The application belongs to the technical field of
quantum secure communication, and discloses a key
rotation method and
system for a
quantum secure network, which executes a key rotation process in a state
machine driven manner on the premise of maintaining uninterrupted business services; specifically, while a current key is kept effective to process existing business, a next key is generated; a distributed lock mechanism is used to exclusively execute a key switching operation in a multi-node environment; the next key is atomically switched to a new current key, and the original current key state is updated to an old key, so as to realize seamless transition of
business data encryption and decryption keys. Compared with the prior art, the application realizes uninterrupted business during the key rotation process, establishes an effective multi-node cooperation mechanism, introduces a
transaction management mechanism, designs a perfect fault detection and automatic
recovery mechanism, and builds a
full life cycle security management system of codebooks and random number books to realize controllable full process from creation to archiving.