Network allowing security self-check and self-check information transmission method thereof

Abstract

The invention provides a network allowing security self-inspection and a self-inspection information transmission method thereof, which adopt an annular transmission path to realize transmission of detection information by a sender and a receiver under the condition that encryption and decryption keys are not informed of each other. Due to the fact that the quantum logic gate with a specific structure is used for achieving encryption and decryption operation, phase-adjustable single-bit encoding operation can be sequentially executed on a group of quantum bits, the sequence of encryption of the quantum state can be exchanged, and the security of encrypted information is protected by means of non-replicability of quantum while an annular information transmission structure is adapted. The security of the network is guaranteed by the non-replicability and the unpredictability of the quantum state, and even if an eavesdropper intercepts the quantum state information received and transmitted by a certain node, the eavesdropper cannot obtain detection information without any trace due to the fact that the eavesdropper does not know the measurement base, so that the potential eavesdropper is allowed to be searched through the self-inspection mode.

Description

Technical Field

[0001] The present invention relates to the technical field of secure communications, and in particular to a network allowing secure self-checking, and a self-checking information transmission method for the network. Background Art

[0002] In the information age, information security is receiving more and more attention, and the assessment and detection of network security has become an important topic.

[0003] The current network transmission method is based on classical information. When there is an eavesdropper in the network, because the eavesdropper can copy the classical information without changing the information content, the traditional network self-check method can only target the destroyer who changes the transmission information. It is difficult to detect the eavesdropper who does not change the transmission information but only copies the information. Summary of the invention

[0004] In view of the above problems in the prior art, the present invention proposes a network that allows secure self-checking and a method for transmitting self-checking information thereof, which adopts a ring transmission path to enable the sender and the receiver to transmit detection information (self-checking information) without knowing each other's encryption and decryption keys. In addition, since a quantum logic gate with a specific structure is used to implement encryption and decryption operations, a phase-adjustable single-bit encoding operation can be performed on a group of quantum bits in sequence, so that the encryption of the quantum state can be exchanged in order. While adapting to the ring information transmission structure, the security of the encrypted information is protected by the non-replicability of the quantum. The security of the network is guaranteed by the non-replicability and unpredictability of the quantum state. If an eavesdropper wants to know the content of the encrypted quantum information, he needs to know the measurement basis, that is, he needs to know the phase values ​​of the initial and target network nodes. In practical applications, even if the quantum state information received and transmitted by a certain node is intercepted, because the measurement basis is unknown, the detection information cannot be obtained without leaving a trace, thereby allowing potential eavesdroppers to be found through this self-checking method.

[0005] Specifically, a first aspect of the present invention relates to a network allowing for security self-checking, comprising a plurality of network nodes, the network nodes being connected via quantum channels and classical channels to allow for simultaneous transmission of quantum state information and classical information;

[0006] The network node is configured to generate quantum state information based on the information to be transmitted, write classical information, and switch between encrypting the quantum state information with the help of quantum logic gates and decrypting the quantum state information with the help of quantum logic gates according to the classical information;

[0007] Among them, the effects of encryption operations and decryption operations switched according to classical information on quantum state information cancel each other out.

[0008] Further, the network node includes a quantum state generation module, a quantum state measurement module, a quantum encryption / decryption module and a control module;

[0009] The quantum state generation module is configured to generate quantum state information based on the coded information, wherein the coded information is generated based on the coding of the information to be transmitted;

[0010] The quantum state measurement module is configured to measure quantum state information to obtain coded information;

[0011] The quantum encryption / decryption module includes an adjustable quantum logic gate, which is used to perform logical operations on quantum state information using the quantum logic gate to transform the quantum state, thereby realizing encryption or decryption of the quantum state information;

[0012] The control module is configured to control the quantum logic gate according to classical information to achieve switching between encryption operation and decryption operation.

[0013] Furthermore, the encoded information includes the information to be transmitted, the digital signature and the timestamp of the initial network node, and the hash value of the information to be transmitted, the digital signature and the timestamp of the initial network node.

[0014] Furthermore, the classical information includes a state identifier and a node list; the state identifier includes an initial sending state and a resending state; the node list includes an initial network node, a target network node, an intermediate network node and a next network node; the control module is configured to control the quantum logic gate to perform encryption operations on the quantum state information when the state identifier is the initial sending state, and to control the quantum logic gate to perform decryption operations on the quantum state information when the state identifier is the resending state.

[0015] Preferably, the quantum logic gates in the quantum encryption / decryption modules of different network nodes are different from each other.

[0016] Furthermore, quantum state information includes multiple quantum bits The quantum encryption / decryption module includes a set of quantum logic gates U(θ j ), and is set as the i-th quantum bit in the quantum state information By the quantum logic gate {U(θ j )} in the jth quantum logic gate U(θ j ) to perform encoding logic operations This enables the transformation of quantum states.

[0017] Preferably, the quantum logic gate The control module includes a control module for controlling the quantum logic gate U(θ j ) of the phase θ j Phase controller.

[0018] Optionally, the phase controller is configured to make the phase θ in the initial transmission state j The phase θ in the retransmission state j Same size, opposite sign.

[0019] Further, the network node also includes an analysis module, which includes a read-write unit, a risk calculation unit and a path calculation unit;

[0020] The read-write unit is configured to read and write classical information;

[0021] The risk calculation unit is configured to calculate the risk of the network in real time;

[0022] The path calculation unit is configured to calculate a transmission path with the lowest risk between network nodes.

[0023] Furthermore, the analysis module further comprises a processing unit configured to provide a digital signature and a timestamp of the network node;

[0024] The read-write unit is configured to write the digital signature and time stamp of the network node into the classical information.

[0025] A second aspect of the present invention relates to a self-check information transmission method for a network that allows security self-check, which includes an initial sending process and a resending process;

[0026] In the initial transmission process, the initial network node A generates original quantum state information based on the information to be transmitted, uses quantum logic gates to perform encryption operations on the original quantum state information to generate first quantum state information, calculates the transmission path with the minimum risk, and transmits the first quantum state information to the target network node B according to the transmission path with the minimum risk; and the target network node B uses quantum logic gates to perform encryption operations on the first quantum state information to generate second quantum state information, calculates the transmission path with the minimum risk, and transmits the second quantum state information back to the initial network node A according to the transmission path with the minimum risk;

[0027] During the retransmission process, the initial network node A uses a quantum logic gate to perform a decryption operation on the second quantum state information to generate a third quantum state information, calculates a transmission path with the minimum risk, and transmits the third quantum state information to the target network node B according to the transmission path with the minimum risk; and the target network node B uses a quantum logic gate to perform a decryption operation on the third quantum state information to generate a fourth quantum state information, and measures the fourth quantum state information;

[0028] The encryption operation during the initial transmission process and the decryption operation during the retransmission process of the same network node cancel each other out in terms of their effects on the quantum state information.

[0029] Preferably, the quantum logic gates in different network nodes are different from each other; and / or, the corresponding operation of the quantum logic gate selected by the target network node B is an identity transformation or a Hadamard gate.

[0030] Preferably, the Dijkstra algorithm is used to calculate the transmission path with the minimum risk.

[0031] Further, the initial network node A generates coded information based on the information to be transmitted, and then generates original quantum state information based on the coded information;

[0032] The encoded information includes the information to be transmitted, the digital signature and time stamp of the initial network node A, and a hash value of the information to be transmitted, the digital signature and time stamp of the initial network node A.

[0033] Furthermore, the network node also sends classical information along with the quantum state information, which includes a state identifier and a node list, the node list includes an initial network node A, a target network node B, an intermediate network node, and a next network node; and,

[0034] The initial network node A generates classical information after generating the original quantum state information, wherein the state identifier is the initial transmission state;

[0035] When the target network node B reads the state identifier in the classic information as the initial sending state, it changes the state identifier to the resending state and adds a digital signature to the target network node B in the node list;

[0036] After the initial network node A reads the state identifier in the classic information as the resending state and verifies the digital signature of the target network node B, it adds the digital signature to the initial network node A in the node list;

[0037] After reading the state identifier in the classical information as the resending state and verifying the digital signature of the initial network node A, the target network node B uses a quantum logic gate to decrypt the third quantum state information to generate the fourth quantum state information, measures the fourth quantum state information to obtain the encoded information, and verifies the digital signature, timestamp and hash value of the initial network node A in the measured encoded information.

[0038] Furthermore, the initial network node A also writes the timestamp into the classical information before sending the first quantum state information and the classical information;

[0039] When receiving quantum state information and classical information, the network node compares the timestamp in the classical information with the current time, and allows the timestamp to be updated when the difference between the timestamp and the current time is less than a preset value.

[0040] Furthermore, the network nodes use a set of quantum logic gates {U(θj )} to encrypt or decrypt quantum state information, a set of quantum logic gates {U(θ j )} in the jth quantum logic gate U(θ j ) for the i-th quantum bit in the quantum state information Perform encryption or decryption operations to generate operation results

[0041] Preferably, the quantum logic gate And the quantum logic gate U(θ j ) The phase θ during the initial transmission and retransmission j Same size, opposite sign.

[0042] Furthermore, if the target network node B fails to verify the digital signature, timestamp and hash value of the initial network node A in the encoded information, the risk of all network nodes and lines in the transmission path is increased during the next risk settlement.

[0043] Furthermore, when other network nodes except the initial network node A and the target network node B receive the quantum state information and the classical information, the classical information is read to determine whether it is on the transmission path with the minimum risk, and whether the received information comes from the previous network node about it on the transmission path with the minimum risk;

[0044] If it is determined that it is on the transmission path with the lowest risk and the received information comes from the previous network node on the transmission path with the lowest risk, the received quantum state information and classical information will be sent to the next network node on the transmission path with the lowest risk; otherwise, the transmission will be terminated and the risk of the previous network node and the risk of the line between it and the previous network node will be increased.

[0045] Preferably, the self-check information transmission method of the present invention can be implemented with the aid of the network that allows safe self-check of the present invention described above. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] The specific implementation modes of the present invention are further described in detail below in conjunction with the accompanying drawings.

[0047] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. It is obvious that the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0048] Figure 1 Schematically shows a network architecture that allows security self-checking according to the present invention;

[0049] Figure 2 An example of a network node according to the present invention is schematically shown;

[0050] Figure 3 The encryption / decryption principle of the quantum encryption / decryption module according to the present invention is schematically shown;

[0051] Figure 4 An example of an analysis module according to the present invention is schematically shown;

[0052] FIG5( a) schematically shows an example of a self-test information transmission method according to the present invention;

[0053] FIG5( b ) schematically shows the transmission path of a single quantum bit in the self-checking information transmission method according to the present invention. DETAILED DESCRIPTION

[0054] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example so as to fully convey the spirit of the present invention to those skilled in the art to which the present invention belongs. Therefore, the present invention is not limited to the embodiments disclosed herein.

[0055] Figure 1 A schematic diagram of a quantum communication network architecture that allows safe self-checking according to the present invention is shown, which includes multiple network nodes, such as node 1, ..., node 7, and each network node is connected through a quantum channel and a classical channel, so that any two network nodes in the network can directly or indirectly realize data connection and interact with quantum state information and classical information.

[0056] Figure 2 An example of a network node used for the present invention is shown.

[0057] As shown in the figure, the network node may include a receiving end, a quantum state generation module, a quantum state measurement module, a quantum encryption / decryption module, a control module, an analysis module and a sending end.

[0058] In the network node, the information to be transmitted may first be encoded to form encoded information. As an example, the encoded information may include, in addition to the information to be transmitted, verification data such as a digital signature of the network node, a timestamp, and a hash value for verifying the integrity of the information.

[0059] The quantum state generation module is used to generate quantum state information based on the encoded information, which may include multiple quantum bits. As an example, the quantum state generation module can be implemented with the help of a quantum state generation device.

[0060] The quantum state measurement module is used to measure quantum state information to obtain coded information, thereby allowing information to be transmitted, that is, actually received information, to be obtained from the coded information. As an example, the quantum state measurement module can be implemented with the aid of a quantum state measurement device.

[0061] The quantum encryption / decryption module is used to encrypt / decrypt quantum state information. The quantum encryption / decryption module here does not use traditional (shared) keys for encryption / decryption processing, but uses quantum logic gates to encode logical operations on quantum state information (quantum bits) to change the quantum state and achieve encryption or decryption of quantum state information. Among them, by using adjustable quantum logic gates in the quantum encryption / decryption module, it is allowed to control the quantum logic gates to achieve switching between encryption operations and decryption operations.

[0062] In a preferred example, the quantum logic gates used in the quantum encryption / decryption modules of different network nodes may be different from each other.

[0063] In the present invention, by controlling the quantum logic gate, the encryption operation and decryption operation of the quantum encryption / decryption module of the same network node cancel each other out in terms of the transformation effects on the quantum state.

[0064] Preferably, the quantum logic gate Where, the phase θ j is the quantum logic gate U(θ j ) is an adjustment parameter. That is, the phase θ j To adjust the quantum logic gate U(θ j ), thereby realizing the switch between encryption and decryption operations. Among them, the quantum logic gate U(θ j ) of the phase θ j Can be different from each other.

[0065] In a preferred example, the quantum encryption / decryption module may include a set of quantum logic gates {U(θ j )}, j = 1, ... Therefore, when the quantum state information is input into the quantum encryption / decryption module, the i-th quantum bit in the quantum state information It can be represented by a quantum logic gate {U(θ j )} in the jth quantum logic gate U(θ j ) to perform encoding logic operations The quantum state is changed, thereby realizing the encryption / decryption of the entire quantum state information. Figure 3 As shown, the i=1th quantum bit in the quantum state information The j=1th quantum logic gate U(θ1) is used to calculate i = 2 qubits The j=2nd quantum logic gate U(θ2) is used to calculate i = 3 qubits The j=3rd quantum logic gate U(θ3) is used to calculate By using this specific structure of quantum logic gates, it is possible to perform phase-adjustable single-bit encoding operations on quantum bits in quantum state information, so that the encryption of quantum state information can be exchanged in order, which can adapt to the ring information transmission structure mentioned below while using the non-replicability of quantum to protect the security of encrypted information.

[0066] In the present invention, the control module is configured to control the quantum logic gates in the quantum encryption / decryption module to achieve switching between encryption operations and decryption operations based on the quantum logic gates.

[0067] Preferably, the control module may include a phase controller for controlling the quantum logic gate U(θ j ) is the adjustment parameter phase θ j .

[0068] In a preferred example, the control module can control the quantum logic gate U(θ j ) at phase θ j Next pair of qubits Perform encoding logic operations and encrypt them; when the encrypted quantum bits are expected to When decrypting, control the quantum logic gate U(θ j ) of the phase θ j Reverse to -θ j , using quantum logic gate U(-θ j ) for quantum bits Perform encoding logic operations. Therefore, under this decryption operation, the quantum logic gate U(θ j ) for quantum bits The encryption function restores the quantum bit

[0069] Here, those skilled in the art will appreciate that the quantum operation device for implementing the quantum logic gate can be selected according to the carrier of the quantum bit. When the carrier is pulse light, the pulse light can be passed through a polarizer in a specific direction to realize the quantum logic gate U(θ j ) for quantum bits The phase controller can control the quantum logic gate U(θ j ) in the phase parameter θ j .

[0070] Continue to see Figure 2The receiving end can be used to receive information transmitted by other network nodes, which includes classical information and quantum state information. As an example, the receiving end can be implemented by means of a receiving device for quantum state information and classical information.

[0071] When the receiving end receives the classical information and quantum state information, it can send the quantum state information to the quantum encryption / decryption module for encryption or decryption operations, and send the classical information to the analysis module.

[0072] The analysis module is used to read, write and analyze classical information, as well as calculate the transmission path of information.

[0073] In the present invention, classical information may include data related to the information transmission process, such as a status identifier and a node list, wherein the status identifier includes an initial transmission status and a retransmission status, and the node list includes information related to the transmission path such as an initial network node, a target network node, an intermediate network node, and a next network node.

[0074] like Figure 4 As shown, the analysis module may include a read-write unit, a processing unit, a risk calculation unit, and a path calculation unit.

[0075] The read / write unit is used for reading and writing classical information, such as reading status identifiers and node lists, changing status identifiers, writing node list data, etc.

[0076] The processing unit is used to determine the operation to be performed based on the classical information read by the read-write module, and to provide the digital signature and timestamp of the network node.

[0077] The risk calculation unit is used to calculate the risk of the network in real time. The risk is related to factors such as the number of network nodes, the distance between network nodes, the security of the lines between network nodes, and the confidentiality of each network node, and satisfies the following properties: Let R AB is the risk between network nodes A and B, C is another network node, then R AB ≤R AC +R BC , and the equality sign is obtained if and only if network node C is on the transmission path with the minimum risk between network nodes A and B.

[0078] The path calculation unit is used to calculate the best transmission path between network nodes according to the risk, such as the transmission path with the minimum risk.

[0079] The transmitting end can be used to integrate the classical information and the quantum state information and transmit them together to the next network node. As an example, the transmitting end can be implemented by means of a classical information transmitter and a quantum state information transmitter.

[0080] In order to better understand the structure and function of each module and unit in the network proposed by the present invention, the following will be combined with Figure 5(a)-5(b) The network self-check information transmission method of the present invention is described, which is particularly suitable for use in the above-mentioned network that allows security self-check.

[0081] As shown in FIG. 5( a ), the self-test information transmission method of the present invention takes the transmission of self-test information from the initial network node A to the target network node B as an example, including an initial transmission process and a retransmission process.

[0082] In the initial transmission process, after the initial network node A generates the original quantum state information based on the information to be transmitted, it independently uses the quantum logic gate to perform encryption operation on the original quantum state information to generate the first quantum state information, and generates the minimum risk transmission path for the target network node B based on the risk, so as to transmit the first quantum state information to the target network node B according to the minimum risk transmission path. After receiving the first quantum state information, the target network node B will also independently use the quantum logic gate to perform encryption operation on the first quantum state information to generate the second quantum state information, and generate the minimum risk transmission path for the initial network node A based on the risk, so as to transmit the second quantum state information back to the initial network node A according to the minimum risk transmission path. In this way, it can be ensured that in the initial transmission process, the quantum state information carrying the information to be transmitted (such as self-test information) is always in an encrypted state.

[0083] During the retransmission process, the initial network node A again independently uses the quantum logic gate to perform a decryption operation on the second quantum state information to generate the third quantum state information, and regenerates the minimum risk transmission path for the target network node B based on the risk, so as to transmit the third quantum state information to the target network node B according to the minimum risk transmission path. After receiving the third quantum state information, the target network node B also independently uses the quantum logic gate to perform a decryption operation on the third quantum state information to generate the fourth quantum state information, and then measures the fourth quantum state information to obtain the plaintext of the received information.

[0084] It can be noted that in the self-test information transmission method of the present invention, the quantum state information first undergoes encryption operations in the initial network node A and the target network node B respectively, and then undergoes decryption operations in the initial network node A and the target network node B respectively, and finally undergoes the same number of encryption and decryption operations in the same network node. Therefore, it is possible to simply control the quantum logic gates used to implement encryption and decryption operations in the network nodes so that the effects of the decryption operations and encryption operations on the same quantum state information performed by the quantum logic gates in the same network node (for example, the initial network node A, the target network node B) are offset by each other. Therefore, there is no need for the network nodes to use shared keys, so that the quantum state information related to the information to be transmitted can be ensured to be always in an encrypted state during the transmission process, and when it is transmitted to the target network node again, it can be automatically restored to plain text with the help of the decryption operation at the target network node.

[0085] Specifically referring to FIG. 5( a ), the initial sending process involves state 1 and state 2, and the resending process involves state 3 and state 4.

[0086] In state 1, the initial network node A calculates the optimal transmission path target to reach the target network node B with the help of its analysis module.

[0087] In the present invention, in order to evaluate the confidentiality of the transmission path, the risk between network nodes is used to describe the possibility of information leakage when two network nodes communicate through the most secure transmission path. Therefore, the analysis module of the initial network node A can use, for example, the Dijkstra algorithm to calculate the transmission path with the minimum risk to the target network node B, so as to realize the information transmission from the initial network node A to the target network node B according to the transmission path with the minimum risk.

[0088] The initial network node A also generates quantum state information related to the information to be transmitted. To this end, the initial network node A can first encode the information to be transmitted to generate coded information, and then use the quantum state generation module to generate original quantum state information based on the coded information.

[0089] In the present invention, in order to enable the target network node B to confirm the authenticity of the received information, the encoded information may include, in addition to the information to be transmitted (text), the digital signature of the initial network node A, a timestamp, and verification data such as a hash value generated as a whole about the information to be transmitted, the digital signature and the timestamp, as shown in the following table:

[0090] Information to be transmitted Digital signature of the initial network node Timestamp Hash value

[0091] Therefore, when the target network node B obtains the coded information transmitted by the initial network node A, it can verify the authenticity and integrity of the information to be transmitted (self-test information) contained in the coded information it obtains through data such as the hash value, the digital signature and timestamp of the initial network node A.

[0092] As mentioned above, to facilitate process control, network nodes can read, write and analyze classical information through their analysis modules, which includes status identification and node lists.

[0093] The state identifier is used to identify the current transmission state of the quantum state information. For example, "initial transmission state" indicates that the current transmission of the quantum state information is in the initial transmission process, and "retransmission state" indicates that the current transmission of the quantum state information is in the retransmission process.

[0094] The node list is used to record data related to the calculated optimal transmission path (transmission path with the lowest risk), such as the initial network node A, the target network node B, the intermediate network node and the next intermediate network node.

[0095] Furthermore, during the initial transmission process, the network node can also use its analysis module to write a timestamp in the classical information, thereby allowing the next network node to determine whether the information transmission between the two network nodes is normal based on the timestamp in the classical information when receiving the quantum state information and the classical information.

[0096] For example, in state one involving the initial sending process, when the initial network node A generates classic information, it identifies the "state identifier" as the "initial sending state", records the initial network node A, the target network node B, and the intermediate network nodes other than the initial network node A and the target network node B on the transmission path with the lowest risk, and records the next network node about the initial network node A on the transmission path with the lowest risk at the "next network node", such as "network node C1", and an additional timestamp.

[0097] In addition, to ensure the security of information transmission, the initial network node A also needs to encrypt the original quantum state information to generate the first quantum state information. To this end, the initial network node A can use the control module to pre-set the quantum logic gate U(θ Aj ), so that after the original quantum state information is generated, the original quantum state information is encrypted by means of the quantum encryption / decryption module to generate the first quantum state information. Among them, a set of quantum logic gates {U(θ Aj )} for the quantum bits in the original quantum state information The encoding logic operation is performed as shown in FIG5(b).

[0098] Finally, the first quantum state information (ie, the original quantum state information encrypted once) and the classical information can be integrated at the sending end and sent to the next network node.

[0099] In state two, after receiving the first quantum state information and the classical information, the target network node B can first read the classical information through the analysis module.

[0100] After the analysis module confirms that it is the target network node for this information transmission by reading information such as the initial network node A and the target network node B in the classic information, it can change the state identifier from the initial sending state to the resending state, and use, for example, the Dijkstra algorithm to calculate the transmission path with the minimum risk to the initial network node A, and send the transmission path with the minimum risk to the sending end as the optimal transmission path from the target network node B to the initial network node A.

[0101] The analysis module of the target network node B can also determine whether the current transmission process is normal by reading the timestamp in the classic information and comparing it with the current time. When it is determined that the difference between the read timestamp and the current time is less than the set value, it is allowed to update the timestamp and write the calculated transmission path with the minimum risk into the classic information.

[0102] Similarly, the target network node B will also use the control module to pre-set the quantum logic gate U(θ Bj ), as shown in FIG5(b), the quantum encryption / decryption module is used to perform encryption operation on the quantum bits in the first quantum state information to generate Thereby, the second quantum state information is obtained, which contains the original state information encrypted twice.

[0103] Finally, the second quantum state information and the classical information can be integrated at the sending end and sent to the initial network node A according to the determined transmission path with the lowest risk.

[0104] At this point, the initial sending process of quantum state information is completed.

[0105] In state three, after receiving the second quantum state information and classical information returned by the target network node B, the initial network node A can use its analysis module to read the classical information.

[0106] After the analysis module reads the classical information and determines that the state identifier is the resending state and that the current network node is the initial network node, it can verify the digital signature of the target network node B in the classical information, and after the digital signature verification is passed, use the Dijkstra algorithm to recalculate its minimum risk transmission path to the target network node B, and send it to the sender as the optimal transmission path to allow the information to be retransmitted from the initial network node A to the target network node B according to the minimum risk transmission path.

[0107] The analysis module can also verify the timestamp in the classic information, and when the difference between the timestamp and the current time is less than a preset value, encode the classic information to update the timestamp, write the recalculated transmission path with the minimum risk from the initial network node A to the target network node B into the classic information, and attach a digital signature at the initial network node A in the classic information.

[0108] In addition, the control module also controls the quantum logic gate in the quantum encryption / decryption module to reverse, for example, the phase parameter θ Aj Taking the opposite value, the quantum logic gate U(θ Aj ) becomes U(-θ Aj ), as shown in Figure 5(b), the encoding logic operation of the quantum logic gate on the quantum state information is switched to the decryption operation, and the encryption operation and decryption operation of the same network node cancel each other out. For example, U(θ Aj )U(-θ Aj )=I. Therefore, after the decryption operation at the initial network node A, the quantum state information about the quantum logic gate U(θ Aj ) is decrypted, and the quantum bits in the third quantum state information generated by the decryption operation can be expressed as

[0109] Preferably, after completing the quantum logic gate U(-θ Aj ) After decrypting the quantum state information, the control module can restore the quantum logic gate to its original state U(θ Aj ).

[0110] Finally, the sender integrates the third quantum state information and classical information according to the transmission path with the lowest risk and sends them to the target network node B.

[0111] In state four, after receiving the third quantum state information and the classical information, the target network node B reads the state identifier in the classical information through its analysis module as a resending state.

[0112] At this time, the analysis module can verify the digital signature and timestamp of the initial network node A in the read classical information.

[0113] When the digital signature is verified and the difference between the timestamp and the current time is less than the preset value, the target network node B can use the control module to control the quantum logic gate in the quantum encryption / decryption module to reverse, for example, to make the phase parameter θ Bj Taking the opposite value, the quantum logic gate U(θ Bj ) becomes U(-θ Bj ), as shown in Figure 5(b), thereby switching the encoding logic operation of the quantum logic gate on the quantum state information to the decryption operation, and the encryption operation and decryption operation of the same network node on the quantum state information cancel each other out. For example, U(θ Bj )U(-θ Bj )=I. Therefore, after the decryption operation at the target network node B, the third quantum state information about the quantum logic gate U(θ Bj ) is decrypted, and the quantum bits in the quantum state information are restored to Therefore, the quantum state information encrypted during the initial transmission process can be restored to its plaintext, that is, the original quantum state information, when it is transmitted to the target network node B again through the retransmission process. This process does not require the participation of a shared key.

[0114] Preferably, after completing the quantum logic gate U(-θ Bj ) After decrypting the quantum state information, the control module can restore the quantum logic gate to its original state U(θ Bj ).

[0115] Thereafter, the target network node B can use the quantum state measurement module to measure the decoded original quantum state information, obtain the encoded information and parse out the plaintext of the received (to be transmitted) information.

[0116] Among them, the target network node B can also verify the digital signature in the obtained coded information to ensure that the received information to be transmitted comes from the initial network node A, and verify the timestamp in the coded information based on the current time to ensure that the information transmission process is normal, and verify the hash value in the coded information to ensure the integrity of the received information. At this time, if the verification of the information to be transmitted fails, the target network node B can report an error, broadcast the error information, and increase the risk of all network nodes and lines on the transmission path at the next risk settlement.

[0117] Therefore, through the initial sending process and the resending process, the information to be transmitted is encrypted from the initial network node A to the target network node B in the form of a ring transmission. Only the logical operation of the quantum state information by quantum logic gates can be used without the participation of shared keys, thereby realizing the secure transmission of information (self-test information) between the initial network node A and the target network node B.

[0118] Furthermore, in the self-checking information transmission method of the present invention, after measuring the fourth quantum state information to obtain the information to be transmitted, the target network node B can also randomly select a number of bits from the received (to be transmitted) information for public comparison with the initial network node A. If the comparison fails, for example, the error rate exceeds a preset threshold, it means that there is a problem in the propagation process.

[0119] Furthermore, when a network node receives quantum state information and classical information from the previous network node, and discovers that it is a node other than the initial network node A and the target network node B by reading the classical information, it can determine whether it belongs to an intermediate network node on the recorded transmission path with the lowest risk based on the received classical information, and whether the received information comes from the previous network node about it on the transmission path with the lowest risk.

[0120] If it is determined that this network node is on the recorded transmission path with minimum risk, and the received information comes from the previous network node about it on the transmission path with minimum risk, the network node can update the next network node in the classical information according to the recorded transmission path with minimum risk, send the received quantum state information and classical information to the next network node about it, and broadcast to the initial network node A and the target network node B.

[0121] When it is determined that the network node is not on the recorded transmission path with the lowest risk and / or the received information is not from the previous network node on the transmission path with the lowest risk, the transmission may be terminated and the error may be broadcasted.

[0122] In particular, referring to FIG5(a), the operation corresponding to the quantum logic gate selected by the target network node B can be an identity transformation or a Hadamard gate. Therefore, when the initial network node A prepares a photon of the |HV> basis, if the target network node B in state two is encrypted by the identity transformation, then the target network node B in state four is equivalent to being measured by the |HV> basis; if the target network node B in state two is encrypted by the Hadamard gate, then the target network node B in state four is equivalent to being measured by the |+-> basis. In this way, the channel security of the BB84 protocol can be detected.

[0123] In summary, in the network that allows secure self-checking and the self-checking information transmission method thereof of the present invention, a ring-shaped information transmission path is adopted to realize that the initial network node and the target network node can perform encryption and decryption without knowing each other about the key used for encryption and decryption (such as the phase parameter in the quantum logic gate), thereby realizing encrypted transmission of information. In addition, in the encryption and decryption operation for encrypted information transmission, due to the use of quantum logic gates with a specific structure, a phase-adjustable single-bit encoding operation can be performed on a group of quantum bits in sequence, so that the encryption of the quantum state can be exchanged in order, and the security of the encrypted information is protected by the non-replicability of the quantum while adapting to the ring-shaped information transmission structure. The security of the network is guaranteed by the non-replicability and unpredictability of the quantum state. If an eavesdropper wants to know the content of the encrypted quantum information, he needs to know the measurement basis, that is, he needs to know the phase values ​​of all the nodes he has experienced. In particular, he needs to know the phase value of the initial network node A, which is equivalent to the direct leakage of the information of the initial network node A. In addition, in practical applications, even if the quantum state information received and transmitted by a node is intercepted, because the measurement basis is unknown, it is impossible to obtain the phase value of the quantum logic gate used by the node through quantum state comparison, and it is impossible to obtain the detection information without leaving a trace, thereby allowing potential eavesdroppers to be found through this self-detection method.

[0124] Although the present invention has been described above through specific embodiments in conjunction with the accompanying drawings, those skilled in the art will readily recognize that the above embodiments are merely exemplary and are used to illustrate the principles of the present invention, and do not limit the scope of the present invention. Those skilled in the art may make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. A network that allows secure self-checking, comprising a plurality of network nodes, the network nodes being connected by quantum channels and classical channels to allow simultaneous transmission of quantum state information and classical information; The network node is configured to generate quantum state information based on the information to be transmitted, write classical information, and switch between encrypting the quantum state information with the help of quantum logic gates and decrypting the quantum state information with the help of quantum logic gates according to the classical information; in, The effects of encryption and decryption operations switched based on classical information on quantum state information cancel each other out.

2. The network of claim 1, wherein: The network node includes a quantum state generation module, a quantum state measurement module, a quantum encryption / decryption module and a control module; The quantum state generation module is configured to generate quantum state information based on the coded information, wherein the coded information is generated based on the coding of the information to be transmitted; The quantum state measurement module is configured to measure quantum state information to obtain coded information; The quantum encryption / decryption module includes an adjustable quantum logic gate, which is used to perform logical operations on quantum state information using the quantum logic gate to transform the quantum state, thereby realizing encryption or decryption of the quantum state information; The control module is configured to control the quantum logic gate according to classical information to achieve switching between encryption operation and decryption operation.

3. The network of claim 2, wherein: The encoded information includes the information to be transmitted, the digital signature and the timestamp of the initial network node, and the hash value of the information to be transmitted, the digital signature and the timestamp of the initial network node.

4. The network of claim 2, wherein: Classic information includes state identification and node list; The status identification includes the initial sending status and the resending status; The node list includes the initial network node, the target network node, the intermediate network node and the next network node; The control module is configured to control the quantum logic gate to perform encryption operation on the quantum state information when the state identifier is the initial transmission state, and to control the quantum logic gate to perform decryption operation on the quantum state information when the state identifier is the retransmission state.

5. The network of claim 2, wherein: The quantum logic gates in the quantum encryption / decryption modules of different network nodes are different from each other.

6. The network of claim 2, wherein: Quantum state information consists of multiple quantum bits The quantum encryption / decryption module includes a set of quantum logic gates U(θ j ), and is set as the i-th quantum bit in the quantum state information By the quantum logic gate {U(θ j )} in the jth quantum logic gate U(θ j ) to perform encoding logic operations This enables the transformation of quantum states.

7. The network of claim 6, wherein: Quantum logic gates The control module includes a control module for controlling the quantum logic gate U(θ j ) of the phase θ j Phase controller.

8. The network of claim 7, wherein: The phase controller is configured to make the phase θ j The phase θ in the retransmission state j Same size, opposite sign.

9. The network of claim 4, wherein: The network node also includes an analysis module, which includes a read-write unit, a risk calculation unit, and a path calculation unit; The read-write unit is configured to read and write classical information; The risk calculation unit is configured to calculate the risk of the network in real time; The path calculation unit is configured to calculate a transmission path with the lowest risk between network nodes.

10. The network of claim 9, wherein: The analysis module further comprises a processing unit configured to provide a digital signature and a time stamp of the network node; The read-write unit is configured to write the digital signature and time stamp of the network node into the classical information.

11. A method for transmitting self-check information for a network that allows security self-check, comprising an initial sending process and a resending process; In the initial transmission process, the initial network node A generates original quantum state information based on the information to be transmitted, uses quantum logic gates to perform encryption operations on the original quantum state information to generate first quantum state information, calculates the transmission path with the minimum risk, and transmits the first quantum state information to the target network node B according to the transmission path with the minimum risk; And, the target network node B uses a quantum logic gate to perform an encryption operation on the first quantum state information to generate second quantum state information, calculates a transmission path with the minimum risk, and transmits the second quantum state information back to the initial network node A according to the transmission path with the minimum risk; During the retransmission process, the initial network node A uses a quantum logic gate to perform a decryption operation on the second quantum state information to generate a third quantum state information, calculates a transmission path with the minimum risk, and transmits the third quantum state information to the target network node B according to the transmission path with the minimum risk; and the target network node B uses a quantum logic gate to perform a decryption operation on the third quantum state information to generate a fourth quantum state information, and measures the fourth quantum state information; The encryption operation during the initial transmission process and the decryption operation during the retransmission process of the same network node cancel each other out in terms of their effects on the quantum state information.

12. The self-test information transmission method according to claim 11, wherein: The quantum logic gates in different network nodes are different from each other; and / or, the corresponding operation of the quantum logic gate selected by the target network node B is an identity transformation or a Hadamard gate.

13. The self-test information transmission method according to claim 11, wherein: The Dijkstra algorithm is used to calculate the transmission path with the minimum risk.

14. The self-test information transmission method according to claim 11, wherein: The initial network node A generates coded information based on the information to be transmitted, and then generates original quantum state information based on the coded information; The encoded information includes the information to be transmitted, the digital signature and time stamp of the initial network node A, and a hash value of the information to be transmitted, the digital signature and time stamp of the initial network node A.

15. The self-test information transmission method according to claim 14, wherein: The network node also sends classical information along with the quantum state information, which includes a state identifier and a node list, the node list includes an initial network node A, a target network node B, an intermediate network node, and a next network node; and, The initial network node A generates classical information after generating the original quantum state information, wherein the state identifier is the initial transmission state; When the target network node B reads the state identifier in the classic information as the initial sending state, it changes the state identifier to the resending state and adds a digital signature to the target network node B in the node list; After the initial network node A reads the state identifier in the classic information as the resending state and verifies the digital signature of the target network node B, it adds the digital signature to the initial network node A in the node list; After reading the state identifier in the classical information as the resending state and verifying the digital signature of the initial network node A, the target network node B uses a quantum logic gate to decrypt the third quantum state information to generate the fourth quantum state information, measures the fourth quantum state information to obtain the encoded information, and verifies the digital signature, timestamp and hash value of the initial network node A in the measured encoded information.

16. The self-test information transmission method according to claim 15, wherein: The initial network node A also writes the timestamp into the classical information before sending the first quantum state information and the classical information; When receiving quantum state information and classical information, the network node compares the timestamp in the classical information with the current time, and allows the timestamp to be updated when the difference between the timestamp and the current time is less than a preset value.

17. The self-test information transmission method according to any one of claims 11 to 16, wherein: The network nodes use a set of quantum logic gates {U(θ j )} to encrypt or decrypt quantum state information, a set of quantum logic gates {U(θ j )} in the jth quantum logic gate U(θ j ) for the i-th quantum bit in the quantum state information Perform encryption or decryption operations to generate the operation result U(θ j ) 18. The self-test information transmission method according to claim 17, wherein: Quantum logic gates And the quantum logic gate U(θ j ) The phase θ during the initial transmission and retransmission j Same size, opposite sign.

19. The self-test information transmission method according to claim 15, wherein: If the target network node B fails to verify the digital signature, timestamp and hash value of the initial network node A in the encoded information, the risk of all network nodes and lines in the transmission path will be increased at the next risk settlement.

20. The self-test information transmission method according to claim 15, wherein: When other network nodes except the initial network node A and the target network node B receive quantum state information and classical information, the classical information is read to determine whether it is on the transmission path with the minimum risk, and whether the received information comes from the previous network node on the transmission path with the minimum risk; If it is determined that it is on the transmission path with the lowest risk and the received information comes from the previous network node on the transmission path with the lowest risk, the received quantum state information and classical information will be sent to the next network node on the transmission path with the lowest risk; otherwise, the transmission will be terminated and the risk of the previous network node and the risk of the line between it and the previous network node will be increased.

21. The self-check information transmission method according to claim 11, which is implemented by means of a network allowing secure self-check according to any one of claims 1-10.

Images