Method for fusing quantum key and classical key in SSL VPN

Abstract

The invention discloses a method for fusing a quantum key and a classical key in an SSLVPN (Secure Socket Layer Virtual Private Network). The method comprises the following steps of: sending an authentication request to a KM1 by utilizing a client; the client communicates with the KM1, handshake authentication work is completed, and connection safety is ensured; the server side sends an authentication request to communication between the KM2 and the KM2 to ensure connection security; a handshake protocol process is completed; generating a classic session key; the client and the server respectively send sub-key request commands to the KM1 and the KM2; the KM1 and the KM2 respectively respond to the quantum key request to the client and the server; judging whether the obtained quantum keys are consistent or not; if the quantum keys are consistent and sufficient, preferentially selecting the quantum keys as session keys; and performing secure communication by using the session key. According to the method, in the encryption communication process, the quantum key is preferentially used, and a one-time pad principle is followed, so that the security of SSLVPN data communication is greatly improved.

Description

technical field [0001] The invention relates to the field of quantum network and quantum key, in particular to a method for fusing quantum key and classical key in SSL VPN. Background technique [0002] SSL VPN refers to a new type of VPN technology that uses the SSL protocol to encrypt IP data links to achieve remote access. SSLVPN is the easiest and safest solution for remote users to access company sensitive data. [0003] The SSL protocol is mainly composed of the SSL handshake protocol and the SSL record protocol, which together provide authentication, encryption, and tamper-proof functions for application access connections. [0004] The SSL handshake protocol is similar to the IKE protocol in the IPSec protocol system. It is mainly used for mutual authentication between the client and the server. The MAC (MessageAuthenticationCode-Message Authentication Code) algorithm and the negotiation encryption algorithm are mainly used for the generated and used SSL record prot...

AI Technical Summary

Problems solved by technology

Traditional cryptography is based on the computational complexity of mathematical algorithms and cannot guarantee the absolute security of keys

Images