Secure key distribution technology based on reciprocal channel negotiation and private hardware encryption

Through technology based on reciprocity channel negotiation and private hardware encryption, nonlinear phase scrambling and dispersion intensity scrambling are used to solve the problem of insufficient security in the fiber channel key distribution system, and efficient and secure key distribution is achieved.

CN119109567APending Publication Date: 2024-12-10GUANGDONG UNIV OF TECH
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411010180.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-07-26
Publication Date
2024-12-10

AI Technical Summary

Technical Problem

The existing key distribution systems have shortcomings in terms of security, especially the fiber channel-based solutions face the problems of eavesdropping risks and limited parameter adjustment space, resulting in insufficient security.

Method used

Using secure key distribution technology based on reciprocity channel negotiation and private hardware encryption, nonlinear transform data selection is driven through random NRZ signal generation module, reciprocity optical fiber transmission and random number sequence negotiation to realize key extraction between both parties of the legal communication, and use Nonlinear phase scrambling and dispersion intensity scrambling avoids the risk of eavesdropping and improves the security of key distribution.

Benefits of technology

It effectively enhances the security of key distribution, reduces the difficulty of practical application, avoids the risk of exposure of key information in the public link, and improves the hardware adjustable parameter space, achieving efficient key distribution.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119109567A_ABST
    Figure CN119109567A_ABST
Patent Text Reader

Abstract

The invention provides a secure key distribution technology based on reciprocal channel and private hardware encryption. The secure key distribution technology is mainly composed of a random NRZ signal generation module, reciprocal optical fiber transmission, random number sequence negotiation driving nonlinear transformation data selection and key extraction. According to the invention, two legal communication parties independently generate random number sequences and map the random number sequences into NRZ signals. And after passing through the reciprocal optical fiber, the two legal communication parties recover the received signal into a random number, and carry out XOR logic negotiation with the local random number. In addition, nonlinear and linear scrambling is carried out on the received signal to generate a chaotic signal, a secret key signal is obtained after the chaotic signal passes through a data selector, and a negotiation signal is used as a driving signal of the data selector. In the invention, both legal communication parties do not need to share random sequence information in advance, dynamic characteristics in an optical fiber channel are introduced for encryption, and meanwhile, nonlinear scrambling of a physical layer is combined, so that the risk that key information is exposed in a public link is avoided, and the key distribution security is ensured.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of optical communications, and more specifically, to a security key distribution technology based on reciprocal channel negotiation and private hardware encryption. Background Art

[0002] In encrypted communications, key distribution technology refers to the process of ensuring that keys are securely transmitted to authorized communicating parties. Keys play a key role in encrypting and decrypting messages, ensuring that only authorized users can access the information content. Therefore, the security of key distribution is very important. Once the key is obtained by unauthorized persons during transmission, the security of the entire encryption system will be threatened. At present, the mainstream key distribution schemes are: algorithm-based key distribution scheme, quantum key distribution scheme, key distribution scheme based on fiber channel interference, and key distribution scheme based on chaotic synchronization.

[0003] Algorithm-based key distribution schemes have significant advantages in remote communications and distributed systems due to their automation and efficiency, and their security mainly depends on the complexity of the algorithms used. However, these schemes have algorithmic vulnerabilities and potential risks of quantum computing attacks, requiring effective key management and prevention of man-in-the-middle attacks. In contrast, quantum key distribution schemes use the properties of quantum mechanics to achieve absolutely secure key transmission, and any eavesdropping on the key can be detected through quantum entanglement and uncertainty. Despite this, quantum key distribution schemes require complex and expensive quantum technology equipment and have strict requirements on communication channels. In practical applications, they still face technical challenges such as limited quantum signal transmission distance and high error rates.

[0004] In addition to the above-mentioned key distribution schemes, since the advantages of optical fiber channels include low attenuation, anti-electromagnetic interference, and high bandwidth, they provide a relatively reliable physical channel for key transmission. Many scholars have done a lot of research on key distribution based on optical fiber channel interference. For example, in 2021, some scholars experimentally studied the key distribution technology combining co-driven chaotic synchronization (ensuring that both parties of legitimate communication have synchronized polarization perturbations), chaos-driven polarization perturbations (introducing high-speed polarization perturbations), and channel polarization reciprocity. The key distribution rate has been greatly improved, and the experiment reached 4.3Gbps and 40km of key distribution. In 2023, Taihang Qiu et al. published an article titled "17.5Gb / s physical layer key distribution over 100km fiber link based on channel physical intrinsic property and polarization reciprocity" in the journal Optics Letters. A fiber dispersion estimation method based on polarization reciprocity of optical fiber channels was proposed. The dispersion estimation value was used to compensate for the dispersion of the same section of the optical fiber link, and a 29.1GHz chaotic simulation signal was transmitted unidirectionally. The experiment reached 17.5Gbps and 100km of key distribution. However, in this scheme, due to the stability of the dispersion value in the optical fiber channel in a stable environment and within a certain time range, the eavesdropper can use the dispersion estimation value to crack the past key content, and the forward security is insufficient. In addition, many scholars have done a lot of research on key distribution based on chaos synchronization. For example, in 2023, Zhitao Deng et al. published an article titled "High-speed secure key distribution based on interference spectrum-shift keying with signal mutual modulation in commonly driven chaos synchronization" in the journal Optics Express. They proposed a chaos synchronization scheme based on interference spectrum shift keying and signal mutual modulation, using a delay line interferometer to generate a low-correlation interference spectrum. By introducing a 2×2 optical switch for post-processing, the relationship between the two interference spectra is adjusted, which increases the flexibility of the system. In addition, an electro-optical nonlinear conversion module is introduced in the hardware module, which significantly improves the recovery rate of chaos synchronization. Experiments have shown that this method achieves a key distribution rate of 6.7Gbit / s on a 40km single-mode optical fiber.From the current research, the key distribution scheme based on chaos synchronization has outstanding advantages in the field of high-speed and secure key distribution. However, the current research shows that it faces the challenge of limited parameter adjustment space, and the system structure is relatively simple, resulting in insufficient security. The key distribution scheme based on optical fiber channel interference also faces some challenges. For example, optical fiber communication is affected by optical signal attenuation and dispersion, which may cause signal attenuation and distortion, thus affecting the performance of key distribution. Summary of the invention

[0005] In order to overcome the existing security problems of the above-mentioned existing key distribution systems, the present invention provides a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption.

[0006] The primary purpose of the present invention is to solve the above technical problems. The technical solutions of the present invention are as follows:

[0007] A method for implementing a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption, including a random NRZ signal generation module, reciprocal optical fiber transmission, random number sequence negotiation-driven nonlinear transformation data selection, and key extraction;

[0008] The random NRZ signal generation module is characterized by: a random number generator, an arbitrary waveform generator, a continuous wave laser, and an optical modulator; the implementation technology includes: random number generation and NRZ signal mapping, and NRZ signal loading optical path;

[0009] Further, the method of the random NRZ signal generating module, its implementation method includes but is not limited to the following steps: 1a- after the random number generator generates a random number, it is mapped to an NRZ signal through 2a- an arbitrary waveform generator, 3a- the continuous wave laser output is used as the optical input signal of 4a- the optical modulator, and the NRZ signal output by the 2a- arbitrary waveform generator is used as the electrical input signal of the 4a- optical modulator; similarly, 1b- after the random number generator generates a random number, it is mapped to an NRZ signal through 2b- an arbitrary waveform generator, 3b- the continuous wave laser output is used as the optical input signal of the 4b- optical modulator, and the NRZ signal output by the 2b- arbitrary waveform generator is used as the electrical input signal of the 4b- optical modulator;

[0010] The reciprocal optical fiber transmission module is characterized by including two circulators, a transmission optical fiber, and an optical coupler; the implementation technology includes the introduction and extraction of optical signals in the optical loop, and the opposite transmission of signals in the reciprocal optical fiber;

[0011] Furthermore, the reciprocal optical fiber transmission module, its implementation method includes but is not limited to the following steps: on the basis that the legal communicating parties independently generate random NRZ signals, the random NRZ signal output by the 4a-optical modulator is input to the 5a1 port of the 5a-circulator, output from the 5a2 port of the 5a-circulator to the 20-transmission optical fiber, and after being transmitted by the 20-transmission optical fiber, it is output to the 5b2 port of the 5b circulator, output from the 5b3 port of the 5b-circulator, and divided into two outputs after passing through the 8b-optical coupler; similarly, the random NRZ signal output by the 4b-optical modulator is input to the 5b1 port of the 5b-circulator, output from the 5b2 port of the 5b-circulator to the 20-transmission optical fiber, after being transmitted by the 20-transmission optical fiber, it is output to the 5a2 port of the 5a circulator, output from the 5a3 port of the 5s-circulator, and divided into two outputs after passing through the 8a-optical coupler;

[0012] The random number sequence negotiation drives nonlinear transformation data selection, and its main features include: a dispersion compensation device, two photodetectors, a comparator, a logic XOR device, a data selector, an optical coupler, a chaotic laser, an optical modulator, a dispersion device, a balanced photodetector, and a data selector; the implementation method includes: random number recovery, dynamic XOR negotiation, self-carrier phase scrambling conversion intensity scrambling, chaotic signal delay dispersion self-differential shaping;

[0013] Furthermore, the random number sequence negotiation method described herein includes but is not limited to the following steps: on the basis of 8a-optical coupler dividing the optical signal into two output paths, one of the output paths of 8a-optical coupler is restored to a random NRZ signal after passing through 9a-dispersion compensation device, and is output as a random number sequence (1b-sequence output by random number generator) after passing through 12a comparator, and is output as a negotiation sequence after passing through 16a-logical XOR device and mapped to an NRZ signal as a negotiation signal, and the other output path of 8a-optical coupler is output into two paths after being split by 7a-optical coupler, one path outputting the optical input signal of 11a-optical modulator, and the other path outputting the signal is injected into After the 6a-chaotic laser, the output is passed through the 10a-photodetector as the electrical input signal of the 11a-optical modulator to realize nonlinear phase scrambling. The output of the 11a-optical modulator is split by the 15a-optical coupler, one of which is output as the optical input signal of the 17a-balanced photodetector, and the other is passed through the 14a-dispersion device as another optical input signal of the 17a-balanced photodetector. The output of the 17a-balanced photodetector is used as the electrical input signal of the 18a-data selection module, and the negotiation signal is used as the driving signal of the 18a-data selection module. Similarly, on the basis of the 8b-optical coupler dividing the optical signal into two outputs, the 8b-optical One of the coupler outputs is restored to a random NRZ signal after passing through a 9b-dispersion compensation device, and is output as a random number sequence (1a-sequence output by a random number generator) after passing through a 12b comparator. After passing through a 16b-logical XOR, a negotiation sequence is output and mapped to an NRZ signal as a negotiation signal. The other output of the 8b-optical coupler is split by a 7b-optical coupler and is output in two ways. One output is the optical input signal of the 11b-optical modulator, and the other output signal is injected into a 6b-chaotic laser and then output through a 10b-photodetector as the electrical input signal of the 11b-optical modulator to achieve nonlinear phase scrambling. The output of the 11b-optical modulator is output through a 10b-photodetector. The light is split through the 15b-optical coupler, and one output is used as the optical input signal of the 17b-balanced photodetector. The other output is used as another optical input signal of the 17b-balanced photodetector after passing through the 14b-dispersion device. The output of the 17b-balanced photodetector is used as the electrical input signal of the 18b-data selection module. The negotiation signal is used as the driving signal of the 18b-data selection module and can output a consistent key waveform after data selection. It is worth mentioning that the legitimate communication parties can obtain a consistent negotiation signal after negotiation, and a consistent key waveform can be obtained only when the legitimate communication parties are subjected to nonlinear scrambling with consistent hardware parameters and data selection.

[0014] The key extraction is mainly characterized by: an analog-to-digital converter; the implementation method includes: key signal sampling, key extraction;

[0015] Further, the method for extracting the key includes but is not limited to the following steps: on the basis of the consistent analog key signal generated after the two parties in legal communication undergo nonlinear scrambling with consistent hardware parameters and data selection, the consistent key is extracted from the synchronized chaotic signal using a 19a-analog-to-digital converter; similarly, the consistent key is extracted from the synchronized chaotic signal using a 19b-analog-to-digital converter;

[0016] Preferably, in the present invention, the chaotic signal generated by the superluminescent diode laser injected into the multi-mode laser has n modes. In the dynamic synchronous keying multi-mode chaos and multiple nonlinear transformations performed by the two parties in legal communication, the keyable parameters include but are not limited to delay time, dispersion coefficient, modulation depth, modulation phase, and n-mode combinations. Through multi-parameter cascade synchronous keying, the hardware adjustable parameter space is greatly increased, thereby improving the security of key distribution.

[0017] Preferably, in the present invention, it is characterized in that the two parties in legitimate communication do not need to share random sequence information in advance, and the dynamic characteristics of the optical fiber channel are introduced for encryption, and at the same time, combined with the nonlinear scrambling of the physical layer, the risk of key information exposure in the public link is avoided, and the security of key distribution is guaranteed;

[0018] In the traditional key distribution scheme based on the reciprocity of the optical fiber channel, there is a potential risk of eavesdropping in the optical fiber within a short distance at the user port. In response to the above problem, in the key distribution scheme based on co-driven chaotic synchronization combined with random keying, there is also a need for additional exchange of keying sequences for negotiation, which increases the difficulty of practical application. The present invention proposes a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption. The legitimate communicating parties perform NRZ signal mapping through independently generated random number sequences. After passing through the reciprocal optical fiber channel, nonlinear phase scrambling combined with dispersion intensity scrambling is introduced to effectively avoid the risk of eavesdropping within a short distance at the user port. At the same time, the process of two-way transmission between the legitimate communicating parties in the reciprocal optical fiber can also be regarded as a process of negotiation between the legitimate communicating parties. After a series of processing, the negotiation of random number sequences can be realized to achieve the keying effect, thereby reducing the difficulty of practical application and realizing key distribution with enhanced security. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 This is a structural diagram of a device for implementing a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption proposed by the present invention. DETAILED DESCRIPTION

[0020] The drawings are for illustrative purposes only and should not be construed as limiting the present patent;

[0021] In order to better illustrate the present embodiment, some parts of the drawings may be omitted, enlarged or reduced, and do not represent the actual size;

[0022] It is understandable to those skilled in the art that descriptions of certain well-known contents in the drawings may be omitted.

[0023] The technical solution of the present invention is further described below in conjunction with the accompanying drawings and embodiments.

[0024] Example

[0025] The present invention proposes a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption, which mainly includes an optical fiber link and legal communication parties Alice and Bob.

[0026] The optical fiber link includes 10 transmission optical fibers.

[0027] The legitimate communication party Alice includes but is not limited to: 1a-random number generator, 2a-arbitrary waveform generator, 3a-continuous wave laser, 4a-optical modulator, 5a-circulator, 6a-chaotic laser, 7a-optical coupler, 8a-optical coupler, 9a-dispersion compensation device, 10a-photodetector, 11a-optical modulator, 12a-photodetector, 13a-comparator, 14a-dispersion device, 15a-optical coupler, 16a-logic XOR module, 17a-balanced photodetector, 18a-data selection module, 19a-analog-to-digital converter. The connection relationship of each module is as follows:

[0028] The output end of 1a-random number generator is connected to the input end of 2a-arbitrary waveform generator, the output end of 2a-arbitrary waveform generator is connected to the electrical input end of 4a-optical modulator, the output end of 3a-continuous wave laser is connected to the optical input end of 4a-optical modulator, the output end of 4a-optical modulator is connected to the 5a1 port of 5a-circulator, the 5a2 port of 5a-circulator is connected to the 20-transmission optical fiber, the 5a3 port of 5a-circulator is connected to the input end of 8a-optical coupler, the two output ends of 8a optical coupler are respectively connected to the input end of 9a-dispersion compensation device and the input end of 7a-optical coupler, the output end of 9a-dispersion compensation device is connected to the input end of 12a-photodetector, the output end of 12a-photodetector is connected to the input end of 13a-comparator, the output end of 13a-comparator is connected to the input end of 16a-logic exclusive OR module, the output end of 16a-logic exclusive OR module is connected to 18a-number The data selection module is connected to the driving input end, the two output ends of the 7a-optical coupler are respectively connected to the input end of the 6a-chaotic laser and the optical input end of the 11a-optical modulator, the output end of the 6a-chaotic laser is connected to the input end of the 10a-photodetector, the output end of the 10a-photodetector is connected to the electrical input end of the 11a-optical modulator, the output end of the 11a-optical modulator is connected to the input end of the 15a-optical coupler, the two output ends of the 15a optical coupler are respectively connected to the input end of the 14a-dispersion device and the optical input end of the 17a-balanced photodetector, the output end of the 14a-dispersion device is connected to the other optical input end of the 17a-balanced photodetector, the output end of the 17a-balanced photodetector is connected to the signal input end of the 18a-data selection module, the output end of the 18a-data selection module is connected to the input end of the 19a-analog-to-digital converter, and the digital signal output by the 19a-analog-to-digital converter is used as a security key.

[0029] The legal communication party Bob includes but is not limited to: 1b-random number generator, 2b-arbitrary waveform generator, 3b-continuous wave laser, 4b-optical modulator, 5b-circulator, 6b-chaotic laser, 7b-optical coupler, 8b-optical coupler, 9b-dispersion compensation device, 10b-photodetector, 11b-optical modulator, 12b-photodetector, 13b-comparator, 14b-dispersion device, 15b-optical coupler, 16b-logic XOR module, 17b-balanced photodetector, 18b-data selection module, 19b-analog-to-digital converter. The connection relationship of each module is as follows:

[0030] The output end of the 1b-random number generator is connected to the input end of the 2b-arbitrary waveform generator, the output end of the 2b-arbitrary waveform generator is connected to the electrical input end of the 4b-optical modulator, the output end of the 3b-continuous wave laser is connected to the optical input end of the 4b-optical modulator, the output end of the 4b-optical modulator is connected to the 5b1 port of the 5b-circulator, the 5b2 port of the 5b-circulator is connected to the 20-transmission optical fiber, the 5b3 port of the 5b-circulator is connected to the input end of the 8b-optical coupler, the two output ends of the 8b optical coupler are respectively connected to the input end of the 9b-dispersion compensation device and the input end of the 7b-optical coupler, the output end of the 9b-dispersion compensation device is connected to the input end of the 12b-photodetector, the output end of the 12b-photodetector is connected to the input end of the 13b-comparator, the output end of the 13b-comparator is connected to the input end of the 16b-logic exclusive OR module, the output end of the 16b-logic exclusive OR module is connected to the 18b-number The data selection module is connected to the driving input end, the two output ends of the 7b-optical coupler are respectively connected to the input end of the 6b-chaotic laser and the optical input end of the 11b-optical modulator, the output end of the 6b-chaotic laser is connected to the input end of the 10b-photodetector, the output end of the 10b-photodetector is connected to the electrical input end of the 11b-optical modulator, the output end of the 11b-optical modulator is connected to the input end of the 15b-optical coupler, the two output ends of the 15b optical coupler are respectively connected to the input end of the 14b-dispersion device and the optical input end of the 17b-balanced photodetector, the output end of the 14b-dispersion device is connected to the other optical input end of the 17b-balanced photodetector, the output end of the 17b-balanced photodetector is connected to the signal input end of the 18b-data selection module, the output end of the 18b-data selection module is connected to the input end of the 19b-analog-to-digital converter, and the digital signal output by the 19b-analog-to-digital converter is used as a security key.

[0031] In summary, the present invention proposes a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption, which can effectively ensure the security of key distribution without the need for the legitimate communicating parties to share a random sequence for negotiation.

[0032] Obviously, the above embodiments of the present invention are only examples for clearly illustrating the present invention, and are not intended to limit the embodiments of the present invention. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the embodiments here. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the claims of the present invention.

Claims

1. The present invention provides a method for implementing a secure key distribution technology based on reciprocal channel negotiation and private hardware encryption, which is mainly composed of a random NRZ signal generation module, reciprocal optical fiber transmission, random number sequence negotiation driven nonlinear transformation data selection, and key extraction.

2. The random NRZ signal generating module according to claim 1, Its features mainly include: a random number generator, an arbitrary waveform generator, a continuous wave laser, and an optical modulator; the implementation technology includes: random number generation and NRZ signal mapping, and NRZ signal loading optical path.

3. The method of the random NRZ signal generating module according to claim 2, wherein the implementation method thereof includes but is not limited to the following steps: after 1a-the random number generator generates a random number, it is mapped to an NRZ signal through 2a-the arbitrary waveform generator, 3a-the continuous wave laser output is used as the optical input signal of 4a-the optical modulator, and the NRZ signal output by 2a-the arbitrary waveform generator is used as the electrical input signal of 4a-the optical modulator; similarly, after 1b-the random number generator generates a random number, it is mapped to an NRZ signal through 2b-the arbitrary waveform generator, 3b-the continuous wave laser output is used as the optical input signal of 4b-the optical modulator, and the NRZ signal output by 2b-the arbitrary waveform generator is used as the electrical input signal of 4b-the optical modulator.

4. The reciprocal optical fiber transmission module according to claim 1 is characterized in that It includes two circulators, a section of transmission optical fiber, and an optical coupler; the implementation technology includes the introduction and extraction of optical signals in the optical loop and the opposite transmission of signals in the reciprocal optical fiber.

5. The reciprocal optical fiber transmission module according to claim 4, wherein the implementation method thereof includes but is not limited to the following steps: on the basis that the legally communicating parties independently generate random NRZ signals, the random NRZ signal output by the 4a-optical modulator is input to the 5a1 port of the 5a-circulator, output to the 20-transmission optical fiber by the 5a2 port of the 5a-circulator, and output to the 5b2 port of the 5b-circulator after being transmitted through the 20-transmission optical fiber, and output to the 5b3 port of the 5b-circulator, and is divided into two outputs after passing through the 8b-optical coupler; similarly, the random NRZ signal output by the 4b-optical modulator is input to the 5b1 port of the 5b-circulator, output to the 20-transmission optical fiber by the 5b2 port of the 5b-circulator, and output to the 5a2 port of the 5a-circulator after being transmitted through the 20-transmission optical fiber, and output to the 5a3 port of the 5s-circulator, and is divided into two outputs after passing through the 8a-optical coupler.

6. The random number sequence negotiation driven nonlinear transformation data selection according to claim 1 is characterized in that include: A dispersion compensation device, two photodetectors, a comparator, a logic XOR, a data selector, an optical coupler, a chaotic laser, an optical modulator, a dispersion device, a balanced photodetector, and a data selector; The implementation methods include: random number recovery, dynamic XOR negotiation, self-carrier phase scrambling conversion intensity scrambling, and chaotic signal delay dispersion self-differential shaping.

7. The method for random number sequence negotiation according to claim 6, wherein the implementation method includes but is not limited to the following steps: on the basis of 8a-optical coupler dividing the optical signal into two outputs, one of the outputs of 8a-optical coupler is restored to a random NRZ signal after passing through 9a-dispersion compensation device, and is output as a random number sequence (1b-sequence output by random number generator) after passing through 12a comparator, and is output as a negotiation sequence after passing through 16a-logical XOR device and mapped into an NRZ signal as a negotiation signal, and the other output of 8a-optical coupler is output into two after being split by 7a-optical coupler, one output is 11a-optical input signal of optical modulator, and the other output is After the signal is injected into the 6a-chaotic laser, it is outputted through the 10a-photodetector as the electrical input signal of the 11a-optical modulator to realize nonlinear phase scrambling. The output of the 11a-optical modulator is split by the 15a-optical coupler, one of which is outputted as the optical input signal of the 17a-balanced photodetector, and the other is outputted as another optical input signal of the 17a-balanced photodetector after passing through the 14a-dispersion device. The output of the 17a-balanced photodetector is used as the electrical input signal of the 18a-data selection module, and the negotiation signal is used as the driving signal of the 18a-data selection module. Similarly, on the basis of the 8b-optical coupler dividing the optical signal into two outputs, the 8b -One of the outputs of the optical coupler is restored to a random NRZ signal after passing through a 9b-dispersion compensation device, and is output as a random number sequence (1a-sequence output by a random number generator) after passing through a 12b comparator. After passing through a 16b-logical XOR, a negotiation sequence is output and mapped to an NRZ signal as a negotiation signal. The other output of the 8b-optical coupler is split by a 7b-optical coupler and is output in two ways. One output is the optical input signal of the 11b-optical modulator, and the other output signal is injected into a 6b-chaotic laser and then output through a 10b-photodetector as the electrical input signal of the 11b-optical modulator to achieve nonlinear phase scrambling. The output of the 11b-optical modulator After being split by the 15b-optical coupler, one output is used as the optical input signal of the 17b-balanced photodetector, and the other output is used as another optical input signal of the 17b-balanced photodetector after passing through the 14b-dispersion device. The output of the 17b-balanced photodetector is used as the electrical input signal of the 18b-data selection module, and the negotiation signal is used as the driving signal of the 18b-data selection module to output a consistent key waveform after data selection; it is worth mentioning that the legitimate communicating parties can obtain a consistent negotiation signal after negotiation, and a consistent key waveform can be obtained only when the legitimate communicating parties undergo nonlinear scrambling with consistent hardware parameters and perform data selection.

8. The key extraction method according to claim 1 is characterized in that include: an analog-to-digital converter; The implementation method includes: key signal sampling and key extraction.

9. According to the method of key extraction described in claim 8, its implementation method includes but is not limited to the following steps: on the basis of the consistent analog key signal generated after nonlinear scrambling with consistent hardware parameters and data selection between the two legal communicating parties, a consistent key is extracted from the synchronized chaotic signal using a 19a-analog-to-digital converter; similarly, a consistent key is extracted from the synchronized chaotic signal using a 19b-analog-to-digital converter.

10. The secure key distribution technology based on reciprocal channel negotiation and private hardware encryption according to claim 1, characterized in that The two parties in legitimate communication do not need to share random sequence information in advance, and the dynamic characteristics of the optical fiber channel are introduced for encryption. At the same time, combined with the nonlinear scrambling of the physical layer, the risk of key information exposure in the public link is avoided, ensuring the security of key distribution.