A network allowing for safe self-checking and a method for transmitting self-checking information thereof

Abstract

The present application provides a network allowing safe self-check and a self-check information transmission method thereof, which adopts a ring transmission path to realize transmission of detection information by a sender and a receiver without knowing each other's encryption and decryption keys. Since the encryption and decryption operations are realized by using quantum logic gates with specific structures, phase-adjustable single-bit encoding operations can be sequentially performed on a group of quantum bits, so that the encryption of quantum states can be exchanged in sequence, and the security of encrypted information is protected by using the non-replicable nature of quantum states while adapting to the ring information transmission structure. The security of the network is guaranteed by the non-replicable and unpredictable nature of quantum states. Even if an eavesdropper intercepts the quantum state information received and transmitted by a certain node, he cannot obtain the detection information without leaving traces because he does not know the measurement basis, so as to allow potential eavesdroppers to be found through this self-checking method.

Description

Technical Field

[0001] The present invention relates to the technical field of secure communications, and in particular to a network allowing secure self-checking, and a self-checking information transmission method for the network. Background Art

[0002] In the information age, information security is receiving more and more attention, and the assessment and detection of network security has become an important topic.

[0003] The current network transmission method is based on classical information. When there is an eavesdropper in the network, because the eavesdropper can copy the classical information without changing the information content, the traditional network self-detection method can only target the destroyer who changes the transmission information. It is difficult to detect the eavesdropper who does not change the transmission information but only copies the information. Summary of the Invention

[0004] In response to the above-mentioned problems in the prior art, the present invention proposes a network that allows secure self-testing and a method for transmitting self-testing information thereof, which adopts a ring transmission path to enable the sender and receiver to transmit detection information (self-testing information) without knowing each other's encryption and decryption keys. In addition, due to the use of quantum logic gates with a specific structure to implement encryption and decryption operations, a phase-adjustable single-bit encoding operation can be performed on a group of quantum bits in sequence, so that the encryption order of the quantum state can be exchanged. While adapting to the ring information transmission structure, the security of the encrypted information is protected by the non-replicability and unpredictability of the quantum state. The security of the network is guaranteed by the non-replicability and unpredictability of the quantum state. If an eavesdropper wants to know the content of the encrypted quantum information, he needs to know the measurement basis, that is, he needs to know the phase values ​​of the initial and target network nodes. In practical applications, even if the quantum state information received and transmitted by a node is intercepted, because the measurement basis is unknown, it is impossible to obtain the detection information without leaving a trace, thereby allowing potential eavesdroppers to be found through this self-testing method.

[0005] Specifically, a first aspect of the present invention relates to a network allowing for secure self-checking, comprising a plurality of network nodes, the network nodes being connected via quantum channels and classical channels to allow for simultaneous transmission of quantum state information and classical information;

[0006] The network node is configured to generate quantum state information based on the information to be transmitted, write classical information, and switch between encrypting the quantum state information using quantum logic gates and decrypting the quantum state information using quantum logic gates according to the classical information;

[0007] Among them, the effects of encryption operations and decryption operations switched based on classical information on quantum state information cancel each other out.

[0008] Furthermore, the network node includes a quantum state generation module, a quantum state measurement module, a quantum encryption / decryption module, and a control module;

[0009] The quantum state generation module is configured to generate quantum state information based on the coded information, wherein the coded information is generated based on the information to be transmitted;

[0010] The quantum state measurement module is configured to measure quantum state information to obtain coded information;

[0011] The quantum encryption / decryption module includes an adjustable quantum logic gate, which is used to perform logical operations on quantum state information using the quantum logic gate to transform the quantum state and realize encryption or decryption of the quantum state information;

[0012] The control module is configured to control the quantum logic gate according to classical information to achieve switching between encryption operations and decryption operations.

[0013] Furthermore, the encoded information includes the information to be transmitted, the digital signature and time stamp of the initial network node, and a hash value of the information to be transmitted, the digital signature and time stamp of the initial network node.

[0014] Furthermore, the classical information includes a state identifier and a node list; the state identifier includes an initial sending state and a resending state; the node list includes an initial network node, a target network node, an intermediate network node and a next network node; the control module is configured to control the quantum logic gate to perform encryption operations on the quantum state information when the state identifier is the initial sending state, and to control the quantum logic gate to perform decryption operations on the quantum state information when the state identifier is the resending state.

[0015] Preferably, the quantum logic gates in the quantum encryption / decryption modules of different network nodes are different from each other.

[0016] Furthermore, quantum state information includes multiple quantum bits The quantum encryption / decryption module includes a set of quantum logic gates U(θ j ), and is set as the i-th quantum bit in the quantum state information By the quantum logic gate {U(θ j )} in the jth quantum logic gate U(θ j ) to perform encoding logic operations This enables the transformation of quantum states.

[0017] Preferably, the quantum logic gate The control module includes a module for controlling the quantum logic gate U(θ j )'s phase θ j Phase controller.

[0018] Optionally, the phase controller is configured to make the phase θ in the initial transmission state j and the phase θ in the retransmission state j Same size, opposite sign.

[0019] Furthermore, the network node also includes an analysis module, which includes a read-write unit, a risk calculation unit, and a path calculation unit;

[0020] The read-write unit is configured to read and write classical information;

[0021] The risk calculation unit is configured to calculate the risk of the network in real time;

[0022] The path calculation unit is configured to calculate a transmission path with the lowest risk between network nodes.

[0023] Furthermore, the analysis module further comprises a processing unit configured to provide a digital signature and a timestamp of the network node;

[0024] The read-write unit is configured to write the digital signature and time stamp of the network node into the classical information.

[0025] A second aspect of the present invention relates to a method for transmitting self-check information for a network that allows security self-check, comprising an initial sending process and a resending process;

[0026] During the initial transmission process, the initial network node A generates original quantum state information based on the information to be transmitted, performs an encryption operation on the original quantum state information using quantum logic gates to generate first quantum state information, calculates a minimum-risk transmission path, and transmits the first quantum state information to the target network node B along the minimum-risk transmission path; and the target network node B performs an encryption operation on the first quantum state information using quantum logic gates to generate second quantum state information, calculates a minimum-risk transmission path, and transmits the second quantum state information back to the initial network node A along the minimum-risk transmission path.

[0027] During the retransmission process, the initial network node A uses a quantum logic gate to decrypt the second quantum state information to generate a third quantum state information, calculates a minimum-risk transmission path, and transmits the third quantum state information to the target network node B according to the minimum-risk transmission path; and the target network node B uses a quantum logic gate to decrypt the third quantum state information to generate a fourth quantum state information, and measures the fourth quantum state information.

[0028] The effects of the encryption operation during the initial transmission process and the decryption operation during the retransmission process of the same network node on the quantum state information cancel each other out.

[0029] Preferably, the quantum logic gates in different network nodes are different from each other; and / or, the corresponding operation of the quantum logic gate selected by the target network node B is an identity transformation or a Hadamard gate.

[0030] Preferably, the Dijkstra algorithm is used to calculate the transmission path with the minimum risk.

[0031] Furthermore, the initial network node A generates coded information based on the information to be transmitted, and then generates original quantum state information based on the coded information;

[0032] The encoded information includes the information to be transmitted, the digital signature and time stamp of the initial network node A, and a hash value of the information to be transmitted, the digital signature and time stamp of the initial network node A.

[0033] Furthermore, the network node also sends classical information along with the quantum state information, which includes a state identifier and a node list, where the node list includes an initial network node A, a target network node B, an intermediate network node, and a next network node; and,

[0034] The initial network node A generates classical information after generating the original quantum state information, where the state is identified as the initial sending state;

[0035] When the target network node B reads the state identifier in the classic information as the initial sending state, it changes the state identifier to the resending state and adds a digital signature to the target network node B in the node list;

[0036] After the initial network node A reads the state identifier in the classic information as the resending state and verifies the digital signature of the target network node B, it adds the digital signature to the initial network node A in the node list;

[0037] After reading the state identifier in the classical information as the resending state and verifying the digital signature of the initial network node A, the target network node B uses the quantum logic gate to decrypt the third quantum state information to generate the fourth quantum state information, measures the fourth quantum state information to obtain the encoded information, and verifies the digital signature, timestamp and hash value of the initial network node A in the measured encoded information.

[0038] Furthermore, the initial network node A also writes a timestamp into the classical information before sending the first quantum state information and the classical information;

[0039] When a network node receives quantum state information and classical information, it compares the timestamp in the classical information with the current time, and allows the timestamp to be updated when the difference between the timestamp and the current time is less than a preset value.

[0040] Furthermore, the network nodes utilize a set of quantum logic gates {U(θj )} encrypt or decrypt quantum state information, a set of quantum logic gates {U(θ j )} in the jth quantum logic gate U(θ j ) for the i-th quantum bit in the quantum state information Perform encryption or decryption operations to generate operation results

[0041] Preferably, the quantum logic gate And the quantum logic gate U(θ j ) Phase θ during the initial transmission and retransmission process j Same size, opposite sign.

[0042] Furthermore, if the target network node B fails to verify the digital signature, timestamp and hash value of the initial network node A in the encoded information, the risk of all network nodes and lines in the transmission path will be increased during the next risk settlement.

[0043] Furthermore, when network nodes other than the initial network node A and the target network node B receive quantum state information and classical information, the classical information is read to determine whether it is on the transmission path with the minimum risk, and whether the received information comes from the previous network node on the transmission path with the minimum risk;

[0044] If it is determined that it is on the transmission path with minimum risk and the received information comes from the previous network node on the transmission path with minimum risk, the received quantum state information and classical information will be sent to the next network node on the transmission path with minimum risk; otherwise, the transmission will be terminated and the risk of the previous network node and the risk of the line between it and the previous network node will be increased.

[0045] Preferably, the self-check information transmission method of the present invention can be implemented with the aid of the above-mentioned network allowing safe self-check of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] The specific embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

[0047] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0048] Figure 1 Schematically illustrates a network architecture that allows security self-checking according to the present invention;

[0049] Figure 2 An example of a network node according to the present invention is schematically shown;

[0050] Figure 3 Schematically illustrates the encryption / decryption principle of the quantum encryption / decryption module according to the present invention;

[0051] Figure 4 Schematically shows an example of an analysis module according to the present invention;

[0052] FIG5( a ) schematically shows an example of a self-test information transmission method according to the present invention;

[0053] FIG5( b ) schematically shows the transmission path of a single quantum bit in the self-checking information transmission method according to the present invention. DETAILED DESCRIPTION

[0054] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example so as to fully convey the spirit of the present invention to those skilled in the art to which the present invention belongs. Therefore, the present invention is not limited to the embodiments disclosed herein.

[0055] Figure 1 A schematic diagram of a quantum communication network architecture that allows secure self-checking according to the present invention is shown, which includes multiple network nodes, such as node 1, ..., node 7. Each network node is connected via a quantum channel and a classical channel, so that any two network nodes in the network can directly or indirectly establish a data connection and interact with quantum state information and classical information.

[0056] Figure 2 An example of a network node used in the present invention is shown.

[0057] As shown in the figure, the network node may include a receiving end, a quantum state generation module, a quantum state measurement module, a quantum encryption / decryption module, a control module, an analysis module and a sending end.

[0058] In the network node, the information to be transmitted may first be encoded to form encoded information. As an example, the encoded information may include, in addition to the information to be transmitted, verification data such as the network node's digital signature, a timestamp, and a hash value for verifying the integrity of the information.

[0059] The quantum state generation module is used to generate quantum state information based on the encoded information, which may include multiple quantum bits As an example, the quantum state generation module can be implemented with the help of a quantum state generation device.

[0060] The quantum state measurement module is used to measure quantum state information to obtain coded information, thereby allowing information to be transmitted, i.e., the actual received information, to be obtained from the coded information. As an example, the quantum state measurement module can be implemented using a quantum state measurement device.

[0061] The quantum encryption / decryption module is used to encrypt / decrypt quantum state information. Instead of using traditional (shared) keys for encryption and decryption, it uses quantum logic gates to perform encoded logic operations on quantum state information (qubits), thereby changing the quantum state and achieving encryption or decryption of quantum state information. The use of adjustable quantum logic gates in the quantum encryption / decryption module allows control of the quantum logic gates to switch between encryption and decryption operations.

[0062] In a preferred example, the quantum logic gates used in the quantum encryption / decryption modules of different network nodes may be different from each other.

[0063] In the present invention, by controlling the quantum logic gate, the encryption operation and decryption operation of the quantum encryption / decryption module of the same network node are made to cancel each other out in terms of the transformation effects on the quantum state.

[0064] Preferably, the quantum logic gate Where, the phase θ j is the quantum logic gate U(θ j ) is the adjustment parameter. That is, the phase θ can be controlled j To adjust the quantum logic gate U(θ j ), thereby realizing the switch between encryption and decryption operations. Among them, the quantum logic gate U(θ j )'s phase θ j Can be different from each other.

[0065] In a preferred example, the quantum encryption / decryption module may include a set of quantum logic gates {U(θ j )}, j = 1, .... Therefore, when the quantum state information is input into the quantum encryption / decryption module, the i-th quantum bit in the quantum state information It can be represented by a quantum logic gate {U(θ j )} in the jth quantum logic gate U(θ j ) to perform encoding logic operations The quantum state is changed, thereby realizing the encryption / decryption of the entire quantum state information. Figure 3 As shown, the i=1 quantum bit in the quantum state information The j=1 quantum logic gate U(θ1) is used to calculate i = 2 qubits The j=2 quantum logic gate U(θ2) is used to calculate i = 3 qubits The j=3 quantum logic gate U(θ3) is used to calculate By using quantum logic gates of this specific structure, phase-adjustable single-bit encoding operations can be performed on quantum bits in quantum state information, making the encryption of quantum state information commutative. This can adapt to the ring information transmission structure mentioned below while utilizing the non-replicability of quantum to protect the security of encrypted information.

[0066] In the present invention, the control module is configured to control the quantum logic gates in the quantum encryption / decryption module to achieve switching between encryption operations and decryption operations based on the quantum logic gates.

[0067] Preferably, the control module may include a phase controller for controlling the quantum logic gate U(θ j )’s adjustment parameter phase θ j .

[0068] In a preferred example, the control module can control the quantum logic gate U(θ j ) in phase θ j Next pair of qubits Perform encoding logic operations and encrypt them; when the encrypted quantum bits are expected to be When decrypting, control the quantum logic gate U(θ j )'s phase θ j Reverse to -θ j , using quantum logic gate U(-θ j ) for quantum bits Perform encoding logic operations. Therefore, under this decryption operation, the quantum logic gate U(θ j ) for quantum bits The encryption function restores the quantum bit

[0069] Here, those skilled in the art will appreciate that the quantum operation device for implementing the quantum logic gate can be selected according to the carrier of the quantum bit. When the carrier is pulsed light, the pulsed light can be passed through a polarizer in a specific direction to realize the quantum logic gate U(θ j ) for quantum bits The phase controller can control the quantum logic gate U(θ j ) in the phase parameter θ j .

[0070] Continue to see Figure 2The receiving end can be used to receive information transmitted by other network nodes, which includes classical information and quantum state information. As an example, the receiving end can be implemented by using a receiving device for quantum state information and classical information.

[0071] When the receiving end receives classical information and quantum state information, it can send the quantum state information to the quantum encryption / decryption module for encryption or decryption operations, and send the classical information to the analysis module.

[0072] The analysis module is used to read, write and analyze classical information, as well as calculate the transmission path of information.

[0073] In the present invention, classic information may include data related to the information transmission process, such as a status identifier and a node list, wherein the status identifier includes an initial transmission status and a retransmission status, and the node list includes information related to the transmission path, such as the initial network node, the target network node, the intermediate network node, and the next network node.

[0074] like Figure 4 As shown, the analysis module may include a reading and writing unit, a processing unit, a risk calculation unit and a path calculation unit.

[0075] The read / write unit is used to read and write classical information, such as reading status identifiers and node lists, changing status identifiers, and writing node list data.

[0076] The processing unit is used to determine the operation to be performed based on the classical information read by the read-write module, and to provide the digital signature and timestamp of the network node.

[0077] The risk calculation unit is used to calculate the risk of the network in real time. The risk is related to factors such as the number of network nodes, the distance between network nodes, the security of the lines between network nodes, and the confidentiality of each network node, and satisfies the following properties: Let R AB is the risk between network nodes A and B, C is another network node, then R AB ≤R AC +R BC , and the sign is equal if and only if network node C is on the transmission path with the minimum risk between network nodes A and B.

[0078] The path calculation unit is used to calculate the best transmission path between network nodes according to the risk, such as the transmission path with the minimum risk.

[0079] The transmitter can be used to integrate classical information and quantum state information and transmit them together to the next network node. As an example, the transmitter can be implemented using a classical information transmitter and a quantum state information transmitter.

[0080] To better understand the structure and function of each module and unit in the network proposed by the present invention, the following will be combined with Figures 5(a)-5(b) The network self-check information transmission method of the present invention is described, which is particularly suitable for use in the above-mentioned network that allows security self-check.

[0081] As shown in FIG. 5( a ), the self-test information transmission method of the present invention takes the transmission of self-test information from the initial network node A to the target network node B as an example, including an initial transmission process and a retransmission process.

[0082] During the initial transmission process, after the initial network node A generates original quantum state information based on the information to be transmitted, it independently uses quantum logic gates to perform encryption operations on the original quantum state information to generate first quantum state information. Based on the risk, it generates a minimum-risk transmission path with respect to the target network node B, and transmits the first quantum state information to the target network node B along this minimum-risk transmission path. After receiving the first quantum state information, the target network node B will also independently use quantum logic gates to perform encryption operations on the first quantum state information to generate second quantum state information. Based on the risk, it generates a minimum-risk transmission path with respect to the initial network node A, and transmits the second quantum state information back to the initial network node A along this minimum-risk transmission path. This ensures that during the initial transmission process, the quantum state information carrying the information to be transmitted (e.g., self-test information) is always encrypted.

[0083] During the retransmission process, the initial network node A again independently uses quantum logic gates to decrypt the second quantum state information to generate third quantum state information, and then regenerates a risk-minimizing transmission path for the target network node B based on the risk, and transmits the third quantum state information to the target network node B along this risk-minimizing transmission path. After receiving the third quantum state information, the target network node B also independently uses quantum logic gates to decrypt the third quantum state information to generate fourth quantum state information, and then measures the fourth quantum state information to obtain the plaintext of the received information.

[0084] It can be noted that in the self-test information transmission method of the present invention, the quantum state information first undergoes encryption operations in the initial network node A and the target network node B respectively, and then undergoes decryption operations in the initial network node A and the target network node B respectively, and finally undergoes the same number of encryption and decryption operations in the same network node. Therefore, it is possible to simply control the quantum logic gates used to implement encryption and decryption operations in the network nodes so that the decryption operations and encryption operations performed on the same quantum state information using quantum logic gates in the same network node (for example, the initial network node A, the target network node B) cancel each other out. Therefore, without the network nodes using shared keys, it is possible to ensure that the quantum state information related to the information to be transmitted is always in an encrypted state during the transmission process, and when it is transmitted to the target network node again, it can be automatically restored to plaintext with the help of the decryption operation at the target network node.

[0085] 5(a) , the initial sending process involves states 1 and 2, and the resending process involves states 3 and 4.

[0086] In state 1, the initial network node A calculates the optimal transmission path target to the target network node B with the help of its analysis module.

[0087] In this invention, to assess the confidentiality of a transmission path, the risk between network nodes is used to describe the likelihood of information leakage when two network nodes communicate via the most secure transmission path. Therefore, the analysis module of initial network node A can use, for example, the Dijkstra algorithm to calculate the minimum-risk transmission path from initial network node A to target network node B, thereby enabling information transmission from initial network node A to target network node B based on this minimum-risk transmission path.

[0088] The initial network node A also generates quantum state information related to the information to be transmitted. To this end, the initial network node A can first encode the information to be transmitted to generate coded information, and then use the quantum state generation module to generate original quantum state information based on the coded information.

[0089] In the present invention, in order to enable the target network node B to confirm the authenticity of the received information, the encoded information may include, in addition to the information to be transmitted (text), the digital signature of the initial network node A, a timestamp, and verification data such as a hash value generated from the information to be transmitted, the digital signature, and the timestamp, as shown in the following table:

[0090] Information to be transmitted Digital signature of the initial network node Timestamp Hash value

[0091] Therefore, when the target network node B obtains the coded information transmitted by the initial network node A, it can verify the authenticity and integrity of the information to be transmitted (self-test information) contained in the coded information it obtains through data such as the hash value, the digital signature and timestamp of the initial network node A.

[0092] As mentioned above, to facilitate process control, network nodes can read, write and analyze classical information through their analysis modules, which includes status identification and node lists.

[0093] The state identifier is used to identify the current transmission state of the quantum state information. For example, "initial transmission state" indicates that the current transmission of the quantum state information is in the initial transmission process, and "retransmission state" indicates that the current transmission of the quantum state information is in the retransmission process.

[0094] The node list is used to record data related to the calculated optimal transmission path (transmission path with the lowest risk), such as the initial network node A, the target network node B, the intermediate network node and the next intermediate network node.

[0095] Furthermore, during the initial transmission process, the network node can also use its analysis module to write a timestamp in the classical information, thereby allowing the next network node to determine whether the information transmission between the two network nodes is normal based on the timestamp in the classical information when receiving the quantum state information and classical information.

[0096] For example, in state one involving the initial sending process, when the initial network node A generates classic information, it identifies the "state identifier" as the "initial sending state", records the initial network node A, the target network node B, and the intermediate network nodes other than the initial network node A and the target network node B on the transmission path with the minimum risk, and records the next network node related to the initial network node A on the transmission path with the minimum risk at the "next network node", such as "network node C1", and an additional timestamp.

[0097] In addition, to ensure the security of information transmission, the initial network node A also needs to encrypt the original quantum state information to generate the first quantum state information. To this end, the initial network node A can use the control module to pre-set the quantum logic gate U(θ Aj ), so that after the original quantum state information is generated, the original quantum state information is encrypted with the help of the quantum encryption / decryption module to generate the first quantum state information. Aj )} for the quantum bits in the original quantum state information The encoding logic operation is performed as shown in FIG5(b).

[0098] Finally, the first quantum state information (i.e., the original quantum state information that has been encrypted once) and the classical information can be integrated at the sending end and sent to the next network node.

[0099] In state two, after receiving the first quantum state information and the classical information, the target network node B can first read the classical information through the analysis module.

[0100] After the analysis module confirms that it is the target network node for this information transmission by reading information such as the initial network node A and the target network node B in the classic information, it can change the state identifier from the initial sending state to the resending state, and use, for example, the Dijkstra algorithm to calculate the minimum risk transmission path to the initial network node A, and send the minimum risk transmission path to the sending end as the optimal transmission path from the target network node B to the initial network node A.

[0101] The analysis module of the target network node B can also determine whether the current transmission process is normal by reading the timestamp in the classic information and comparing it with the current time. When it is determined that the difference between the read timestamp and the current time is less than the set value, it is allowed to update the timestamp and write the calculated transmission path with the minimum risk into the classic information.

[0102] Similarly, the target network node B will also use the control module to pre-set the quantum logic gate U(θ Bj ), as shown in Figure 5(b), the quantum encryption / decryption module is used to perform encryption operations on the quantum bits in the first quantum state information to generate Thus, the second quantum state information is obtained, which contains the original state information encrypted twice.

[0103] Finally, the second quantum state information and the classical information can be integrated at the sending end and sent to the initial network node A according to the determined transmission path with the minimum risk.

[0104] At this point, the initial sending process of quantum state information is completed.

[0105] In state three, after receiving the second quantum state information and classical information returned by the target network node B, the initial network node A can use its analysis module to read the classical information.

[0106] After the analysis module reads the classical information and determines that the state identifier is the retransmission state and that the current network node is the initial network node, it can verify the digital signature of the target network node B in the classical information. After the digital signature verification is passed, it uses the Dijkstra algorithm to recalculate its minimum-risk transmission path to the target network node B, and sends it to the sending end as the optimal transmission path to allow the information to be retransmitted from the initial network node A to the target network node B according to the minimum-risk transmission path.

[0107] The analysis module can also verify the timestamp in the classic information, and when the difference between the timestamp and the current time is less than a preset value, encode the classic information to update the timestamp, write the recalculated minimum risk transmission path from the initial network node A to the target network node B into the classic information, and attach a digital signature at the initial network node A in the classic information.

[0108] In addition, the control module also controls the quantum logic gate in the quantum encryption / decryption module to reverse, for example, the phase parameter θ Aj Take the opposite value, quantum logic gate U(θ Aj ) becomes U(-θ Aj ), as shown in Figure 5(b), the encoding logic operation of the quantum logic gate on the quantum state information is switched to the decryption operation, and the encryption operation and decryption operation of the same network node cancel each other out. For example, U(θ Aj )U(-θ Aj )=I. Therefore, after the decryption operation at the initial network node A, the quantum state information related to the quantum logic gate U(θ Aj ) is decrypted, and the quantum bits in the third quantum state information generated by the decryption operation can be expressed as

[0109] Preferably, after completing the quantum logic gate U(-θ Aj ) After decrypting the quantum state information, the control module can restore the quantum logic gate to its original state U(θ Aj ).

[0110] Finally, the sender integrates the third quantum state information and classical information according to the transmission path with the lowest risk and sends them to the target network node B.

[0111] In state four, after receiving the third quantum state information and the classical information, the target network node B reads the state identifier in the classical information through its analysis module as a resending state.

[0112] At this time, the analysis module can verify the digital signature and timestamp of the initial network node A in the read classical information.

[0113] When the digital signature is verified and the difference between the timestamp and the current time is less than the preset value, the target network node B can use the control module to control the quantum logic gate in the quantum encryption / decryption module to reverse, for example, to make the phase parameter θ Bj Take the opposite value, quantum logic gate U(θ Bj ) becomes U(-θ Bj ), as shown in Figure 5(b), thereby switching the encoding logic operation of the quantum logic gate on the quantum state information to the decryption operation, and the encryption operation and decryption operation of the same network node on the quantum state information cancel each other out. For example, U(θ Bj )U(-θ Bj )=I. Therefore, after the decryption operation at the target network node B, the third quantum state information about the quantum logic gate U(θ Bj ) is decrypted, and the quantum bits in the quantum state information are restored to Therefore, the quantum state information encrypted during the initial transmission process can be restored to its plaintext, that is, the original quantum state information, when it is transmitted again to the target network node B through the retransmission process. This process does not require the participation of a shared key.

[0114] Preferably, after completing the quantum logic gate U(-θ Bj ) After decrypting the quantum state information, the control module can restore the quantum logic gate to its original state U(θ Bj ).

[0115] Thereafter, the target network node B can use the quantum state measurement module to measure the decoded original quantum state information, obtain the encoded information and parse the plaintext of the received (to be transmitted) information.

[0116] Target network node B can also verify the digital signature of the received coded information to ensure that the information to be transmitted originated from the originating network node A, verify the timestamp in the coded information based on the current time to ensure the normal information transmission process, and verify the hash value in the coded information to ensure the integrity of the received information. At this time, if the verification of the information to be transmitted fails, target network node B can report an error, broadcast the error message, and increase the risk of all network nodes and lines along the transmission path during the next risk settlement.

[0117] Therefore, through the initial sending process and the resending process, the information to be transmitted is encrypted from the initial network node A to the target network node B in the form of a ring transmission. Only the logical operation of the quantum state information can be performed by quantum logic gates without the participation of shared keys, thereby realizing the secure transmission of information (self-test information) between the initial network node A and the target network node B.

[0118] Furthermore, in the self-test information transmission method of the present invention, after measuring the fourth quantum state information to obtain the information to be transmitted, the target network node B can randomly select several bits from the received (to be transmitted) information for public comparison with the initial network node A. If the comparison fails, for example, the error rate exceeds a preset threshold, it indicates that a problem has occurred during the transmission process.

[0119] Furthermore, when a network node receives quantum state information and classical information from the previous network node, and discovers by reading the classical information that it is a node other than the initial network node A and the target network node B, it can determine whether it belongs to an intermediate network node on the recorded minimum risk transmission path based on the received classical information, and whether the received information comes from the previous network node about it on the minimum risk transmission path.

[0120] If it is determined that this network node is on the recorded transmission path with minimum risk, and the received information comes from the previous network node about it on the transmission path with minimum risk, the network node can update the next network node in the classical information based on the recorded transmission path with minimum risk, send the received quantum state information and classical information to the next network node about it, and broadcast it to the initial network node A and the target network node B.

[0121] When it is determined that the network node is not on the recorded transmission path with the lowest risk and / or the received information is not from the previous network node on the transmission path with the lowest risk, the transmission may be terminated and the error may be broadcasted.

[0122] In particular, referring to Figure 5(a), the quantum logic gate selected by target network node B can correspond to either an identity transformation or a Hadamard gate. Therefore, when initial network node A generates photons in the |HV> basis, if target network node B in state two uses an identity transformation for encryption, then in state four, target network node B is equivalent to being measured using the |HV> basis. If target network node B in state two uses a Hadamard gate for encryption, then in state four, target network node B is equivalent to being measured using the |+-> basis. This allows for testing the channel security of the BB84 protocol.

[0123] In summary, in the network allowing safe self-checking and the self-checking information transmission method thereof, the ring-shaped information transmission path is adopted, the initial network node and the target network node can perform encryption and decryption without knowing the key (for example, the phase parameter in the quantum logic gate) for encryption and decryption, and the encrypted transmission of information is realized. In addition, in the encryption and decryption operation for the encrypted transmission of information, due to the use of the quantum logic gate with a specific structure, the phase-adjustable single-bit encoding operation can be sequentially performed on a group of quantum bits, so that the encryption of the quantum state can be exchanged in sequence, the ring-shaped information transmission structure is adapted, and the security of the encrypted information is protected by using the non-replicable quantum. The security of the network is guaranteed by the non-replicable and unpredictable quantum state. If an eavesdropper wants to know the content of the encrypted quantum information, he needs to know the measurement basis, that is, he needs to know the phase values of all the nodes he has experienced, especially the phase value of the initial network node A, which is equivalent to directly leaking the information of the initial network node A. In addition, in practical application, even if the quantum state information received and transmitted by a node is intercepted, because the measurement basis is unknown, the quantum logic gate phase value used by the node cannot be obtained through the comparison of the quantum states, and the detection information cannot be obtained without leaving traces, so that the potential eavesdropper can be found through this self-checking method.

[0124] Although the present application has been described in connection with the preferred embodiments thereof with reference to the drawings, it will be apparent to those skilled in the art that the embodiments are only exemplary and are not intended to limit the scope of the present application, and various combinations, modifications and equivalent replacements of the above-mentioned embodiments can be made without departing from the spirit and scope of the present application.

Claims

1. A network that allows for secure self-checking, comprising a plurality of network nodes connected by quantum and classical channels to allow for simultaneous transmission of quantum state information and classical information; The network node is configured to generate quantum state information based on the information to be transmitted, write classical information, and switch between encrypting the quantum state information using quantum logic gates and decrypting the quantum state information using quantum logic gates according to the classical information; in, The effects of encryption and decryption operations on quantum state information switched based on classical information cancel each other out; The network node includes a control module; Classic information includes status identification and node list; The status identification includes the initial sending status and the resending status; The node list includes the initial network node, the target network node, the intermediate network node and the next network node; The control module is configured to control the quantum logic gate to perform encryption operation on the quantum state information when the state identifier is the initial sending state, and to control the quantum logic gate to perform decryption operation on the quantum state information when the state identifier is the resending state.

2. The network of claim 1, wherein: The network node includes a quantum state generation module, a quantum state measurement module, a quantum encryption / decryption module, and a control module; The quantum state generation module is configured to generate quantum state information based on the coded information, wherein the coded information is generated based on the information to be transmitted; The quantum state measurement module is configured to measure quantum state information to obtain coded information; The quantum encryption / decryption module includes an adjustable quantum logic gate, which is used to perform logical operations on quantum state information using the quantum logic gate to transform the quantum state and realize encryption or decryption of the quantum state information; The control module is configured to control the quantum logic gate according to classical information to achieve switching between encryption operations and decryption operations.

3. The network of claim 2, wherein: The encoded information includes the information to be transmitted, the digital signature and time stamp of the initial network node, and a hash value of the information to be transmitted, the digital signature and time stamp of the initial network node.

4. The network of claim 2, wherein: The quantum logic gates in the quantum encryption / decryption modules of different network nodes are different from each other.

5. The network of claim 2, wherein: Quantum state information consists of multiple quantum bits ; The quantum encryption / decryption module includes a set of quantum logic gates , and is set as the i-th quantum bit in the quantum state information Quantum logic gates )} the jth quantum logic gate ) to perform encoding logic operations , thereby realizing the transformation of quantum state.

6. The network of claim 5, wherein: Quantum logic gates , the control module includes a device for controlling the quantum logic gate Phase θ j Phase controller.

7. The network of claim 6, wherein: The phase controller is configured to make the phase in the initial transmission state θ j Phase in retransmission state θ j Same size, opposite sign.

8. The network of claim 1, wherein: The network node also includes an analysis module, which includes a read-write unit, a risk calculation unit, and a path calculation unit; The read-write unit is configured to read and write classical information; The risk calculation unit is configured to calculate the risk of the network in real time; The path calculation unit is configured to calculate a transmission path with the lowest risk between network nodes.

9. The network of claim 8, wherein: The analysis module further comprises a processing unit configured to provide a digital signature and a time stamp of the network node; The read-write unit is configured to write the digital signature and time stamp of the network node into the classical information.

10. A method for transmitting self-check information for a network that allows for security self-check, comprising an initial sending process and a resending process; During the initial transmission process, the initial network node A generates original quantum state information based on the information to be transmitted, uses quantum logic gates to perform encryption operations on the original quantum state information to generate first quantum state information, calculates the minimum risk transmission path, and transmits the first quantum state information to the target network node B along the minimum risk transmission path; The target network node B uses a quantum logic gate to perform an encryption operation on the first quantum state information to generate second quantum state information, calculates a transmission path with the minimum risk, and transmits the second quantum state information back to the initial network node A according to the transmission path with the minimum risk; During the retransmission process, the initial network node A uses a quantum logic gate to decrypt the second quantum state information to generate a third quantum state information, calculates a minimum-risk transmission path, and transmits the third quantum state information to the target network node B according to the minimum-risk transmission path; and the target network node B uses a quantum logic gate to decrypt the third quantum state information to generate a fourth quantum state information, and measures the fourth quantum state information. The effects of the encryption operation during the initial transmission process and the decryption operation during the retransmission process of the same network node on the quantum state information cancel each other out.

11. The self-test information transmission method according to claim 10, wherein: The quantum logic gates in different network nodes are different from each other; and / or the corresponding operation of the quantum logic gate selected by the target network node B is an identity transformation or a Hadamard gate.

12. The self-test information transmission method according to claim 10, wherein: The Dijkstra algorithm is used to calculate the transmission path with the minimum risk.

13. The self-test information transmission method according to claim 10, wherein: The initial network node A generates coded information based on the information to be transmitted, and then generates original quantum state information based on the coded information; The encoded information includes the information to be transmitted, the digital signature and time stamp of the initial network node A, and a hash value of the information to be transmitted, the digital signature and time stamp of the initial network node A.

14. The self-test information transmission method according to claim 13, wherein: The network node also sends classical information along with the quantum state information, which includes a state identifier and a node list. The node list includes the initial network node A, the target network node B, the intermediate network node, and the next network node; and, The initial network node A generates classical information after generating the original quantum state information, where the state is identified as the initial sending state; When the target network node B reads the state identifier in the classic information as the initial sending state, it changes the state identifier to the resending state and adds a digital signature to the target network node B in the node list; After the initial network node A reads the state identifier in the classic information as the resending state and verifies the digital signature of the target network node B, it adds the digital signature to the initial network node A in the node list; After reading the state identifier in the classical information as the resending state and verifying the digital signature of the initial network node A, the target network node B uses the quantum logic gate to decrypt the third quantum state information to generate the fourth quantum state information, measures the fourth quantum state information to obtain the encoded information, and verifies the digital signature, timestamp and hash value of the initial network node A in the measured encoded information.

15. The self-test information transmission method according to claim 14, wherein: The initial network node A also writes a timestamp into the classical information before sending the first quantum state information and the classical information; When a network node receives quantum state information and classical information, it compares the timestamp in the classical information with the current time, and allows the timestamp to be updated when the difference between the timestamp and the current time is less than a preset value.

16. The self-test information transmission method according to any one of claims 10 to 15, wherein: The network nodes utilize a set of quantum logic gates )} Encrypt or decrypt quantum state information, a set of quantum logic gates )} the jth quantum logic gate ) for the i-th quantum bit in the quantum state information Perform encryption or decryption operations to generate operation results .

17. The self-test information transmission method according to claim 16, wherein: Quantum logic gates , and the quantum logic gates of the same network node Phase during initial transmission and retransmission θ j Same size, opposite sign.

18. The self-test information transmission method according to claim 14, wherein: If the target network node B fails to verify the digital signature, timestamp and hash value of the initial network node A in the encoded information, the risk of all network nodes and lines in the transmission path will be increased during the next risk settlement.

19. The self-test information transmission method according to claim 14, wherein: When network nodes other than the initial network node A and the target network node B receive quantum state information and classical information, they read the classical information to determine whether it is on the transmission path with the minimum risk, and whether the received information comes from the previous network node on the transmission path with the minimum risk; If it is determined that it is on the transmission path with minimum risk and the received information comes from the previous network node on the transmission path with minimum risk, the received quantum state information and classical information will be sent to the next network node on the transmission path with minimum risk; otherwise, the transmission will be terminated and the risk of the previous network node and the risk of the line between it and the previous network node will be increased.

20. The self-check information transmission method according to claim 10, which is implemented by means of a network allowing secure self-check according to any one of claims 1 to 9.

Images