Quantum random number generator equipment capable of resisting optical attack

Abstract

The invention relates to the technical field of random number generation, in particular to quantum random number generator equipment capable of resisting optical attacks. The CCD sensor converts a photon signal emitted by the light source into an analog electric signal, and the analog electric signal is converted into a digital electric signal through the high-speed analog-to-digital converter and sent to the programmable logic gate array; the programmable logic gate array receives the electric signal, generates a random number through simple post-processing operation, and outputs the random number to peripheral equipment through the general data interface bridge chip; the light intensity sensing unit is used for monitoring the illumination intensity of an entropy source area, monitoring the light intensity and sending monitoring data to the programmable logic gate array for real-time processing, it is guaranteed that a CCD sensor works in a linear working area, and attack means such as hard light blinding and light splitting attack are prevented; the temperature sensor is used for monitoring the temperature of the entropy source core part and performing active real-time temperature compensation on equipment operation; according to the invention, quantum attack means such as hard light blinding can be effectively resisted, and the safety of the product is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of random number generation, and in particular to a quantum random number generator device capable of resisting optical attacks. Background Art

[0002] As the basic component of all information security equipment, random number generators are used to generate and prepare various key data to ensure information security. They play a vital role in the network and information fields. Compared with traditional random number generators, quantum random number generators based on the principle of quantum noise measurement have the advantages of true randomness, little influence from environmental disturbances, and high data generation rate. They can meet the requirements of modern information encryption systems and are the core components of future information security systems.

[0003] However, existing quantum random number generators cannot resist various optical attacks. For example, by injecting strong light into the existing quantum random number generator in a directed manner, or exposing its core components to natural light, the sensor can be forced to enter a blind state and output fixed data (for example, outputting all "1" data). In this case, the data output by the quantum random number generator will no longer have any randomness and can even be interfered with by humans. Summary of the invention

[0004] In order to solve the problem that the existing quantum random number generator cannot resist strong light or split light attack, the present invention provides a quantum random number generator device that can resist optical attack, the device includes a light source, a temperature sensor, a CCD sensor, a light intensity sensing unit, a programmable logic gate array and an output interface bridge chip, wherein the CCD sensor converts the photon signal emitted by the light source into an analog electrical signal, and further converts it into a digital electrical signal through a high-speed analog-to-digital converter and sends it to the programmable logic gate array; the programmable logic gate array receives the electrical signal sent by the CCD sensor, generates a random number through a simple post-processing algorithm, and then outputs it to the peripheral device through a universal data interface bridge chip (such as USB, Ethernet and PCI-E, etc.). It contains a light intensity sensing unit for monitoring the light intensity of the entropy source area, and by monitoring the light intensity and sending the monitoring data to the programmable logic gate array for real-time processing, the CCD sensor is ensured to work in the linear working area to prevent attacks such as blinding caused by strong light and split light attacks; the temperature sensor is used to monitor the temperature of the core part of the entropy source, and actively and in real time temperature compensation is performed on the system operation. The present invention can effectively resist quantum attack means such as blinding caused by strong light, and ensure the safety of the product.

[0005] The present invention adopts the following technical solution: a quantum random number generator device capable of resisting optical attacks, comprising a light source, a temperature sensor, a CCD sensor, a light intensity sensing unit, a programmable logic gate array and an output interface bridge chip;

[0006] The CCD sensor converts the photon signal emitted by the light source into an analog electrical signal, and converts the analog signal into a digital signal through a high-speed analog-to-digital converter and then sends it to the programmable logic gate array;

[0007] The temperature sensor is used to monitor the temperature of the core part of the entropy source to generate a temperature signal, and send the temperature signal to the programmable logic gate array; the core part of the entropy source includes a CCD sensor and a light source;

[0008] The light intensity sensing unit is used to monitor the light intensity in all directions of the entropy source area to generate a light intensity detection signal, and send the light intensity detection signal to the programmable logic gate array;

[0009] The programmable logic gate array receives the electrical signal, the light intensity detection signal and the temperature signal for processing, generates a random number and sends it to the output interface bridge chip;

[0010] The output interface bridge chip outputs the random number generated by the programmable logic gate array to a peripheral device using a standard interface.

[0011] Furthermore, the programmable logic gate array comprises:

[0012] Parameter configuration unit: used to configure the built-in parameters of the CCD sensor;

[0013] Light source control unit: used to control the light intensity adjustment circuit to adjust the intensity of the light source;

[0014] Exception processing unit: used to receive the light intensity information of each direction of the entropy source area sent by the light intensity sensing unit, calculate the mean and variance of the light sensing intensity of each direction, and determine whether the system is subjected to optical attacks such as strong light blinding and split light attack by simultaneously judging whether the mean and variance exceed the set safety range. When the exception processing unit determines that the system is subjected to optical attack, the alarm light is immediately turned on and the data post-processing unit is controlled to stop outputting random numbers;

[0015] Temperature control unit: used to receive the operating temperature of the core part of the entropy source monitored by the temperature sensor, and use preset parameters to compensate the configuration parameters of multiple devices in the quantum random number generator according to the monitored temperature;

[0016] Data post-processing unit: used for receiving the electrical signal sent by the CCD sensor to perform post-processing operations and generate random numbers.

[0017] Furthermore, the CCD sensor converts the photon signal emitted by the light source into an analog electrical signal, specifically:

[0018] The CCD sensor converts the number of photons received per unit time at each detection point inside it into a voltage signal, and further obtains digital sampling data corresponding to each detection point through high-speed analog-to-digital sampling; the digital sampling data is multi-bit analog-to-digital conversion data, and the multi-bit is greater than or equal to 8 bits.

[0019] Furthermore, the specific method for the data post-processing unit to perform post-processing operations to generate random numbers is:

[0020] The data post-processing unit receives the digital sampling data corresponding to each detection point output by the CCD sensor, performs bitwise XOR on the multi-bit analog-to-digital conversion data corresponding to each detection point to obtain a 1-bit random number corresponding to each detection point.

[0021] Furthermore, when the data post-processing unit generates a random number, it also includes:

[0022] The data post-processing unit calculates the minimum information entropy according to the received sampling data corresponding to each detection point output by the CCD sensor;

[0023] After receiving the digital signal of high-precision analog-to-digital conversion, the data post-processing unit outputs a random number sequence less than the minimum information entropy length through a post-processing algorithm.

[0024] Furthermore, the entropy source area is specifically: the light source is distributed around the CCD sensor, and the light source, the light intensity sensing unit and the CCD sensor are packaged together in the same fixed and closed space to form the entropy source area.

[0025] Furthermore, the fixed enclosed space in the entropy source area is composed of an opaque metal cover welded on the surface of the PCB circuit board, and the inner surface of the opaque metal cover is evenly sprayed with a coating material with a roughness range of Ra2-Ra3.

[0026] Furthermore, the light source is an LED near-infrared light source.

[0027] The beneficial effects of the present invention are as follows: the light intensity sensing unit preset near the CCD sensor and the exception handling unit preset in the programmable logic gate array can effectively detect abnormal behaviors of light sources such as strong light blinding attacks and splitting attacks, and make corresponding responses (including but not limited to stopping the output of random numbers, lighting up the alarm light, sending alarm information to external devices, etc.), thereby achieving effective resistance to quantum attack methods such as strong light blinding and ensuring the safety of the product; the packaging structure of the light source, CCD sensor and light intensity sensing unit in the present invention can ensure that the specific light emitted by the light source meets the quantum shot noise characteristic conditions when it reaches the inner surface of the metal cover and then reaches the CCD sensor after reflection. At the same time, the present invention monitors the internal device temperature of the device in real time during operation through a temperature sensor, and compensates the configuration parameters of the core device in real time according to the changes in the monitored temperature value, further effectively ensuring the stable operation of the device, so that the operating temperature range of the device of the present invention is wider. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0029] Figure 1 This is a schematic diagram of the structure of a quantum random number generator device capable of resisting optical attacks according to an embodiment of the present invention;

[0030] Figure 2 A schematic diagram of the operation flow of a quantum random number generator device according to an embodiment of the present invention;

[0031] Figure 3 The present invention is a schematic diagram of the layout and packaging structure of a light source and a CCD sensor in a quantum random number generator device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0032] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0033] The working process diagram of the device of the present invention is as follows Figure 2As shown, after the programmable logic gate array is powered on and initialized, it completes the initialization and self-test of each device according to the internal preset parameters, and then starts the data acquisition function; in a specific embodiment, when the first self-test of the device fails, the number of cyclic self-tests is set to be less than three times. When the number of self-tests is greater than three times and still fails, the device alarms, so that the device is manually repaired; the photons emitted by the near-infrared LED light source reach the CCD sensor after being reflected by the metal cover, and the light intensity of the LED light source is adjusted so that the photon signal received by the CCD sensor detection array meets the quantum scattering characteristics. The CCD sensor quantizes the number of photons received per unit time at each detection point inside it into a digital signal stream, and then outputs it to the programmable logic gate array through a high-speed serial communication interface; after the programmable logic gate array receives the sampling data of each detection point output by the CCD sensor, the multi-bit analog-to-digital conversion data corresponding to each detection point is bit-wise XORed to obtain 1-bit random data, and then the obtained random bit stream is output to the interface bridge chip, and transmitted to other external devices through a standard external communication interface. While the programmable logic gate array receives the sampling data of each detection point output by the CCD sensor, the light intensity sensing unit preset around the CCD sensor monitors the light intensity in real time, and submits the monitoring results to the exception handling unit to determine whether there is an attack; the temperature sensor preset in the core area of ​​the entropy source monitors the temperature in real time, and submits the monitoring results to the temperature control unit for compensation of the core device configuration parameters.

[0034] like Figure 1 As shown, a schematic diagram of the structure of a quantum random number generator device capable of resisting optical attacks according to an embodiment of the present invention is given, including a light source, a CCD sensor, a light intensity sensing unit, a programmable logic gate array, a temperature sensor, a light intensity regulation circuit and an output interface bridge chip;

[0035] The CCD sensor converts the photon signal emitted by the light source into a digital electrical signal, and the converted digital electrical signal is sent to the programmable logic gate array; wherein the light source is an LED near-infrared light source;

[0036] The CCD sensor converts the photon signal emitted by the light source into a digital electrical signal. Specifically, the CCD sensor converts the number of photons received per unit time at each detection point inside the sensor into an analog voltage signal, and then converts the analog voltage signal into a digital electrical signal through a high-speed analog-to-digital conversion circuit inside the sensor, thereby obtaining sampling data corresponding to each detection point. The sampling data obtained in this way is multi-bit analog-to-digital conversion data, and the multi-bit is greater than or equal to 8 bits;

[0037] The temperature sensor is used to monitor the temperature of the core part of the entropy source (including the CCD sensor and the light source device) to generate a temperature signal, and send the temperature signal to the programmable logic gate array, so that the system has the function of active temperature compensation;

[0038] The light intensity sensing unit is used to monitor the light intensity in all directions of the entropy source area to generate a light intensity detection signal, and send the light intensity detection signal to the programmable logic gate array for real-time processing to ensure that the CCD sensor works in the linear working area and prevent optical attacks such as blinding caused by strong light and spectral attacks;

[0039] The programmable logic gate array receives the electrical signal, the light intensity detection signal and the temperature signal, performs corresponding processing, generates a random number and sends it to the output interface bridge chip;

[0040] Programmable gate arrays include:

[0041] Parameter configuration unit: used to configure the built-in parameters of the CCD sensor;

[0042] Light source control unit: used to control the light intensity regulator to adjust the intensity of the light source;

[0043] Exception processing unit: used to receive the light intensity information of each direction of the entropy source area sent by the light intensity sensing unit, calculate the mean and variance of the light sensing intensity of each direction, and determine whether the system is subjected to optical attacks such as strong light blinding and spectroscopic attack by simultaneously judging whether the mean and variance exceed the set safety range; it should be noted that the set safety range can be adjusted according to actual conditions, and the present invention does not limit it; when the exception processing unit determines that the system is subjected to optical attack, the alarm light is immediately turned on and the data post-processing unit is controlled to stop outputting random numbers;

[0044] Temperature control unit: used to receive the temperature signal generated by the operating temperature of the core device of the entropy source monitored by the temperature sensor, and compensate the configuration parameters of multiple devices in the quantum random number generator by presetting multiple sets of matching parameters according to the monitored temperature; in a specific embodiment, the internal ambient temperature of the system is monitored by the temperature sensor during operation, and the device characteristic difference caused by the temperature difference is actively compensated according to the corresponding relationship of the temperature characteristic curve of the device according to the real-time temperature value monitored. The relationship between the luminous intensity and temperature of the light source is: the luminous intensity will decrease with the increase of temperature, and is close to a linear relationship. The light intensity changes by 15%-20% within the temperature change range of 0℃-85℃.

[0045] Data post-processing unit: used to receive the digital signal after high-precision analog-to-digital conversion in the CCD sensor, perform post-processing operations on the original random data, and generate random numbers. The specific method is: the data post-processing unit receives the sampling data corresponding to each detection point output by the CCD sensor, and performs bit-wise XOR on the multi-bit analog-to-digital conversion data corresponding to each detection point to obtain a 1-bit random number corresponding to each detection point.

[0046] When the data post-processing unit generates random numbers, it also includes: the data post-processing unit calculates the minimum information entropy according to the received sampling data corresponding to each detection point output by the CCD sensor, and the optional binary information minimum entropy expression is:

[0047]

[0048] Wherein e is a natural logarithmic constant, n is the number of photons arriving, and μ is the average number of photons arriving. It should be noted that the expression for calculating the minimum entropy of binary information in the present invention is a prior art, that is, any information entropy calculation method with the same calculation target can be applied to the present invention, so the present invention will not elaborate on this;

[0049] The calculated theoretical minimum information entropy is compared with the actual data length to ensure that the amount of random number data after processing is less than the minimum information entropy. The post-processing algorithms in the present invention include but are not limited to XOR, von Neumann and other algorithms.

[0050] The interface bridge chip outputs the random number generated by the programmable logic gate array to the peripheral device via a standard interface.

[0051] like Figure 3 As shown, it is a schematic diagram of the layout packaging structure of the light source and CCD sensor in a quantum random number generator of an embodiment of the present invention, wherein the light source is distributed around the CCD sensor, and the light source, the light intensity sensing unit and the CCD sensor are packaged together in the same fixed enclosed space, and the fixed enclosed space is composed of an opaque metal cover welded on the surface of the PCB circuit board, and the inner surface of the opaque metal cover is evenly sprayed with a coating material with a roughness range of Ra2-Ra3, which can ensure that the specific light emitted by the LED light source reaches the inner surface of the metal cover and then reaches the CCD sensor after reflection to meet the quantum shot noise characteristic conditions. It should be noted that the roughness range here is only an example value given in this embodiment based on experimental results, which can be changed according to actual conditions, and the present invention does not limit it.

[0052] Furthermore, this embodiment provides the optical attack detection principle. When the device is working, the internal circuit of the programmable logic gate array obtains the light intensity values ​​detected by four photodiodes (PD) in real time through the light intensity sensing unit. Assuming that the light intensity values ​​correspond to E1, E2, E3, and E4 respectively, the average light intensity detected by the four photodiodes is:

[0053] The average variance of the collected light intensity:

[0054] In this embodiment, it is assumed that the preset light source intensity value of the device is E s ,when and E σWhen one of the following conditions is met, the system determines that it may be subject to optical attacks such as blinding by strong light or spectral attacks:

[0055]

[0056]

[0057] The comparison values ​​"0.13" and "0.08" here are an example of comparison values ​​given in this embodiment based on experiments, and do not represent the only comparison values. The specific comparison values ​​can be set according to the actual situation of the device, and the present invention does not limit this. When the internal circuit of the programmable logic gate array determines that the system may be attacked by light intensity, it will immediately stop collecting, processing and outputting random numbers, and light up the alarm indicator light to notify the user of the potential threat.

[0058] The light intensity sensing unit preset near the CCD sensor of the present invention can effectively detect abnormal behaviors of light sources such as strong light blinding attacks and split light attacks, and notify the programmable logic gate array to make corresponding responses (including but not limited to stopping the output of random numbers, lighting up the alarm light, sending alarm information to external devices, etc.), thereby effectively resisting quantum attack methods such as strong light blinding and ensuring the safety of the product; the packaging structure of the light source, CCD sensor and light intensity sensing unit in the present invention can ensure that the specific light emitted by the light source meets the quantum shot noise characteristic conditions when it reaches the inner surface of the metal cover and then reaches the CCD sensor after reflection. At the same time, the present invention monitors the internal device temperature of the device in real time when the device is working through the temperature sensor, and compensates the configuration parameters of the core device in real time according to the changes in the monitored temperature value, which further effectively ensures the stable operation of the device and makes the working temperature range of the device of the present invention wider.

[0059] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A quantum random number generator device that can resist optical attacks, comprising a light source, a temperature sensor, a CCD sensor, a light intensity sensing unit, a programmable logic gate array and an output interface bridge chip, characterized in that: The CCD sensor converts the photon signal emitted by the light source into an analog electrical signal, and converts the analog signal into a digital signal through a high-speed analog-to-digital converter and then sends it to the programmable logic gate array; The temperature sensor is used to monitor the temperature of the core part of the entropy source to generate a temperature signal, and send the temperature signal to the programmable logic gate array; the core part of the entropy source includes a CCD sensor and a light source; The light intensity sensing unit is used to monitor the light intensity in the entropy source area to generate a light intensity detection signal, and send the light intensity detection signal to the programmable logic gate array; The programmable logic gate array receives the electrical signal, the light intensity detection signal and the temperature signal for processing, generates a random number and sends it to the output interface bridge chip; The output interface bridge chip outputs the random number generated by the programmable logic gate array to a peripheral device using a standard interface.

2. A quantum random number generator device capable of resisting optical attacks according to claim 1, characterized in that: The programmable logic gate array comprises: Parameter configuration unit: used to configure the built-in parameters of the CCD sensor; Light source control unit: used to control the light intensity adjustment circuit to adjust the intensity of the light source; Exception processing unit: used to receive the light intensity information of each direction of the entropy source area sent by the light intensity sensing unit, calculate the mean and variance of the light sensing intensity in each direction, and determine whether the system is under optical attacks such as strong light blinding and split light attack by judging whether the mean and variance exceed the set safety range. When the exception processing unit determines that the system is under optical attack, it will immediately light up the alarm light and control the data post-processing unit to stop outputting random numbers; Temperature control unit: used to receive the operating temperature of the core part of the entropy source monitored by the temperature sensor, and actively compensate the configuration parameters of multiple devices in the quantum random number generator using preset parameters according to the monitored temperature; Data post-processing unit: used for receiving the electrical signal sent by the CCD sensor to perform post-processing operations and generate random numbers.

3. A quantum random number generator device capable of resisting optical attacks according to claim 1, characterized in that: The CCD sensor converts the photon signal emitted by the light source into an analog electrical signal, specifically: The CCD sensor converts the number of photons received per unit time at each detection point inside it into a voltage signal, and further obtains digital sampling data corresponding to each detection point through high-speed analog-to-digital sampling; the digital sampling data is multi-bit analog-to-digital conversion data, and the multi-bit is greater than or equal to 8 bits.

4. A quantum random number generator device capable of resisting optical attacks according to claim 2, characterized in that: The specific method for the data post-processing unit to perform post-processing operations to generate random numbers is: The data post-processing unit receives the digital sampling data corresponding to each detection point output by the CCD sensor, performs bitwise XOR on the multi-bit analog-to-digital conversion data corresponding to each detection point to obtain a 1-bit random number corresponding to each detection point.

5. A quantum random number generator device capable of resisting optical attacks according to claim 4, characterized in that: When the data post-processing unit generates a random number, it also includes: The data post-processing unit calculates the minimum information entropy according to the received sampling data corresponding to each detection point output by the CCD sensor; After receiving the digital signal of high-precision analog-to-digital conversion, the data post-processing unit outputs a random number sequence less than the minimum information entropy length through a post-processing algorithm.

6. A quantum random number generator device capable of resisting optical attacks according to claim 1, characterized in that: The entropy source area is specifically: The light sources are distributed around the CCD sensor, and the light sources, the light intensity sensing unit and the CCD sensor are packaged together in the same fixed and closed space to form the entropy source area.

7. A quantum random number generator device capable of resisting optical attacks according to claim 6, characterized in that: The fixed enclosed space in the entropy source area is composed of an opaque metal cover welded on the surface of the PCB circuit board, and the inner surface of the opaque metal cover is evenly sprayed with a coating material with a roughness range of Ra2-Ra3.

8. The quantum random number generator device capable of resisting optical attacks according to claim 1, characterized in that: The light source is an LED near-infrared light source.

Images