A quantum key-based openvpn secure communication method and communication system

Abstract

The invention discloses an OpenVPN security communication method and communication system based on quantum keys. The communication method is implemented between a server and at least one client whichserve as two parties of OpenVPN network communication. The communication system comprises the server and the at least one client which serve as the two parties of OpenVPN network communication, the two communication particles are each matched with a quantum device, and the corresponding quantum keys are stored in the quantum devices of the two communication parties to be used for achieving identity authentication and data encryption transmission between the two communication parties. According to the communication method and communication system, the advantages of the quantum keys and a quantum distribution network are fully utilized, the quantum keys are taken as the authentication keys and the session keys in OpenVPN system expanding, the session key updating frequency is high, and the security communication performance of an existing OpenVPN is greatly improved.

Description

technical field [0001] The invention relates to a virtual private network (OpenVPN) of an application layer Internet security protocol, in particular to a quantum key-based OpenVPN secure communication method and a communication system. Background technique [0002] With the advancement of science and technology, remote communication security has become a problem to be solved. A virtual private network (VPN) is a network that is logically isolated from the public communication network. Its effect is equivalent to establishing a virtual network in a wide area network. Dedicated lines to ensure communication security. [0003] OpenVPN is an application-layer VPN implementation based on the OpenSSL library. Compared with traditional VPNs, its advantage is that it is simple and easy to use. OpenVPN provides a variety of authentication methods to confirm the identities of both parties involved in the connection, including: third-party certificates, username / password combination...

AI Technical Summary

Problems solved by technology

PKI-based third-party certificates provide the most complete functions, but require extra effort to maintain a PKI certificate system

After OpenVPN2.0, the user name / password combination authentication method is introduced, which can omit the client certificate, but there is still a server certificate that needs to be used for encryption

The pre-shared key is the simplest, but at the same time it can only be used to establish a point-to-point VPN, and the current pre-shared key is encrypted based on a classical algorithm. The degree of confidentiality of this encryption depends on the complexity of the algorithm. The increasing availability of capabilities and the emergence of future quantum computers whose security is seriously threatened

[0004] The invention patent application with the application number 201310373510.9 discloses a method for updating and using keys in the power grid SSLVPN, which adopts a classic encryption method based on DH and RSA algorithms. The degree of confidentiality of this encryption depends on the complexity of the algorithm. The continuous improvement of contemporary computing power and the emergence of future quantum computers, its security is seriously threatened

SSLVPN is more suitable for remote access (Client-Site) of mobile users, and the support for (Client-Client) mode is not good enough

[0005] In the existing OpenVPN protocol, the interaction between the client and the server, and between the client and the client adopts a classic algorithm-based encryption method. The degree of confidentiality of this encryption depends on the complexity of the algorithm. Continuous provision and the emergence of future quantum computers whose security is seriously threatened

Images