Nuclear power industrial network quantum key distribution method

Abstract

The invention particularly relates to a nuclear power industrial network quantum key distribution method. The method comprises the following steps: step 1, deploying a nuclear power industrial network quantum key distribution architecture; and step 2, quantum key generation and distribution. According to the invention, the quantum cryptographic technology is combined with the existing classical cryptographic algorithm, the high-security quantum key is generated through the quantum random number generator, and a secure key distribution mechanism is designed and realized based on the characteristics of the nuclear power industrial network. And the security of the communication channel, the reliability of the key distribution process and the long-term security of the key are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of nuclear power industry network key distribution, and in particular to a nuclear power industry network quantum key distribution method. Background Art

[0002] With the continuous development of the integration of information technology and industrialization and digital power plants, the DCS system in the power production control area now communicates with the nuclear emergency system, environmental monitoring system, PI system and administrative office network in the management information area. The extension of this network has brought challenges to the network security protection of the DCS system. According to the "Regulations on the Security Protection of Power Monitoring Systems" (National Development and Reform Commission

[2014] No. 14), the power industrial control system mainly uses a one-way safety isolation device to ensure the one-way transmission of data from the production control area to the management information area. However, with the continuous development of network attack methods, especially the working principle of the one-way safety isolation device is familiar and mastered by attackers, there are still security defects in relying solely on the one-way safety isolation device to protect the regional boundaries of the power grid. Therefore, in view of the security defects of the one-way safety isolation device, it is necessary to study and adopt a new security mechanism to ensure the network security of the DCS system when exchanging data across regional boundaries.

[0003] With the rapid development of Internet technology, the importance of information security is increasing day by day. Privacy, integrity and authenticity are important aspects of information security. In many scenarios such as financial data transmission and military communication, both parties hope that the transmitted data cannot be eavesdropped, destroyed or forged by a third party. According to the design concept of modern cryptographic systems, encryption algorithms and MAC algorithms themselves can be made public. The security of cryptographic systems is based on encryption and authentication keys, which must remain private. Therefore, how to securely establish and manage a pair of keys between the two parties in communication becomes the key to the entire confidential communication process.

[0004] The modern cryptography method of establishing secure keys is based on asymmetric cryptographic systems such as RSA and ECC. The reason why non-complex cryptographic systems are difficult to break is that they are closely related to certain "difficult" mathematical problems. For example, the RSA cryptographic system is based on the problem of large number decomposition, and the ECC cryptographic system is based on the discrete logarithm problem on the elliptic curve. By setting security parameters, cryptographic designers make the cost and price of solving these problems far exceed the benefits of cracking the corresponding cryptographic system. However, this perception is changing with the rapid development of quantum computer technology. As early as 1994, a professor in the Department of Mathematics at the Massachusetts Institute of Technology proposed an algorithm running on a quantum computer, which can effectively solve large number decomposition and discrete logarithm problems in polynomial time. This means that once a large quantum computer is manufactured, the current public key cryptographic system will collapse.

[0005] In recent years, quantum computers have developed rapidly. Small quantum computer systems have moved from scientific research institutes to the industrial sector. Quantum computers can not only crack passwords, but also have broad application prospects in many scenarios such as biopharmaceuticals, optimization problems and data retrieval. Therefore, companies represented by giants such as Google, IBM and Microsoft have invested heavily in the research and development of quantum computers. With the continuous increase in industry investment, the industry expects that large-scale quantum computers that can crack the current public key cryptography system are expected to be successfully developed in about 10 years.

[0006] The current nuclear power industry network uses symmetric keys generated by classical cryptographic algorithms. The distribution and management of symmetric keys may be cracked by future quantum computing technology, and there are security flaws. Summary of the invention

[0007] The purpose of the present invention is to provide a quantum key distribution method for a nuclear power industrial network, combine quantum cryptography technology with existing classical cryptographic algorithms, generate highly secure quantum keys through a quantum random number generator, and design and implement a secure key distribution mechanism based on the characteristics of the nuclear power industrial network to ensure the security of the communication channel, the reliability of the key distribution process, and the long-term security of the key.

[0008] In order to achieve the above object, the present invention provides the following technical solutions:

[0009] A method for quantum key distribution in a nuclear power industry network comprises the following steps:

[0010] Step 1: Deploy the quantum key distribution architecture for nuclear power industrial networks;

[0011] Step 2: Quantum key generation and distribution.

[0012] As one of the feasible ways, step 1 is to deploy the quantum key distribution architecture of nuclear power industry network, including the following steps:

[0013] Deploy quantum random number generators, key management systems, and security gateway master devices in the information management area of ​​the nuclear power industrial network, and deploy security gateway slave devices in the production control area and office area of ​​the nuclear power industrial network;

[0014] The security gateway master device and the security gateway slave device establish an encryption network, and the quantum random number generator is connected to the key management system data interface.

[0015] As one possible implementation method, step 2, quantum key generation and distribution, includes the following steps:

[0016] Step 201: A quantum random number generator generates a quantum random number and sends it to a key management system;

[0017] Step 202: The key management system performs a randomness test on the quantum random number to obtain a quantum random number that meets the randomness test standard.

[0018] Step 203: The key management system generates a quantum key using a quantum random number that meets the randomness detection standard and stores the quantum key in a backup quantum key table;

[0019] Step 204: The key management system distributes the quantum key table to the security gateway master device;

[0020] Step 205: Initialize and run the security gateway master device;

[0021] Step 206: The security gateway master device distributes the quantum key to the security gateway slave device.

[0022] As one of the achievable methods, in step 203, the key management system generates a quantum key using a quantum random number that meets the randomness detection standard and stores the quantum key in a quantum key table, including the following steps:

[0023] The key management system uses quantum random numbers that meet the randomness detection standards to generate quantum keys that meet the requirements of the national encryption algorithm, and encrypts and stores them in the quantum key table.

[0024] As one of the achievable methods, in step 204, the key management system distributes the quantum key table to the integrated security gateway master device, including the following steps:

[0025] The key management system provides device management services and quantum key update services for the main security gateway device; the quantum key update service strategy is uniformly controlled by the key management system;

[0026] The key management system distributes the quantum key table to the security gateway master device according to the quantum key update service policy and records it in the quantum key table in use;

[0027] The key management system updates the quantum key table distributed by the security gateway master device, re-records it into the in-use quantum key table, and records the last distributed quantum key table into the historical quantum key table;

[0028] The key management system manages the above quantum key information in a unified manner.

[0029] As one of the achievable methods, in step 204, the key management system distributes the quantum key table to the integrated security gateway master device, specifically including the following steps:

[0030] Register the security gateway master device, and perform group management and group quantum key update service policy management on the security gateway master device;

[0031] The key management system periodically selects a new quantum key table from the quantum key table according to the quantum key update service policy of the group where the security gateway master device is located, puts it into the quantum key table in use, and records the version. At the same time, the previous version of the quantum key table is written into the historical quantum key table;

[0032] The key management system manages the above quantum key information in a unified manner.

[0033] As one possible implementation method, step 205, initializing and running the security gateway master device, includes the following steps:

[0034] When the security gateway master device is initialized, it registers the information with the key management system and obtains the quantum key table offline;

[0035] When the security gateway main device is running, it periodically applies to the key management system to check the version of the quantum key table. If there is a new version of the quantum key table, the key management system will securely distribute the new version of the quantum key table to the security gateway main device and establish a quantum key table on the security gateway main device for management.

[0036] As one of the achievable methods, step 205, initializing and running the security gateway master device, specifically includes the following steps:

[0037] When the security gateway master device is initialized, the encrypted public and private keys, certificates, and key encryption keys KEK generated by the key management system are written;

[0038] When the main device of the security gateway is running, it automatically initiates a quantum key table application request to the key management system according to the local timing strategy. When downloading a new version of the quantum key table, it negotiates the secure channel message key by establishing a secure channel to achieve encrypted transmission of key information.

[0039] The key management system selects the quantum key in the quantum key table in use according to the version information of the quantum key table corresponding to the integrated security gateway master device, uses the corresponding key encryption key KEK to symmetrically encrypt the key information, and then sends it to the security gateway master device through a secure channel;

[0040] When the integrated security gateway master device receives the quantum key table, it uses the local key encryption key KEY to decrypt and store it; the distribution process is executed regularly. If the security gateway master device cannot connect to the key management system, it will temporarily continue to use the previous version of the quantum key table.

[0041] As one of the achievable methods, step 206, the security gateway master device distributes the quantum key to the security gateway slave device, including the following steps:

[0042] When the security gateway is initialized from the device, it registers the information with the key management system and obtains the quantum key offline;

[0043] When the security gateway slave device is connected to the security gateway master device, the security gateway master device further sends the key in the quantum key table to the security gateway slave device through a secure channel.

[0044] As one of the achievable methods, step 206, the security gateway master device distributes the quantum key to the security gateway slave device, specifically including the following steps:

[0045] The security gateway device sets the initiator before use. The initiator can be initiated by the security gateway master device to the security gateway slave device, or by the security gateway slave device to the security gateway master device.

[0046] When the security gateway master device receives the connection request and completes the identity authentication, it calculates the quantum key index position according to the number of the security gateway slave device, and uses the encryption public key of the security gateway slave device to encrypt the corresponding quantum key, and after standard packaging, sends it to the security gateway slave device;

[0047] After the security gateway slave device is started, it sends a connection request to the security gateway master device. After the connection is successful, it automatically receives quantum key information, uses its own private key to perform key calculations, and decrypts it as a key component, which is used together with the original negotiated session key.

[0048] Beneficial technical effects of the present invention:

[0049] The quantum key distribution method for the nuclear power industry network of the present invention adopts a quantum random number generator as a quantum key generation source, and utilizes its quantum true random physical properties to fundamentally improve the unpredictability and security of the quantum key, thereby improving the security of the quantum key; directly using the quantum key as the key encryption key avoids the transmission risk that may exist in the traditional key negotiation process, enhances the security of the quantum key distribution process, and reduces the quantum key transmission risk; through a multi-level quantum key distribution mode, while improving the efficiency of quantum key distribution, the security isolation of quantum keys is achieved; even if there is a single point of failure in the network, the security and stability of the overall network can be effectively guaranteed, and the efficiency and isolation of quantum key distribution are improved; the characteristics and needs of the nuclear power industry network are fully considered, and quantum key distribution can be centrally and uniformly managed, providing an efficient and secure key distribution solution for the nuclear power industry field, which meets the needs of the nuclear power industry network. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 This is a structural diagram of an embodiment of the nuclear power industry network quantum key distribution architecture of the present invention. DETAILED DESCRIPTION

[0051] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by technicians in the technical field to which this application belongs; the terms used in the specification of the application are only for the purpose of describing specific embodiments and are not intended to limit this application; the terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned figure descriptions are intended to cover non-exclusive inclusions.

[0052] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0053] The technical solution of the present invention is clearly and completely described below in conjunction with the accompanying drawings and specific embodiments.

[0054] Quantum secure communication is a cutting-edge communication security technology that has emerged in recent years. It uses quantum key distribution technology as its core, encrypts and protects communication data, and can authenticate the data communication source. It has the characteristics of high real-time performance, high security, and high reliability. Quantum secure communication technology has been applied in the fields of military industry and metropolitan area network communication, and has pilot projects in some industrial control network fields, with excellent results.

[0055] Random numbers have important applications in different aspects of social life, especially in the fields of information security and cryptographic applications. Currently, common random number generators mainly rely on computer software simulation to generate pseudo-random numbers, or extract random numbers from certain classical physical noises. However, classical physical processes can be simulated if all variables are mastered, so it is necessary to study and adopt more effective means to ensure key security.

[0056] The randomness generated by some quantum physical processes is completely random, such as the collapse process of quantum states. QKD technology and quantum random number generators are technologies that generate random numbers based on quantum physical processes. The random numbers obtained are more random, unpredictable, and non-replicable. When used as a key source for cryptographic products, they have a larger key space and are more resistant to brute force cracking.

[0057] The cryptographic technology that uses quantum key distribution or quantum keys generated by quantum random number generators, combined with classical cryptographic algorithms and protocols, to perform encryption and identity authentication is called quantum cryptography.

[0058] The current nuclear power industry network uses symmetric keys generated by classical cryptographic algorithms. The distribution and management of symmetric keys may be cracked by future quantum computing technology, and there are security flaws.

[0059] The present invention provides an embodiment of a quantum key distribution method for a nuclear power industry network, which combines quantum cryptography technology with existing classical cryptographic algorithms, generates highly secure quantum keys through a quantum random number generator, and designs and implements a secure key distribution mechanism based on the characteristics of the nuclear power industry network to ensure the security of the communication channel, the reliability of the key distribution process, and the long-term security of the key.

[0060] The nuclear power industry network quantum key distribution method described in this embodiment includes the following steps:

[0061] Step 1: Deploy the quantum key distribution architecture for nuclear power industrial networks;

[0062] Step 2: Quantum key generation and distribution.

[0063] See also Figure 1 In this embodiment, as one of the achievable methods, step 1, deploying a quantum key distribution architecture for a nuclear power industry network, includes the following steps:

[0064] Deploy quantum random number generators, key management systems, and security gateway master devices in the information management area of ​​the nuclear power industrial network, and deploy security gateway slave devices in the production control area and office area of ​​the nuclear power industrial network;

[0065] The security gateway master device and the security gateway slave device establish an encrypted network.

[0066] In this embodiment, as one of the feasible ways, the quantum random number generator and the key management system are connected through a PCI-E 4 high-speed interface.

[0067] The quantum random number generator and key management system serve as the source and management center of quantum key generation. After encrypting and encapsulating the quantum key, they are distributed to the security gateway slave devices through the security gateway master device. The security gateway master device serves as the network encryption transmission master device, and the security gateway slave devices in the production control area of ​​the nuclear power industrial network serve as data encryption transmission nodes. The security gateway slave devices in the office area of ​​the nuclear power industrial network are used for terminal encryption transmission.

[0068] In this embodiment, as one of the achievable methods, step 2, quantum key generation and distribution, includes the following steps:

[0069] Step 201: A quantum random number generator generates a quantum random number and sends it to a key management system;

[0070] Step 202: The key management system performs a randomness test on the quantum random number to obtain a quantum random number that meets the randomness test standard.

[0071] Step 203: The key management system generates a quantum key using a quantum random number that meets the randomness detection standard and stores the quantum key in a backup quantum key table;

[0072] Step 204: The key management system distributes the quantum key table to the security gateway master device;

[0073] Step 205: Initialize and run the security gateway master device;

[0074] Step 206: The security gateway master device distributes the quantum key to the security gateway slave device.

[0075] In step 201, the quantum random number generated by the quantum random number generator is unpredictable and irreproducible, which ensures the extremely high security of the quantum key. In step 202, the quantum random number that meets the randomness detection standard meets the quantum key generation requirements.

[0076] In this embodiment, as one of the achievable methods, in step 203, the key management system generates a quantum key using a quantum random number that meets the randomness detection standard and stores it in a quantum key table, including the following steps:

[0077] The key management system uses quantum random numbers that meet the randomness detection standards to generate quantum keys that meet the requirements of the national encryption algorithm in accordance with the "GM / T 0051-2016 Technical Specifications for Symmetric Key Management of Cryptographic Equipment Management" issued by the State Cryptography Administration, and encrypts and stores them in the quantum key table.

[0078] In this embodiment, as one of the achievable methods, the national secret algorithm includes SM1, SM4, SM7 and ZUC Zu Chongzhi algorithm.

[0079] In this embodiment, as one of the achievable methods, step 204, the key management system distributes the quantum key table to the integrated security gateway master device, including the following steps:

[0080] The key management system provides device management services and quantum key update services for the main security gateway device; the quantum key update service strategy is uniformly controlled by the key management system;

[0081] The key management system distributes the quantum key table to the security gateway master device according to the quantum key update service policy and records it in the quantum key table in use;

[0082] The key management system updates the quantum key table distributed by the security gateway master device, re-records it into the in-use quantum key table, and records the last distributed quantum key table into the historical quantum key table;

[0083] The key management system manages the above quantum key information in a unified manner.

[0084] In this embodiment, as one of the achievable methods, step 204, the key management system distributes the quantum key table to the integrated security gateway master device, specifically including the following steps:

[0085] Register the security gateway master device, and perform group management and group quantum key update service policy management on the security gateway master device;

[0086] The key management system periodically selects a new quantum key table from the quantum key table according to the quantum key update service policy of the group where the security gateway master device is located, puts it into the quantum key table in use, and records the version. At the same time, the previous version of the quantum key table is written into the historical quantum key table;

[0087] The key management system manages the above quantum key information in a unified manner.

[0088] In this embodiment, as one of the feasible methods, the key management system uniformly manages the quantum key information, including archiving, restoration and destruction.

[0089] In this embodiment, as one of the achievable methods, step 205, initializing and running the security gateway master device, includes the following steps:

[0090] When the security gateway master device is initialized, it registers the information with the key management system and obtains the quantum key table offline;

[0091] When the security gateway main device is running, it periodically applies to the key management system to check the version of the quantum key table. If there is a new version of the quantum key table, the key management system will securely distribute the new version of the quantum key table to the security gateway main device and establish a quantum key table on the security gateway main device for management.

[0092] In this embodiment, as one of the achievable methods, step 205, initializing and running the security gateway master device, specifically includes the following steps:

[0093] When the security gateway master device is initialized, the encrypted public and private keys, certificates, and key encryption keys KEK generated by the key management system are written;

[0094] When the main device of the security gateway is running, it automatically initiates a quantum key table application request to the key management system according to the local timing strategy. When downloading a new version of the quantum key table, it negotiates the secure channel message key by establishing a secure channel to achieve encrypted transmission of key information. Its standard process complies with the requirements of the "GM / T 0050-2016 Technical Specifications for Cryptographic Equipment Management" issued by the State Cryptography Administration.

[0095] The key management system selects the quantum key in the quantum key table in use according to the version information of the quantum key table corresponding to the integrated security gateway master device, uses the corresponding key encryption key KEK to symmetrically encrypt the key information, and then sends it to the security gateway master device through a secure channel;

[0096] When the integrated security gateway master device receives the quantum key table, it uses the local key encryption key KEY to decrypt and store it; the distribution process is executed regularly. If the security gateway master device cannot connect to the key management system, it will temporarily continue to use the previous version of the quantum key table to ensure system stability.

[0097] In this embodiment, as one of the achievable methods, step 206, the security gateway master device distributes the quantum key to the security gateway slave device, including the following steps:

[0098] When the security gateway is initialized from the device, it registers the information with the key management system and obtains the quantum key offline;

[0099] When the security gateway slave device is connected to the security gateway master device, the security gateway master device further sends the key in the quantum key table to the security gateway slave device through a secure channel.

[0100] The quantum key distribution process implements a multi-level quantum key distribution mode to ensure the secure transmission and isolation of quantum keys throughout the network. Even if an abnormality occurs in a security gateway slave device, it will not affect the link security of other security gateway devices.

[0101] In this embodiment, as one of the achievable methods, step 206, the security gateway master device distributes the quantum key to the security gateway slave device, specifically including the following steps:

[0102] The security gateway device sets the initiator before use. The initiator can be initiated by the security gateway master device to the security gateway slave device, or by the security gateway slave device to the security gateway master device.

[0103] When the security gateway master device receives the connection request and completes the identity authentication, it calculates the quantum key index position according to the number of the security gateway slave device, and uses the encryption public key of the security gateway slave device to encrypt the corresponding quantum key, and after standard packaging, sends it to the security gateway slave device;

[0104] After the security gateway slave device is started, it sends a connection request to the security gateway master device. After the connection is successful, it automatically receives quantum key information, uses its own private key to perform key calculations, and decrypts it as a key component, which is used together with the original negotiated session key.

[0105] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A method for quantum key distribution in nuclear power industry network, characterized in that: The steps include: Step 1: Deploy the quantum key distribution architecture for nuclear power industrial networks; Step 2: Quantum key generation and distribution.

2. The method for quantum key distribution in nuclear power industry network according to claim 1, characterized in that: Step 1: Deploy the quantum key distribution architecture for the nuclear power industry network, including the following steps: Deploy quantum random number generators, key management systems, and security gateway master devices in the information management area of ​​the nuclear power industrial network, and deploy security gateway slave devices in the production control area and office area of ​​the nuclear power industrial network; The security gateway master device and the security gateway slave device establish an encryption network, and the quantum random number generator is connected to the key management system data interface.

3. The method for quantum key distribution in nuclear power industry network according to claim 2, characterized in that: Step 2, quantum key generation and distribution, includes the following steps: Step 201: A quantum random number generator generates a quantum random number and sends it to a key management system; Step 202: The key management system performs a randomness test on the quantum random number to obtain a quantum random number that meets the randomness test standard. Step 203: The key management system generates a quantum key using a quantum random number that meets the randomness detection standard and stores the quantum key in a backup quantum key table; Step 204: The key management system distributes the quantum key table to the security gateway master device; Step 205: Initialize and run the security gateway master device; Step 206: The security gateway master device distributes the quantum key to the security gateway slave device.

4. The method for quantum key distribution in nuclear power industry network according to claim 3 is characterized in that: Step 203, the key management system generates a quantum key using a quantum random number that meets the randomness detection standard and stores it in a quantum key table, including the following steps: The key management system uses quantum random numbers that meet the randomness detection standards to generate quantum keys that meet the requirements of the national encryption algorithm, and encrypts and stores them in the quantum key table.

5. The method for quantum key distribution in nuclear power industry network according to claim 3, characterized in that: Step 204, the key management system distributes the quantum key table to the integrated security gateway master device, including the following steps: The key management system provides device management services and quantum key update services for the main security gateway device; the quantum key update service strategy is uniformly controlled by the key management system; The key management system distributes the quantum key table to the security gateway master device according to the quantum key update service policy and records it in the quantum key table in use; The key management system updates the quantum key table distributed by the security gateway master device, re-records it into the in-use quantum key table, and records the last distributed quantum key table into the historical quantum key table; The key management system manages the above quantum key information in a unified manner.

6. The method for quantum key distribution in nuclear power industry network according to claim 5, characterized in that: Step 204, the key management system distributes the quantum key table to the integrated security gateway master device, specifically including the following steps: Register the security gateway master device, and perform group management and group quantum key update service policy management on the security gateway master device; The key management system periodically selects a new quantum key table from the quantum key table according to the quantum key update service policy of the group where the security gateway master device is located, puts it into the quantum key table in use, and records the version. At the same time, the previous version of the quantum key table is written into the historical quantum key table; The key management system manages the above quantum key information in a unified manner.

7. The method for quantum key distribution in nuclear power industry network according to claim 3, characterized in that: Step 205, initialization and operation of the security gateway master device, includes the following steps: When the security gateway master device is initialized, it registers the information with the key management system and obtains the quantum key table offline; When the security gateway main device is running, it periodically applies to the key management system to check the version of the quantum key table. If there is a new version of the quantum key table, the key management system will securely distribute the new version of the quantum key table to the security gateway main device and establish a quantum key table on the security gateway main device for management.

8. The method for quantum key distribution in nuclear power industry network according to claim 7, characterized in that: Step 205, initialization and operation of the security gateway master device, specifically includes the following steps: When the security gateway master device is initialized, the encrypted public and private keys, certificates, and key encryption keys KEK generated by the key management system are written; When the main device of the security gateway is running, it automatically initiates a quantum key table application request to the key management system according to the local timing strategy. When downloading a new version of the quantum key table, it negotiates the secure channel message key by establishing a secure channel to achieve encrypted transmission of key information; The key management system selects the quantum key in the quantum key table in use according to the version information of the quantum key table corresponding to the integrated security gateway master device, uses the corresponding key encryption key KEK to symmetrically encrypt the key information, and then sends it to the security gateway master device through a secure channel; When the integrated security gateway master device receives the quantum key table, it uses the local key encryption key KEY to decrypt and store it; the distribution process is executed regularly. If the security gateway master device cannot connect to the key management system, it will temporarily continue to use the previous version of the quantum key table.

9. The method for quantum key distribution in nuclear power industry network according to claim 3, characterized in that: Step 206, the security gateway master device distributes the quantum key to the security gateway slave device, including the following steps: When the security gateway is initialized from the device, it registers the information with the key management system and obtains the quantum key offline; When the security gateway slave device is connected to the security gateway master device, the security gateway master device further sends the key in the quantum key table to the security gateway slave device through a secure channel.

10. The method for quantum key distribution in nuclear power industry network according to claim 9, characterized in that: Step 206, the security gateway master device distributes the quantum key to the security gateway slave device, specifically including the following steps: The security gateway device sets the initiator before use. The initiator can be initiated by the security gateway master device to the security gateway slave device, or by the security gateway slave device to the security gateway master device. When the security gateway master device receives the connection request and completes the identity authentication, it calculates the quantum key index position according to the number of the security gateway slave device, and uses the encryption public key of the security gateway slave device to encrypt the corresponding quantum key, and after standard packaging, sends it to the security gateway slave device; After the security gateway slave device is started, it sends a connection request to the security gateway master device. After the connection is successful, it automatically receives quantum key information, uses its own private key to perform key calculations, and decrypts it as a key component, which is used together with the original negotiated session key.

Images