Quantum key synchronization and balanced distribution method and system for bidirectional key pool

Abstract

The application discloses a kind of quantum key synchronization and equal distribution method and system of bidirectional key pool, it uses self-balancing bidirectional key storage technology to realize the equal distribution of quantum key in bidirectional key pool, both ends simultaneously initiate data transmission decryption need to be solved by using distributed lock etc. The consumption of centralized scheduling is also guaranteed Optimization scheduling and key availability in peak period of quantum key.By introducing one-way key synchronization scheme, while simplifying the key synchronization mode, it can also prevent the conflict problem of bidirectional synchronization locking the same key, avoid the problem of reducing the efficiency of synchronization and data encryption transmission.At the same time, with the principle of updating decryption pool first and then updating encryption pool, the transmission failure problem that may be caused during key pool updating is solved, and the availability of the key is effectively guaranteed.

Description

Technical Field

[0001] This invention relates to the field of quantum secure communication, and specifically to a method and system for quantum key synchronization and balanced distribution of a two-way key pool. Background Technology

[0002] In existing quantum key distribution applications, quantum keys are typically used to encrypt and decrypt data at both node A and node B by storing the same quantum key. When encrypting and decrypting data, node A selects a segment or set of quantum keys to encrypt the data, then sends the identifier of this segment or set of quantum keys along with the encrypted data to node B. Node B decrypts the data by reading the same key based on the quantum key identifier. Figure 1 As shown, this is an implementation of a non-directional key pool.

[0003] Another existing technology involves bidirectional key storage, where quantum keys are compared for consistency and then stored in separate key pools. Node A randomly selects a key segment from this key pool according to a certain scheduling strategy, using it as the encryption key for communication between node A and node B. Then, a synchronization protocol is used to notify node B to use the same key segment as the decryption key for communication between node A and node B. Once both ends have confirmed this, subsequent encryption and decryption operations are performed, such as... Figure 2 As shown.

[0004] Storing the same quantum key can lead to key asynchrony when both nodes are transmitting data simultaneously, necessitating a distributed lock (centralized scheduling via a server) for synchronization. Otherwise, the encryption key used by node A could also be used by node B. However, according to cryptographic card security requirements, used keys must be destroyed. This would result in node A's encryption key being unavailable at node B for decryption, and vice versa. Figure 3 As shown.

[0005] While bidirectional key storage solves the conflict problem caused by storing keys in a single undirected key pool, it requires a strategy for key type decisions. In particular, if key selection synchronization is not handled properly, simultaneous synchronization on both sides will also cause conflicts. Furthermore, under high traffic, the dense sending of key synchronization messages can negatively impact the user experience. Additionally, the entire process involves two synchronizations: quantum key consistency synchronization and key pool type consistency synchronization, wasting network bandwidth and reducing processing speed. Summary of the Invention

[0006] To address the shortcomings of existing technologies, this invention proposes a quantum key synchronization and balanced distribution method and system for a bidirectional key pool. Departing from conventional approaches, it employs a self-balancing bidirectional key storage technology to achieve balanced distribution of quantum keys within the bidirectional key pool. This solves the overhead of centralized scheduling using distributed locks when both ends simultaneously initiate data transmission and decryption, while also ensuring optimized quantum key scheduling and guaranteeing key availability during peak periods. Furthermore, by introducing a unidirectional key synchronization scheme, the key synchronization method is simplified, and conflicts arising from locking the same key during bidirectional synchronization are prevented, avoiding reduced synchronization efficiency and data encryption transmission effectiveness. Simultaneously, by utilizing the principle of updating the decryption pool before updating the encryption pool, potential transmission failures during key pool updates are resolved, effectively ensuring key availability.

[0007] The first aspect of the present invention relates to a quantum key synchronization and balanced distribution method for a bidirectional key pool, which includes a key caching step, a synchronization direction planning step, a key quantity calculation step, and an distribution step.

[0008] The key caching step is used to distribute quantum keys to the first node A and store them in its cache pool A, and to distribute quantum keys to the second node B and store them in its cache pool B.

[0009] The synchronization direction planning step is used to select the first node A as the key synchronization initiator and the second node B as the key synchronization receiver according to preset rules.

[0010] The key quantity calculation step is used to take the minimum value of the key quantity of the AB encryption pool in the first node A and the key quantity of the AB decryption pool in the second node B as the first key quantity, and take the minimum value of the key quantity of the BA decryption pool in the first node A and the key quantity of the BA encryption pool in the second node B as the second key quantity. The quantum key in the AB encryption pool is used to encrypt the data transmitted from the first node A to the second node B, the quantum key in the BA encryption pool is used to encrypt the data transmitted from the second node B to the first node A, the quantum key in the AB decryption pool is used to decrypt the data transmitted from the first node A to the second node B, and the quantum key in the BA decryption pool is used to decrypt the data transmitted from the second node B to the first node A.

[0011] The allocation step is used by the second node B to allocate and store the quantum key in the cache pool B to the AB decryption pool and / or the BA encryption pool according to the balancing algorithm, and to notify the first node A to allocate and store the corresponding quantum key in the cache pool A to the AB encryption pool and / or the BA decryption pool.

[0012] The balancing algorithm is selected from a strategy group that includes stock relationship algorithms;

[0013] The stock relationship algorithm is used to allocate and store the quantum key in cache pool B to the AB decryption pool when the first key quantity is less than or equal to the second key quantity; otherwise, it allocates and stores the quantum key in cache pool B to the BA encryption pool.

[0014] Furthermore, the strategy group also includes a traffic relationship algorithm for determining the amount of keys allocated to the AB decryption pool and / or the BA encryption pool based on the data traffic associated with the AB decryption pool and the data traffic associated with the BA encryption pool.

[0015] Furthermore, in the key quantity calculation step, the first node A sends the key quantity of the AB encryption pool and the key quantity of the BA decryption pool to the second node B.

[0016] Furthermore, the quantum key synchronization and balanced distribution method of the present invention also includes a key verification step, used for the first node A to obtain the verification value of the quantum key in the buffer pool A and send it to the second node B, and for the second node B to obtain the verification value of the quantum key in the buffer pool B and compare it with the verification value sent by the first node A; and,

[0017] In the allocation step, the second node B allocates only the quantum keys that match the key verification step, and notifies the first node A to allocate only the quantum keys that match the key verification step.

[0018] Furthermore, the quantum key synchronization and balanced distribution method of the present invention also includes an update step, which is used to update the quantum key in the same data flow direction by first updating the decryption pool and then updating the encryption pool.

[0019] Furthermore, in the update step:

[0020] After updating the AB decryption pool using the quantum key that matched in the key verification step, the second node B notifies the first node A to update the AB encryption pool accordingly; and / or,

[0021] After updating the BA encryption pool using the quantum key that matches the key verification step, the second node B does not mark the updated quantum key as available, but instead notifies the first node A to update the BA decryption pool accordingly; and after updating the BA decryption pool, the first node A notifies the second node B to mark the updated quantum key in the BA encryption pool as available.

[0022] A second aspect of the present invention relates to a quantum key synchronization and balanced distribution system for a bidirectional key pool, comprising:

[0023] The first node A includes a buffer pool A, an AB encryption pool and a BA decryption pool. The buffer pool A caches the quantum keys distributed by the quantum key distribution device, the AB encryption pool stores the quantum keys used to encrypt the data transmitted from the first node A to the second node B, and the BA decryption pool stores the quantum keys used to decrypt the data transmitted from the second node B to the first node A.

[0024] The second node B includes a cache pool B, an AB decryption pool, and a BA encryption pool. The cache pool B caches the quantum keys distributed by the quantum key distribution device, the AB decryption pool stores the quantum keys used to decrypt data transmitted from the first node A to the second node B, and the BA encryption pool stores the quantum keys used to encrypt data transmitted from the second node B to the first node A.

[0025] The first node A is configured to obtain the key quantity of the AB encryption pool and the key quantity of the BA decryption pool and send them to the second node B; and, according to the allocation result notified by the second node B, the corresponding quantum key in the cache pool A is allocated and stored to the AB encryption pool and / or the BA decryption pool.

[0026] The second node B is configured to obtain the key quantity of the AB decryption pool and the key quantity of the BA encryption pool, and take the minimum value of the key quantity of the AB encryption pool and the key quantity of the AB decryption pool as the first key quantity, and take the minimum value of the key quantity of the BA decryption pool and the key quantity of the BA encryption pool as the second key quantity; and, according to the balancing algorithm, allocate and store the quantum key in the buffer pool B to the AB decryption pool and / or the BA encryption pool, and notify the first node A of the allocation result;

[0027] The balancing algorithm is selected from a strategy group that includes stock relationship algorithms;

[0028] The stock relationship algorithm is used to allocate and store the quantum key in cache pool B to the AB decryption pool when the first key quantity is less than or equal to the second key quantity; otherwise, it allocates and stores the quantum key in cache pool B to the BA encryption pool.

[0029] Furthermore, the strategy group also includes a traffic relationship algorithm for determining the amount of keys allocated to the AB decryption pool and / or the BA encryption pool based on the data traffic associated with the AB decryption pool and the data traffic associated with the BA encryption pool.

[0030] Furthermore, the first node A is also configured to obtain the verification value of the quantum key in the cache pool A and send it to the second node B;

[0031] The second node B is also configured to obtain the verification value of the quantum key in the cache pool B and compare it with the verification value sent by the first node A, and only use the quantum key that matches the verification value for allocation.

[0032] Furthermore, the second node B is also configured to send a first notification to the first node A after updating the AB decryption pool with the matched quantum key; not mark the updated quantum key as available after updating the BA encryption pool with the matched quantum key, while sending a second notification to the first node A; and mark the updated quantum key as available according to the third notification sent by the first node A.

[0033] The first node A is also configured to update the AB encryption pool accordingly based on the first notification; and to update the BA decryption pool accordingly based on the second notification, and to send a third notification to the second node B. Attached Figure Description

[0034] The specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0035] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0036] Figure 1 This schematically illustrates an undirected key pooling scheme in the prior art;

[0037] Figure 2 A bidirectional key pool scheme in the prior art is illustrated schematically;

[0038] Figure 3 This schematically illustrates the shortcomings of existing non-directional key pool schemes.

[0039] Figure 4 A quantum key synchronization and balanced distribution system with a bidirectional key pool according to the present invention is shown;

[0040] Figure 5 The bidirectional key pools in nodes A and B according to the present invention are schematically illustrated.

[0041] Figure 6 The key quantity calculation steps according to the present invention are illustrated schematically;

[0042] Figure 7 The key verification and allocation steps according to the present invention are illustrated schematically.

[0043] Figure 8 This illustrates an example of data transfer failure caused by a key pool update.

[0044] Figure 9-10Examples of the update steps according to the present invention are illustrated schematically. Detailed Implementation

[0045] In the following description, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example in order to fully convey the spirit of the invention to those skilled in the art. Therefore, the invention is not limited to the embodiments disclosed herein.

[0046] Figure 4 An example of a quantum key synchronization and balanced distribution system with a bidirectional key pool according to the present invention is shown.

[0047] like Figure 4 As shown, the quantum key synchronization and balanced distribution system of the two-way key pool includes at least a first node A and a second node B, wherein: the first node A has a cache pool A, an AB encryption pool and a BA decryption pool, and the second node B has a cache pool B, an AB decryption pool and a BA encryption pool.

[0048] The AB encryption pool in node A and the AB decryption pool in node B are symmetrically related and are used to process data T transmitted from node A to node B. The AB encryption pool stores the quantum key used to encrypt the data T transmitted from node A to node B, while the AB decryption pool stores the quantum key used to decrypt the data T transmitted from node A to node B. For example... Figure 5 As shown, the BA decryption pool in the first node A and the BA encryption pool in the second node B are symmetrically related, used to process data S transmitted from the second node B to the first node A. The BA encryption pool stores the quantum key used to encrypt the data S transmitted from the second node B to the first node A, while the BA decryption pool stores the quantum key used to decrypt the data S transmitted from the second node B to the first node A. This implements a bidirectional key pool structure.

[0049] In this invention, a shared quantum key can be independently distributed to a first node A and a second node B using a quantum key distribution device, and stored accordingly in cache pool A and cache pool B. Therefore, by setting up cache pools in the nodes, the quantum keys received by the nodes can be mainly stored in the corresponding cache pools, while only a small number of quantum keys are stored in the bidirectional key pool. This avoids the problem that if all the quantum keys in the nodes are distributed to the bidirectional key pool, one key pool will run out while the other key pool still has a large number of unusable quantum keys.

[0050] The following is combined Figure 4The quantum key synchronization and equalization distribution system shown further illustrates the quantum key synchronization and equalization distribution method of the bidirectional key pool according to the present invention, so as to better understand the function and structure of each component in the system.

[0051] The quantum key synchronization and balanced distribution method of the bidirectional key pool of the present invention may include a key caching step, a synchronization direction planning step, a key quantity calculation step, a key verification step, an allocation step, and an update step.

[0052] In the key caching step, the first node A and the second node B can independently receive quantum keys from the quantum key distribution device and store them in their respective cache pools. For example, the first node A receives quantum keys KA, KB, KC, and KD from the quantum key distribution device and stores them in its cache pool A; the second node B receives quantum keys KA, KB, and KC from the quantum key distribution device and stores them in its cache pool B.

[0053] In the quantum key synchronization and balanced distribution method and system of the present invention, a one-way key synchronization scheme is adopted. Therefore, it is necessary to use the synchronization direction planning step to select a certain node (e.g., the first node A) as the key synchronization initiator and the other node (e.g., the second node B) as the key synchronization receiver according to the preset rules (device ID serial number of the first node A and the second node B).

[0054] Therefore, the first node A, acting as the key synchronization initiator, can obtain information such as the key quantity of the AB encryption pool and the key quantity of the BA decryption pool, and send this information to the second node B. Simultaneously, the second node B can obtain the key quantity of the AB decryption pool and the key quantity of the BA encryption pool, compare the key quantity of the AB encryption pool with the key quantity of the AB decryption pool, compare the key quantity of the BA encryption pool with the key quantity of the BA decryption pool, and then record the minimum value between the two as the first key quantity (i.e., key quantity AB), and the minimum value between the two as the second key quantity (i.e., key quantity BA). This completes the key quantity calculation step of the present invention, for example... Figure 6 As shown.

[0055] Figure 7 The key verification and allocation steps according to the present invention are illustrated schematically.

[0056] like Figure 7 As shown, in the key verification step, the first node A can calculate and obtain the verification value of the quantum key in its cache pool A (e.g., KA verification value, KB verification value, and KC verification value, etc.) and send it to the second node B.

[0057] Meanwhile, the second node B can calculate and obtain the verification values ​​of the quantum keys in its cache pool B (such as KA verification value, KB verification value, and KC verification value, etc.), and compare them with the quantum key verification values ​​sent by the first node A.

[0058] See also Figure 7 When the second node B obtains a matching quantum key (e.g., KA, KB, and KC) through the key verification step, the matching quantum key in the buffer pool B can be allocated and stored in the AB decryption pool and / or BA encryption pool in the allocation step according to the selected balancing algorithm.

[0059] In bidirectional key pool applications, the art typically triggers the replenishment of quantum keys to the encryption or decryption pool by setting a preset threshold. That is, when the number of quantum keys in the encryption or decryption pool falls below the preset threshold, a quantum key is stored in that pool as a supplement. However, the inventors have discovered that under this threshold-based allocation triggering mechanism commonly used in the art, since the threshold is usually set empirically and deviates from the actual key demand, when both the encryption and decryption pools have insufficient quantum keys, it can lead to competition for limited key resources, and even result in a situation where the quantum key requirements for encryption and decryption operations in both directions cannot be met.

[0060] Therefore, unlike conventional practices in this field, this invention proposes to use balancing algorithms such as stock relationship algorithms and flow relationship algorithms (which can form a strategy group for users to choose from) to automatically balance the distribution of quantum keys in the cache pool according to the real-time status of the bidirectional key pool during actual operation.

[0061] In the stock-relationship algorithm, the first key quantity associated with the key pool in the AB direction and the second key quantity associated with the key pool in the BA direction can be compared to determine their relative sizes. Therefore, when the first key quantity is less than or equal to the second key quantity, the second node B can allocate and store the matched quantum key from buffer pool B to the AB decryption pool, and notify the first node A to allocate and store the equally matched quantum key to the AB encryption pool. When the first key quantity is greater than the second key quantity, the second node B can allocate and store the quantum key from buffer pool B to the BA encryption pool, and notify the first node A to allocate and store the equally matched quantum key to the BA decryption pool. This allows for timely replenishment of quantum keys in key pools with fewer available quantum keys, ensuring the data encryption transmission requirements in that direction.

[0062] In flow relationship algorithms, artificial intelligence algorithms can be used to predict data flow in both directions AB and BA. Based on the predicted data flow, the amount of key allocated to the AB decryption pool and / or the BA encryption pool can be determined. This ensures encrypted data transmission in both directions while improving the utilization efficiency of quantum keys in the nodes.

[0063] In this invention, in order to ensure the freshness of the quantum keys in the key pool and at the same time ensure that the size of the key pool is controllable, an update step can be used to update the quantum keys in the key pool, for example, when the amount of quantum keys in the key pool reaches a threshold.

[0064] In the update steps of this invention, a specific update scheme is proposed: updating the decryption pool first, then the encryption pool, in the same data flow direction. This avoids data transmission failures in that direction during the time interval when the encryption pool has been updated but the decryption pool has not (e.g., ...). Figure 8 (As shown) occurred.

[0065] Figure 9-10 Examples of the update steps according to the present invention are illustrated schematically, showing the key pool update process in the AB direction and the key pool update process in the BA direction, respectively.

[0066] like Figure 9 As shown, in the key verification step using a one-way comparison method, when updating the key pools in the AB direction (i.e., the AB encryption pool in the first node A and the AB decryption pool in the second node B) in the update step, the AB decryption pool first needs to be updated in the second node B. This can be done directly using the quantum key in cache pool B, which matched during the key verification step. After completing the update of the AB decryption pool, a first notification (comparison response) is sent to the first node A, causing the first node A to update the AB encryption pool using the quantum key that also matched in cache pool A.

[0067] like Figure 10As shown, when updating the key pool in the BA direction (i.e., the BA decryption pool in the first node and the BA encryption pool in the second node) during the update step, to ensure the principle of updating the decryption pool first and then the encryption pool, the second node B can update the BA encryption pool using the quantum key from cache pool B that matched in the key verification step. However, it will not mark the updated quantum key as available, but instead send a second notification (matching response) to the first node A. This prompts the first node A to update the BA decryption pool using the same matched quantum key from cache pool A, and then send a third notification (matching confirmation) to the second node B after the update is complete. At this point, the second node B marks the updated quantum key in the BA encryption pool as available. Therefore, even with a one-way matching method, the update in the BA direction still ensures that the decryption pool update comes first, followed by the encryption pool update, thus avoiding data transmission failures during the key pool update process.

[0068] In summary, the quantum key synchronization and balanced allocation method and system for bidirectional key pools of this invention breaks through the conventional thinking of threshold-based bidirectional key storage in the field. It adopts a self-balancing bidirectional key storage technology, which not only solves the overhead of centralized scheduling such as distributed locks when both ends simultaneously initiate data transmission and decryption, but also ensures optimized key scheduling, allowing quantum keys to be prioritized for the direction that needs them, and guarantees the availability of quantum keys during peak periods through algorithms. Simultaneously, the quantum keys are mainly stored in a buffer pool, with a small number of quantum keys stored in the bidirectional key pool. This avoids the problem of one key pool running out while the other has a large number of unusable quantum keys after all keys are allocated to the bidirectional key pool. Furthermore, this invention employs a one-way key synchronization scheme, selecting one end of the comparison as the initiator, rather than both ends sending comparison messages. This simplifies the quantum key synchronization method, prevents conflicts caused by bidirectional synchronization locking the same key, and avoids the resulting reduction in synchronization efficiency and impact on data encryption transmission efficiency. Additionally, the key update process proposes updating the decryption pool first, followed by the encryption pool, thereby resolving potential transmission failures during key pool updates and ensuring key availability. Finally, this invention also solves the problem of two opposing sides confirming the results of bilateral key synchronization.

[0069] Although the present invention has been described above with reference to the accompanying drawings and specific embodiments, those skilled in the art will readily recognize that the above embodiments are merely exemplary and used to illustrate the principles of the present invention. They do not limit the scope of the present invention. Those skilled in the art can make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. A quantum key synchronization and balanced distribution method for a bidirectional key pool, comprising a key caching step, a synchronization direction planning step, a key quantity calculation step, and an distribution step; The key caching step is used to distribute quantum keys to the first node A and store them in its cache pool A, and to distribute quantum keys to the second node B and store them in its cache pool B. The synchronization direction planning step is used to select the first node A as the key synchronization initiator and the second node B as the key synchronization receiver according to preset rules. The key quantity calculation step involves using the minimum value between the key quantity of the AB encryption pool in the first node A and the key quantity of the AB decryption pool in the second node B as the first key quantity, and using the minimum value between the key quantity of the BA decryption pool in the first node A and the key quantity of the BA encryption pool in the second node B as the second key quantity. The quantum key in the AB encryption pool is used to encrypt data transmitted from the first node A to the second node B, the quantum key in the BA encryption pool is used to encrypt data transmitted from the second node B to the first node A, the quantum key in the AB decryption pool is used to decrypt data transmitted from the first node A to the second node B, and the quantum key in the BA decryption pool is used to decrypt data transmitted from the second node B to the first node A. The allocation step is used by the second node B to allocate and store the quantum key in the cache pool B to the AB decryption pool and / or the BA encryption pool according to the balancing algorithm, and to notify the first node A to allocate and store the corresponding quantum key in the cache pool A to the AB encryption pool and / or the BA decryption pool. The balancing algorithm is selected from a strategy group that includes stock relationship algorithms; The stock relationship algorithm is used to allocate and store the quantum key in cache pool B to the AB decryption pool when the first key quantity is less than or equal to the second key quantity; otherwise, it allocates and stores the quantum key in cache pool B to the BA encryption pool.

2. The quantum key synchronization and equalization distribution method as described in claim 1, wherein, The strategy group also includes a traffic relationship algorithm for determining the amount of keys allocated to the AB decryption pool and / or the BA encryption pool based on the data traffic associated with the AB decryption pool and the data traffic associated with the BA encryption pool.

3. The quantum key synchronization and equalization distribution method as described in claim 1, wherein, In the key quantity calculation step, the first node A sends the key quantity of the AB encryption pool and the key quantity of the BA decryption pool to the second node B.

4. The quantum key synchronization and balanced distribution method as described in claim 1 further includes a key verification step, wherein the first node A obtains the verification value of the quantum key in buffer pool A and sends it to the second node B, and the second node B obtains the verification value of the quantum key in buffer pool B and compares it with the verification value sent by the first node A; and, In the allocation step, the second node B allocates only the quantum keys that match the key verification step, and notifies the first node A to allocate only the quantum keys that match the key verification step.

5. The quantum key synchronization and balanced distribution method as described in claim 4 further includes an update step, used to update the quantum key in the same data flow direction by first updating the decryption pool and then updating the encryption pool.

6. The quantum key synchronization and equalization distribution method as described in claim 5, wherein, In the update step: After updating the AB decryption pool using the quantum key that matches the key verification step, the second node B notifies the first node A to update the AB encryption pool accordingly. And / or, After updating the BA encryption pool using the quantum key that matches the key verification step, the second node B does not mark the updated quantum key as available, but instead notifies the first node A to update the BA decryption pool accordingly; and after updating the BA decryption pool, the first node A notifies the second node B to mark the updated quantum key in the BA encryption pool as available.

7. A quantum key synchronization and balanced distribution system for a two-way key pool, comprising: The first node A includes a buffer pool A, an AB encryption pool and a BA decryption pool. The buffer pool A caches the quantum keys distributed by the quantum key distribution device, the AB encryption pool stores the quantum keys used to encrypt the data transmitted from the first node A to the second node B, and the BA decryption pool stores the quantum keys used to decrypt the data transmitted from the second node B to the first node A. The second node B includes a cache pool B, an AB decryption pool, and a BA encryption pool. The cache pool B caches the quantum keys distributed by the quantum key distribution device, the AB decryption pool stores the quantum keys used to decrypt data transmitted from the first node A to the second node B, and the BA encryption pool stores the quantum keys used to encrypt data transmitted from the second node B to the first node A. The first node A is configured to obtain the key quantity of the AB encryption pool and the key quantity of the BA decryption pool and send them to the second node B; and, according to the allocation result notified by the second node B, the corresponding quantum key in the cache pool A is allocated and stored to the AB encryption pool and / or the BA decryption pool. The second node B is configured to obtain the key quantity of the AB decryption pool and the key quantity of the BA encryption pool, and take the minimum value of the key quantity of the AB encryption pool and the key quantity of the AB decryption pool as the first key quantity, and take the minimum value of the key quantity of the BA decryption pool and the key quantity of the BA encryption pool as the second key quantity; and, according to the balancing algorithm, allocate and store the quantum key in the buffer pool B to the AB decryption pool and / or the BA encryption pool, and notify the first node A of the allocation result; The balancing algorithm is selected from a strategy group that includes stock relationship algorithms; The stock relationship algorithm is used to allocate and store the quantum key in cache pool B to the AB decryption pool when the first key quantity is less than or equal to the second key quantity; otherwise, it allocates and stores the quantum key in cache pool B to the BA encryption pool.

8. The quantum key synchronization and equalization distribution system as described in claim 7, wherein, The strategy group also includes a traffic relationship algorithm for determining the amount of keys allocated to the AB decryption pool and / or the BA encryption pool based on the data traffic associated with the AB decryption pool and the data traffic associated with the BA encryption pool.

9. The quantum key synchronization and equalization distribution system as described in claim 7, wherein, The first node A is also configured to obtain the verification value of the quantum key in the cache pool A and send it to the second node B; The second node B is also configured to obtain the verification value of the quantum key in the cache pool B and compare it with the verification value sent by the first node A, and only use the quantum key that matches the verification value for allocation.

10. The quantum key synchronization and equalization distribution system as described in claim 9, wherein: The second node B is also configured to send a first notification to the first node A after updating the AB decryption pool with the matched quantum key; not mark the updated quantum key as available after updating the BA encryption pool with the matched quantum key, while sending a second notification to the first node A; and mark the updated quantum key as available according to the third notification sent by the first node A. The first node A is also configured to update the AB encryption pool accordingly based on the first notification; and to update the BA decryption pool accordingly based on the second notification, and to send a third notification to the second node B.

Images