A quantum resource optimization allocation method and device

Abstract

The application discloses a quantum resource optimization distribution method and device. The method comprises the following steps: generating a classical key, reading a shared first quantum key from a QKD device, dividing data to be encrypted into a plurality of data segments for segmented storage, randomly selecting part of the data segments from the plurality of data segments, performing quantum encryption on the part of the data segments by using the first quantum key to obtain a first quantum encryption field, randomly arranging any data segment containing the first quantum encryption field, generating a second quantum key, performing quantum encryption on the any data segment by using the second quantum key to obtain a second quantum encryption field, performing classical encryption on the remaining data segments by using the classical key to obtain a classical encryption field, and fusing the second quantum encryption field and the classical encryption field, so that quantum resources can be effectively utilized in the key resource scheduling and use process, important information modules are reasonably distributed by quantum resource encryption, and maximum security is achieved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication data encryption, and in particular to a quantum resource optimization allocation method and device. BACKGROUND

[0002] As a kind of "communication technology", the related prior art of quantum key distribution and classical fusion is more concentrated in communication, such as quantum channel and classical channel co-fiber transmission, multiplexing technology of multiple channels, etc.

[0003] The existing patent with application number 202211274183.7 discloses a quantum light and classical light co-fiber transmission device and its transmission method, which focuses on resource saving when deploying QKD, and transmits classical and quantum signals with optical fibers. The existing patent with application number 202211274183.7 discloses a communication data encryption method based on quantum key, which considers the security of the authentication process and performs secondary encryption. However, the existing key service design is based on the storage and scheduling and application of quantum keys, and does not involve the fusion use of classical keys and quantum keys, so the existing key service cannot be applied to the storage, scheduling and application mode required by the fusion use of classical keys and quantum keys. Therefore, it is necessary to propose a quantum resource optimization allocation method and device to solve the above problems. SUMMARY

[0004] The purpose of the present application is to provide a quantum resource optimization allocation method and device that can provide three different security levels of encryption services, namely classical encryption service, quantum encryption service and fusion encryption service.

[0005] In a first aspect, the present application provides a quantum resource optimization allocation method, comprising:

[0006] generating a classical key;

[0007] reading a shared first quantum key from a QKD device;

[0008] dividing the data to be encrypted into several data segments for segmented storage;

[0009] randomly selecting part of the data segments from the several data segments, and using the first quantum key to perform quantum encryption on the part of the data segments to obtain a first quantum encryption field;

[0010] randomly arranging any data segment containing the first quantum encryption field, and generating a second quantum key;

[0011] using the second quantum key to perform quantum encryption on the any data segment to obtain a second quantum encryption field;

[0012] The remaining data segments are classically encrypted using a classical key to obtain a classical encryption field;

[0013] The second quantum encryption field is fused with the classical encryption field.

[0014] Further, in the step of generating the classical key, a symmetric encryption algorithm of the SM national secret series is used to generate the classical key.

[0015] Further, in the step of dividing the data to be encrypted into a plurality of data segments for segmented storage, the data to be encrypted is segmented by reinforcement learning means.

[0016] In a second aspect, the present application provides a quantum resource optimization allocation device, comprising:

[0017] A classical key generation unit is configured to generate a classical key.

[0018] A quantum key reading unit is configured to read a shared first quantum key from a QKD device.

[0019] A segmentation unit is configured to divide data to be encrypted into a plurality of data segments for segmented storage.

[0020] A first quantum encryption unit is configured to randomly select part of the data segments from the plurality of data segments, and use the first quantum key to quantum-encrypt the part of the data segments to obtain a first quantum encryption field.

[0021] A selection unit is configured to randomly arrange any data segment containing the first quantum encryption field, and generate a second quantum key.

[0022] A second quantum encryption unit is configured to use the second quantum key to quantum-encrypt the any data segment to obtain a second quantum encryption field.

[0023] A classical encryption unit is configured to use the classical key to classically encrypt the remaining data segments to obtain a classical encryption field.

[0024] A fusion unit is configured to fuse the second quantum encryption field with the classical encryption field.

[0025] Further, the classical key generation unit is configured to use a symmetric encryption algorithm of the SM national secret series to generate the classical key.

[0026] Further, the segmentation unit is configured to segment the data to be encrypted by reinforcement learning means.

[0027] The beneficial effects of the present application are as follows: the quantum resource optimization allocation method and device provided by the present application can realize effective utilization of quantum resources in the key resource scheduling and use process, and can realize reasonable allocation of quantum resources to encrypt important information modules in the key resource scheduling and use process to achieve maximum security. BRIEF DESCRIPTION OF DRAWINGS

[0028] In order to more clearly illustrate the technical solutions of the present application, the drawings needed in the embodiments will be briefly introduced as follows: obviously, for those skilled in the art, other drawings can also be obtained without creative labor on the basis of these drawings.

[0029] Figure 1 is a flow chart of the quantum resource optimization allocation method of the present application;

[0030] Figure 2 is a schematic diagram of the quantum resource optimization allocation device of the present application. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical solutions and advantages of the present application clearer, the technical solutions of the present application will be described clearly and completely in combination with specific embodiments of the present application and corresponding drawings. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application. The technical solutions provided by each embodiment of the present application will be described in detail below in combination with the drawings.

[0032] Please refer to Figure 1 The present application provides a quantum resource optimization allocation method, which comprises the following steps:

[0033] S101, generating a classical key.

[0034] Specifically, the fusion encryption sending end can be divided into an application layer, a key management layer and a quantum layer. The application layer obtains data to be encrypted, and generates a classical key using a symmetric encryption algorithm of the SM national secret series.

[0035] S102, reading the shared first quantum key from the QKD device.

[0036] Specifically, the key management layer reads the shared first quantum key from the quantum layer QKD device.

[0037] S103, dividing the data to be encrypted into several data segments for segmented storage.

[0038] Specifically, the data to be encrypted is segmented by reinforcement learning or the like.

[0039] S104, randomly selecting part of the data segments from the several data segments, and quantum encrypting the part of the data segments using the first quantum key to obtain a first quantum encryption field.

[0040] Specifically, random selection can be random selection of any data segment, which can ensure security. In addition, important data segment extraction can also be performed through artificial intelligence technology, and then quantum encryption is performed.

[0041] S105, randomly arranging any data segment containing the first quantum encryption field, and generating a second quantum key.

[0042] S106, quantum encrypting the any data segment using the second quantum key to obtain a second quantum encryption field.

[0043] S107, classically encrypting the remaining data segments using a classical key to obtain a classical encryption field.

[0044] S108, fusing the second quantum encryption field and the classical encryption field.

[0045] As can be seen from the above embodiments, the quantum resource optimization allocation method provided by the application guarantees the reasonable allocation and use of quantum resources based on the terminal system using quantum keys and classical keys in fusion. By generating a classical key, reading the shared first quantum key from the QKD device, dividing the data to be encrypted into several data segments for segmented storage, randomly selecting part of the data segments from the several data segments, quantum encrypting the part of the data segments using the first quantum key to obtain a first quantum encryption field, randomly arranging any data segment containing the first quantum encryption field, and generating a second quantum key, quantum encrypting the any data segment using the second quantum key to obtain a second quantum encryption field, classically encrypting the remaining data segments using a classical key to obtain a classical encryption field, and fusing the second quantum encryption field and the classical encryption field, the quantum resources can be effectively utilized in the key resource scheduling and use process, and the quantum resources can be reasonably allocated in the key resource scheduling and use process to encrypt important information modules to achieve maximum security.

[0046] Referring to Figure 2 The application provides a quantum resource optimization distribution device, comprising:

[0047] A classical key generation unit 21 is configured to generate a classical key.

[0048] A quantum key reading unit 22 is configured to read a shared first quantum key from a QKD device.

[0049] A segmentation unit 23 is configured to segment data to be encrypted into a plurality of data segments for segmented storage.

[0050] A first quantum encryption unit 24 is configured to randomly select part of the data segments from the plurality of data segments, and perform quantum encryption on the part of the data segments by using the first quantum key to obtain a first quantum encryption field.

[0051] A selection unit 25 is configured to randomly arrange any data segment containing the first quantum encryption field, and generate a second quantum key.

[0052] A second quantum encryption unit 26 is configured to perform quantum encryption on the any data segment by using the second quantum key to obtain a second quantum encryption field.

[0053] A classical encryption unit 27 is configured to perform classical encryption on the remaining data segments by using the classical key to obtain a classical encryption field.

[0054] A fusion unit 28 is configured to fuse the second quantum encryption field and the classical encryption field.

[0055] In this embodiment, the classical key generation unit 21 is configured to generate a classical key by using a symmetric encryption algorithm of the SM national secret series.

[0056] In this embodiment, the segmentation unit 23 is configured to segment the data to be encrypted by using a reinforcement learning method.

[0057] It should be noted that the terms used herein are only intended to describe specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, the singular form is intended to include the plural form, unless the context clearly indicates otherwise, and it should be further understood that, when the terms "comprise" and / or "include" are used in the specification, there is a presence of the features, steps, operations, devices, components and / or combinations thereof.

[0058] It should be noted that the terms "first", "second", and the like, used in the description and in the claims of the present application as well as above-mentioned figures are used to distinguish between similar objects and not necessarily for describing a specific sequential or chronological order. It is to be understood that the use of data so designated is meant to encompass all such variations of the embodiments described herein, for example, the embodiments of the present application described herein can be implemented in a different order than the one described herein.

[0059] The preferred embodiments of the application are described above in detail. The application is not limited to the embodiments described above, but can be modified and changed by those skilled in the art without departing from the spirit and principle of the application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the application should be included in the scope of the protection of the application.

Claims

1. A method for optimal allocation of quantum resources, characterized in that, The method comprises the following steps: generating a classical key; reading a shared first quantum key from a QKD device; segmenting and storing data to be encrypted into a plurality of data segments; randomly selecting part of the data segments from the plurality of data segments, and performing quantum encryption on the part of the data segments by using the first quantum key to obtain a first quantum encryption field; randomly arranging any data segment containing the first quantum encryption field, and generating a second quantum key; performing quantum encryption on the any data segment by using the second quantum key to obtain a second quantum encryption field; performing classical encryption on the remaining data segments by using the classical key to obtain a classical encryption field; fusing the second quantum encryption field and the classical encryption field.

2. The method of claim 1, wherein, In the step of generating the classical key, a symmetric encryption algorithm of the SM national secret series is used to generate the classical key.

3. The method of claim 1, wherein, In the step of segmenting and storing the data to be encrypted into a plurality of data segments, the data to be encrypted is segmented by using a reinforcement learning method.

4. A quantum resource optimization allocation apparatus, comprising: a quantum resource optimization allocation unit configured to optimize allocation of quantum resources. The method comprises the following steps: a classical key generation unit configured to generate a classical key; a quantum key reading unit configured to read a shared first quantum key from a QKD device; a segmentation unit configured to segment and store data to be encrypted into a plurality of data segments; a first quantum encryption unit configured to randomly select part of the data segments from the plurality of data segments, and perform quantum encryption on the part of the data segments by using the first quantum key to obtain a first quantum encryption field; a selection unit configured to randomly arrange any data segment containing the first quantum encryption field, and generate a second quantum key; a second quantum encryption unit configured to perform quantum encryption on the any data segment by using the second quantum key to obtain a second quantum encryption field; a classical encryption unit configured to perform classical encryption on the remaining data segments by using the classical key to obtain a classical encryption field; a fusion unit configured to fuse the second quantum encryption field and the classical encryption field.

5. The quantum resource optimization allocation apparatus of claim 4, wherein, The classical key generation unit is configured to generate the classical key by using a symmetric encryption algorithm of the SM national secret series.

6. The quantum resource optimization allocation apparatus of claim 4, wherein, The segmentation unit is configured to segment the data to be encrypted by using a reinforcement learning method.

Images