Quantum key supply recovery methods and related equipment
By acquiring the physical topology and state information of the quantum key distribution network, the optimal path is determined to generate the recovery key, thus solving the problem of abnormal key supply after a QKDN failure and achieving rapid recovery and continuity.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- BEIJING UNIV OF POSTS & TELECOMM
- Filing Date
- 2023-01-16
- Publication Date
- 2026-07-17
AI Technical Summary
Existing technologies lack recovery strategies for quantum key distribution networks (QKDNs) after failures of different scales, leading to abnormal key supply and affecting the timeliness of network recovery.
In response to a key supply interruption event, the system acquires the physical topology information of the quantum key distribution network, determines the optimal path and generates a recovery key, optimizes path selection using quantum key distribution state information, and achieves rapid recovery by combining the standardized multi-level structure of QKDN.
It enables rapid recovery of quantum key distribution networks in the event of key supply interruption or abnormality, ensuring the continuity and efficiency of key supply.
Smart Images
Figure CN116170136B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of quantum key supply technology, and in particular to a quantum key supply recovery method and related equipment. Background Technology
[0002] Current research often applies traditional optical network traffic recovery methods to QKDN (Quantum Key Distribution Network), such as protection channel settings for two types of services in optical network failure scenarios and rerouting recovery mechanisms for quantum key distribution services in multi-domain optical network scenarios. However, these solutions do not consider the differences between optical networks and QKDN. As the key delivery party, QKDN needs to consider the generation method of point-to-point negotiation of key resources. Therefore, corresponding considerations and designs are required in the recovery process, including a series of operations such as secondary scheduling, key relay, authentication, and update synchronization at the key management layer. The additional overhead of these operations has varying degrees of impact on the timeliness of network recovery.
[0003] QKDN failures include key supply interruptions and anomalies. More direct examples include key supply interruptions and fiber optic cable disconnections, while more indirect examples include impairments in quantum key generation due to deterioration in metrics such as the bit error rate of qubits. These failures cause key supply anomalies in the quantum key distribution network, requiring timely network configuration recovery strategies for repair. Furthermore, the scale of QKDN failures varies, and the choice of recovery strategies involves varying degrees of overhead and latency. However, current technologies only address key path recovery in multi-domain scenarios, lacking recovery strategies for QKDN failures of different scales. Summary of the Invention
[0004] In view of this, the purpose of this application is to propose a quantum key supply recovery method and related equipment.
[0005] To achieve the above objectives, this application provides a quantum key supply recovery method, comprising:
[0006] In response to a key supply interruption event in the quantum key distribution path, the physical topology information of the quantum key distribution network is obtained;
[0007] Based on the physical topology information, at least one candidate path is determined;
[0008] Based on the quantum key distribution state information of the candidate paths, an optimal path is determined from the candidate paths as the recovery path;
[0009] Based on the recovery path, a recovery key is generated to restore the key supply of the quantum key distribution path.
[0010] In one possible implementation, the key supply interruption event includes: a key supply interruption on a single link in the quantum key distribution path; the physical topology information includes global physical topology information;
[0011] The process of obtaining the physical topology information of the quantum key distribution network in response to a key supply interruption event in the quantum key distribution path includes:
[0012] In response to a key supply interruption in a single link of the quantum key distribution path, the global physical topology information of the quantum key distribution network is obtained.
[0013] In one possible implementation, the quantum key distribution state information includes: key consumption rate and remaining key quantity;
[0014] The step of determining an optimal path as the recovery path from the candidate paths based on the quantum key distribution state information of the candidate paths includes:
[0015] Based on the key consumption rate and the number of remaining keys, an optimal path is determined from the candidate paths as the recovery path; the optimal path is the candidate path with the lowest key consumption rate and / or the largest number of remaining keys.
[0016] In one possible implementation, the recovery key includes a link recovery key;
[0017] The step of generating a recovery key based on the recovery path includes:
[0018] In response to determining the recovery path, at least one first quantum key is generated based on at least one pair of nodes of the recovery path;
[0019] The at least one first quantum key is formatted to obtain at least one first formatted key;
[0020] The at least one first formatted key is subjected to key relay processing to obtain the link recovery key.
[0021] In one possible implementation, the method further includes:
[0022] In response to a key supply interruption in a single link of the quantum key distribution path, the two ends of the single link are reset, monitored, and a recovery threshold time is set.
[0023] In response to the monitoring of the link parameters of the single link returning to normal within the recovery threshold time, the key supply of the single link is restored.
[0024] In one possible implementation, the key supply interruption event includes: key supply interruption of at least two links in the quantum key distribution path; the physical topology information includes source and destination node physical topology information between the source and destination nodes of the quantum key distribution path;
[0025] The process of obtaining the physical topology information of the quantum key distribution network in response to a key supply interruption event in the quantum key distribution path includes:
[0026] In response to the interruption of key supply in at least two links of the quantum key distribution path, the physical topology information of the source and destination nodes is obtained.
[0027] In one possible implementation, the recovery key includes: a path recovery key;
[0028] The step of generating a recovery key based on the recovery path includes:
[0029] Obtain at least one second quantum key for the recovery path;
[0030] The at least one second quantum key is formatted to obtain at least one second formatted key;
[0031] The at least one second formatted key is subjected to key relay processing to obtain the path recovery key.
[0032] In one possible implementation, the length of the recovery key is the same as the key length before the interruption of the quantum key distribution path supply.
[0033] Based on the same inventive concept, embodiments of this application also provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the quantum key supply recovery method as described in any of the above.
[0034] Based on the same inventive concept, embodiments of this application also provide a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute any of the quantum key supply recovery methods described above.
[0035] As can be seen from the above, the quantum key distribution (QKDN) recovery method and related equipment provided in this application, in response to a key supply interruption event in the quantum key distribution path, obtain the physical topology information of the quantum key distribution network (QKDN); based on the physical topology information, determine at least one candidate path; based on the quantum key distribution status information of the candidate paths, determine an optimal path from the candidate paths as the recovery path; and generate a recovery key according to the recovery path to restore the key supply of the quantum key distribution path. In this application, after a key supply anomaly or interruption occurs, the embodiments immediately search for available paths and key resources in the QKDN, comprehensively coordinate different functional modules, and design different key supply recovery mechanisms for different numbers of faulty links in the same path, realizing rapid recovery of the QKDN from key supply interruptions or anomalies, effectively ensuring the continuous operation of the key supply. Attached Figure Description
[0036] To more clearly illustrate the technical solutions in this application or related technologies, the drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the drawings described below are only embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0037] Figure 1 This is a flowchart of the quantum key supply and recovery method according to an embodiment of this application;
[0038] Figure 2 This is a flowchart of a single-link key supply interruption recovery method according to an embodiment of this application;
[0039] Figure 3 This is a schematic diagram illustrating a scenario of a single-link key supply interruption recovery method according to an embodiment of this application.
[0040] Figure 4 This is a flowchart of a method for recovering from an interruption in the supply of key to at least two links according to an embodiment of this application.
[0041] Figure 5 This is a schematic diagram illustrating a scenario where the key supply to two links is interrupted and needs to be restored, as described in an embodiment of this application.
[0042] Figure 6 This is a schematic diagram of the electronic device structure according to an embodiment of this application. Detailed Implementation
[0043] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with specific embodiments and the accompanying drawings.
[0044] It should be noted that, unless otherwise defined, the technical or scientific terms used in the embodiments of this application should have the ordinary meaning understood by one of ordinary skill in the art to which this application pertains. The terms "first," "second," and similar terms used in the embodiments of this application do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Terms such as "comprising" or "including" mean that the element or object preceding the word encompasses the elements or objects listed after the word and their equivalents, without excluding other elements or objects. Terms such as "connected" or "linked" are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. Terms such as "upper," "lower," "left," and "right" are only used to indicate relative positional relationships; when the absolute position of the described object changes, the relative positional relationship may also change accordingly.
[0045] As described in the background section, related technologies often apply traditional optical network traffic recovery methods to QKDN, such as protection channel configuration schemes for two types of services under optical network failure scenarios and rerouting recovery mechanisms for quantum key distribution services in multi-domain optical network scenarios. However, these schemes do not consider the differences between optical networks and QKDN. Furthermore, QKDN failures include key supply interruptions and anomalies, such as direct key supply interruptions and optical cable disconnections, and indirect failures such as impaired quantum key generation due to deterioration of indicators like the qubit error rate. These failures cause abnormal key supply in the quantum key distribution network, requiring timely repair through network configuration recovery strategies. Additionally, the scale of QKDN failures varies, and the choice of recovery strategies involves varying degrees of overhead and latency. However, existing technologies only provide key path recovery solutions for multi-domain scenarios, lacking recovery strategies for QKDN failures of different scales.
[0046] In light of the above considerations, this application proposes a quantum key distribution (QKDN) recovery method. In response to a key supply interruption event in the QKDN path, the method acquires the physical topology information of the QKDN network; based on the physical topology information, it determines at least one candidate path; based on the QKDN's QKDN state information, it determines an optimal path from the candidate paths as the recovery path; and based on the recovery path, it generates a recovery key to restore the key supply of the QKDN path. This application's technical solution is based on the QKDN architecture and designs the above-mentioned QKDN recovery method. It incorporates a key supply recovery mechanism based on fault scenarios, specifically using the number of link failures in a path as a distinguishing factor. This technical solution effectively enables the QKDN network to quickly resume operation from the failed key supply or switch to an available path to restore the target source-to-destination key supply when the key supply of the target working path is interrupted. Combined with the standardized multi-level structure of QKDN, it quickly supplies the key to the key manager output port, achieving effective recovery of key supply interruptions or anomalies by QKDN and ensuring the continuity of key supply.
[0047] The technical solutions of the embodiments of this application will be described in detail below through specific examples.
[0048] refer to Figure 1 The quantum key supply recovery method according to this application includes the following steps:
[0049] Step S101: In response to a key supply interruption event in the quantum key distribution path, obtain the physical topology information of the quantum key distribution network;
[0050] Step S102: Based on the physical topology information, determine at least one candidate path;
[0051] Step S103: Based on the quantum key distribution state information of the candidate paths, determine an optimal path from the candidate paths as the recovery path;
[0052] Step S104: Generate a recovery key according to the recovery path to restore the key supply of the quantum key distribution path.
[0053] The key supply recovery for quantum key distribution networks aims to enable the network to resume operation as quickly as possible from the failed key supply or switch to an available path to restore the target source-to-destination key supply when the key supply on the target working path is interrupted, by using manual or autonomous reconfiguration methods based on the fault point. In conjunction with the multi-level structure of the QKDN standard, the key supply is supplied upwards to the key manager output port as quickly as possible to ensure the continuity of key supply.
[0054] For step S101, when a key supply interruption event occurs in the quantum key distribution path, the physical topology information of the quantum key distribution network is obtained.
[0055] In this embodiment, the key supply interruption event includes: key supply interruption of a single link in the quantum key distribution path; the physical topology information includes global physical topology information.
[0056] refer to Figure 2 This is a flowchart illustrating the single-link key supply interruption recovery method according to an embodiment of this application. Specifically, it includes two main modules. First, there is the quantum layer QKD (Quantum Key Distribution) key supply recovery module. This module first attempts to autonomously reset the problematic QKD link through the local controller, obtaining the key rate information of the target link within a set time threshold to determine if the link has recovered. When the link reset is successful, the target link re-initiates QKD-key supply to restore key supply; when the link reset fails, the local controller obtains the current network topology from the manager and searches for an available point-to-point QKD path to replace the original point-to-point QKD link. Second, there is the key management layer KMA-key supply recovery module. This module formats the received QKD-key of the recovery path into a uniform-length KMA-key and stores it in the local KMA (Key Management Agent) for further end-to-end key operations. Through the above recovery method, the key resource supply of point-to-point QKD links can be restored within a certain time, improving the resilience of QKD key supply.
[0057] refer to Figure 3 This is a schematic diagram of a single-link key supply interruption recovery method according to an embodiment of this application.
[0058] like Figure 3 As shown, the key supply to QKD modules 1-2 in the target link is interrupted. When a single link supply is interrupted, the optical devices of QKD modules 1 and 2 at both ends of the link need to be reset first. At the same time, the QKDN local controller sets a recovery threshold time. Within the set recovery threshold time, the southbound interface monitors the reset QKD link parameters and checks whether indicators such as QBER (qubit error rate) and key rate can be restored to the normal system range. If the QKD link parameters return to normal values within the recovery threshold time, the link continues to supply QKD keys to the KM (key manager).
[0059] If, within the set recovery threshold time, the local controller requests the current global physical topology information from the manager to perform local rerouting to restore the damaged key supply.
[0060] Furthermore, after obtaining the global physical topology information of the current network, the local controller calculates the available point-to-point QKD paths based on the obtained QKDN network topology and saves them as a rerouting table. The candidate QKD paths are then prioritized based on their QKD status information, such as key consumption rate and the number of remaining keys. In prioritizing, paths with lower key consumption rates and more remaining keys have higher priority.
[0061] In this embodiment, the local controller uses the K Shortest Path (KSP) algorithm to calculate all available QKD paths between QKD modules 1 and 2, resulting in two QKD paths: QKD module 1-3-4-2 and 1-3-4-5-2. The local controller further evaluates the QKD status information of these candidate paths, with evaluation parameters including the key remaining amount, key consumption rate, and hop count of the two QKD paths. Calculations show that both paths in this embodiment meet the requirements for key remaining amount and consumption rate for key supply recovery. However, QKD path 1-3-4-2 has fewer hops (4 hops) than 1-3-4-5-2, and consumes fewer additional QKD keys during the recovery operation. Therefore, QKD path 1-3-4-2 is selected as the optimal QKD recovery path.
[0062] Furthermore, the QKD nodes at both ends of the damaged link switch to the optimal path in the routing table to negotiate the key, generating a QKD-key and supplying it to the KM(s) of the restored QKD path.
[0063] In this embodiment, QKD module 1 switches to path 1-3-4-2 to perform the QKD key sharing process with module 2. QKD links 1-3, 3-4, and 4-2 are respectively activated to perform the key negotiation process and supply QKD keys to the key managers of each node.
[0064] Furthermore, the QKD key in the recovery path needs to be formatted, authenticated, and synchronized, and then converted into a KMA key of uniform length and stored in a temporary cache.
[0065] In this embodiment, QKD nodes 1, 2, 3, and 4 perform formatting, authentication, and synchronization on the received paired QKD keys in the KM layer's key manager, converting them into KMA keys of uniform length and storing them in a temporary cache. The specific key length here depends on the user-side business requirements. It should be noted that the formatting, authentication, and synchronization steps described above are all technical solutions known to those skilled in the art, and therefore will not be elaborated upon here.
[0066] Furthermore, the KMA along the recovery path needs to relay the paired KMA keys to generate a point-to-point shared KMA key between the two ends of the target link. This relay process is then applied to the entire service transmission path to obtain the recovery key, which is then used to restore the key of the damaged link.
[0067] In this embodiment, the KM of the key management layer 1-4 The paired KMA keys stored in the recovery path are relayed and synchronized, and the shared key is regained between QKD modules 1 and 2, thus completing the key supply recovery.
[0068] In another feasible embodiment, the key supply interruption event includes: key supply interruption of at least two links in the quantum key distribution path; the physical topology information includes source and destination node physical topology information between source and destination nodes of the quantum key distribution path.
[0069] In this embodiment, at least two links experiencing key supply interruption must be within the same service transmission path. If they are each distributed across different service transmission paths, the technical solution mentioned in the above embodiments is used to restore the links experiencing key supply interruption. Furthermore, if there are at least two links within the same service transmission path and a single link within another service transmission path, the following technical solution is used for the path corresponding to the key supply interruption of at least two links, and the technical solution described in the above embodiments is used for the path corresponding to the key supply interruption of a single link. These two technical solutions can be applied individually or simultaneously in the same scenario.
[0070] Taking two links where key supply is interrupted as an example, if both links are within the same service transmission path, the following technical solution is used to restore key supply. It should be noted that there are no requirements regarding the location of the two links; that is, they do not need to be consecutive, and there are no requirements regarding the number of intervening links between them.
[0071] refer to Figure 4 The flowchart below shows a method for recovering from an interruption in the supply of at least two link keys according to an embodiment of this application.
[0072] When key synchronization fails due to an interruption in key supply between end-to-end QKD nodes, QKDN can choose a global rerouting strategy to restore key synchronization. The QKDN global recovery method includes two main modules. First, the quantum layer QKD-key supply recovery module calculates the set of available QKD paths between the target end-to-end QKD nodes based on the global network topology, prioritizes each path according to its key information, and then controls the QKD modules at both ends to switch to the optimal QKD recovery path for QKD-key supply. Second, the key management layer KSA-key supply recovery module formats the resupplied QKD-keys into KMA-keys through the key managers along the recovery path, performs key relay processing between end-to-end nodes, and synchronizes them into KSA-keys stored in the KSA (Key Supply Agent Module) for user use. This global recovery method enables rapid recovery from synchronization failures caused by faults between end-to-end QKD nodes.
[0073] refer to Figure 5 This is a schematic diagram illustrating a scenario where the supply of key to the two links is interrupted and restored according to an embodiment of this application.
[0074] When a key supply interruption occurs on the target path, the QKDN global controller obtains the real-time physical topology information from the target source to the destination, and at the same time obtains the key information on the available paths.
[0075] In this embodiment, as Figure 5 As shown, when key synchronization fails on the target QKD module 1-3-6-7 path, based on the link status information collected by the controller, a local recovery strategy requires resetting or rerouting QKD paths 1-3 and 6-7 to restore end-to-end key supply and synchronization. In this case, the global controller can directly use an end-to-end rerouting strategy to enable normal key synchronization between QKD modules 1 and 7. Therefore, the QKDN global controller first requests the physical topology information between QKD modules 1 and 7 in the current network from the manager, and simultaneously collects the key information of the QKD links within this physical topology.
[0076] Furthermore, the global controller integrates key information from candidate QKD paths, calculating key consumption rate, remaining key count, and other key-related information. Based on this information, it prioritizes QKD recovery paths, with paths having surplus key resources being given priority for recovery by default. Similarly, paths with lower key consumption rates and / or higher remaining key counts have higher priority.
[0077] In this embodiment, the global controller integrates key information for candidate QKD paths 1-5-7 and 1-2-4-7, checks whether the key consumption rate and remaining key count of the QKD links along the path meet the recovery requirements of the target damaged path, and prioritizes the two QKD paths according to the recovery strategy. In this embodiment, both QKD paths meet the conditions required for key synchronization recovery between QKD modules 1 and 7. Therefore, the recovery path is determined based on the number of hops, i.e., QKD path 1-5-7 (3 hops) and QKD path 1-2-4-7 (4 hops). Comparison shows that the total key consumption for recovery via QKD path 1-5-7 is relatively less, so QKD path 1-5-7 is ultimately selected as the optimal path.
[0078] Furthermore, based on the controller's calculation results, the optimal QKD path is selected to restore the key supply for the damaged service, and the selected restoration path supplies QKD keys to the KM layer.
[0079] In this embodiment, based on the controller's calculation results, QKD modules 1 and 7 open path 1-5-7 as the recovery path to restore key supply, QKD links 1-5 and 5-7 supply QKD keys to the KM layer key manager, and QKD path 1-2-4-7 serves as a candidate path to maintain normal operation or remain idle.
[0080] Furthermore, similar to the above embodiments, the corresponding QKD-key needs to be formatted, authenticated, and synchronized, and converted into a KMA-key of uniform length and stored in a temporary cache. The specific length is determined by the end-to-end user-side service between QKD modules 1 and 7.
[0081] Furthermore, the controller invokes the KMA along the recovery path to relay the keys in the temporary cache. As shown in the figure, after the time required for key generation, QKD modules 1 and 7 obtain shared key resources and supply them to KSA as KSA-keys. The KSA-key generated by switching to the recovery path restores the services whose key supply was damaged between QKD nodes 1 and 7.
[0082] As can be seen from the above embodiments, the quantum key distribution network (QKDN) recovery method described in this application, in response to a key supply interruption event in the quantum key distribution path, obtains the physical topology information of the QKDN; determines at least one candidate path based on the physical topology information; determines an optimal path from the candidate paths as the recovery path based on the quantum key distribution status information of the candidate paths; and generates a recovery key according to the recovery path to restore the key supply of the quantum key distribution path. The technical solution of this application designs the above-mentioned quantum key distribution network recovery method based on the QKDN architecture, and designs a key supply recovery mechanism according to the fault scenario, specifically based on the number of link failures in a path. This technical solution effectively enables the QKDN to quickly resume operation from the failed key supply or switch to an available path to restore the target source-to-destination key supply when the key supply of the target working path is interrupted. Combined with the standardized multi-level structure of QKDN, it quickly supplies the key to the key manager output port, realizing the effective recovery of key supply interruption or anomaly by QKDN and ensuring the continuity of key supply.
[0083] It should be noted that the method in this embodiment can be executed by a single device, such as a computer or server. The method can also be applied in a distributed scenario, where multiple devices cooperate to complete the task. In such a distributed scenario, one of these devices may execute only one or more steps of the method in this embodiment, and the multiple devices will interact with each other to complete the method described.
[0084] It should be noted that the above description describes some embodiments of this application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in a different order than that shown in the above embodiments and still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require a specific or sequential order to achieve the desired result. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0085] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the quantum key supply recovery method described in any of the above embodiments.
[0086] Figure 6This embodiment illustrates a more specific hardware structure of an electronic device, which may include a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, memory 1020, input / output interface 1030, and communication interface 1040 are interconnected internally via the bus 1050.
[0087] The processor 1010 can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.
[0088] The memory 1020 can be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 can store the operating system and other applications. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program code is stored in the memory 1020 and is called and executed by the processor 1010.
[0089] The input / output interface 1030 is used to connect input / output modules to realize information input and output. Input / output modules can be configured as components within the device (not shown in the figure) or externally connected to the device to provide corresponding functions. Input devices may include keyboards, mice, touchscreens, microphones, various sensors, etc., while output devices may include displays, speakers, vibrators, indicator lights, etc.
[0090] The communication interface 1040 is used to connect a communication module (not shown in the figure) to enable communication between this device and other devices. The communication module can communicate via wired means (such as USB, Ethernet cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.).
[0091] Bus 1050 includes a pathway for transmitting information between various components of the device, such as processor 1010, memory 1020, input / output interface 1030, and communication interface 1040.
[0092] It should be noted that although the above-described device only shows the processor 1010, memory 1020, input / output interface 1030, communication interface 1040, and bus 1050, in specific implementations, the device may also include other components necessary for normal operation. Furthermore, those skilled in the art will understand that the above-described device may only include the components necessary for implementing the embodiments of this specification, and not necessarily all the components shown in the figures.
[0093] The electronic devices described above are used to implement the corresponding quantum key supply and recovery methods in any of the foregoing embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.
[0094] Based on the same inventive concept, corresponding to the methods of any of the above embodiments, this application also provides a non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the quantum key supply recovery method as described in any of the above embodiments.
[0095] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information accessible by a computing device.
[0096] The computer instructions stored in the storage medium of the above embodiments are used to cause the computer to execute the quantum key supply recovery method as described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.
[0097] Those skilled in the art should understand that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of this application (including the claims) is limited to these examples; within the framework of this application, the technical features of the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations of different aspects of the embodiments of this application as described above, which are not provided in the details for the sake of brevity.
[0098] Additionally, to simplify the description and discussion, and to avoid obscuring the embodiments of this application, the well-known power / ground connections to integrated circuit (IC) chips and other components may or may not be shown in the provided drawings. Furthermore, the apparatus may be shown in block diagram form to avoid obscuring the embodiments of this application, and this also takes into account the fact that the details of the implementation of these block diagram apparatuses are highly dependent on the platform on which the embodiments of this application will be implemented (i.e., these details should be fully understood by those skilled in the art). While specific details (e.g., circuits) have been set forth to describe exemplary embodiments of this application, it will be apparent to those skilled in the art that the embodiments of this application can be implemented without these specific details or with variations thereof. Therefore, these descriptions should be considered illustrative rather than restrictive.
[0099] Although this application has been described in conjunction with specific embodiments thereof, many substitutions, modifications, and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may be used with the embodiments discussed.
[0100] The embodiments of this application are intended to cover all such substitutions, modifications, and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the embodiments of this application should be included within the protection scope of this application.
Claims
1. A quantum key supply recovery method, characterized in that, include: In response to a key supply interruption event in the quantum key distribution path, the physical topology information of the quantum key distribution network is obtained, including: in response to a key supply interruption of a single link in the quantum key distribution path, obtaining global physical topology information of the quantum key distribution network; in response to a key supply interruption of at least two links in the quantum key distribution path, obtaining source and destination node physical topology information; the key supply interruption event includes: a key supply interruption of a single link in the quantum key distribution path and a key supply interruption of at least two links in the quantum key distribution path; the physical topology information includes global physical topology information and source and destination node physical topology information between the source and destination nodes of the quantum key distribution path; Based on the physical topology information, at least one candidate path is determined; Based on the quantum key distribution state information of the candidate paths, an optimal path is determined as the recovery path; the quantum key distribution state information includes: key consumption rate and remaining key quantity; Based on the recovery path, a recovery key is generated to restore the key supply of the quantum key distribution path; The step of determining an optimal path as a recovery path from the candidate paths based on the quantum key distribution state information of the candidate paths includes: determining an optimal path as a recovery path from the candidate paths based on the key consumption rate and the number of remaining keys; the optimal path is the candidate path with the lowest key consumption rate and / or the largest number of remaining keys. The method further includes: in response to an interruption in the key supply of a single link in the quantum key distribution path, resetting, monitoring, and setting a recovery threshold time for the two ends of the single link; and in response to the link parameters of the single link being restored to normal within the recovery threshold time, restoring the key supply of the single link.
2. The method according to claim 1, characterized in that, The recovery key includes a link recovery key; The step of generating a recovery key based on the recovery path includes: In response to determining the recovery path, at least one first quantum key is generated based on at least one pair of nodes of the recovery path; The at least one first quantum key is formatted to obtain at least one first formatted key; The at least one first formatted key is subjected to key relay processing to obtain the link recovery key.
3. The method according to claim 1, characterized in that, The recovery key includes: a path recovery key; The step of generating a recovery key based on the recovery path includes: Obtain at least one second quantum key for the recovery path; The at least one second quantum key is formatted to obtain at least one second formatted key; The at least one second formatted key is subjected to key relay processing to obtain the path recovery key.
4. The method according to claim 1, characterized in that, The length of the recovery key is the same as the key length before the interruption of the quantum key distribution path supply.
5. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the method as described in any one of claims 1 to 4.
6. A non-transitory computer-readable storage medium storing computer instructions, characterized in that, The computer instructions are used to cause the computer to perform the method according to any one of claims 1 to 4.