Quantum key dynamic management method and system of power wireless communication network

Abstract

The invention discloses a quantum key dynamic management method and system of a power wireless communication network. The method comprises the following steps: constructing a three-level service security model: dividing power services into high, middle and low three-level security levels, and differentially configuring key basic parameters; secondly, proposing a dynamic key updating algorithm, adjusting a key updating period and a quantum key window in real time based on a communication state and a flow load, and dynamically expanding the updating period and the size of the key window according to the change of throughput; and finally, setting an attack response strategy, automatically shortening an update period and enhancing key strength when an anomaly is detected, and improving the security of a power wireless communication scene. According to the quantum key dynamic management method disclosed by the invention, the problem of security risk caused by the fact that a traditional fixed quantum key update period cannot meet the communication state of a power wireless communication network and the real-time change of traffic load is solved.

Description

TECHNICAL FIELD

[0001] The application belongs to the field of encrypted communication, and particularly relates to a quantum key dynamic management method and system for a power wireless communication network. BACKGROUND

[0002] As a new type of communication infrastructure of the smart grid, the power wireless communication network is widely deployed in the wireless network of the power system distribution and utilization side equipment monitoring, power transmission line inspection, distributed new energy regulation and control and the like, and has the characteristics of wider public network exposure and more dispersed access positions. In order to guarantee the security and confidentiality of the power wireless communication network, the quantum key emerges as the times require, and the quantum key provides an unconditional secure encryption method, but in the wireless scenario, the communication mode of "one-time one-key" is usually not selected due to environmental conditions. At present, a fixed quantum key update period is widely used in the industry, and with the passage of time and continuous use, the quantum key may face the risk of being cracked.

[0003] Therefore, there is an urgent need for a method for realizing quantum key dynamic management. SUMMARY

[0004] The application provides a quantum key dynamic management method and system for a power wireless communication network, which solves the problems of lack of business classification, lagging key management update and weak quantum resistance of the traditional scheme through a three-level business security model, a dynamic key update algorithm, a self-adaptive key window mechanism and an abnormal attack response strategy.

[0005] TECHNICAL SCHEME

[0006] The application provides a quantum key dynamic management method for a power wireless communication network, comprising:

[0007] analyzing a received business data packet of a power wireless node, and acquiring an initial quantum key update period from preset initial quantum key parameters according to a security level of the business data packet as the current quantum key update period , acquiring an initial quantum key window size as the current quantum key window size ;

[0008] generating a current quantum key corresponding to the business data packet based on the , filling the current quantum key into a local quantum key window through an encryption channel, and acquiring the current quantum key from the local quantum key window by the power wireless node;

[0009] Real-time monitoring of the state of the encrypted channel, according to the preset condition to determine whether it appears abnormal, if the abnormal judgment, the calculation of the new update cycle With the new window size , the quantum key distribution equipment is based on With Generate new quantum key, the power wireless node uses the new quantum key instead of the current quantum key.

[0010] Further, the security level includes low security level, medium security level and high security level, the preset initial quantum key parameter includes:

[0011] High security level: ;

[0012] Medium security level: ;

[0013] Low security level: .

[0014] Further, the power wireless node is a terminal device deployed in a power communication network, including an encryption end power wireless node and a decryption end power wireless node, the encryption end power wireless node synchronizes And The decryption end power wireless node; the Indicates the number of quantum keys that can be recycled by the power wireless node within a certain period.

[0015] Further, the quantum key distribution equipment generates quantum keys using the BB84 protocol and outputs the key source through a quantum channel.

[0016] Further, the filling of the quantum key into the local quantum key window includes adding a serial number to the current quantum key filled into the local quantum key window and initializing a local quantum key index pointer.

[0017] Further, the real-time monitoring of the state of the encrypted channel includes: collecting the average bit error rate of the encrypted channel within a certain time through a communication quality probe , collecting the throughput of the security level corresponding to the service data packet within a certain time through a flow sensor ; the method of heart beat detection is used to monitor the on-off state of the encrypted channel, and if the encrypted channel is in the disconnected state, the duration t of the encrypted channel is recorded.

[0018] Further, the preset condition includes:

[0019]

[0020]

[0021]

[0022] wherein is the service flow threshold of the power service system, and any of the above formulas is satisfied to determine that the encryption channel is abnormal.

[0023] Further, the new update period T is calculated and the new window size W is calculated , comprising:

[0024] The priority index Priority of the service data packet is calculated

[0025]

[0026] The new update period T is calculated new :

[0027]

[0028] The new window size W is calculated :

[0029] .

[0030] Further, the dynamic updating of the existing quantum key comprises:

[0031] If the number of the quantum keys is relatively large, the new quantum keys are filled in until the target number is reached; if the number of the quantum keys is relatively small, the quantum keys with the smallest serial numbers are discarded in sequence until the target number is reached.

[0032] The application further provides a quantum key dynamic management system of a power wireless communication network, comprising:

[0033] A service grading module is used to parse the service data packet of the received power wireless node, and according to the security level of the service data packet, the initial quantum key update period T is obtained from the preset initial quantum key parameters as the current quantum key update period T , the initial quantum key window size W is obtained as the current quantum key window size W .

[0034] A quantum key distribution module is used to distribute the quantum keys based on the , ​​​​generating a current quantum key corresponding to the service data packet, and filling the current quantum key into a local quantum key window through an encryption channel, wherein the power wireless node obtains the current quantum key from the local quantum key window;

[0035] a dynamic management module, configured to monitor a state of the encryption channel in real time, and determine whether an exception occurs according to a preset condition, and if the exception is determined, calculate a new update period and a new window size , the quantum key distribution device generates a new quantum key based on and generates a new quantum key, and the power wireless node replaces the current quantum key with the new quantum key.

[0036] Advantages:

[0037] The unpredictability of quantum physical processes guarantees the intrinsic randomness and non-replicable characteristics of quantum key distribution. The application designs an automatic key update mechanism for communication states and service loads to replace the traditional fixed key update strategy. The quantum key parameters are adjusted according to the communication states and the traffic loads, thereby improving the robustness of high-speed data transmission with different security levels. Meanwhile, the size of the quantum key window is adaptively adjusted according to the preset update strategy, thereby preventing the problems of slow quantum key update frequency caused by dynamic changes of data transmission bandwidth and synchronization overhead caused by frequent updates. BRIEF DESCRIPTION OF DRAWINGS

[0038] Figure 1 FIG. 1 is a flowchart of a quantum key dynamic adjustment process;

[0039] Figure 2 FIG. 2 is a schematic diagram of a quantum key window working mechanism;

[0040] Figure 3 FIG. 3 is a structural schematic diagram of a quantum key dynamic management dynamic adjustment system. DETAILED DESCRIPTION

[0041] The application will be further illustrated in combination with the drawings and specific embodiments.

[0042] Embodiment 1

[0043] The embodiment provides a quantum key dynamic management method for a power wireless communication network. The whole process of dynamic adjustment of quantum key parameters is as shown in FIG. 1, and the specific steps are as follows: Figure 1

[0044] Step S1: Service security level division

[0045] ​Different services transmitted by stations in the power service system are divided into three security levels, high, medium and low, according to the importance, and initial quantum key parameters of each priority service are preset, including update period and window size , wherein is the number of quantum keys that can be recycled by the power wireless node within a certain period.

[0046] The power wireless node is a terminal device deployed in a power communication network, including an encryption end power wireless node and a decryption end power wireless node. The quantum key is a set of true random key sequences generated by a quantum key distribution device based on quantum physical principles. In this embodiment, the BB84 protocol is used to generate quantum keys, and the key source is provided to the dynamic management controller through a quantum channel.

[0047] In this embodiment, the initial quantum key parameters corresponding to different security levels are as follows:

[0048] High security level:

[0049] Medium security level:

[0050] Low security level:

[0051] Step S2: Load initial parameters

[0052] The power service system receives the power service data packet, parses the service type, and queries the initial quantum key parameters according to the security level of the service 、 . According to the initial quantum key parameters, the applied quantum key is filled into the local current quantum key window, and a serial number is added to the quantum key filled into the local current quantum key window, and the local quantum key index pointer is initialized. The encryption end power wireless node determines the encryption quantum key according to the quantum key serial number and the local quantum key index pointer.

[0053] Step S3: Real-time monitoring

[0054] The error rate of the encryption channel is collected through the communication quality probe , the throughput of the security level of the service data packet within a certain time , and the on-off state of the encryption channel is monitored based on the heartbeat detection method. If the encryption channel is in the disconnected state, the continuous disconnection time of the encryption channel is recorded.

[0055] The collection period is set to 1s in this embodiment. To reduce the dynamic fluctuations of the quantum key, a certain time period is selected to take the average value of i data obtained in this embodiment The average values of the throughput and the error rate are calculated according to the following formula:

[0056] Average throughput :

[0057] ,

[0058] Average error rate :

[0059]

[0060] Step S4: Abnormality judgment

[0061] Set traffic threshold , based on the , and the on-off state of the encryption channel to judge the abnormality, and if any of the judgment conditions is met, the encryption channel is judged to be abnormal, and the quantum key distribution executor at the encryption end triggers the dynamic update of the quantum key. The judgment conditions include:

[0062] Average throughput

[0063] Average error rate

[0064] The continuous disconnection time of the encryption channel (node offline time) is greater than or equal to 10s

[0065] Step S5: Perform dynamic update of quantum key

[0066] After the abnormality judgment of the service is obtained, the quantum key distribution device generates a new quantum key according to the calculated new update period and new window size to replace the existing key, so as to realize the dynamic update of the quantum key. The dynamic update of the quantum key mainly uses the method of changing the key application mode and reducing the key update frequency to update the key consumption rate. First, the priority index Priority of the service is calculated:

[0067]

[0068] Calculate the new update period:

[0069]

[0070] Calculate the new window size:

[0071]

[0072] In order to ensure the operability in actual operation, the following constraint conditions are set:

[0073] ,

[0074] According to the new update cycle and window size Set the new quantum key parameters and proceed to the next quantum key parameter update cycle. If the quantum key window... The cycle lengthens relative to the previous cycle, filling in new quantum keys until it reaches... Target quantity; if quantum key window Compared to the previous cycle, the number of quantum key sequences is reduced, discarding keys with smaller quantum key numbers until the number of sequences reaches the minimum. Target quantity. When the key update cycle arrives, all keys within the window are forcibly replaced. The arrival of the update cycle means that no anomaly is triggered within the entire update cycle; this is a timed key update strategy and does not involve adjustments to the cycle or window. Through the above design, the method of this invention has two modes: regular, normalized updates and anomaly-triggered updates.

[0075] like Figure 2 The diagram illustrates the key window mechanism in this embodiment, demonstrating the encrypted data packet transmission process between the sender and receiver under this mechanism. It includes key polling, multiplexing, and synchronization mechanisms, as detailed below:

[0076] The sender and receiver, according to Pre-set the same key window, to For example, the key window includes [Key A, Key B, Key C], and the initial state of the current key pointer is set to Key A. The sending end uses the keys in the window to encrypt and send data packets in sequence. In this embodiment, specifically: data packet 1 is encrypted using Key A, data packet 2 is encrypted using Key B, data packet 3 is encrypted using Key C, data packet 4 is encrypted using Key A again, and so on. The receiving end synchronously maintains the same key window and pointer position, and selects the corresponding key to decrypt according to the data packet sequence number.

[0077] If the window size expands to The sending end adds keys D and E, and the window becomes [key A, key B, key C, key D, key E]. The receiving end synchronizes the new window through key update messages, and the polling rule changes to: key A → key B → key C → key D → key E → key A.

[0078] The encrypted power wireless node will use the new encrypted quantum key. and The new quantum key is synchronized to the decryption end power wireless node. After the synchronization operation is completed, the power wireless node fills the new encryption end quantum key window into the new encryption end quantum key window, and performs the quantum key group sequence number addition operation and quantum key index pointer update operation.

[0079] Embodiment 2

[0080] The embodiment proposes a quantum key dynamic management dynamic adjustment system of a power wireless communication network, which runs the method of the foregoing embodiment, and the structure of the system is as follows Figure 3 The system comprises:

[0081] The quantum key distribution module is a hardware device for generating a true random key sequence based on quantum physics principles. The quantum key is generated by using the BB84 protocol, and the key source is provided to the dynamic management controller through the quantum channel.

[0082] The dynamic management controller module is a core processing unit for coordinating the key management process. It is responsible for receiving key data from the quantum key distribution device, scheduling the cooperative work of the business classification module and the state monitoring engine, and sending control instructions to the key distribution executor.

[0083] The business classification module receives power business data packets, analyzes the business type (such as protection control / monitoring collection / metering information), and determines the business level according to the preset security level mapping function, and outputs the security level identifier to the key policy library.

[0084] The state monitoring engine module is a processing unit for real-time collection of network state data. Real-time throughput data is collected through a flow sensor, and the bit error rate is collected through a communication quality probe. The monitoring period is 1s by default, and it contains two sub-modules of flow sensor and communication quality probe. The flow sensor is responsible for monitoring network traffic load, and uses the sliding window statistical method to calculate the throughput in real time. When the average throughput is abnormal, an alarm signal is triggered; the communication quality probe is responsible for detecting the communication quality of the wireless channel, and measures the bit error rate BER in real time, and triggers an abnormal signal.

[0085] The key policy library module is a secure database for storing key base parameters, which is responsible for storing the base key parameters of three-level business, and receiving real-time data from the state monitoring engine to provide a reference value for dynamic adjustment.

[0086] The key distribution executor module is a processing unit for executing dynamic adjustment and distribution of key parameters. Based on real-time state data, new parameters are calculated and updated key parameters are pushed to the power wireless node.

[0087] The power wireless node refers to a terminal device deployed in the power communication network. It is responsible for receiving parameter instructions from the key distribution executor, executing key window adjustment and key polling mechanism, and automatically triggering key resynchronization request when an abnormality is detected.

Claims

1. A quantum key dynamic management method for a power wireless communication network, characterized in that, The application relates to a quantum key distribution method and device. Analyzing a service data packet of the received power wireless node, obtaining an initial quantum key update period from preset initial quantum key parameters according to a security level of the service data packet as the current quantum key update period , obtaining an initial quantum key window size as the current quantum key window size ; The quantum key distribution device generates a current quantum key corresponding to the service data packet based on the , fills the current quantum key into a local quantum key window through an encryption channel, and the power wireless node obtains the current quantum key from the local quantum key window. Real-time monitoring of the state of the encryption channel, judging whether it is abnormal according to preset conditions, if an abnormal judgment is obtained, calculating a new update period With the new window size , the quantum key distribution device generates a new quantum key based on With The new quantum key is used by the power wireless node to replace the current quantum key.

2. The quantum key dynamic management method of claim 1, wherein, The security levels include a low security level, a medium security level and a high security level, and the preset initial quantum key parameter includes: High safety level: ; Medium security level: ; Low security level: .

3. The quantum key dynamic management method of claim 2, wherein, The power wireless node is a terminal device deployed in a power communication network, including an encryption-end power wireless node and a decryption-end power wireless node, the encryption-end power wireless node is configured to And Synchronize the quantum key to the decryption-end power wireless node; the Indicates the number of quantum keys that can be recycled by the power wireless node within a certain period.

4. The quantum key dynamic management method of claim 3, wherein, The quantum key distribution device generates a quantum key by adopting a BB84 protocol and outputs a key source through a quantum channel.

5. The quantum key dynamic management method of claim 4, wherein, The step of filling the quantum key into the local quantum key window comprises adding a serial number to the current quantum key filled into the local quantum key window and initializing a local quantum key index pointer.

6. The quantum key dynamic management method of claim 5, wherein, The real-time monitoring of the state of the encryption channel comprises: collecting the average bit error rate of the encryption channel in a certain time through a communication quality probe , collecting the throughput of the security level corresponding to the service data packet in a certain time through a flow sensor ; and the method based on heartbeat detection monitors the on-off state of the encryption channel, and records the continuous disconnection time t of the encryption channel if the encryption channel is in the disconnected state.

7. The quantum key dynamic management method of claim 6, wherein, The preset condition comprises: wherein is a service traffic threshold of the power service system, and any of the above formulas is satisfied, it is determined that the encryption channel is abnormal.

8. The quantum key dynamic management method of claim 7, wherein, said calculating a new update period with the new window size comprising: The priority index Priority of the service data packet is calculated. Calculating a new update period T new : Calculating new window size : 。 9. The quantum key dynamic management method of claim 8, wherein, The dynamic updating of the existing key comprises: If relative enlargement, fill in new quantum keys until reaching target number; if relative reduction, discard the quantum keys with the smallest serial number in turn until reaching target number.

10. A quantum key dynamic management system for a power wireless communication network, characterized by, The application relates to a quantum key distribution method and device. The service grading module is used to parse the service data packet of the received power wireless node, and obtain the initial quantum key update period from the preset initial quantum key parameter according to the security level of the service data packet As the current quantum key update period , obtaining the initial quantum key window size As the current quantum key window size ; A quantum key distribution module is used to distribute quantum keys via a quantum key distribution device based on the aforementioned... , The current quantum key corresponding to the service data packet is generated, and the current quantum key is filled into the local quantum key window through the encryption channel. The power wireless node obtains the current quantum key from the local quantum key window. The dynamic management module is used to monitor the state of the encryption channel in real time, judge whether an exception occurs according to preset conditions, calculate a new update period if an exception is judged with a new window size , the quantum key distribution device generates a new quantum key based on with the new quantum key is used by the power wireless node to replace the current quantum key.

Images