS channel, according to one embodiment of the present invention.
- FIG. 3 presents a diagram illustrating an exemplary client device, in accordance with one embodiment of the present invention.
- FIG. 4 presents a diagram illustrating an exemplary server device, in accordance with one embodiment of the present invention.
- FIG. 5 illustrates an exemplary client-server network environment for implementing the disclosed eavesdropping-detection technology, in accordance with some embodiments described herein.
- FIG. 6 conceptually illustrates an electronic system with which some
- Table 1 illustrates two exemplary mechanical quantity measurement schemes based on using two different sets of quantum states in accordance with one embodiment described herein.
- Regular optical signals can be used in traditional communication systems where laws of classical mechanics apply, whereas quantum optical signals can be used in quantum communication systems where laws of quantum mechanics apply.
- a quantum optical signal typically can consist of weak coherent pulses, ideally one photon in each pulse.
- an optical pulse in a regular optical signal often has many more photons and, hence, has much higher intensity.
- a regular optical signal can also referred to as a high-intensity optical signal, due to its higher intensity compared to a quantum optical signal.
- quantum communication information is transmitted based on quantum states, and the data security can be guaranteed by the laws of quantum mechanics, such as the uncertainty principle, the principle of quantum state measurement, and the no-cloning theorem. It has been shown that quantum cryptography can achieve unconditional data transmission security and detectability against eavesdroppers.
- Various embodiments disclosed herein provide a system and method for detecting eavesdropping based on the quantum state information carried by single photons. More specifically, during the process of establishing a secure communication channel (e.g., an HTTPS channel), in addition to establishing a master key using regular optical signals, a quantum bit string can also be distributed by embedding a quantum signal containing single photons within the regular optical signals. Due to the quantum indeterminacy principle, measuring an unknown quantum state changes that state, making it possible to detect eavesdropping. By examining the integrity of the quantum bit string, one can determine whether the master key has been compromised by eavesdroppers. Background
- quantum physics some physical quantities of the microscopic world cannot continuously change but take on certain discrete values, and the difference between two adjacent discrete values is referred to as a "quantum," e.g., a photon is a single quantum of light.
- a quantum quantity can also take on a mixed state obtained by the superposition of the two basic states with coefficients or, ⁇ , respectively.
- a mixed state can be expressed as:
- -) ⁇ can be generated by superpositioning the basic quantum states ⁇ 0>/ ⁇ and ll>/ using the following formulae:
- states I0> and ll> are orthogonal to each other, while states l+> and l-> are orthogonal to each other.
- a given mechanical quantity can be measured using the above-described quantum states, which are also referred to as the "measurement basis.”
- each mechanical quantity can be expressed by a Hermitian operator (or Hermitian matrix).
- the measurement results correspond to the eigenvalues (or the “characteristic values") of the Hermitian operator for this mechanical quantity.
- the quantum state being measured collapses to the eigenstates (or the "eigenvectors") corresponding to the obtained eigenvalues.
- Table 1 illustrates two exemplary mechanical quantity measurement schemes based on using two different sets of quantum states in accordance with one embodiment described herein.
- FIG. 1 illustrates a time-state diagram describing the process of establishing a conventional HTTPS session.
- a client 102 sends an HTTPS request to a server 104 (operation 106).
- a user may type in the address bar of the web browser the address of an HTTPS website.
- the HTTPS website transmits a digital certificate (e.g., a Secure Sockets Layer (SSL) certificate) to the web browser of client 102 (operation 108).
- SSL certificate can be one obtained from a trusted authority or one generated by server 104.
- a self- generated or self-signed digital certificate may need to be verified by client 102 in order for the process to continue.
- the digital certificate can include a public key needed to begin the secure session.
- the digital certificate may also include other useful information, including the name of the certificate authority, the expiration date, etc.
- the public key and its corresponding private key can be generated using various asymmetric algorithms, such as RSA.
- client 102 Upon receiving the digital certificate, client 102 verifies the digital certificate (operation 110). If the digital certificate is invalid, client 102 may display an error message in its browser. If the digital certificate is valid, client 102 can generate a random key (e.g., a random number) and encrypt the generated random key using the public key included in the digital certificate (operation 112). Client 102 then sends the encrypted random key to server 104 (operation 114), which can then obtain the random key using its private key (operation 116). The random key becomes the shared secret between client 102 and server 104. The client and server can then communicate with each other using the random key (operation 118). For example, the server may send encrypted content using the random key, and the client can decrypt the content using the same random key.
- a random key e.g., a random number
- the current HTTPS technology has certain security deficiencies. For example, it can be vulnerable to the man-in-the-middle (MITM) attacks. Note that, when the digital certificate is not verified, the client browser often displays a warning message and lets the user choose whether to continue. Many users ignore the warning and suffer the man-in-the-middle attacks.
- the exchange of the shared secret i.e., the random key
- the public key encryption mechanism e.g., the random key
- Shor's algorithm has shown the ability to break public key cryptographic schemes (e.g., RSA), and Grover's algorithm has significantly reduced the amount of computation necessary to compromise symmetric cryptographic keys by brute force.
- BB84 Bennett-Brassard-84
- BB84 uses the polarization states of single photons to transmit information.
- the usual polarization state pairs used are either the rectilinear basis of vertical (0°) and horizontal (90°), the diagonal basis of 45° and 135° or the circular basis of left- and right-handedness. Any two of these bases are conjugate to each other, and so any two can be used in the protocol.
- sender Alice wishes to send a private key (e.g., a random string) to receiver Bob.
- Alice starts by generating a random bit and randomly selects from two quantum bases a quantum basis to encode the binary bit. Alice then transmits a single photon in the state specified to Bob, using the quantum channel. This process is then repeated from the random bit stage, with Alice recording the state, basis and time of each photon sent.
- Bob Upon receiving a photon, Bob performs a measurement using a randomly selected basis. Bob does this for each photon he receives, recording the time, measurement basis used, and measurement result.
- Bob After Bob has measured all the photons, he communicates with Alice over the public classical channel. Alice broadcasts the basis each photon was sent in, and Bob the basis each was measured in. They both discard photon measurements (bits) where Bob used a different basis, which is half on average, leaving half the bits as a shared key.
- bit error rate is less than a predetermined threshold, error-correction techniques can be used to correct errors, and privacy amplification can be used to reduce Eve's knowledge of the key to an arbitrarily small amount at the cost of reducing the length of the key. If the bit error rate is greater than a predetermined threshold, they abort the key and try again, possibly with a different quantum channel, as the security of the key cannot be guaranteed.
- a hybrid key exchange system is used for secure key exchange. More specifically, to ensure reliable delivery of a random key, the hybrid key exchange system can rely on a classical channel to deliver the encrypted random key. To detect the presence of eavesdroppers, the regular signals carrying the hybrid key exchange system can be accompanied by a quantum signal. The quantum indeterminacy properties of the quantum signal can facilitate the detection of a possible eavesdropper.
- the disclosed secure data transmission technique is based on the following assumptions. It is assumed that the classical channel meets the conventional requirements of a secure channel, such as an HTTPS channel. For example, it can be assumed that, before starting data communication, each of the client and the server has its own public and private key pairs and an associated identity certificate. In addition, each of the communication parties (e.g., the server and client) installs a lightweight quantum state basis library.
- the quantum state basis library stores a plurality of quantum state bases, each of which includes orthogonal quantum states, which can be labeled for differentiation.
- state I0> can be labeled as 1.1, and state ll> as 1.2; if we label the orthogonal basis ⁇ l+>, l-> ⁇ as "2,” then state l+> can be labeled as 2.1, and state l-> as 2.2, and so on.
- the quantum states can be periodically relabeled in a synchronized manner on both the client and server sides based on a predetermined relabeling scheme. For example, if x represents the current identifier of a given quantum state, while y represents the identifier of the same quantum state for the next service request, then y can be deduced from x using some deduction rules.
- the client in light of the disclosed dynamic-password authentication technique, the client can use the quantum states of a quantum state basis as the measurement basis for measuring the dynamic information transmitted by the server; while the server can use the same quantum state basis to encode the dynamic information.
- the disclosed secure data transmission technique can include the security measures used by conventional HTTPS communication, such as an identity certificate and an encrypted secure communication channel, but would also include additional security features based on quantum states, such as the ability to detect eavesdroppers.
- FIG. 2 presents a time-state diagram describing the process of establishing a quantum-enhanced HTTPS channel, according to one embodiment of the present invention.
- a client (Alice) 202 sends a secure-communication request (e.g., an HTTPS request) and its digital certificate to a server (Bob) 204 (operation 206).
- the digital certificate can be used to authenticate client 202.
- server 204 Upon receiving the secure-communication request, server 204 verifies the client's digital certificate (operation 208). If the client's digital certificate is invalid, server 204 may send an error message or a warning to client 202, and discards the request. If the client's digital certificate is valid, server 204 can response to the secure-communication request by sending its own digital certificate (operation 210). Client 202 verifies the server's digital certificate
- client 202 may halt any further communication. If the server's digital certificate is invalid, client 202 may halt any further communication. If the server' s digital certificate is valid, client 202 can generate a random binary string/key and encrypt the random string/key using the server's public key (operation 214). In addition, client 202 can randomly select from one or more quantum state bases from the pre- installed quantum state basis library and generate a random string of quantum bits (i.e., a number of qubits) using the selected quantum state bases (operation 216). Each qubit can be represented by a single photon in a certain polarization state. Each of the selected quantum state bases can include a set of (e.g., two) orthogonal quantum states and is identified by a unique quantum state basis identifier (QID).
- QID unique quantum state basis identifier
- client 202 can start with a random binary bit string (which can be called a control sequence), and encode each bit using a randomly selected quantum state basis.
- a random binary bit string which can be called a control sequence
- the pre-installed quantum state basis library can be a shared secret between the client and the server.
- the corresponding relationship between the QIDs and the actual quantum state bases can also be a shared secret between the client and server. This corresponding relationship can be time-varying and synchronized between the client and the server. In other words, at any given moment, a particular quantum state can be identically identified by the client and server.
- Client 202 can then send both the public -key-encrypted random string/key (e.g., ⁇ random_string ⁇ pu biic_key_s ⁇ ) and the random qubits to server 204 (operation 218). More specifically, the public-key-encrypted random string can be sent using a regular optical signal (e.g., a high-intensity beam of light), and the single photons carrying the quantum state information can be multiplexed within the high-intensity optical signal using various
- the high-intensity optical signal and the single photons can be multiplexed in the wavelength domain.
- the spectrum of the single photons can be outside of the spectral range (e.g., on the spectral edge) of the high-intensity optical signal.
- the spectrums of the high-intensity optical signal and the single photons can be pre-determined (either statically or dynamically) by client 202 and server 204.
- the high-intensity optical signal and the single photons can be multiplexed in the time domain.
- the transmission time slots of the high-intensity optical signal and the single photons can be dynamically varied to prevent the eavesdropper from intercepting the high-intensity optical signal.
- the transmission pattern can be pre-negotiated between client 202 and server 204, and should be kept a secret.
- server 204 can demultiplex the high-intensity optical signal and the single photons using an appropriate demultiplexing technique (operation 220). From the high-intensity optical signal, server 204 can obtain the random string/key by performing decryption using the server's private key (operation 222). Server 204 can measure the quantum states of received single photons using quantum bases randomly selected from the pre-installed quantum state basis library (operation 224).
- client 202 After transmitting the high-intensity optical signal and the single photons over a quantum channel, client 202 can generate a second message by encrypting information regarding the quantum state bases used to encode the single photons using the server' s public key
- the information regarding the quantum state bases used to encode the single photons can include the QIDs and the numbers of bits (or photons) encoded by the quantum state bases corresponding to individual QIDs.
- the second message can further include the user's identification (userID_A) and/or the client's digital certificate (Cert_A).
- client 202 can generate the second message as: ⁇ 2, 3; 4, 6 ⁇ pu biic_key_s, userID_A, Cert_A.
- a more general form of the second message is: ⁇ QIDi, ; QID 2 , h ⁇ QID n , userID_A (optional), Cert_A (optional), wherein l n corresponds to the number of bits encoded using a quantum basis QIDi.
- the second message may specify the QID used for encoding each qubit.
- the second message in the above example can be: ⁇ 2, 2, 2, 4, 4, 4, 4, 4, 4 ⁇ p U biic _key_s-
- the QIDs corresponding to all nine bits are listed.
- Client 202 can then transmit, via either a classical channel or a quantum channel, the second message to server 204 (operation 228).
- bit number corresponding to each QID can also be encoded.
- client 202 and server 204 can each maintain a quantum-bit-number database, which can map numbers of bits to various codes. Instead of sending the particular bit number, client 202 can send codes corresponding to those bit numbers. Upon receiving such codes, server 204 can perform a lookup in the quantum-bit-number database to determine the bit numbers.
- server 204 Upon receiving the second message, server 204 can use its private key to decrypt the second message to obtain quantum state basis information, e.g., the data string: QIDi, ; QID2, h ⁇ QE3 n , l n (operation 230). Server 204 can then detect whether there is an
- server 204 can determine that no eavesdropper is detected, and keep the decrypted random string/key as a session key for subsequent secure communication with client 202 (operation 234). Otherwise, server 204 can determine that eavesdropping activities have been detected, and discard the decrypted random string/key.
- Server 204 can send the eavesdropper-detection outcome to client 202 (operation 236).
- the message can optionally be encrypted using the random string/key.
- client 202 can decrypt the message to obtain the
- client 202 can keep the random string/key as a session key for subsequent secure communication with server 204 (operation 240). Client 202 and server 204 can then start to communicate with each other using the random string/key (operation 242).
- the random string/key can act as the pre- master key used in the HTTPS protocol, and client 202 and server 204 can each generate a session key based on the pre- master key.
- the pre-master key may be periodically refreshed (e.g., using the process shown in FIG. 2) to ensure the confidentiality of the session key.
- the first criterion can be the single photon loss rate.
- the number of single photons received by server 204 can be fewer than the number of single photons sent by client 202. The difference should be within a predetermined range. However, if an eavesdropper intercepts a portion of the signal, including some of the single photons, without retransmission, the number of single photons received by server 204 can be much fewer than the number of photons sent by client 202.
- server 204 can measure the single photon loss rate.
- a second criterion used for eavesdropping detection can be the error rate of the measurement result. Because of the basic laws of quantum mechanics, such as the uncertainty principle, the principle of quantum state measurement, and the no-cloning theorem, any measurement taken by an eavesdropper on the single photons can produce errors in the measurement result produced by server 204. Therefore, if server 204 detects the error rate of the measurement result to be greater than a predetermined threshold, server 204 can determine that eavesdropping has occurred. To do so, server 204 can first compare the quantum state bases used in the measurement with the quantum state bases used by client 202 to generate the random quantum string and identify qubits that are measured using the same quantum state bases as they were encoded in.
- server 204 can then extract, from the measurement results (i.e., the binary representation) of the qubits, the bits that were measured using the correct quantum state bases to get a measured substring.
- measurement results i.e., the binary representation
- client 202 can optionally send, along with the second message, the original binary string used to generate the qubits.
- client 202 can send the binary representation of the quantum string.
- Server 204 can extract, from the received binary string, bits at positions where measurements using the correct quantum state bases were made to get an original substring. By comparing the measured substring and the original substring, server 204 can calculate a bit error rate (BER). For example, if there are N bits in each substring, and the number of bits that are different is ErrNum, the BER can be calculated as: ErrNum/N. In some embodiments, server 204 can determine whether an eavesdropping activity occurs based on the calculated BER.
- BER bit error rate
- server 204 can determine that the errors are mostly likely caused by normal loss or dispersion of the channel, and no eavesdropping has occurred. On the other hand, if the BER is equal to or greater than the threshold, server 204 can determine that eavesdropping has occurred, and the communication is not secure.
- the third criterion used for eavesdropping detection combines the aforementioned first and second criteria. More specifically, server 204 can calculate both the photon loss rate and the BER. In some embodiments, server 204 can determine that eavesdropping occurred if at least one of the photon loss rate and BER exceeds a corresponding threshold. In other words, server 204 can determine that no eavesdropping has occurred only if both the photon loss rate and the BER rate are less than their corresponding thresholds.
- FIG. 3 presents a diagram illustrating an exemplary client device, in accordance with one embodiment of the present invention.
- Client 300 can include a non-quantum zone 310 handling regular signals and a quantum zone 320 handling quantum signals. More specifically, non-quantum zone 310 can include a communication-request generator 302, a digital-certificate module 304, a random-key generator 306, an encryption/decryption module 308, and a regular optical module 312; and quantum zone 320 can include a quantum-state-basis library 322, a single-photon generator 324, and a quantum encoder 326. Client 300 can also include an optical multiplexer 330.
- communication-request generator 302 can be responsible for generating a request for initiating a secure communication channel, e.g., an HTTPS channel.
- Digital-certificate module 304 can be responsible for storing the digital certificate of client 300 and verifying any received digital certificate.
- Random-key generator 306 can be responsible for generating a random key that can later be used as a session key or a pre- master key during the secure communication between client device 300 and a server or other client devices.
- Encryption/decryption module 308 can be responsible for encryption and decryption of messages. In some embodiments, before the establishment of the secure communication channel, the encryption and decryption of messages can be based on public- private key pairs.
- Regular optical module 312 can be responsible for transmitting and receiving regular high-intensity optical signals based on electrical signals generated by the various modules in non-quantum zone 310.
- the communication request generated by communication-request generator 302 can be converted to optical signals by regular optical module 312 before being sent to the server via an optical channel, such as optical fibers.
- quantum-state-basis library 322 stores the quantum state bases that can be used to encode the qubits.
- Single-photon generator 324 can be responsible for generating single photons.
- Quantum encoder 326 can be responsible for selecting quantum state bases from quantum-state-basis library 322 and encoding the single photons using selected quantum state bases.
- Optical multiplexer 330 can be responsible for multiplexing high-intensity regular optical signals with single photons and sending the multiplexed signal to the server via a quantum channel.
- communication-request generator 302 generates a request for initiating secure communication between client device 300 and a remote device, such as a server.
- a remote device such as a server.
- Such request can also be accompanied by a digital certificate of client device 300 stored in digital-certificate module 304, and can be sent to the server by regular optical module 312 via a classical channel.
- random-key generator 306 can generate a random key.
- Encryption/decryption module 308 can encrypt the random key (e.g., using the server's public key).
- Regular optical signals carrying information of the encrypted random key can be generated by regular optical module 312.
- Random-key generator 306 can generate a second random string, which can also be called a control sequence.
- the length of the control sequence can be the same as or different from the length of the random key. In some embodiments, the length of the control sequence is shorter than that of the random key.
- Quantum encoder 326 can encode the control sequence using randomly selected quantum state bases from quantum-state-basis library 322 and single photons generated by single-photon generator 324. More specifically, each bit is encoded by the quantum state based on the bit value and a selected quantum state basis.
- the single photons carrying information of the control sequence and regular optical signals carrying information of the encrypted random key can be combined by optical multiplexer 330 using various multiplexing techniques, such as time-domain multiplexing (TDM) or wavelength-domain multiplexing (WDM).
- client 300 can also send information regarding the control sequence and quantum state bases used for encoding the control sequence to the server. More specifically, such information can be encrypted (e.g., using the public key of the server) and sent to the server by regular optical module 312 via a classical channel. Regular optical module 312 can receive the eavesdropping- detection result from the server. The result may be encrypted and can be decrypted by encryption/decryption module 308. If no eavesdropping is detected, the previously generated random key can be used to establish a secure communication channel between client 300 and the server. For example, the random key can be used as a session key or pre-master key for generating the session key. The secure communication between client 300 and the server can be established over a classical channel.
- the random key can be used as a session key or pre-master key for generating the session key.
- FIG. 4 presents a diagram illustrating an exemplary server device, in accordance with one embodiment of the present invention.
- server 400 can include a non-quantum zone 410 handling regular signals and a quantum zone 420 handling quantum signals. More specifically, non-quantum zone 410 can include a regular optical module 402, a communication-request-receiving module 404, a digital-certificate module 406, an
- Server 400 can also include an optical demultiplexer 430. The functionalities of the various modules in server 400 can be similar to the corresponding ones in client 300.
- communication-request-receiving module 404 can receive, via regular optical module 402, a request for secure communication from the client. Such request can include the client' s digital certificate.
- digital-certificate module 406 verifying the client' s digital certificate, digital-certificate module 406 may send the digital certificate of server 400 to the client via regular optical module 402.
- Optical demultiplexer 430 can then receive, from the client via a quantum channel, a mixture of high-intensity optical signal and single photons. The high-intensity optical signal and the single photons may be multiplexed using a WDM or TDM technique.
- demultiplexer 430 may demultiplex the received optical signals using a corresponding demultiplexing technique. For example, if the high-intensity optical signal and the single photons are multiplexed using a WDM technique, meaning that they have different wavelengths, demultiplexer 430 can be a WDM demultiplexer. More specifically, demultiplexer 430 can send high-intensity optical signals to regular optical module 402 and single photons to quantum-state-measurement module 424.
- the high-intensity optical signal carries information of the encrypted random key generated by the client. Accordingly, encryption/decryption module 408 can decrypt (e.g., using the server's private key) the encrypted random key to obtain the random key. The random key can be stored for later use.
- the single photons carry information of the control sequence.
- Quantum-state-measurement module 424 can randomly select one or more quantum states from quantum-state-basis library 422 to measure the quantum states of the single photons, obtaining a measured control sequence. Because the quantum state bases used for the measurements are not the same as the ones used by the client for transmission, the measured control sequence is not the same as the control sequence sent by the client.
- Regular optical module 402 can also receive, from the client, a message that includes information regarding the quantum state bases used by the client for encoding the single photons. This message can also be encrypted (e.g., using the public key of server 400).
- Encryption/decryption module 408 can decrypt the received message to obtain the information regarding the quantum state bases. In some embodiments, this message may also include the control sequence itself.
- Eavesdropping-detection-result generator 412 can obtain information regarding the quantum state bases used for encoding the single photons and optionally the control sequence from encryption/decryption module 408, and the measured control sequence and quantum state bases used for the measurement from quantum-state-measurement module 424. Eavesdropping- detection-result generator 412 can then generate an eavesdropping-detection result based on the obtained information. More specifically, eavesdropping-detection-result generator 412 can determine whether the measurement result meets one or more predetermined criteria, and can generate a result indicating whether eavesdropping is detected.
- the generated eavesdropping- detection-result can be sent to the client via regular optical module 402.
- the predetermined criteria can be based on the photon-loss rate, the BER of the measured control sequence, or both. For example, if eavesdropping-detection-result generator 412 determines that the photon-loss rate exceeds a predetermined threshold, eavesdropping-detection-result generator 412 may generate a result indicating that eavesdropping is detected.
- the client may be coupled to the server via a classical channel (e.g., optical fibers or free space) and a quantum channel (e.g., polarization-maintaining fibers or free space), and vice versa.
- a classical channel e.g., optical fibers or free space
- a quantum channel e.g., polarization-maintaining fibers or free space
- the random key and the information regarding the quantum state bases are encrypted using the public key cryptography technology. More specifically, the client may encrypt messages sent to the server using the public key of the server. In practice, it is also possible for the client to encrypt the random key and/or the information regarding the quantum state bases using a symmetric key, which is a shared secret between the client and the server.
- the secure communication channel established between the client and server is similar to the HTTPS channel established between the client and server.
- the eavesdropping-detection technology can be used to enable secure data transmission between any types of network nodes.
- a secure peer-to-peer communication channel may also be established using a similar technology, as long as the exchange of the secret key involves multiplexing and co-transmission of a regular optical signal carrying the key and a quantum signal carrying a control sequence. By detecting eavesdropping of the quantum signal, one can detect eavesdropping of the secret key.
- FIG. 5 illustrates an exemplary client-server network environment for
- a network environment 500 includes a number of electronic devices 502, 504 and 506 communicably connected to a server 510 by a network 508.
- One or more remote servers 520 are further coupled to the server 510 and/or the one or more electronic devices 502, 504 and 506.
- electronic devices 502, 504 and 506 can be computing devices such as laptop or desktop computers, smartphones, PDAs, portable media players, tablet computers, televisions or other displays with one or more processors coupled thereto or embedded therein, or other appropriate computing devices that can be used for displaying a web page or web application.
- the electronic devices 502, 504 and 506 store a user agent such as a browser or application.
- electronic device 502 is depicted as a smartphone
- electronic device 504 is depicted as a desktop computer
- electronic device 506 is depicted as a PDA.
- Server 510 includes a processing device 512 and a data store 514.
- Processing device 512 executes computer instructions stored in data store 514, for example, to assist in scheduling a customer-initiated service or a service-provider-initiated service between a service provider and a customer at electronic devices 502, 504 and 506 during a service scheduling process.
- server 510 can be a single computing device such as a computer server. In other embodiments, server 510 can represent more than one computing device working together to perform the actions of a server computer (e.g., cloud computing).
- the server 510 may host the web server communicably coupled to the browser at the client device (e.g., electronic devices 502, 504 or 506) via network 508.
- the server 510 may host a client application for scheduling a customer-initiated service or a service-provider-initiated service between a service provider and a customer during a service scheduling process.
- Server 510 may further be in communication with one or more remote servers 520 either through the network 508 or through another network or communication means.
- the one or more remote servers 520 may perform various functionalities and/or storage capabilities described herein with regard to the server 510 either alone or in combination with server 510.
- Each of the one or more remote servers 520 may host various services.
- servers 520 may host services providing information regarding one or more suggested locations such as web pages or websites associated with the suggested locations, services for determining the location of one or more users, or establishments, search engines for identifying results for a user query, one or more user review or query services, or one or more other services providing information regarding one or more establishments, customers and/or review or feedback regarding the establishments.
- Server 510 may further maintain or be in communication with social networking services hosted on one or more remote servers 520.
- the one or more social networking services may provide various services and may enable users to create a profile and associate themselves with other users at a remote social networking service.
- the server 510 and/or the one or more remote servers 520 may further facilitate the generation and maintenance of a social graph including the user-created associations.
- the social graphs may include, for example, a list of all users of the remote social networking service and their associations with other users of a remote social networking service.
- Each of the one or more remote servers 520 can be a single computing device such as a computer server or can represent more than one computing device working together to perform the actions of a server computer (e.g., cloud computing).
- server 510 and one or more remote servers 520 may be implemented as a single server or a cluster of servers.
- server 510 and one or more remote servers 520 may communicate through the user agent at the client device (e.g., electronic devices 502, 504 or 506) via network 508.
- Users may interact with the system hosted by server 510, and/or one or more services hosted by remote servers 520, through a client application installed at the electronic devices 502, 504, and 506.
- the user may interact with the system and the one or more social networking services through a web-based browser application at the electronic devices 502, 504, 506.
- Communication among client devices 502, 504, 506 and the system, and/or one or more services, may be facilitated through a network (e.g., network 508).
- Communications among the client devices 502, 504, 506, server 510 and/or one or more remote servers 520 may be facilitated through various communication protocols.
- client devices 502, 504, 506, server 510 and/or one or more remote servers 520 may communicate wirelessly through a communication interface (not shown), which may include digital signal processing circuitry where necessary.
- the communication interface may provide for communications under various modes or protocols, including Global System for Mobile communication (GSM) voice calls; Short Message Service (SMS), Enhanced Messaging Service (EMS), or Multimedia Messaging Service (MMS) messaging; Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Personal Digital Cellular (PDC), Wideband Code Division Multiple Access (WCDMA), CDMA2000, or General Packet Radio System
- GSM Global System for Mobile communication
- SMS Short Message Service
- EMS Enhanced Messaging Service
- MMS Multimedia Messaging Service
- CDMA Code Division Multiple Access
- TDMA Time Division Multiple Access
- PDC Personal Digital Cellular
- WCDMA Wideband Code Division Multiple Access
- CDMA2000 Code Division Multiple Access 2000
- General Packet Radio System General Packet Radio System
- GPRS GPRS
- the communication may occur through a radio-frequency transceiver (not shown).
- short-range communication may occur, including via the use of a Bluetooth-enable device, WiFi, or other such transceiver.
- Network 508 can include, for example, any one or more of a personal area network (PAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN), a broadband network (BBN), the Internet, and the like. Further, network 508 can include, but is not limited to, any one or more of the following network topologies, including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree or hierarchical network, and the like.
- PAN personal area network
- LAN local area network
- CAN campus area network
- MAN metropolitan area network
- WAN wide area network
- BBN broadband network
- the Internet and the like.
- network 508 can include, but is not limited to, any one or more of the following network topologies, including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree or hierarchical network, and the like
- FIG. 6 conceptually illustrates an electronic system with which some
- Electronic system 600 can be a client, a server, a computer, a smartphone, a PDA, a laptop, or a tablet computer with one or more processors embedded therein or coupled thereto, or any other sort of electronic device.
- Such an electronic system includes various types of computer-readable media and interfaces for various other types of computer-readable media.
- Electronic system 600 includes a bus 608, processing unit(s) 612, a system memory 604, a read-only memory (ROM) 610, a permanent storage device 602, an input device interface 614, an output device interface 606, and a network interface 616.
- ROM read-only memory
- Bus 608 collectively represents all system, peripheral, and chipset buses that communicatively connect the numerous internal devices of electronic system 600. For instance, bus 608 communicatively connects processing unit(s) 612 with ROM 610, system memory 604, and permanent storage device 602.
- processing unit(s) 612 retrieves instructions to execute and data to process in order to execute the processes of the subject disclosure.
- the processing unit(s) can be a single processor or a multi-core processor in different implementations .
- ROM 610 stores static data and instructions that are needed by processing unit(s) 612 and other modules of electronic system 600.
- Permanent storage device 602 is a read-and-write memory device. This device is a non- volatile memory unit that stores instructions and data even when electronic system 600 is off.
- Some implementations of the subject disclosure use a mass-storage device (such as a magnetic or optical disk and its corresponding disk drive) as permanent storage device 602.
- system memory 604 is a read-and-write memory device. However, unlike storage device 602, system memory 604 is a volatile read-and-write memory, such a random access memory. System memory 604 stores some of the instructions and data that the processor needs at runtime. In some implementations, the processes of the subject disclosure are stored in system memory 604, permanent storage device 602, and/or ROM 610. From these various memory units, processing unit(s) 612 retrieves instructions to execute and data to process in order to execute the processes of some implementations.
- Bus 608 also connects to input and output device interfaces 614 and 606.
- Input device interface 614 enables the user to communicate information and select commands to the electronic system.
- Input devices used with input device interface 614 include, for example, alphanumeric keyboards and pointing devices (also called “cursor control devices").
- Output device interface 606 enables, for example, the display of images generated by electronic system 600.
- Output devices used with output device interface 606 include, for example, printers and display devices, such as cathode ray tubes (CRT) or liquid crystal displays (LCD). Some implementations include devices such as a touchscreen that functions as both input and output devices.
- CTR cathode ray tubes
- LCD liquid crystal displays
- bus 608 also couples electronic system 600 to a network (not shown) through a network interface 616.
- the computer can be a part of a network of computers (such as a local area network (“LAN”), a wide area network (“WAN”), or an Intranet, or a network of networks, such as the Internet. Any or all components of electronic system 600 can be used in conjunction with the subject disclosure.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Software Systems (AREA)
- Health & Medical Sciences (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Electromagnetism (AREA)
- Optical Communication System (AREA)
Abstract
Description
Claims
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP17796562.1A EP3455731B1 (en) | 2016-05-11 | 2017-04-27 | Methods and systems for detecting eavesdropping during data transmission |
JP2018552692A JP2019520720A (en) | 2016-05-11 | 2017-04-27 | Method and system for detecting eavesdropping during data transmission |
SG11201808734PA SG11201808734PA (en) | 2016-05-11 | 2017-04-27 | Method and system for detecting eavesdropping during data transmission |
KR1020187032098A KR102485797B1 (en) | 2016-05-11 | 2017-04-27 | Method and system for detecting eavesdropping during data transmission |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610311976.X | 2016-05-11 | ||
CN201610311976.XA CN107370546B (en) | 2016-05-11 | 2016-05-11 | Eavesdropping detection method, data sending method, device and system |
US15/497,678 | 2017-04-26 | ||
US15/497,678 US10491383B2 (en) | 2016-05-11 | 2017-04-26 | Method and system for detecting eavesdropping during data transmission |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2017196545A1 true WO2017196545A1 (en) | 2017-11-16 |
Family
ID=60267648
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2017/029818 WO2017196545A1 (en) | 2016-05-11 | 2017-04-27 | Method and system for detecting eavesdropping during data transmission |
Country Status (1)
Country | Link |
---|---|
WO (1) | WO2017196545A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107992632A (en) * | 2017-12-28 | 2018-05-04 | 江苏亨通问天量子信息研究院有限公司 | Quantum communications secret querying method and system |
EP3793126A1 (en) * | 2019-09-12 | 2021-03-17 | General Electric Company | Communication systems and methods |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20090106551A1 (en) * | 2006-04-25 | 2009-04-23 | Stephen Laurence Boren | Dynamic distributed key system and method for identity management, authentication servers, data security and preventing man-in-the-middle attacks |
US20100265077A1 (en) * | 2009-04-16 | 2010-10-21 | Humble Travis S | Tampering Detection System Using Quantum-Mechanical Systems |
US20110069972A1 (en) * | 2008-05-19 | 2011-03-24 | Qinetiq Limited | Multiplexed quantum key distribution |
US20130101119A1 (en) * | 2010-06-15 | 2013-04-25 | Los Alamos National Security Llc | Quantum key distribution using card, base station and trusted authority |
US20150236852A1 (en) * | 2014-02-17 | 2015-08-20 | Kabushiki Kaisha Toshiba | Quantum key distribution device, quantum key distribution system, and quantum key distribution method |
-
2017
- 2017-04-27 WO PCT/US2017/029818 patent/WO2017196545A1/en unknown
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20090106551A1 (en) * | 2006-04-25 | 2009-04-23 | Stephen Laurence Boren | Dynamic distributed key system and method for identity management, authentication servers, data security and preventing man-in-the-middle attacks |
US20110069972A1 (en) * | 2008-05-19 | 2011-03-24 | Qinetiq Limited | Multiplexed quantum key distribution |
US20100265077A1 (en) * | 2009-04-16 | 2010-10-21 | Humble Travis S | Tampering Detection System Using Quantum-Mechanical Systems |
US20130101119A1 (en) * | 2010-06-15 | 2013-04-25 | Los Alamos National Security Llc | Quantum key distribution using card, base station and trusted authority |
US20150236852A1 (en) * | 2014-02-17 | 2015-08-20 | Kabushiki Kaisha Toshiba | Quantum key distribution device, quantum key distribution system, and quantum key distribution method |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107992632A (en) * | 2017-12-28 | 2018-05-04 | 江苏亨通问天量子信息研究院有限公司 | Quantum communications secret querying method and system |
CN107992632B (en) * | 2017-12-28 | 2023-04-07 | 江苏亨通问天量子信息研究院有限公司 | Quantum communication secret query method and system |
EP3793126A1 (en) * | 2019-09-12 | 2021-03-17 | General Electric Company | Communication systems and methods |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10491383B2 (en) | Method and system for detecting eavesdropping during data transmission | |
US10439806B2 (en) | Method and system for secure data transmission | |
US10103880B2 (en) | Method and system for quantum key distribution based on trusted computing | |
US10574446B2 (en) | Method and system for secure data storage and retrieval | |
US10855452B2 (en) | Method and system for data security based on quantum communication and trusted computing | |
US7181011B2 (en) | Key bank systems and methods for QKD | |
US20170126654A1 (en) | Method and system for dynamic password authentication based on quantum states | |
US20170244687A1 (en) | Techniques for confidential delivery of random data over a network | |
US20230188325A1 (en) | Computer-implemented system and method for highly secure, high speed encryption and transmission of data | |
WO2017200791A1 (en) | Method and system for secure data transmission | |
US11528127B2 (en) | Computer-implemented system and method for highly secure, high speed encryption and transmission of data | |
Perumal et al. | RETRACTED ARTICLE: Architectural framework and simulation of quantum key optimization techniques in healthcare networks for data security | |
Sasikumar et al. | Modeling and simulation of a novel secure quantum key distribution (SQKD) for ensuring data security in cloud environment | |
Li et al. | Deterministic secure quantum communication and authentication protocol based on extended GHZ-W state and quantum one-time pad | |
WO2017196545A1 (en) | Method and system for detecting eavesdropping during data transmission | |
Ahilan et al. | Breaking barriers in conventional cryptography by integrating with quantum key distribution | |
Yang et al. | Quantum oblivious transfer based on a quantum symmetrically private information retrieval protocol | |
Lo et al. | Distributed Symmetric Key Exchange: A scalable, quantum-proof key distribution system | |
Lai et al. | A hybrid quantum key distribution protocol for tele-care medicine information systems | |
US11750580B2 (en) | Systems and methods for encryption in network communication | |
Zhong et al. | Quantum Secret Sharing with Identity Authentication Based on GHZ States Entanglement Swapping | |
Sharma et al. | Evaluation of an Enhanced Secure Quantum Communication Approach | |
Veeraiah et al. | Authentication using Secure Node Signature Verification Algorithm with Quantum Cryptography |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
ENP | Entry into the national phase |
Ref document number: 2018552692 Country of ref document: JP Kind code of ref document: A |
|
ENP | Entry into the national phase |
Ref document number: 20187032098 Country of ref document: KR Kind code of ref document: A |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 17796562 Country of ref document: EP Kind code of ref document: A1 |
|
ENP | Entry into the national phase |
Ref document number: 2017796562 Country of ref document: EP Effective date: 20181211 |