Quantum secrete key distribution method based on DPI

Abstract

The invention discloses a quantum secrete key distribution method based on a DPI. The quantum secrete key distribution method based on the DPI comprises the steps that a DPI analysis module of a system carries out application layer analysis on a network data stream, and service types of various applications are recognized and submitted to an encryption strategy selecting module; the encryption strategy selecting module carries out quantum secrete key encryption or traditional secrete key encryption or selects transparent transmission on services with different safety levels according to priorities; a network transparent transmission or traditional secrete key encryption module carries out unencrypted transparent transmission or carries out encryption based on a traditional encryption algorithm based on algorithm safety; a quantum secrete key encryption module carries out quantum encrypted transmission. According to the quantum secrete key distribution method based on the DPI, network core service flows are distinguished and identified, different service flows are encrypted in a graded mode, a quantum secrete key distribution encryption mode or a traditional encryption mode is selected according to encryption strategies, quantum secrete communication of the core service flow of the network is achieved, and the transmission efficiency of the network services is considered.

Description

technical field [0001] The invention belongs to the technical field of communications, and relates to a DPI-based quantum secret key distribution method. Background technique [0002] Since the second half of the last century, scientists have gradually established the concept of quantum cryptography based on the "Heisenberg Uncertainty Principle" and "Quantum Uncloning Principle". Quantum cryptography uses a single quantum state as an information carrier. Since a single quantum state cannot be cloned, and any measurement operation will change its quantum state, eavesdroppers cannot obtain any valid information without being discovered. In other words, the legal receiver of information can know that there is eavesdropping in the channel from the change of the quantum state, thereby terminating the communication process. Therefore, this method is called a physically "absolutely secure" communication method, and has important research value in various fields such as national d...

AI Technical Summary

Problems solved by technology

[0004] In the process of quantum secure communication, the information carrier is single photon. Considering the attenuation of single photon in the optical fiber channel and the detection efficiency of detectors, the communication distance of commercial systems generally does not exceed 100km. This limitation makes point-to-point quantum communication The system can only be applied to inter-city secure communication, but it is powerless for inter-provincial and inter-provincial secure communication, which greatly limits the scope of use of quantum secure communication, and also hinders the development of its practical application.

[0005] At present, the encryption method in the network mainly uses traditional key encryption machine or VPN technology for encryption, and adopts a variety of encryption algorithms commonly used in the world. These algorithms are encryption algorithms based on algorithm complexity, and VPN and other technical key exchange methods are mostly The Internet Information Exchange (IKE) scheme adopted, the keys used are calculated after information exchange on the traditional network, which makes the transmission have a great security risk

Because quantum key encryption has unconditional security, it can be reliably and securely transmitted through the quantum key encryption channel. However, in the current main quantum key distribution process, the generation speed and key quantity of quantum keys are very limited. If The high-speed transmission used for all network applications in the network will greatly affect the efficiency of network transmission and become the bottleneck of network transmission

Images