An intelligent data operation and maintenance system for quantum key distribution network
By designing an intelligent data operation and maintenance system in the quantum key distribution network, real-time status monitoring and automated fault handling are realized, which solves the problem of long fault handling time in the existing technology and improves the reliability and efficiency of data encryption services.
Patent Information
- Application Number
- CN202011626755.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2020-12-30
- Publication Date
- 2025-01-21
- Estimated Expiration
- 2040-12-30
AI Technical Summary
The operation and maintenance system of the existing quantum key distribution network cannot detect abnormalities as soon as possible and handle faults in time, resulting in a long fault processing time, affecting the reliability of data encryption services.
An intelligent data operation and maintenance system is designed to realize real-time status monitoring and automated fault handling of the quantum key distribution network through data collection strategies, business characteristic value strategies and exception handling strategies.
It achieves real-time fault detection and automated processing of the quantum key distribution network, significantly shortens fault processing time, and improves the reliability and efficiency of data encryption services.
Smart Images

Figure CN114765535B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to an operation and maintenance system of a quantum key distribution network, and more specifically to an intelligent data operation and maintenance system of a quantum key distribution network. Background Art
[0002] At present, the quantum key distribution network system is a new type of confidential communication network system with quantum keys as its core business. The business, performance data and equipment networking methods involved in this network system are very different from those of the classical optical communication network. At the same time, most quantum key distribution network systems provide encryption services for business data with high confidentiality requirements and high timeliness requirements at the enterprise and national levels. Therefore, when an abnormality occurs in the quantum key distribution network, it is required to handle the fault very quickly. Sometimes, even if the data encryption can be restored within 1 hour, it is considered too late, which will have an extremely serious impact on enterprises, government departments and quantum companies. Due to the particularity of the quantum key distribution network system, when the network system fails, how to quickly detect the fault and issue an alarm is a technical problem that needs to be solved urgently.
[0003] The patent application number 201811341135.9 discloses a quantum secure communication network system based on quantum key distribution technology and its application. The quantum secure communication network system mentioned therein also includes a management center, which manages the equipment, keys, strategies, operation and maintenance, and operation of the quantum secure communication network. For example, the equipment management center manages the access to networking equipment; the key management center manages the keys required for cryptographic algorithms in network operation; the strategy operation and maintenance management center manages the operation modes of traditional network equipment, security equipment, quantum equipment, etc.; the operation and maintenance management center manages the operation status of the entire network equipment; and the operation management center performs billing, service quality and other statistics based on business transmission. However, it does not specifically explain how the operation and maintenance management center manages the operation status of the entire network equipment.
[0004] The current operation and maintenance system for quantum key distribution networks collects device / link service performance data, analyzes the collected working parameters, and then judges faults. For example, the real-time working parameters of each device on the device or communication link are collected, and then the collected working parameters are compared with the preset normal working parameters. If the collected working parameters exceed the range corresponding to the preset normal working parameters, it means that the working state of the device is abnormal and the device needs to be maintained. However, the current quantum key distribution network operation and maintenance system has serious defects in collecting device / link service performance data, judging faults, handling faults, and optimizing network performance. In the current operation and maintenance process, many of these three functions are performed by manual operations.
[0005] In addition, the current operation and maintenance system of the quantum key distribution network involves a large number of complex types of equipment, and the monitoring of the working parameters of each device is separate and scattered, lacking a systematic connection of these functions. Even if the working status reported by each device is normal, there may be an accumulation of errors, resulting in the amount of generated keys not meeting the design indicators. In the existing technology, fault warnings performed by monitoring the working parameters of the equipment will result in inaccurate warning results, resulting in the inability to detect abnormalities, locate causes, and solve problems in the first place, causing extremely serious consequences.
[0006] In addition, the existing network management system is not designed according to the characteristics of the quantum key distribution network. The current network management system is based on the alarm of the equipment, and does not take the core business (key, coding rate) of the quantum key distribution network as the main entry point. The existing network management system is used to check the status of the quantum key distribution network and troubleshoot the faults very slowly, and requires manual observation of historical data, alarms and logs. For example, it takes one day for two people to conduct a routine inspection of the performance of 131 Beijing-Shanghai trunk quantum links, which causes a long delay in monitoring and early warning of faults. In addition, the existing network management system does not have intelligent unattended functions, especially the ability to handle faults. When a link / equipment fails, especially when the quantum device and the key management terminal classical link are abnormal, a manual restart is required to check whether the fault has been eliminated. This may cause the equipment service (such as coding rate) to be interrupted for a long time (several hours) before the service is restored through manual restart. The existing network management system does not have the ability to optimize business performance. The current network management does not optimize business performance according to the status of the link. For example, based on the short-board effect of the trunk line, it does not optimize the performance of links with poor key generation to play the role of peak shaving and valley filling. Summary of the invention
[0007] The technical problem to be solved by the present invention is to provide an intelligent data operation and maintenance system for a quantum key distribution network to solve the technical problems in the prior art that anomalies cannot be discovered in the first time and that it takes a long time to handle faults.
[0008] The present invention solves the above technical problems through the following technical solutions: an intelligent data operation and maintenance system for a quantum key distribution network, including: a data collection strategy, a business characteristic value strategy, and an exception handling strategy, wherein the data collection strategy performs intelligent data collection according to the business characteristic value strategy, the business characteristic value strategy establishes corresponding characteristic values according to the normal state and abnormal state of the corresponding business data and determines the corresponding processing strategy according to the corresponding characteristic values, and the exception handling strategy combines the characteristics of the quantum key distribution network, collects the real-time status of the device / link and compares it with the characteristic value, and then adopts the correct corresponding processing strategy.
[0009] Furthermore, the data collection strategy mainly includes two parts:
[0010] (1) Collect real-time business data and equipment performance data based on specific business characteristic value strategies, and also collect control processes in logs;
[0011] (2) Establish a priori data model based on priori theory, and use the priori data model to establish the normal data range and the alarm data model library.
[0012] Furthermore, the business characteristic value strategy specifically includes three parts of the strategy system:
[0013] (1) Quantum communication link key quantity characteristic value strategy system;
[0014] (2) Quantum link coding rate data characteristic value strategy system;
[0015] (3) Status check eigenvalue strategy system for quantum communication links / devices.
[0016] Furthermore, the exception handling strategy judges the collected data and standards, and then performs a comprehensive inspection according to the corresponding process based on the judgment results. When performing the comprehensive inspection, the link and equipment need to be restarted and self-checked according to the inspection results.
[0017] Furthermore, for the quantum communication link key quantity characteristic value strategy system, the data collection strategy includes step S101, periodically collecting the first generated key quantity of the quantum key distribution network, and obtaining a first preset threshold corresponding to the first generated key quantity.
[0018] Further, the obtaining of a first preset threshold corresponding to the first generated key amount includes:
[0019] The first preset threshold is calculated using a preset priori data model corresponding to background parameters, or the first preset threshold is preset, wherein the background parameters include: link attenuation and total quantum signal attenuation.
[0020] Further, for the quantum link coding rate data characteristic value strategy system, the data collection strategy includes step S201, obtaining the first coding rate data of the quantum key distribution network in the current period, calculating the difference between the first coding rate data and the coding rate data corresponding to the previous period, and judging whether the difference is not less than the third preset threshold, or judging whether the average value of the first coding rate data corresponding to the current period is greater than the fourth preset threshold, or judging whether the interruption duration of the first coding rate data is not less than the fifth preset threshold, or judging whether the duration of the first coding rate data is lower than the sixth preset threshold, or judging whether the change waveform of the first coding rate data appears a sawtooth wave, a spike wave or a rectangular wave, or judging whether the first coding rate data is lower than the seventh preset threshold, or judging whether the duration of the first coding rate data being lower than the seventh preset threshold is greater than the eighth preset threshold. If the judgment result is no, the device operation data of the communication link is collected.
[0021] Furthermore, for the status check characteristic value strategy system of the quantum communication link / device, the data collection strategy includes step S301, obtaining log control process data, and judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are normal based on the log control process data; if so, collecting the device operation data of the communication link.
[0022] Furthermore, the quantum communication link key generation characteristic value strategy system specifically performs the following steps: Step S102, judging whether the first generated key amount is greater than the first preset threshold, or judging whether the change of the first generated key amount relative to the key amount generated in the previous cycle is zero, or judging whether the change rate of the first generated key amount corresponding to the current cycle exceeds the second preset threshold; Step S103, if so, outputting an alarm signal, and taking the first generated key amount as the first abnormal characteristic value.
[0023] Furthermore, the quantum communication link key quantity characteristic value strategy system also performs the following steps:
[0024] Step S104, determining whether there is a feature value identical to the first abnormal feature value in the abnormal feature value library;
[0025] Step S105: if not, adding the first abnormal feature value to the abnormal feature value library.
[0026] Furthermore, the quantum link coding rate data characteristic value strategy system specifically performs the following steps:
[0027] Step S202, determining whether any item of the collected equipment operation data result value is within a preset range; if not within the preset range, taking the equipment operation data result value exceeding the preset range as the second abnormal characteristic value, and outputting an alarm message, wherein the equipment operation data includes: the signal state error rate of the current cycle, the detection count ratio of the current cycle, the delayed scanning peak number of the current cycle, the dark count of the current cycle, and the signal state deception state ratio of the current cycle;
[0028] Step S203: output an alarm signal, and use the scan result value corresponding to the judgment result as the third abnormal characteristic value.
[0029] Furthermore, the quantum link coding rate data characteristic value strategy system further performs the following steps:
[0030] Step S204, determining whether there is a feature value in the abnormal feature value library that is the same as the second abnormal feature value or the third abnormal feature value;
[0031] Step S205: if not, adding the second abnormal feature value or the third abnormal feature value to the abnormal feature value library.
[0032] Furthermore, the state check eigenvalue strategy system of the quantum communication link / device specifically performs the following steps:
[0033] Step S302, determine whether the collected equipment operation data result value is within a preset range; if the equipment operation data result value is not within the preset range, use the equipment operation data result value as the fourth abnormal characteristic value; if the equipment operation data result value is within the preset range, determine whether the delayed scanning result value is within the preset range; if the delayed scanning result is not within the preset range, use the delayed scanning value corresponding to the scanning result as the fourth abnormal characteristic value; if the delayed scanning result value is within the preset range, determine whether the equipment parameters of the communication link of the current period are the same as the preset equipment parameters, if not the same, use the equipment parameters corresponding to the communication link that are different from the preset equipment parameters as the fifth abnormal characteristic value, and output an alarm message.
[0034] Furthermore, the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps:
[0035] Step S303: determine whether there is a feature value identical to the fourth abnormal feature value and the fifth abnormal feature value in the abnormal feature value library; if not, execute step S304;
[0036] Step S304: adding the abnormal feature value to the abnormal feature value library.
[0037] Furthermore, the exception handling strategy of the quantum communication link key generation characteristic value strategy system for time-sharing collection and generation of key quantities mainly enters the quantum link coding rate data characteristic value strategy system, and the coding rate data exception handling strategy of the quantum link coding rate data characteristic value strategy system mainly enters the quantum communication link / device status check characteristic value strategy system.
[0038] Furthermore, the abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device specifically performs the following steps:
[0039] K: When none of the quantum key distribution devices of the current communication node generates a key, determine whether the coding rate data reported by the quantum key distribution device is zero. If the result of step K is yes, execute step L; if not, execute step M;
[0040] L: judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are the same as the abnormal characteristic value in the abnormal characteristic value library according to the log control process data; if so, performing a PING packet check on the network management of the preset network segment and a self-check on the key management terminal of the communication node; if the test results are all normal, restarting the quantum key distribution device paired with the quantum key distribution device; if one of the check results is abnormal, outputting the check result or outputting an alarm;
[0041] M: Perform a self-check on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; if the self-check result is normal, check the network management system of the quantum key distribution device.
[0042] Furthermore, the abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps:
[0043] N: when the interruption duration of the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node is greater than the fifth preset threshold value, and the reported coding rate data is zero, judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are normal according to the log control process data, wherein the preset number is not less than one and less than the total number of the quantum key distribution devices;
[0044] O: If yes, collect the delay scan values of the communication link and the quantum key distribution device to obtain the delay scan result; restart the quantum key distribution device paired with the quantum key distribution device, and if the interruption time of the first coding rate data is greater than the fifth preset threshold value within the preset time, perform self-check on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device;
[0045] P: According to the delayed scanning result, determine whether the delayed scanning result is the same as the abnormal feature value in the abnormal feature value library; if so, restart the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; if the interruption duration of the first coding rate data after the restart is greater than the fifth preset threshold, perform self-inspection on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
[0046] Furthermore, the abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps:
[0047] Q: when a sawtooth wave, a spike wave or a rectangular wave appears in the waveform of the change of the first coding rate data, the delay scanning value of the communication link and the quantum key distribution device is collected to obtain the delay scanning result. This step Q is performed when the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node are abnormal;
[0048] R: judging whether the delayed scanning result is the same as the abnormal feature value in the abnormal feature value library according to the delayed scanning result;
[0049] S: If yes, restart the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device;
[0050] T: if the interruption duration of the first coding rate data after restart is greater than a fifth preset threshold, a self-check is performed on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
[0051] Furthermore, the abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps:
[0052] U: when the interruption duration of the first coding rate data is greater than a fifth preset threshold value and the reported coding rate data is not zero, perform a self-test on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device to obtain a self-test result. This step U is performed when the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node are abnormal;
[0053] V: If the self-test result is normal, check the network management system of the quantum key distribution device.
[0054] Compared with the prior art, the present invention has the following advantages:
[0055] By applying the embodiments of the present invention, a series of intelligent strategies are established for the three most important functions of operation and maintenance: collecting equipment / link service performance data, judging faults, and handling faults and optimizing network performance. This series of intelligent strategies is organically combined with the characteristics of the quantum key distribution network to form an intelligent data operation and maintenance system. Through the intelligent data operation and maintenance system, the operation and maintenance system can automatically and efficiently complete the collection of equipment / link service performance data, judge faults, and intelligently handle faults and optimize network performance according to the real-time network architecture and the status of the equipment / link. Therefore, not only can the fault be checked and corrected in the first time, but the quantum key distribution network can better encrypt enterprise-level and national-level security data efficiently and securely. BRIEF DESCRIPTION OF THE DRAWINGS
[0056] Figure 1 The overall architecture diagram of the intelligent data operation and maintenance system of the quantum key distribution network provided by an embodiment of the present invention;
[0057] Figure 2 Schematic diagram of the principle of the data collection strategy of the intelligent data operation and maintenance system of the quantum key distribution network provided by the embodiment of the present invention:
[0058] Figure 3 A schematic diagram of a data collection strategy for a quantum communication link key quantity characteristic value strategy system and an execution flow diagram of a quantum communication link key quantity characteristic value strategy system provided in an embodiment of the present invention;
[0059] Figure 4 A data collection strategy for a quantum link coding rate data characteristic value strategy system and a schematic diagram of an execution flow of a quantum link coding rate data characteristic value strategy system provided in an embodiment of the present invention;
[0060] Figure 5 A schematic diagram of the principle of a quantum communication link key quantity characteristic value strategy system provided by an embodiment of the present invention;
[0061] Figure 6 A schematic diagram of the principle of a quantum link coding rate data characteristic value strategy system provided by an embodiment of the present invention;
[0062] Figure 7 A schematic diagram of the principle of a state check eigenvalue strategy system for a quantum communication link / device provided by an embodiment of the present invention;
[0063] Figure 8 A schematic diagram of the principle of an exception handling strategy of an intelligent data operation and maintenance system for a quantum key distribution network provided by an embodiment of the present invention;
[0064] Fig. 9 A schematic diagram of the hardware structure of an operation and maintenance system for a quantum key distribution network provided in an embodiment of the present invention. DETAILED DESCRIPTION
[0065] The following is a detailed description of an embodiment of the present invention. This embodiment is implemented on the premise of the technical solution of the present invention, and a detailed implementation method and a specific operation process are given, but the protection scope of the present invention is not limited to the following embodiment.
[0066] In order to solve the problems of the prior art, an embodiment of the present invention provides an intelligent data operation and maintenance system for a quantum key distribution network.
[0067] It should be noted that the embodiments of the present invention are applied to the communication nodes in the quantum key distribution network, wherein the communication nodes refer to the various quantum key distribution nodes in the quantum secure communication network, such as the Beijing, Tianjin, Yuhui, Hefei and other nodes on the Beijing-Shanghai quantum communication trunk line. A quantum communication link refers to a link formed by connecting the various communication nodes on the quantum communication line, for example, a link formed by connecting the communication nodes Yuhui, Junwang and Fuli on the Beijing-Shanghai quantum communication trunk line. The specific nodes, network segments and devices mentioned in this embodiment are all examples of nodes such as Beijing, Tianjin, Yuhui, Hefei and other nodes on the Beijing-Shanghai quantum communication trunk line.
[0068] The embodiment of the present invention provides an intelligent data operation and maintenance system for a quantum key distribution network, which is applied to communication nodes in the quantum key distribution network, such as Figure 1As shown, it is the overall architecture diagram of the intelligent data operation and maintenance system of the quantum key distribution network, and the intelligent data operation and maintenance system of the quantum key distribution network includes: data collection strategy, business characteristic value strategy, and exception handling strategy. Among them, the data collection strategy performs intelligent data collection according to the business characteristic value strategy, the business characteristic value strategy establishes corresponding characteristic values according to the normal state and abnormal state of the corresponding business data and determines the corresponding processing strategy according to the corresponding characteristic values, and the exception handling strategy combines the characteristics of the quantum key distribution network, collects the real-time status of the device / link and compares it with the characteristic value, and then adopts the correct corresponding processing strategy (in line with the characteristic value).
[0069] The data collection strategy mainly consists of two parts:
[0070] 1. Collect real-time business data and equipment performance data according to specific business characteristic value strategies, and also collect control processes in logs;
[0071] 2. More importantly, it is necessary to establish a priori data model based on a priori theory, and to establish the normal data range and the alarm data model library through the priori data model.
[0072] The business characteristic value strategy specifically includes three parts of the strategy system:
[0073] 1. Quantum communication link key quantity characteristic value strategy system;
[0074] 2. Quantum link coding rate data characteristic value strategy system;
[0075] 3. State checking eigenvalue strategy system for quantum communication links / devices.
[0076] Exception handling strategy: This is the most critical part of the intelligent data operation and maintenance system. It judges the collected data and standards, and then conducts a comprehensive inspection according to the corresponding process (each characteristic value has a targeted processing process) based on the judgment results. When conducting a comprehensive inspection, it is necessary to restart and self-check the links and devices based on the inspection results.
[0077] The three strategies of the intelligent data operation and maintenance system of the quantum key distribution network are described in detail as follows.
[0078] Data collection strategy
[0079] In addition to collecting corresponding data according to specific business characteristic value strategies, it is also necessary to consider that the same type of performance data may change under specific background parameters (link attenuation, total quantum signal attenuation). This is because some performance data is related to specific background parameters.
[0080] In data collection, it is necessary to first obtain the threshold range of normal changes in the amount of generated keys and the threshold range of normal coding rate values through theoretical calculations, and to deduce a series of theoretical range values of performance parameters (signal state error rate, detection count ratio, delayed scanning peak value) based on normal coding conditions. At the same time, by analyzing the principles of the generation of corresponding photoelectric alarms, a data model library is established to trigger an alarm when a single or combined set of relevant performance data reaches a certain threshold.
[0081] like Figure 2 As shown, it is a schematic diagram of the principle of a data collection strategy in an operation and maintenance system of a quantum key distribution network provided by an embodiment of the present invention. The data collection strategy collects real-time business data and equipment performance data for three different business characteristic value strategy systems: a characteristic value strategy system for generating key quantity for quantum communication links, a characteristic value strategy system for quantum link coding rate data, and a status check characteristic value strategy system for quantum communication links / equipment.
[0082] (1) For the quantum communication link to generate the key quantity characteristic value strategy system, the data collection strategy is as follows:
[0083] The data collection of the key quantity characteristic value strategy system for quantum communication link generation may include: considering the background parameters, such as the key quantity generated under the link attenuation and the total attenuation of the quantum signal, according to the prior relationship, the relative increment of the key quantity generated under the specific link attenuation and the total attenuation of the quantum signal is normal, and then deriving and determining a threshold range, and under the specific link attenuation, there must be a specific threshold range; also includes: time-sharing collection of the key quantity generated;
[0084] That is, Figure 3 As shown, for the quantum communication link key quantity characteristic value strategy system, the data collection strategy includes step S101, periodically collecting the first generated key quantity of the quantum key distribution network, and obtaining the first preset threshold corresponding to the first generated key quantity.
[0085] Specifically, the first preset threshold value may be calculated using a preset priori data model corresponding to background parameters, or the first preset threshold value may be preset, wherein the background parameters include: link attenuation and total quantum signal attenuation.
[0086] Exemplarily, the amount of generated keys of the quantum key distribution network can be collected according to a preset period, thereby obtaining the first amount of generated keys corresponding to the current period.
[0087] In practical applications, the amount of key generated for the quantum key distribution network, as well as the link attenuation, total quantum signal attenuation, signal state error rate, detection count ratio, and delayed scanning peak value corresponding to the amount of key generated can be used to fit the prior data model, and then obtain the fitted prior data model. Then, the first preset threshold corresponding to the amount of key generated for the quantum key distribution network is calculated based on the fitted prior data model.
[0088] It can be understood that the fitted prior data model is a combination of the link attenuation, total quantum signal attenuation, signal state error rate, detection count ratio, and delayed scanning peak value corresponding to the acquisition of the first generated key amount, and then calculates the first preset threshold corresponding to the state of the quantum key distribution network corresponding to the acquisition of the first generated key amount. In addition, if the duration of the cycle is 10s, the current cycle can be 10s-20s.
[0089] The generated key amount corresponding to the end point of the current cycle, the generated key amount corresponding to the starting point of the current cycle, or the generated key amount corresponding to the midpoint of the current cycle can be used as the first generated key amount corresponding to the current cycle, and the embodiment of the present invention does not limit it here.
[0090] (2) For the quantum link coding rate data characteristic value strategy system, the data collection strategy is as follows:
[0091] Collect coding rate data, taking into account specific background parameters, such as link attenuation and total quantum signal attenuation; calculate the normal coding rate range under specific link attenuation and total quantum signal attenuation conditions based on a priori relationships.
[0092] That is, Figure 4 As shown, for the quantum link coding rate data characteristic value strategy system, the data collection strategy includes step S201, obtaining the first coding rate data of the quantum key distribution network in the current period, calculating the difference between the first coding rate data and the coding rate data corresponding to the previous period, and judging whether the difference is not less than the third preset threshold, or judging whether the average value of the first coding rate data corresponding to the current period is greater than the fourth preset threshold, or judging whether the interruption duration of the first coding rate data is not less than the fifth preset threshold, or judging whether the continuous duration of the first coding rate data is lower than the sixth preset threshold, or judging whether the change waveform of the first coding rate data appears a sawtooth wave, a spike wave or a rectangular wave, or judging whether the first coding rate data is lower than the seventh preset threshold, or judging whether the continuous duration of the first coding rate data being lower than the seventh preset threshold is greater than the eighth preset threshold. If the judgment result is no, the device operation data of the communication link is collected.
[0093] Exemplarily, the first coding rate data of the quantum key distribution network at 10s-20s is obtained, and the difference between the first coding rate data corresponding to 10s-20s and the first coding rate data corresponding to 0s-10s is calculated.
[0094] Determine whether the obtained difference is not less than a third preset threshold, that is, determine whether the difference is greater than or equal to the third preset threshold;
[0095] Determine whether the interruption duration of the acquired 10s-20s first bit rate data is greater than or equal to a fifth preset threshold;
[0096] Determine whether the duration of the acquired 10s-20s first bit rate data is less than a sixth preset threshold;
[0097] Determine whether the waveform of the acquired 10s-20s first bit rate data has a sawtooth wave, a spike wave or a rectangular wave. In practical applications, the slopes of the rising edge and the falling edge on both sides of the waveform in the sawtooth wave can be preset, and similarly, the slopes of the rising edge and the falling edge in the spike wave can be preset;
[0098] Determine whether the acquired first bit rate data of 10s-20s is lower than a seventh preset threshold;
[0099] Determine whether the duration of the acquired first coding rate data of 10s-20s when being lower than the seventh preset threshold is greater than the eighth preset threshold; that is, when the first coding rate data of 10s-20s is lower than the seventh preset threshold, the duration of the duration is greater than the eighth preset threshold.
[0100] (3) For the state check eigenvalue strategy system of quantum communication link / device, the data collection strategy is as follows:
[0101] Consider the data changes under specific background parameters, such as link attenuation and total quantum signal attenuation; consider the range of synchronous light entrance intensity; relative to the theoretical normal coding rate range, theoretically derive the relative signal state error rate, detection count ratio, delayed scan peak number, dark count range, signal state decoy state ratio and privacy amplification factor range; collect the control flow in the log of the equipment. From the control flow, we can detect registration, monitoring, link, key authentication / photoelectric aspects (delayed scanning, polarization feedback, synchronous light correction) / QKD work start coding; signal state error rate, detection count ratio, delayed scan peak number, dark count, signal state decoy state ratio and privacy amplification factor; analyze the principle of the corresponding photoelectric alarm generation, and establish a data model library that triggers an alarm when the relevant performance data (dark count, delayed scan peak number and signal state decoy state, privacy amplification factor) exceeds a certain threshold threshold alone or in combination.
[0102] That is, for the status check eigenvalue strategy system of the quantum communication link / device, the data collection strategy includes step S301, obtaining log control process data, and judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are normal based on the log control process data; if so, collecting the device operation data of the communication link.
[0103] Exemplarily, the log control process data corresponding to the current cycle is obtained, and based on the log control process data, the heartbeat data of the communication link is checked to determine whether the connection of the communication link is normal; the authentication data of the communication link is checked to determine whether the communication link is legal; the monitoring data of the communication link is checked to determine whether the monitoring result of the communication link is normal; the link data of the communication link is checked to determine whether the communication link is normal; the key authentication data of the communication link is checked to determine whether the key authentication of the communication link is normal.
[0104] Business characteristic value strategy
[0105] 1. Quantum communication link key quantity characteristic value strategy system;
[0106] Figure 5 A schematic diagram of the principle of a quantum communication link key quantity characteristic value strategy system provided by an embodiment of the present invention. The quantum communication link key quantity characteristic value strategy system comprises a key quantity calculation and analysis module and a characteristic value module.
[0107] The key quantity calculation and analysis module calculates the key quantity generated by time-sharing collection, obtains the change in the key quantity generated at this time point and the previous time point, and then determines whether the change in the generated key is normal. Even if the change is normal, it is necessary to enter the quantum link coding rate data characteristic value strategy system for inspection. If the quantum link coding rate data characteristic value strategy system inspection during this period is also normal, then it can be determined that it is basically normal; in addition, under specific attenuation, the relative increment of the generated key is compared with the normal threshold to check the similarity. In the case of abnormal change, determine whether the change is zero, or under specific attenuation, check whether the relative increment of the generated key and the normal threshold have undergone a mutation.
[0108] The feature value module is a normal feature value module that generates relatively increased available keys. The abnormal feature value with a change of 0 or the feature value with a sudden change in the relative increment of the generated key is regarded as an abnormal feature value; the feature value module also has the ability of self-learning, which is used to analyze the newly appeared abnormal situation and the original feature value, or compare it with the existing abnormal feature value. The approximation is very low, which can be considered as a new feature value. It is also a new abnormal standard.
[0109] It can be understood that the quantum communication link generates a key quantity characteristic value strategy system by collecting the key quantity generated by time sharing, and analyzing the collected data according to the set normal and abnormal standards (under specific background parameters), and setting the corresponding characteristic value for the data that matches the normal and abnormal standards. The characteristic value strategy system has the ability of self-learning, compares the newly collected data with the stored abnormal characteristic value, and judges whether the current data state belongs to the existing characteristic value or the new characteristic value according to a certain comparison approximation.
[0110] See also Figure 3 That is, based on the data collection strategy for the quantum communication link key quantity characteristic value strategy system, the quantum communication link key quantity characteristic value strategy system specifically performs the following steps: Step S102, judging whether the first generated key quantity is greater than the first preset threshold, or judging whether the change of the first generated key quantity relative to the key quantity generated in the previous cycle is zero, or judging whether the change rate of the first generated key quantity corresponding to the current cycle exceeds the second preset threshold; Step S103, if so, outputting an alarm signal, and taking the first generated key quantity as the first abnormal characteristic value.
[0111] Exemplarily, since the amount of generated keys changes dynamically in real time, it is possible to determine whether the first amount of generated keys is greater than the first preset threshold; or to determine whether the change in the first amount of generated keys relative to the amount of keys generated in the previous cycle is zero, thereby determining whether the first amount of generated keys meets the target requirements.
[0112] In addition, since the real-time dynamic change of the generated key amount cannot be too drastic, it can be determined whether the change rate of the first generated key amount corresponding to the current period exceeds the second preset threshold.
[0113] The ratio of the difference between the amount of generated keys corresponding to the end point of the current cycle and the amount of generated keys corresponding to the start point of the current cycle to the duration of the current cycle can be used as the rate of change of the first amount of generated keys corresponding to the current cycle. The embodiment of the present invention does not limit the calculation method of the rate of change of the first amount of generated keys corresponding to the current cycle, and any calculation method that can calculate the rate of change of the first amount of generated keys corresponding to the current cycle is within the protection scope of the embodiment of the present invention.
[0114] Exemplarily, when the judgment result of S102 is yes, it means that there is an abnormality in the first generated key amount of the quantum key distribution network, and it is necessary to remind maintenance personnel to perform maintenance, or generate a fault record, so an alarm signal is output; in addition, the first generated key amount corresponding to the current cycle is used as the first abnormal characteristic value. For example, the first generated key amount corresponding to the current cycle is 5kbps, then the first abnormal characteristic value is 5kbps.
[0115] Application of the present invention Figure 3 The illustrated embodiment uses the amount of keys generated by the quantum key distribution network as the basis for fault judgment. Compared with the prior art of monitoring each device for fault judgment, this can avoid the situation where the overall working condition of the quantum key distribution network is poor due to the accumulation of errors between the devices, thereby improving the accuracy of fault warning.
[0116] The quantum communication link key quantity characteristic value strategy system also performs the following steps:
[0117] Step S104, determining whether there is a feature value identical to the first abnormal feature value in the abnormal feature value library;
[0118] Step S105: if not, adding the first abnormal feature value to the abnormal feature value library.
[0119] Exemplarily, it is determined whether there is a feature value identical to the first abnormal feature value obtained in step S103 in the abnormal feature value library. If not, it means that the first abnormal feature value is a new abnormal feature value and the first abnormal feature value needs to be added to the abnormal feature value library.
[0120] By applying the above-mentioned embodiments of the present invention, new abnormal feature values can be added to the abnormal feature value library, thereby making the abnormal feature value library more complete.
[0121] 2. Quantum link coding rate data characteristic value strategy system;
[0122] like Figure 6 As shown, a schematic diagram of the principle of a quantum link coding rate data characteristic value strategy system provided by an embodiment of the present invention is shown. The quantum link coding rate data characteristic value strategy system includes a coding rate checking module and a characteristic value module.
[0123] The coding rate check module is used to analyze the coding rate according to the time-sharing key generation state of specific background parameters. When normal conditions are met, the state check characteristic value strategy system of the quantum communication link / device is entered, wherein the normal conditions are that the average value of the real-time coding rate within a period of time falls within the normal coding rate value range, there is no interruption for a relatively long duration (the reported coding rate is 0, or no coding value is reported), there is no continuous sawtooth wave, spike and rectangular wave, and the coding rate is not lower than the minimum effective value (and maintained for a long time); when judging whether the coding rate has a long-term interruption, the coding rate is maintained at a low time for a long time; whether there are continuous sawtooth waves, spikes and rectangular waves, that is, the coding rate does not meet the normal conditions, that is, when the coding rate is found to be abnormal, the state check characteristic value strategy system of the quantum communication link / device is entered, wherein, when judging that the coding rate does not meet the normal conditions, the minimum effective value threshold of the coding rate and the duration threshold of the effective coding rate can be determined according to the normal prior relationship and the specific attenuation for judgment.
[0124] The feature value module is used to obtain normal feature values, abnormal feature values and self-learning, wherein the judgment basis for normal feature values (actual coding rate value effectively falls within the theoretical coding rate range) is that the continuous coding is not less than a certain time (6 minutes) and the intermediate interval is not less than a certain time (2 minutes);
[0125] The judgment basis for abnormal characteristic values (the actual coding rate value cannot effectively fall within the theoretical coding rate range) is: the occurrence of a relatively long interruption in the flow (the reported coding rate is 0); the occurrence of continuous sawtooth waves, spikes and rectangular waves; the occurrence of a coding rate lower than the minimum valid value (and maintained for a long time); the occurrence of a relatively long interruption in the flow (no coding value is reported).
[0126] The process of self-learning is to compare with the existing abnormal feature values. When the similarity is high, it is considered to be a similar abnormal feature value; when compared with the existing abnormal feature values, if the similarity is very low, it can be considered a new feature value. It is also a new abnormal standard.
[0127] It can be understood that the quantum communication link coding rate data characteristic value strategy system enters the quantum link coding rate data characteristic value strategy system based on the judgment of the amount of generated key collected in time-sharing. The collected data is analyzed according to the set normal and abnormal standards (the waveform of the coding rate change and the normal coding rate range threshold derived from the specific background parameters), and the data that matches the normal and abnormal standards is set as the characteristic value. The characteristic value strategy system has the ability of self-learning, compares the newly collected data with the existing abnormal characteristic values, and judges whether the current data state belongs to the existing characteristic value or the new characteristic value according to a certain comparison approximation.
[0128] See also Figure 4 That is, based on the data collection strategy for the quantum link coding rate data characteristic value strategy system, the quantum link coding rate data characteristic value strategy system specifically performs the following steps:
[0129] Step S202, determine whether any item of the collected equipment operation data result value is within a preset range; if it is not within the preset range, use the equipment operation data result value exceeding the preset range as the second abnormal characteristic value, and output an alarm message, wherein the equipment operation data includes: the signal state error rate of the current cycle, the detection count ratio of the current cycle, the delayed scanning peak number of the current cycle, the dark count of the current cycle, and the signal state deception state ratio of the current cycle.
[0130] Exemplarily, when the judgment result of step 202 is yes, data collection operation is performed on the device in the communication link of the quantum key distribution network. If the detection count ratio corresponding to the current cycle is 10, and the preset range of the detection count ratio is 8-15, it is determined whether the detection count ratio is within the preset range. If the judgment result is no, the detection count ratio 10 is used as the second characteristic value.
[0131] Similarly, the delayed scan peak value number of the current cycle, the dark count of the current cycle, and the signal state to decoy state ratio of the current cycle can also be processed according to the above processing method.
[0132] S203, outputting an alarm signal, and taking the scanning result value corresponding to the judgment result as the third abnormal characteristic value.
[0133] Exemplarily, the first coding rate data of the current cycle is used as the third abnormal characteristic value, and at the same time, an alarm signal is output.
[0134] Application of the present invention Figure 2 In the illustrated embodiment, a third abnormal characteristic value can be obtained.
[0135] In a specific implementation of the embodiment of the present invention, in the present invention Figure 2 Based on the embodiment shown, the quantum link coding rate data characteristic value strategy system further performs the following steps:
[0136] S204, determining whether there is a feature value in the abnormal feature value library that is the same as the second abnormal feature value or the third abnormal feature value;
[0137] S205: If not, add the second abnormal feature value or the third abnormal feature value to the abnormal feature value library.
[0138] Exemplarily, it is determined whether there is a feature value identical to the second abnormal feature value obtained in step S202 in the abnormal feature value library. If not, it means that the second abnormal feature value is a new abnormal feature value and the second abnormal feature value needs to be added to the abnormal feature value library.
[0139] In addition, it is also possible to determine whether there is a feature value identical to the third abnormal feature value obtained in step S203 in the abnormal feature value library. If not, it means that the third abnormal feature value is a new abnormal feature value and the third abnormal feature value needs to be added to the abnormal feature value library.
[0140] By applying the above-mentioned embodiments of the present invention, new abnormal feature values can be added to the abnormal feature value library, thereby making the abnormal feature value library more complete.
[0141] 3. State checking eigenvalue strategy system for quantum communication links / devices.
[0142] like Figure 7 As shown, the state check eigenvalue strategy system for a quantum communication link / device provided in an embodiment of the present invention may include: a coding rate check module and an eigenvalue module.
[0143] The coding rate check module is used to check the coding rate status. Under specific background conditions, the coding is normal, that is, the collected relevant values fall within the corresponding range. The normal condition is that the signal state error rate, detection count ratio, delayed scan peak number, dark count, and signal state deception state ratio at the time of collection fall within the normal range. Under specific background conditions, the coding is abnormal, that is, in the following four coding rate abnormal situations, there is a relatively long interruption (the reported coding rate is 0), continuous sawtooth waves, spikes and rectangular waves appear, continuous sawtooth waves, spikes and rectangular waves appear, and the coding rate is lower than the minimum valid value (and maintains for a long time). Then check the log control process data, start the detection of heartbeat, authentication, monitoring, link and key authentication, and collect the operating parameters of the equipment in the communication link. The collected equipment operating parameters may include the signal state error rate, detection count ratio, delayed scan peak number, dark count, and signal state deception state ratio at the time (it is necessary to take into account the alarms in the preset time period before and after the interruption occurs.
[0144] The characteristic value module is used to obtain the characteristic value when the coding rate is normal, obtain the characteristic value when the coding rate is abnormal and perform self-learning, wherein, when the real-time coding rate is normal (the actual coding rate value effectively falls within the theoretical coding rate range), that is, one or more of the signal state error rate, detection count ratio, delayed scanning peak number, dark count, signal state deception state ratio and privacy amplification factor are within the preset normal range; when the real-time coding rate is abnormal, start the detection heartbeat, authentication, monitoring, link and key authentication, and start collecting the operating parameters of the equipment. When an alarm occurs, the signal state error rate, detection count ratio, delayed scanning peak number, dark count and signal state deception state ratio before and after the alarm are taken to form the characteristic value generated by the alarm, and the actual characteristic value is compared with the corresponding theoretical data model. If it falls within the corresponding range, it belongs to the normal characteristic value of the alarm. If the actual characteristic value is not successfully compared with the theoretical data model corresponding to the alarm and does not fall into the corresponding range, it is considered that the characteristic value belongs to the special characteristic value of the alarm. When no alarm occurs, the device performance parameters are compared with normal device performance parameters to check whether there are abnormal changes. If there are abnormal changes, they are listed as abnormal characteristic values.
[0145] Self-learning means analyzing the newly emerged abnormal situations and the original feature values, and comparing them with the existing abnormal feature values. If the similarity is high, it is considered to be a similar abnormal feature value; if the similarity is very low when compared with the existing abnormal feature values, it can be considered to be a new feature value, and also a new abnormal standard.
[0146] It can be understood that the state check eigenvalue strategy system of the quantum communication link / device analyzes the state based on the priori, and establishes abnormal eigenvalues that meet the standards through the eigenvalue strategy system (the abnormal eigenvalues do not fall into the data range of the normal state, or the abnormal eigenvalues and the alarm data model library are consistent with the maximum approximation).
[0147] According to the judgment of the coding rate, enter the state inspection strategy system of the quantum communication link / device. According to different abnormal coding rate changes and combined with the analysis of the working status of the equipment, different characteristic value judgments are adopted. For example, the working status of the QKD (Quantum Key Distribution) device occurs before the delayed scan, and the characteristic value can be determined by checking the log. As for whether the working status of the QKD device is in the delayed scan, it is necessary to consider whether an alarm occurs to distinguish and judge, and sort out the characteristic value.
[0148] The eigenvalue strategy system has the ability of self-learning. It compares the newly collected data with the existing abnormal eigenvalues and determines whether the current data state belongs to the existing eigenvalue or a new eigenvalue according to a certain comparison approximation.
[0149] That is, based on the data collection strategy of the state check eigenvalue strategy system for the quantum communication link / device, the state check eigenvalue strategy system for the quantum communication link / device specifically performs the following steps:
[0150] Step S302, determine whether the collected equipment operation data result value is within a preset range; if the equipment operation data result value is not within the preset range, use the equipment operation data result value as the fourth abnormal characteristic value; if the equipment operation data result value is within the preset range, determine whether the delayed scanning result value is within the preset range; if the delayed scanning result is not within the preset range, use the delayed scanning value corresponding to the scanning result as the fourth abnormal characteristic value; if the delayed scanning result value is within the preset range, determine whether the equipment parameters of the communication link of the current period are the same as the preset equipment parameters, if not the same, use the equipment parameters corresponding to the communication link that are different from the preset equipment parameters as the fifth abnormal characteristic value, and output an alarm message.
[0151] Exemplarily, the equipment operation data of the communication link of the quantum key distribution network is collected; it is determined whether the collected result is within a preset range, and if not, the collected result is used as the fourth abnormal characteristic value, and the signal state error rate, detection count ratio, delayed scanning peak number, dark count and signal state deception state ratio corresponding to the current period can also be used as the fourth abnormal characteristic value.
[0152] When the judgment result is yes, the device parameters corresponding to the current cycle are compared with the preset device parameters to determine whether the device parameters corresponding to the current cycle exceed the range of the preset device parameters. If so, the device parameters corresponding to the current cycle are used as the fifth abnormal characteristic value.
[0153] By applying the above embodiment of the present invention, the fourth abnormal feature value and the fifth abnormal feature value can be obtained.
[0154] Optionally, in a specific implementation of the embodiment of the present invention, the state check eigenvalue strategy system of the quantum communication link / device further performs the following steps:
[0155] Step S303: Determine whether there is a feature value identical to the fourth abnormal feature value and the fifth abnormal feature value in the abnormal feature value library; if not, execute step S304.
[0156] Step S304: adding the abnormal feature value to the abnormal feature value library.
[0157] It is understandable that when the judgment result is yes, it means that there are feature values identical to the fourth abnormal feature value and the fifth abnormal feature value in the abnormal feature value library, and there is no need to add the above feature values to the abnormal feature value library.
[0158] Exemplarily, it is determined whether there is a feature value identical to the fourth abnormal feature value obtained in step S302 in the abnormal feature value library. If not, it means that the fourth abnormal feature value is a new abnormal feature value and the fourth abnormal feature value needs to be added to the abnormal feature value library.
[0159] In addition, it is also possible to determine whether there is a feature value identical to the fifth abnormal feature value obtained in step 302 in the abnormal feature value library. If not, it means that the fifth abnormal feature value is a new abnormal feature value and the fifth abnormal feature value needs to be added to the abnormal feature value library.
[0160] By applying the above-mentioned embodiments of the present invention, new abnormal feature values can be added to the abnormal feature value library, thereby making the abnormal feature value library more complete.
[0161] By applying the above-mentioned embodiment of the present invention, the first abnormal feature value, the second abnormal feature value, the third abnormal feature value, the fourth abnormal feature value and the fifth abnormal feature value can be added to the abnormal feature value library, and then autonomous learning of the abnormal feature value library can be performed.
[0162] The above three service characteristic value data policy systems do not distinguish the order of precedence, but according to the user experience and the top-down abnormal state inspection scheme of the quantum key distribution network, they are divided into 1. Quantum communication link key quantity characteristic value policy system; 2. Quantum link coding rate data characteristic value policy system; 3. Quantum communication link / device state inspection characteristic value policy system. Of course, those skilled in the art will know that intelligent data control may not be completely limited to these three policy systems, but may also include other feasible policy systems.
[0163] Exception handling strategy
[0164] For the quantum communication link key quantity characteristic value strategy system that generates key quantity through time-sharing collection, the exception handling strategy mainly enters the quantum link coding rate data characteristic value strategy system. For the quantum link coding rate data characteristic value strategy system, the exception handling strategy for coding rate data mainly enters the quantum communication link / equipment status check characteristic value strategy system. Figure 8 It is the exception handling strategy of the state check eigenvalue strategy system of quantum communication links / devices.
[0165] It is necessary to consider the situation where all QKD devices at the same site are not coded and the situation where some QKD devices are not coded, and handle these situations separately. At the same time, for the situation where the code is not completed, it is also necessary to consider the state of reporting 0 and no reported value and handle it accordingly according to the preset process.
[0166] For abnormal waveforms of the code rate of other QKD devices, the collected performance parameters are compared with the characteristic values. Each characteristic value requires a targeted processing process, mainly automatically extracting logs when the abnormality occurs, restarting the device, and self-checking the relevant modules. When the collected performance parameters and the corresponding characteristic values are successfully compared, the corresponding actions are taken through judgment.
[0167] In practical applications, restarting the device may refer to restarting the QKD device of the current node, or restarting the QKD device of the current node and the QKD device at the other end of the QKD device of the current node.
[0168] like Figure 8 As shown, an exception handling strategy of an intelligent data operation and maintenance system of a quantum key distribution network provided by an embodiment of the present invention is used to check whether QKD has reported a coding value when all QKD devices at the site have no coding; when the reported value is 0, by comparing with the characteristic value (checking the abnormality according to the log record (detecting heartbeat, link)), if it meets the requirements, the gateways of network segments 8, 2, 3 and 12 are PING packets to check whether they are normal. At the same time, the KM (contactor) is self-checked to see if it is normal. If the network segment and KM self-check are normal, restart the QKD device at the other end of the link; if no coding value is reported, the QKD device is self-checked to check whether the QKD device is normal. If the QKD device self-checks normally, check the network management of the device.
[0169] When some QKD devices at this site have coding anomalies, perform the following steps:
[0170] According to the abnormal state, when there is a relatively long interruption (the reported bit rate is 0), check the log control process data, and compare it with the characteristic value (check the abnormality according to the log record (detect heartbeat, link)). If it is consistent, restart the QKD device at the other end of the link and if the problem cannot be reproduced, self-check the QKD device; in addition, if it is consistent, at the same time, compare it with the characteristic value (check the abnormality according to the log record (detect heartbeat, link)). If it is consistent, initiate the collection of equipment operating parameters of the equipment in the communication link. The collected equipment operating parameters include: alarm when abnormality occurs, signal state error rate, detection count ratio, delayed scanning peak number, dark count, signal state deception state ratio, and compare them with the characteristic value. If it belongs to similar characteristic values, process the device, mainly restart. Restarting is to check whether the fault is eliminated; at the same time, let the device enter the initial state to check whether the problem can be reproduced. If the problem cannot be eliminated after restarting, self-check the QKD device (check according to the corresponding alarm).
[0171] If continuous sawtooth waves, spikes and rectangular waves appear; when continuous sawtooth waves, spikes and rectangular waves appear, collect the alarm when the abnormality occurs, the signal state error rate, the detection count ratio, the delayed scanning peak number, the dark count, the signal state deception state ratio, and compare them with the characteristic value. If they belong to similar characteristic values, process the device, mainly restarting. Restarting is to check whether the fault has been eliminated; at the same time, let the device enter the initial state to check whether the problem can be reproduced. If the problem cannot be eliminated after restarting, self-check the QKD device (check according to the corresponding alarm).
[0172] If there is a long-lasting interruption (no code value is reported), perform a self-test on the QKD device to check whether it is normal. If the self-test of the QKD device is normal, check the network management of the device.
[0173] The abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device specifically performs the following steps:
[0174] K: When none of the quantum key distribution devices of the current communication node generates a key, determine whether the coding rate data reported by the quantum key distribution device is zero.
[0175] Exemplarily, if the judgment result of step K is yes, execute step L; if not, execute step M.
[0176] L: Determine whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are the same as the abnormal feature values in the abnormal feature value library according to the log control process data; if so, perform a PING packet check on the network management of the preset network segment and a self-check on the key management terminal of the communication node; if the test results are all normal, restart the quantum key distribution device paired with the quantum key distribution device.
[0177] Exemplarily, if one of the inspection results is abnormal, the inspection result is output or an alarm is output.
[0178] M: Perform a self-check on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; if the self-check result is normal, check the network management system of the quantum key distribution device, wherein the network management system includes: a network element management system and a network management system.
[0179] Exemplarily, the current node is a Yuhui node, and the quantum key distribution device paired with the Yuhui node is the quantum key distribution device of the monarch node. When the self-test result of the quantum key distribution device of the Yuhui node is normal, the quantum key distribution device of the monarch node is checked; if the self-test result is abnormal, the check result is output or an alarm is output.
[0180] By applying the above-mentioned embodiments of the present invention, the status of the communication link / device can be checked when none of the quantum key distribution devices of the current communication node has generated a key.
[0181] Optionally, in a specific implementation of the embodiment of the present invention, the method further includes:
[0182] N: When the interruption duration of the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node is greater than the fifth preset threshold, and the reported coding rate data is zero, judge whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are normal according to the log control process data, wherein the preset number is not less than one and less than the total number of the quantum key distribution devices.
[0183] Exemplarily, the Yuhui node will have 5 quantum key distribution devices. When the interruption duration of the first coding rate data of three of the quantum key distribution devices is greater than the fifth preset threshold and the reported coding rate data is zero, the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link corresponding to each quantum key distribution device are judged whether they are normal according to the log control process data obtained for each quantum key distribution device of the current node.
[0184] O: If yes, collect the delay scanning values of the communication link and the quantum key distribution device to obtain the delay scanning results; restart the quantum key distribution device paired with the quantum key distribution device, and if the interruption duration of the first coding rate data is greater than the fifth preset threshold value within the preset time, perform self-check on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
[0185] Exemplarily, the signal state error rate, detection count ratio, delayed scan peak number, dark count, and signal state deception state ratio data are collected from the communication link, and these data are compared with the characteristic values in the characteristic value library. If the characteristic value identical to the aforementioned data is found in the characteristic value library, the quantum key distribution device is restarted. Then, the quantum key distribution device is monitored to see if the aforementioned problem occurs again. If so, the quantum key distribution device is self-checked.
[0186] P: According to the delayed scanning result, determine whether the delayed scanning result is the same as the abnormal feature value in the abnormal feature value library; if so, restart the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; if the interruption duration of the first coding rate data after the restart is greater than the fifth preset threshold, perform self-inspection on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
[0187] By applying the above-mentioned embodiments of the present invention, the status of the communication link / device can be checked when the interruption duration of the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node is greater than the fifth preset threshold and the reported coding rate data is zero.
[0188] Optionally, in a specific implementation of the embodiment of the present invention, the method further includes:
[0189] Q: When a sawtooth wave, a spike wave or a rectangular wave appears in the changing waveform of the first coding rate data, the delay scanning values of the communication link and the quantum key distribution device are collected to obtain the delay scanning results.
[0190] It should be emphasized that step Q is performed when an abnormality occurs in the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node.
[0191] R: According to the delayed scanning result, determine whether the delayed scanning result is the same as the abnormal feature value in the abnormal feature value library.
[0192] S: If yes, restart the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
[0193] T: if the interruption duration of the first coding rate data after restart is greater than a fifth preset threshold, a self-check is performed on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
[0194] By applying the above-mentioned embodiment of the present invention, when a sawtooth wave, a spike wave or a rectangular wave appears in the waveform of the first coding rate data, the status of the communication link / device can be checked.
[0195] Optionally, in a specific implementation of the embodiment of the present invention, the method further includes:
[0196] U: When the interruption duration of the first coding rate data is greater than a fifth preset threshold and the reported coding rate data is not zero, perform a self-test on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device to obtain a self-test result.
[0197] It should be emphasized that step U is performed when an abnormality occurs in the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node.
[0198] V: If the self-test result is normal, check the network management system of the quantum key distribution device, wherein the network management system includes: a network element management system and a network management system.
[0199] By applying the above-mentioned embodiment of the present invention, when a sawtooth wave, a spike wave or a rectangular wave appears in the changing waveform of the first coding rate data, the status of the communication link / device is checked.
[0200] In the current operation and maintenance process, the coding rate characteristic value monitoring system, the communication link / equipment status check characteristic value system and the exception handling system are all operated manually. However, by applying the above embodiment of the present invention, the abnormal state in the quantum key distribution network can be automatically identified; and the characteristic value corresponding to the abnormal state is added to the abnormal characteristic value library, thereby achieving the purpose of learning the abnormal state.
[0201] In addition, the various functions of current operation and maintenance are very scattered, and there is a lack of systematic connection between these functions, resulting in the inability to discover abnormalities, locate causes, and solve problems in the first place, causing extremely serious consequences. By applying the above-mentioned embodiments of the present invention, a comprehensive assessment can be made of abnormal states in a quantum key distribution network, thereby improving the speed and accuracy of abnormal state discovery.
[0202] like Fig. 9 As shown, it is a schematic diagram of the hardware structure of an intelligent data operation and maintenance system of a quantum key distribution network provided by an embodiment of the present invention. The intelligent data operation and maintenance system of the quantum key distribution network can be divided into three parts:
[0203] 1. The network management agent of the device, that is, the hardware layer, includes: alarm service interface, configuration service interface, performance service interface and command line service interface.
[0204] Network management agent of the device: Through the network management agent, the quantum network element device can report the corresponding device configuration, original performance data (coding rate, signal error rate, amount of generated available keys) and corresponding alarms to the network element management system.
[0205] 2. EMS (Element Management System), which can usually be called the element management layer. The element management system can include: northbound interface layer and collection adaptation layer, where the northbound interface layer includes alarm service interface, configuration service interface, performance service interface, alarm management, configuration management, performance management, and fault strategy management.
[0206] Alarm management can include three parts: alarm processing, alarm presentation, and alarm analysis.
[0207] Configuration management can include three parts: network element management, board management, and port management.
[0208] Performance management can include three parts: performance warning, performance display, and performance statistics.
[0209] Fault policy management can include three parts: fault policy template, fault policy configuration, and fault policy execution.
[0210] EMS can present the performance parameters and alarms reported by quantum devices in a list (through historical performance lists and alarm monitoring lists). At the same time, it reports device configuration, performance data and alarms to NMS through Corba (Common Object Request Broker Architecture).
[0211] 3. NMS (Network Management System).
[0212] NMS can include: alarm management, configuration management, performance management, and fault strategy management.
[0213] Alarm management can include three parts: alarm processing, alarm presentation, and alarm analysis.
[0214] Configuration management can include three parts: network element management, board management, and port management.
[0215] Performance management can include three parts: performance warning, performance display, and performance statistics.
[0216] NMS can establish the relationship between devices in NMS and form a topology view based on the device configuration reported by EMS. At the same time, it dynamically presents the real-time bit rate of the backbone network / metropolitan area network, generates available keys and related alarms in the topology map based on the performance data and alarms reported by EMS.
[0217] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.
Claims
1. Intelligent data operation and maintenance system for quantum key distribution network, characterized by: include: Data collection strategy, business characteristic value strategy, and exception handling strategy, wherein the data collection strategy performs intelligent data collection according to the business characteristic value strategy, the business characteristic value strategy establishes corresponding characteristic values according to the normal state and abnormal state of the corresponding business data and determines the corresponding processing strategy according to the corresponding characteristic values, wherein the characteristic value is to compare the collected data with the set normal and abnormal standards, and set the data that matches the normal and abnormal standards as the characteristic value, the business characteristic value strategy has self-learning ability, and the exception handling strategy combines the characteristics of the quantum key distribution network, collects the real-time status of the device / link and compares it with the characteristic value, and then adopts the correct corresponding processing strategy; The data collection strategy mainly includes two parts: (1) Collect real-time business data and equipment performance data based on specific business characteristic value strategies, and also collect control processes in logs; (2) Establish a priori data model based on priori theory, and use the priori data model to establish the normal data range and the data model library for alarms; The business characteristic value strategy specifically includes three parts of the strategy system: (1) Quantum communication link key quantity characteristic value strategy system; (2) Quantum link coding rate data characteristic value strategy system; (3) Status check eigenvalue strategy system for quantum communication links / devices; The exception handling strategy judges the collected data and standards, and then performs a comprehensive inspection according to the corresponding process based on the judgment results. During the comprehensive inspection, the link and equipment need to be restarted and self-checked according to the inspection results.
2. The intelligent data operation and maintenance system for a quantum key distribution network according to claim 1, characterized in that: For the quantum communication link key quantity characteristic value strategy system, the data collection strategy includes step S101, periodically collecting the first generated key quantity of the quantum key distribution network, and obtaining a first preset threshold corresponding to the first generated key quantity.
3. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 2, characterized in that: The obtaining a first preset threshold corresponding to the first generated key amount includes: The first preset threshold is calculated using a preset priori data model corresponding to background parameters, or the first preset threshold is preset, wherein the background parameters include: link attenuation and total quantum signal attenuation.
4. The intelligent data operation and maintenance system for a quantum key distribution network according to claim 1, characterized in that: For the quantum link coding rate data characteristic value strategy system, the data collection strategy includes step S201, obtaining the first coding rate data of the quantum key distribution network in the current period, calculating the difference between the first coding rate data and the coding rate data corresponding to the previous period, and judging whether the difference is not less than the third preset threshold, or judging whether the average value of the first coding rate data corresponding to the current period is greater than the fourth preset threshold, or judging whether the interruption duration of the first coding rate data is not less than the fifth preset threshold, or judging whether the continuous duration of the first coding rate data is lower than the sixth preset threshold, or judging whether the change waveform of the first coding rate data appears a sawtooth wave, a spike wave or a rectangular wave, or judging whether the first coding rate data is lower than the seventh preset threshold, or judging whether the continuous duration of the first coding rate data being lower than the seventh preset threshold is greater than the eighth preset threshold. If the judgment result is no, the device operation data of the communication link is collected.
5. The intelligent data operation and maintenance system for a quantum key distribution network according to claim 1, characterized in that: For the status check characteristic value strategy system of quantum communication link / device, the data collection strategy includes step S301, obtaining log control process data, and judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are normal according to the log control process data; if so, collecting the device operation data of the communication link.
6. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 2, characterized in that: The quantum communication link key generation characteristic value strategy system specifically performs the following steps: Step S102, judging whether the first generated key amount is greater than the first preset threshold, or judging whether the change of the first generated key amount relative to the key amount generated in the previous cycle is zero, or judging whether the change rate of the first generated key amount corresponding to the current cycle exceeds the second preset threshold; Step S103, if so, outputting an alarm signal, and taking the first generated key amount as the first abnormal characteristic value.
7. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 6, characterized in that: The quantum communication link key quantity characteristic value strategy system also performs the following steps: Step S104, determining whether there is a feature value identical to the first abnormal feature value in the abnormal feature value library; Step S105: if not, adding the first abnormal feature value to the abnormal feature value library.
8. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 4, characterized in that: The quantum link coding rate data characteristic value strategy system specifically performs the following steps: Step S202, determining whether any item of the collected equipment operation data result value is within a preset range; if not within the preset range, taking the equipment operation data result value exceeding the preset range as the second abnormal characteristic value, and outputting an alarm message, wherein the equipment operation data includes: the signal state error rate of the current cycle, the detection count ratio of the current cycle, the delayed scanning peak number of the current cycle, the dark count of the current cycle, and the signal state deception state ratio of the current cycle; Step S203: output an alarm signal, and use the scan result value corresponding to the judgment result as the third abnormal characteristic value.
9. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 8, characterized in that: The quantum link coding rate data characteristic value strategy system further performs the following steps: Step S204, determining whether there is a feature value identical to the second abnormal feature value or the third abnormal feature value in the abnormal feature value library; Step S205: if not, adding the second abnormal feature value or the third abnormal feature value to the abnormal feature value library.
10. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 5, characterized in that: The state check eigenvalue strategy system of the quantum communication link / device specifically performs the following steps: Step S302, determining whether the collected equipment operation data result value is within a preset range; if the equipment operation data result value is not within the preset range, taking the equipment operation data result value as a fourth abnormal characteristic value; If the result value of the equipment operation data is within the preset range, it is determined whether the result value of the delayed scan is within the preset range; If the delayed scanning result is not within the preset range, the delayed scanning value corresponding to the scanning result is used as the fourth abnormal characteristic value; If the delayed scanning result value is within the preset range, determine whether the device parameters of the communication link in the current cycle are the same as the preset device parameters. If they are not the same, take the device parameters corresponding to the communication link that are different from the preset device parameters as the fifth abnormal characteristic value and output an alarm message.
11. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 10, characterized in that: The state check eigenvalue strategy system of the quantum communication link / device also performs the following steps: Step S303: determine whether there is a feature value identical to the fourth abnormal feature value and the fifth abnormal feature value in the abnormal feature value library; if not, execute step S304; Step S304: adding the abnormal feature value to the abnormal feature value library.
12. The intelligent data operation and maintenance system for a quantum key distribution network according to claim 1, characterized in that: The exception handling strategy for the quantum communication link key generation characteristic value strategy system that collects and generates key quantities in time-sharing mainly enters the quantum link coding rate data characteristic value strategy system. The exception handling strategy for the coding rate data of the quantum link coding rate data characteristic value strategy system mainly enters the quantum communication link / equipment status check characteristic value strategy system.
13. The intelligent data operation and maintenance system for a quantum key distribution network according to claim 1, characterized in that: The abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device specifically performs the following steps: K: When none of the quantum key distribution devices of the current communication node generates a key, determine whether the coding rate data reported by the quantum key distribution device is zero. If the result of step K is yes, execute step L; if not, execute step M; L: judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are the same as the abnormal characteristic value in the abnormal characteristic value library according to the log control process data; if so, performing a PING packet check on the network management of the preset network segment and a self-check on the key management terminal of the communication node; if the test results are all normal, restarting the quantum key distribution device paired with the quantum key distribution device; if one of the check results is abnormal, outputting the check result or outputting an alarm; M: performing a self-test on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; If the self-test result is normal, the network management system of the quantum key distribution device is checked.
14. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 13, characterized in that: The abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps: N: when the interruption duration of the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node is greater than the fifth preset threshold value, and the reported coding rate data is zero, judging whether the heartbeat data, authentication data, monitoring data, link data and key authentication data of the communication link are normal according to the log control process data, wherein the preset number is not less than one and less than the total number of the quantum key distribution devices; O: If yes, collect the delay scan values of the communication link and the quantum key distribution device to obtain the delay scan result; restart the quantum key distribution device paired with the quantum key distribution device, and if the interruption time of the first coding rate data is greater than the fifth preset threshold value within the preset time, perform self-check on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; P: According to the delayed scanning result, determine whether the delayed scanning result is the same as the abnormal feature value in the abnormal feature value library; if so, restart the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; if the interruption duration of the first coding rate data after the restart is greater than the fifth preset threshold, perform self-inspection on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
15. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 14, characterized in that: The abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps: Q: when a sawtooth wave, a spike wave or a rectangular wave appears in the waveform of the change of the first coding rate data, the delay scanning value of the communication link and the quantum key distribution device is collected to obtain the delay scanning result. This step Q is performed when the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node are abnormal; R: judging whether the delayed scanning result is the same as the abnormal feature value in the abnormal feature value library according to the delayed scanning result; S: If yes, restart the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device; T: if the interruption duration of the first coding rate data after restart is greater than a fifth preset threshold, a self-check is performed on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device.
16. The intelligent data operation and maintenance system of the quantum key distribution network according to claim 15, characterized in that: The abnormality handling strategy of the state check eigenvalue strategy system of the quantum communication link / device also performs the following steps: U: when the interruption duration of the first coding rate data is greater than a fifth preset threshold value and the reported coding rate data is not zero, perform a self-test on the quantum key distribution device and the quantum key distribution device paired with the quantum key distribution device to obtain a self-test result. This step U is performed when the first coding rate data of a preset number of distribution devices in the quantum key distribution device of the current communication node are abnormal; V: If the self-test result is normal, check the network management system of the quantum key distribution device.
Citation Information
Patent Citations
Quantum secret communication network system based on quantum key distribution technology, and application thereof
CN109302288A
Quantum communication network operation index evaluation method based on entropy evaluation method
CN111934865A