Distributed data access method based on quantum secret communication technology

Abstract

The invention relates to a distributed data access method based on a quantum secret communication technology, and belongs to the technical field of communication. According to the method, a quantum security service platform system is adopted; the quantum security service platform system comprises a quantum key generation system, a quantum key scheduling system and a quantum key application system; according to the invention, a quantum secret communication technology is adopted to realize high-security access of distributed energy to a power dispatching master station system; by fusing a current access system communication architecture with a quantum secret communication technology, a quantum secret key technology, including generation, distribution and scheduling management, applied to a distributed energy access scene is realized, and the secure transmission performance of distributed energy information data is improved.

Description

Technical Field

[0001] The present invention belongs to the field of communication technology, and in particular relates to a distributed data access method based on quantum secure communication technology. Background Art

[0002] For a long time, thermal power generation and hydropower generation have occupied the main position in my country's energy and electricity, and the planning and operation of the power grid have always revolved around them. With the continuous growth of the new energy industry, the scale of new energy stations is growing rapidly, and it is playing an increasingly important role in the development of the national power grid. Distributed energy fully develops and utilizes renewable energy, with the advantages of small investment, clean and environmentally friendly, reliable power supply and flexible power generation methods, which provides a powerful supplement and effective support for the future large power grid.

[0003] After the large-scale access and grid connection of distributed renewable energy, the number of nodes in the distribution network will increase significantly. If the original grid planning model is still used, it will be difficult for the distribution network to forecast the load, and the planning results are prone to large errors or the optimal network layout cannot be obtained. In addition, distributed energy is connected to a large number of enterprise generators of different sizes. The large differences in the medium-term and long-term planning of these enterprises will also make the overall long-term planning of the distribution network more difficult. The grid connection of a large number of distributed energy will inevitably bring huge challenges to the power system. The reliability of the power system will be reduced, and the dynamic monitoring capability of the power system will be insufficient after the distributed energy is connected to the grid.

[0004] With the construction and access of more and more new energy stations, the network security risks of new energy stations are becoming increasingly prominent. The main security threats faced by new energy stations include terminal access risks, remote operation and maintenance risks, external network connection of station monitoring centers, physical security risks, system security risks and personnel management risks. Among them, under the new network architecture of distributed new energy grid connection, due to the wide distribution of stations and the large number of terminals, the access of malicious terminals will cause network attacks to spread faster and wider, thus leading to more serious power grid accidents.

[0005] At present, there are two main types of communication network architectures for new energy: one is the production control area between the dispatching center and each station, which is based on the connection of the power dispatching data dedicated network and the vertical encryption device, and the stations are not connected to each other; the other is the power generation group's centralized control center and the third-party operation and maintenance center are interconnected with the station's information management area based on Ethernet, and the stations are common and do not need to be interconnected. According to the current station interconnection network architecture, the core certification agency of the public key infrastructure can only adopt a centralized deployment method. In terms of production control, it is constructed by the station itself to realize the identity authentication and access control within the station; it is uniformly constructed by the dispatching center to realize unified identity and access policy management, and then realize the identity authentication and access control within the station. At the information management network level, it is constructed by the station itself to realize the identity authentication and access control within the station; it is provided by the centralized control center or the operation and maintenance center to realize unified identity and access management.

[0006] New energy communication network methods are mainly divided into two categories: optical fiber distribution network communication and wireless distribution network communication. Optical fiber distribution network communication is divided into two categories: XPON and industrial Ethernet switches. Wireless technologies mainly include LTE private network and public network GPRS. At present, the new energy communication method for accessing the power main station is mainly optical fiber communication. However, due to the large number of distributed energy power generation sites, their wide distribution and complex placement environment, wired communication methods cannot solve the problem of full coverage, economic and safe access to the distributed energy power generation grid-connected distribution network communication network.

[0007] With the development of new energy power generation technology, the number of small distributed power stations represented by wind power and photovoltaic power generation is increasing. The existing power communication is mainly based on carrier communication, optical fiber communication and general packet radio service / code division multiple access (GPRS / CDMA). Existing communication technologies are widely used in large power plants, substations and medium and low voltage distribution network automation systems. However, due to factors such as cost, geographical location and communication network, the communication conditions of most power supply points such as small hydropower and distributed energy power stations cannot meet the conventional requirements of the power system. Distributed energy generally has a large number of access points and is widely distributed. If wireless technology is used, the security of wireless access communication cannot meet the requirements of secondary security of the power system.

[0008] Currently, the power distribution network business only uses one-way authentication to issue dispatch commands. Dispatch commands are still sent in plain text, which is easy to be stolen by attackers. Once attackers steal data in the transmission channel, it is easy to obtain dispatch instructions, thereby damaging the distribution network.

[0009] Therefore, how to overcome the shortcomings of the existing technology is an urgent problem to be solved in the field of communication technology. Summary of the invention

[0010] The purpose of the present invention is to solve the deficiencies of the prior art and to provide a distributed data access method based on quantum secure communication technology.

[0011] To achieve the above purpose, the technical solution adopted by the present invention is as follows:

[0012] A distributed data access method based on quantum secure communication technology, using a quantum security service platform system;

[0013] The quantum security service platform system includes quantum key generation system, quantum key scheduling system and quantum key application system;

[0014] The quantum key generation system is used to generate quantum keys using quantum principles;

[0015] The quantum key scheduling system is connected to the quantum key generation system;

[0016] The quantum key dispatching system includes a quantum key management machine, an exchange cipher machine, a cryptographic service platform system and a quantum key filling system;

[0017] Among them, the quantum key management machine is used to manage and store the quantum keys generated by the quantum key generation system;

[0018] The exchange cipher is used to control the storage and output of quantum keys generated by the key generation system;

[0019] The quantum cryptography service platform system is used to realize the external scheduling and negotiation of quantum keys, ensuring the safe and orderly distribution of quantum keys to the quantum key application system.

[0020] A quantum key charging system is used to charge quantum keys and enable the protection keys of communication terminals to be used in the quantum key application system; wherein the charged quantum keys are protection keys generated by quantum random numbers;

[0021] The quantum key application system is connected to the quantum key scheduling system and is used to build a quantum secure encryption transmission channel using the quantum key transmitted by the quantum key scheduling system.

[0022] Further, preferably, the quantum key generation system includes a single-transmission time phase coding quantum key generation and management terminal, a single-receive time phase coding quantum key generation and management terminal and a quantum random number generator;

[0023] Among them, the single-shot time phase coded quantum key generation and management terminal is used as a single-shot quantum key generation device; the single-receive time phase coded quantum key generation and management terminal is used as a single-receive quantum key generation device; the single-shot time phase coded quantum key generation and management terminal and the single-receive time phase coded quantum key generation and management terminal are a pair of quantum keys generated according to the QKD BB84 (quantum key distribution) protocol, and the key is used as a session key for service encryption between communication terminals;

[0024] A quantum random number generator is used to generate the protection key for the session key.

[0025] Furthermore, preferably, the quantum cryptography service platform system is specifically used for:

[0026] Two external communication terminals that need quantum communication need to apply for quantum keys from the quantum cryptography service platform. After receiving the key application, the quantum cryptography service platform notifies the single-transmission time phase coding quantum key generation and management terminal and the single-receive time phase coding quantum key generation and management terminal to generate a pair of quantum keys, which is the session key for communication encryption between the two terminals; at the same time, it notifies the quantum random number generator to generate a quantum random number key, which is the protection key used when the quantum cryptography service platform sends the session key. The protection key has the same length as the session key and adopts a one-time encryption method to protect the session key. After the quantum cryptography service platform protects the session key, it sends a pair of quantum keys to the two communication terminals according to the key distribution protocol.

[0027] Furthermore, preferably, a quantum secure encrypted transmission channel is constructed using the session key encrypted by the terminal communication transmitted by the quantum key scheduling system.

[0028] Furthermore, it is preferred that the single-transmission time phase coded quantum key generation and management terminal and the single-receive time phase coded quantum key generation and management terminal adopt a QKD system with a plug-and-play solution.

[0029] Furthermore, preferably, the quantum key is charged via a U-shield or a TF card.

[0030] Further, preferably, the quantum key application system includes a quantum security gateway and a quantum encryption device;

[0031] Among them, the quantum security gateway is used to perform encrypted communication with the quantum encryption device to achieve concurrent access of multiple quantum encryption devices;

[0032] The quantum encryption device is used to encrypt communications at communication terminals. The quantum encryption device can adopt independent external communication encryption or internal embedded communication encryption according to the terminal requirements.

[0033] Compared with the prior art, the present invention has the following beneficial effects:

[0034] (1) The present invention uses quantum key distribution technology, which is based on the physical properties of quantum - indivisibility and non-cloning theorems - to distribute keys securely, and its security has been strictly proven. The two ends of the communication are connected to the quantum key distribution network, which can form an end-to-end unconditionally secure quantum key.

[0035] (2) In the key negotiation process of the platform of the present invention, the session key is pushed to the mobile terminal in a one-time pad (OTP) manner, and this encryption method is unbreakable.

[0036] (3) The randomness of the quantum key of the present invention can ensure that the injection keys of each terminal are independent of each other, thus avoiding the root key homology of the corresponding keys of the terminal devices in the traditional security scheme. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 Deploy the network architecture diagram for the main station side of the quantum security service platform;

[0038] Figure 2 The basic device diagram of MDI-QKD based on polarization coding scheme;

[0039] Figure 3 Schematic diagram of the plug-and-play QKD system. DETAILED DESCRIPTION

[0040] The present invention is further described in detail below in conjunction with embodiments.

[0041] Those skilled in the art will appreciate that the following examples are only used to illustrate the present invention and should not be considered to limit the scope of the present invention. If no specific techniques or conditions are specified in the examples, the techniques or conditions described in the literature in the art or the product specifications are used. If the manufacturer of the materials or equipment used is not specified, they are all conventional products that can be purchased.

[0042] The present invention adopts quantum secure communication technology to realize the high-security access of distributed energy to the power dispatching master station system; by integrating the current access system communication architecture with the existing quantum secure communication technology, quantum key technology applied to distributed energy access scenarios is realized, including generation, distribution and dispatching management functions, thereby improving the security transmission performance of distributed energy information data.

[0043] 1. Overall technical solution of quantum secure communication technology

[0044] Deploy the quantum security service platform system; the quantum security service platform system provides corresponding interfaces for 4G networks of operators such as China Mobile and China Unicom. The application interface on the master station side includes a quantum security gateway, and multiple sets of external application interfaces can be configured for different operator networks. The quantum security protection area is the operator network from the original business terminal to the power security access area, which does not affect the original security access area business logic and architecture. And develop quantum encryption devices suitable for distributed energy, and adapt to the quantum security service platform to achieve integrated fusion security applications.

[0045] The quantum security service platform system mainly includes quantum key generation system, quantum key scheduling system and quantum key application system. Figure 1 Among them, the quantum encryption device is deployed in the equipment at the front-end site, not on the main station side.

[0046] Quantum key generation system: including single-transmission time phase coding quantum key generation and management terminal, single-receive time phase coding quantum key generation and management terminal and quantum random number generator; the main function is to generate quantum keys using quantum principles and provide quantum key support for distributed data access equipment;

[0047] The single-shot time phase coded quantum key generation and management terminal is used as a single-shot quantum key generation device; the single-receive time phase coded quantum key generation and management terminal is used as a single-receive quantum key generation device; the single-shot time phase coded quantum key generation and management terminal and the single-receive time phase coded quantum key generation and management terminal are a pair of quantum keys generated according to the QKDBB84 protocol, and the key is used as a session key for service encryption between communication terminals;

[0048] Preferably, the single-transmission time phase coded quantum key generation and management terminal and the single-receive time phase coded quantum key generation and management terminal adopt a QKD system with a plug-and-play solution.

[0049] A quantum random number generator is used to generate the protection key for the session key.

[0050] Quantum key dispatch system: including quantum key management machine, exchange cipher machine, cryptographic service platform system and quantum key filling system. The main functions are:

[0051] The quantum key management machine is responsible for managing and storing the quantum keys generated by the quantum key generation system; the quantum secret keys include quantum random number generator keys, single-shot time phase coding quantum key generation and management terminal keys, and single-receive time phase coding quantum key generation and management terminal keys;

[0052] The exchange cipher is responsible for controlling the storage and output of the quantum key generated by the key generation system;

[0053] The quantum cryptography service platform system is responsible for realizing the external scheduling and negotiation of quantum keys to ensure that quantum keys can be distributed to the quantum key application system in a safe and orderly manner. Specifically, two external communication terminals that need quantum communication need to apply for quantum keys from the quantum cryptography service platform. After receiving the key application, the quantum cryptography service platform notifies the single-transmission time phase coding quantum key generation and management terminal and the single-receive time phase coding quantum key generation and management terminal to generate a pair of quantum keys, which is the session key for communication encryption between the two terminals. At the same time, it notifies the quantum random number generator to generate a quantum random number key, which is the protection key used when the quantum cryptography service platform sends the session key. The protection key has the same length as the session key and adopts a one-time encryption method to protect the session key. After the quantum cryptography service platform protects the session key, it sends a pair of quantum keys to the two communication terminals according to the key distribution protocol.

[0054] The quantum key charging system is responsible for charging the quantum key through U shield or TF card, and making the protection key of the communication terminal used in the quantum key application system; the charged quantum key is the protection key generated by quantum random number;

[0055] Quantum key application system: includes quantum security gateway and quantum encryption device; main functions are: using quantum keys to build quantum security encryption transmission channels, improving the security level of distributed energy access transmission channels, and ensuring that business system data can be safely transmitted to power companies.

[0056] Among them, the quantum security gateway is used to perform encrypted communication with the quantum encryption device to achieve concurrent access of multiple quantum encryption devices;

[0057] The quantum encryption device is used to encrypt communications at communication terminals. The quantum encryption device can adopt independent external communication encryption or internal embedded communication encryption according to the terminal requirements.

[0058] 2. Use a plug-and-play quantum key distribution protocol

[0059] The quantum key distribution protocol based on the classic BB84 protocol requires the installation of quantum signal generation and detection equipment between both users. The equipment suitable for generating and detecting single-photon quantum signals is expensive and cannot meet the current dual requirements of power distribution network business for security and economy. The present invention adopts a plug-and-play quantum key distribution protocol, which can not only improve the communication security of the entire distribution network, but also greatly reduce the cost, so as to better meet the requirements of data transmission of distribution network business.

[0060] Compared with the classic BB84 protocol, the polarization-coded MDI-QKD protocol continues to use the polarization coding method in the BB84 protocol, modulating the polarization of single photons to encode bit information. Its structural block diagram is shown below: Figure 2 shown.

[0061] exist Figure 2 In the experiment, the experimental devices of Alice and Bob are the same, that is, the preparation stage of single-photon quantum state, where WCP (weak coherent pulse) represents the weak coherent pulse generated by both parties; Pol-M (polarization modulator) represents the polarization modulator, which is used to modulate and produce four different polarization states; Decoy-IM (Decoy states intensity modulator) represents the light intensity modulator, which is used to adjust the light intensity. In addition, in the measurement part of quantum state, Charlie's equipment includes: a beam splitter BS (beam splitter), two polarizing beam splitters PBS (polarizing beam splitter) and four single-photon detectors D (single-photon detector) (D 1V , D 1H , D 2V , D 2H ).

[0062] Under the polar coding scheme, two sets of mutually unbiased bases are selected, and the two sets of mutually unbiased bases are assumed to be:

[0063] X1={0>,|1>}

[0064]

[0065] In the MDI-QKD protocol based on the polarization coding scheme, the legitimate communicating parties Alice and Bob randomly select one of the two mutually unbiased bases to perform polarization coding modulation on their own information, and then transmit the modulated information to the third party Charlie, who performs Bell State Measurement (BSM) on the received information and publishes the measurement results to Alice and Bob at the same time. The measurement device part is Charlie using four mutually orthogonal Bell state bases and The received quantum state is measured.

[0066] The encoding process of the MDI-QKD protocol is similar to that of the BB84 protocol, except that the two degrees of freedom, polarization and phase, are used to modulate the optical pulses. First, Alice and Bob randomly select a polarization state from two sets of conjugated polarization bases, Z and X, respectively, and then load the polarization bit (Po-bits) information onto the optical pulse through Pol-M. Then, the optical pulse passes through a 50:50 beam splitter (BS) and an optical delay line (DL) and is divided into two modes, reference and signal. The two modes at Alice's end are marked as ar and as, and the two modes at Bob's end are marked as br and bs. If the phase state is selected in the Z basis, then the phase bits (Ph-bits) will only be loaded into the reference optical pulse or the signal optical pulse, and the optical pulse of the other mode will be lost by IM. If the Ph-bits are selected in the X basis, then the signal optical pulse will be randomly loaded with two phases {0, π} when passing through PM. The selection of polarization basis and phase basis during the encoding process is independent.

[0067] The plug-and-play QKD system is implemented as follows: Figure 3 . The QKD system is a session key generation device, including a pair of single-transmitter and single-receiver devices, which belong to the quantum key generation part of the quantum security service platform system. The plug-and-play QKD system mainly consists of the following components: laser diode LD, circulator Cir, delay line DL, 50 / 50 beam splitter BS, polarization beam splitter PBS, quantum channel QC, phase modulator PM, Faraday reflector FM, single photon detector SPD and attenuator Att.

[0068] The quantum security service platform system is deployed at the power dispatching main station. The QKD system, as the quantum key generation part of the quantum security service platform system, is also deployed at the power dispatching main station. A pair of quantum keys generated by the QKD system is distributed to the quantum gateway and distributed data access terminal devices as service session keys. The gateway and terminal devices use the session key combined with the national secret algorithm and build a quantum encryption channel based on IPSec VPN through the IPSec VPN network protocol. Through this quantum encryption channel, distributed data can achieve secure data communication with the power dispatching main station.

[0069] exist Figure 3In the example, Bob first sends a coherent light pulse. After passing through the circulator, it is split into two mutually perpendicular light pulses with a certain delay by the 50 / 50 beam splitter BS and the polarization beam splitter PBS. After reaching Alice, it is reflected by the Faraday reflector FM, and the polarization state is rotated 90°. When they leave Alice, the light pulses decay to the single photon level. After returning to Bob, the two pulses exchange paths at the polarization beam splitter PBS, and finally arrive at the 50 / 50 beam splitter BS at the same time to interfere. The result of the interference is determined by the phase modulators PMA and PMB. The paths of the two interfering light pulses are exactly the same and are not affected by phase jitter. The polarization state is rotated 90° when returning, so that the light pulse returns after experiencing complementary polarization jitter. When it returns to the polarization beam splitter PBS, the polarization state is exactly the complementary polarization state when it leaves, and the polarization jitter in the optical fiber is fully compensated.

[0070] In summary, the present invention proposes and adopts a polarization-coded MDI-QKD protocol based on a plug-and-play process.

[0071] 3. Adopt a secure transmission prototype system based on quantum secure communication

[0072] The quantum security service platform system is adopted. The hardware construction plan is to add an IPSec VPN path (i.e., IPSec VPN encrypted tunnel) without changing the existing power communication network. It is necessary to deploy quantum encryption devices and quantum communication gateways on the user side, and establish IPSec VPN encrypted tunnels between quantum encryption devices. Quantum communication devices use the power communication network to connect to each other and directly connect to the quantum encryption device on the same side to negotiate and distribute quantum keys used to encrypt business data streams. Quantum encryption devices are deployed on the user side to realize data encryption between terminal equipment and quantum encryption gateways on the master side. Encrypted data is transmitted through IPSec VPN channels, so that when important business data flows pass through quantum encryption devices, they will be securely encrypted with quantum keys and transmitted to target users through the power communication network. The business data flows will be decrypted by the target user's quantum encryption device and then forwarded to the terminal by the router.

[0073] In order to avoid the system being unable to establish encrypted channel services through keys when quantum key distribution negotiation fails, a working mode of switching between quantum encryption IPSec VPN and traditional encryption IPSec VPN is adopted.

[0074] Specifically:

[0075] The quantum key encryption scheme for protecting power communication service data is to achieve high system availability, realize automatic switching when a quantum encryption tunnel fails, and not affect the normal use of the application. Two GRE (General Routing Encapsulation) tunnels are established between two routers to monitor the link status. Specifically, when the quantum encryption device is connected to the quantum communication device, the quantum encryption device requests the session key generated by the quantum communication device. Its workflow is basically the same as the traditional IPSec process. In the second phase of IKE (key exchange) negotiation, information such as whether to use quantum keys, quantum key update frequency, and quantum key ID are added. After the quantum encryption device successfully obtains the quantum key, it will verify the correctness of the quantum key with the peer device. After the verification is passed, IKE will add the generated security alliance to IPSec through the interface between IKE and IPSec. After IPSec has a security alliance, it encrypts and encapsulates the data packet and sends it to the peer quantum encryption device. After receiving the encrypted data packet, the peer quantum encryption device finds the security alliance according to the SPI (security parameter index) in the data packet, decrypts the data packet according to the security alliance, and obtains the original data packet after decryption. When the quantum communication equipment is working normally, the quantum encryption device uses the quantum key by default, but the quantum key and the key negotiated by the certificate public and private key pair exist at the same time. When the quantum communication equipment is abnormal and cannot generate the quantum key, it will promptly alarm and make decisions based on the urgency and security level of business data transmission. When the business data can reduce the security level and needs to be transmitted in time, the quantum encryption device will immediately use the key negotiated by the certificate to ensure that the encryption and transmission of business data are not affected.

[0076] The above shows and describes the basic principles, main features and advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments, and the above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention to be protected. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. A distributed data access method based on quantum secure communication technology, characterized in that: Adopt quantum security service platform system; The quantum security service platform system includes quantum key generation system, quantum key scheduling system and quantum key application system; The quantum key generation system is used to generate quantum keys using quantum principles; The quantum key scheduling system is connected to the quantum key generation system; The quantum key dispatching system includes a quantum key management machine, an exchange cipher machine, a cryptographic service platform system and a quantum key filling system; Among them, the quantum key management machine is used to manage and store the quantum keys generated by the quantum key generation system; The exchange cipher machine is used to control the storage and output of quantum keys generated by the key generation system; The quantum cryptography service platform system is used to realize the external scheduling and negotiation of quantum keys, ensuring the safe and orderly distribution of quantum keys to the quantum key application system. A quantum key charging system is used to charge quantum keys and enable the protection keys of communication terminals to be used in the quantum key application system; wherein the charged quantum keys are protection keys generated by quantum random numbers; The quantum key application system is connected to the quantum key scheduling system and is used to build a quantum secure encryption transmission channel using the quantum key transmitted by the quantum key scheduling system.

2. The distributed data access method based on quantum secure communication technology according to claim 1 is characterized in that: The quantum key generation system includes a single-transmission time phase coding quantum key generation and management terminal, a single-receive time phase coding quantum key generation and management terminal and a quantum random number generator; Among them, the single-shot time phase coded quantum key generation and management terminal is used as a single-shot quantum key generation device; the single-receive time phase coded quantum key generation and management terminal is used as a single-receive quantum key generation device; the single-shot time phase coded quantum key generation and management terminal and the single-receive time phase coded quantum key generation and management terminal are a pair of quantum keys generated according to the QKDBB84 protocol, and the key is used as a session key for service encryption between communication terminals; A quantum random number generator is used to generate the protection key for the session key.

3. The distributed data access method based on quantum secure communication technology according to claim 2 is characterized in that: The quantum cryptography service platform system is specifically used for: Two external communication terminals that need quantum communication need to apply for quantum keys from the quantum cryptography service platform. After receiving the key application, the quantum cryptography service platform notifies the single-transmission time phase coding quantum key generation and management terminal and the single-receive time phase coding quantum key generation and management terminal to generate a pair of quantum keys, which is the session key for communication encryption between the two terminals; at the same time, it notifies the quantum random number generator to generate a quantum random number key, which is the protection key used when the quantum cryptography service platform sends the session key. The protection key has the same length as the session key and adopts a one-time encryption method to protect the session key. After the quantum cryptography service platform protects the session key, it sends a pair of quantum keys to the two communication terminals according to the key distribution protocol.

4. The distributed data access method based on quantum secure communication technology according to claim 3 is characterized in that: A quantum secure encrypted transmission channel is constructed using the session key encrypted by terminal communications transmitted by the quantum key scheduling system.

5. The distributed data access method based on quantum secure communication technology according to claim 2 is characterized in that: The single-transmission time phase coded quantum key generation and management terminal and the single-receive time phase coded quantum key generation and management terminal adopt a plug-and-play QKD system.

6. The distributed data access method based on quantum secure communication technology according to claim 1 is characterized in that: Recharge the quantum key via U-shield or TF card.

7. The distributed data access method based on quantum secure communication technology according to claim 1 is characterized in that: The quantum key application system includes a quantum security gateway and a quantum encryption device; Among them, the quantum security gateway is used to perform encrypted communication with the quantum encryption device to achieve concurrent access of multiple quantum encryption devices; The quantum encryption device is used to encrypt communications at communication terminals. The quantum encryption device can adopt independent external communication encryption or internal embedded communication encryption according to the terminal requirements.

Images