Quantum device discovery method, device and system

Abstract

The invention discloses a quantum device discovery method, device and system, and belongs to the technical field of networks. The quantum device generates an advertisement message including address information of the quantum device for the application device to request a quantum key from the quantum device. The quantum device sends the advertisement message to the application device. According to the quantum key distribution method and device, the quantum device actively notifies the application device of own address information, so that the application device can automatically discover the quantum device with the quantum key distribution capability, and then can request for obtaining the quantum key from the quantum device according to the address information provided by the quantum device, and the efficiency and convenience of obtaining the quantum key by the application device are improved.

Description

Technical Field

[0001] The present application relates to the field of network technology, and in particular to a quantum device discovery method, device and system. Background Art

[0002] With the development of quantum computing, quantum attacks pose a huge threat to the currently widely used cryptographic systems. Quantum attacks are attack algorithms running on quantum computers that can crack currently widely used symmetric encryption algorithms such as the Advanced Encryption Standard (AES) algorithm and the SM4 block cipher algorithm. Quantum computers are expected to be available in the next few decades. If an eavesdropper intercepts and saves data that is encrypted using the current encryption algorithm and transmitted over the network, and then uses a quantum attack to crack the encryption algorithm used by the saved data after the quantum computer is available, the decrypted plaintext data can be obtained. This is a huge threat to confidential information that needs to be preserved for a long time. Therefore, it is urgent to design cryptographic technology that can resist quantum attacks.

[0003] Quantum key distribution (QKD) is a secure key distribution technology that can achieve secure transmission of quantum keys (QK) between two distant communication terminals. The security of quantum key distribution is guaranteed by the basic principles of quantum mechanics. In quantum networks, the transmission of quantum keys is theoretically unconditionally secure. Quantum keys are generated and distributed by quantum devices. If application devices in classical networks want to use quantum keys, they need to request quantum keys from quantum devices. How to enable application devices to obtain quantum keys conveniently and quickly is the premise and basis for the widespread application of quantum keys in classical networks. Summary of the invention

[0004] The present application provides a quantum device discovery method, apparatus and system, which can improve the efficiency and convenience of application devices in obtaining quantum keys.

[0005] In a first aspect, a quantum device discovery method is provided. A quantum device generates a notification message, the notification message including address information of the quantum device, the address information being used by an application device to request a quantum key from the quantum device. The quantum device sends the notification message to the application device.

[0006] In this application, the quantum device actively notifies the application device of its address information, so that the application device can automatically discover the quantum device with quantum key distribution capability, and then request the quantum device to obtain the quantum key according to the address information provided by the quantum device. This application does not require manual configuration of the information of the quantum device on the application device, so it can improve the efficiency and convenience of the application device in obtaining the quantum key, which is conducive to the widespread application of quantum keys in classical networks.

[0007] In a possible implementation, the application device and the quantum device are located in the same broadcast domain. The implementation method of the quantum device sending a notification message to the application device includes: the quantum device broadcasts the notification message, and the address information of the quantum device includes the Internet Protocol (IP) and port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device.

[0008] In this implementation mode, there is no need to configure the information of the application device on the quantum device, nor is there any need to configure the information of the quantum device on the application device. By publishing a notification message in the broadcast domain by the quantum device, the application device in the broadcast domain can find the quantum device that can provide the quantum key and the address information that can be used to request the quantum key, thereby realizing the automatic discovery of the quantum device and further realizing the acquisition of the quantum key.

[0009] In another possible implementation, a tunnel is established between the application device and the quantum device. Before the quantum device sends a notification message to the application device, the quantum device establishes a tunnel with the application device based on the IP address of the application device. Accordingly, the implementation method of the quantum device sending a notification message to the application device includes: the quantum device sends a notification message to the application device through the tunnel, and the address information of the quantum device includes the port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device.

[0010] In this implementation, it is necessary to configure the IP address of the application device in the quantum device so that the quantum device can actively establish a tunnel with the application device. In the process of establishing a tunnel with the application device, the quantum device will provide its own IP address to the application device. Alternatively, it is necessary to configure the IP address of the quantum device in the application device so that the application device can actively establish a tunnel with the quantum device. In the process of establishing a tunnel with the quantum device, the application device will provide its own IP address to the quantum device. Regardless of whether the tunnel establishment process is actively initiated by the quantum device or the application device, for the quantum device, the quantum device must establish a tunnel with the application device based on the IP address of the application device. This implementation requires less information to be manually configured in the quantum device and / or application device, so it can reduce configuration complexity and improve configuration efficiency.

[0011] Optionally, the notification message is a Link Layer Discovery Protocol (LLDP), and the address information of the quantum device is carried in a type-length-value (TLV) field of the LLDP frame.

[0012] Optionally, the quantum device receives a key acquisition request sent by the application device, and sends a key acquisition response corresponding to the key acquisition request to the application device, where the key acquisition response includes a quantum key assigned by the quantum device to the application device.

[0013] In a second aspect, a quantum device discovery method is provided. An application device receives a notification message from a quantum device, the notification message including address information of the quantum device, the address information being used by the application device to request a quantum key from the quantum device. The application device stores the address information.

[0014] In this application, the quantum device actively notifies the application device of its address information, so that the application device can automatically discover the quantum device with quantum key distribution capability, and then request the quantum device to obtain the quantum key according to the address information provided by the quantum device. This application does not require manual configuration of the information of the quantum device on the application device, so it can improve the efficiency and convenience of the application device in obtaining the quantum key, which is conducive to the widespread application of quantum keys in classical networks.

[0015] Optionally, the notification message is an LLDP frame, and the address information is carried in a type length value TLV field of the LLDP frame. An implementation of storing the address information by the application device includes: the application device obtains the address information from the TLV field and stores the address information in a management information base (MIB).

[0016] Optionally, the application device sends a key acquisition request to the quantum device based on the address information. The application device receives a key acquisition response corresponding to the key acquisition request sent by the quantum device, and the key acquisition response includes a quantum key assigned to the application device by the quantum device.

[0017] In a possible implementation, the address information includes a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device. Before the application device receives a notification message from the quantum device, the application device establishes a tunnel with the quantum device based on the IP address of the quantum device. Accordingly, the implementation method in which the application device sends a key acquisition request to the quantum device based on the address information includes: the application device sends a key acquisition request to the quantum device according to the IP address used by the quantum device to establish a tunnel with the application device, and the port number obtained from the address information.

[0018] In this implementation, it is necessary to configure the IP address of the application device in the quantum device so that the quantum device can actively establish a tunnel with the application device. In the process of establishing a tunnel with the application device, the quantum device will provide its own IP address to the application device. Alternatively, it is necessary to configure the IP address of the quantum device in the application device so that the application device can actively establish a tunnel with the quantum device. In the process of establishing a tunnel with the quantum device, the application device will provide its own IP address to the quantum device. Regardless of whether the tunnel establishment process is actively initiated by the quantum device or the application device, for the application device, the application device must establish a tunnel with the quantum device based on the IP address of the quantum device. This implementation requires less information to be manually configured in the quantum device and / or application device, so it can reduce configuration complexity and improve configuration efficiency.

[0019] In another possible implementation, the address information includes an IP address and a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device. Accordingly, the implementation method in which the application device sends a key acquisition request to the quantum device based on the address information includes: the application device sends a key acquisition request to the quantum device according to the IP address and the port number obtained from the address information.

[0020] This implementation method can be applied to scenarios where the application device and the quantum device are located in the same broadcast domain. There is no need to configure the application device information on the quantum device, nor is there a need to configure the quantum device information on the application device. By publishing a notification message in the broadcast domain, the application device in the broadcast domain can find the quantum device that can provide the quantum key and the address information that can be used to request the quantum key, thereby realizing automatic discovery of the quantum device and further realizing the acquisition of the quantum key. This implementation method can also be applied to scenarios where a tunnel is established between the application device and the quantum device.

[0021] In a third aspect, a quantum device is provided. The quantum device includes multiple functional modules, and the multiple functional modules interact with each other to implement the method in the first aspect and its embodiments. The multiple functional modules can be implemented based on software, hardware, or a combination of software and hardware, and the multiple functional modules can be arbitrarily combined or divided based on specific implementations.

[0022] In a fourth aspect, an application device is provided. The application device includes multiple functional modules, and the multiple functional modules interact with each other to implement the method in the second aspect and its respective embodiments. The multiple functional modules can be implemented based on software, hardware, or a combination of software and hardware, and the multiple functional modules can be arbitrarily combined or divided based on specific implementations.

[0023] In a fifth aspect, a quantum device is provided, comprising: a memory, a network interface, and at least one processor. The memory is used to store program instructions, and after the at least one processor reads the program instructions stored in the memory, the quantum device executes the method in the first aspect and its respective embodiments.

[0024] In a sixth aspect, an application device is provided, comprising: a memory, a network interface, and at least one processor. The memory is used to store program instructions, and after the at least one processor reads the program instructions stored in the memory, the application device executes the method in the second aspect and its respective embodiments.

[0025] In a seventh aspect, a quantum device discovery system is provided, comprising: a quantum device and an application device. The quantum device is used to execute the method in the first aspect and its respective embodiments, and the application device is used to execute the method in the second aspect and its respective embodiments.

[0026] In an eighth aspect, a computer-readable storage medium is provided, on which instructions are stored. When the instructions are executed by a processor of a quantum device, the method of the first aspect and its various embodiments is implemented; or, when the instructions are executed by a processor of an application device, the method of the second aspect and its various embodiments is implemented.

[0027] In the ninth aspect, a computer program product is provided, comprising a computer program, wherein when the computer program is executed by a processor of a quantum device, the method of the first aspect and its various embodiments is implemented; or, when the computer program is executed by a processor of an application device, the method of the second aspect and its various embodiments is implemented.

[0028] In the tenth aspect, a chip is provided, which includes a programmable logic circuit and / or program instructions. When the chip is running, it implements the method in the above-mentioned first aspect and its various embodiments or the method in the above-mentioned second aspect and its various embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 This is a schematic diagram of an application scenario provided by an embodiment of the present application;

[0030] Figure 2 This is a schematic diagram of an implementation process of a quantum device discovery method provided in an embodiment of the present application;

[0031] Figure 3 This is a schematic diagram of the structure of a notification message provided by an embodiment of the present application;

[0032] Figure 4 This is a schematic diagram of an implementation scenario provided by an embodiment of the present application;

[0033] Figure 5 It is a structural diagram of a communication system provided in an embodiment of the present application;

[0034] Figure 6 is a schematic diagram of the hardware structure of a quantum device provided in an embodiment of the present application;

[0035] Figure 7 It is a schematic diagram of the hardware structure of an application device provided in an embodiment of the present application;

[0036] Figure 8 is a schematic diagram of the structure of a quantum device provided in an embodiment of the present application;

[0037] Fig. 9 It is a structural diagram of an application device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0038] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below in conjunction with the accompanying drawings.

[0039] In order to facilitate the reader's understanding of the present application, some terms are first explained below.

[0040] 1. Classical computer: A physical device that uses binary (0 or 1) to store and process data. The application device involved in this application belongs to a classical computer.

[0041] 2. Quantum computer: A physical device that follows the laws of quantum mechanics and processes information based on the principles of quantum computing. Quantum computers use quantum bits to store and process data. Quantum bits have more states than binary. Quantum computers have the capabilities of classical computers. Quantum computers can more efficiently solve certain problems that are difficult for classical computers to solve. The quantum device involved in this application belongs to a quantum computer.

[0042] 3. Classical network: a communication network composed of classical computers, for example, a digital transmission network composed of network devices and transmission devices, which transmits classical digital signals (0 / 1). Network devices include but are not limited to routers, switches, firewalls, wireless controllers, wireless access points, personal computers or servers. Transmission devices include but are not limited to microwave systems, synchronous digital hierarchy (SDH) devices or wavelength division multiplexing (WDM) devices. In the embodiments of the present application, the devices in the classical network (including but not limited to network devices) are collectively referred to as application devices.

[0043] 4. Quantum network: It is a new type of secure communication network. It uses quantum entanglement and quantum teleportation to bring real security to the network, as well as a qualitative leap in computing and science. Communication nodes communicate through quantum networks, which can be understood as using quantum key distribution technology to share quantum keys between communication nodes and communicate based on quantum keys. Quantum computers can communicate through quantum networks.

[0044] 5. Quantum attack: It is an attack algorithm running on a quantum computer, such as Shor's algorithm, Grover's algorithm, etc., which can efficiently crack certain passwords.

[0045] 6. Quantum Key Distribution (QKD): It is a secure key distribution technology that uses the Heisenberg uncertainty principle of quantum mechanics and the quantum state non-cloning theorem. In the process of quantum key distribution, a quantum key is generated by a quantum device and transmitted to another quantum device through a quantum network, so that a shared quantum key is formed between the two quantum devices. In the process of quantum key distribution, the quantum key is transmitted in the form of a quantum state. Quantum key distribution has unconditional security. Even if the eavesdropper is given unlimited computing resources, he cannot crack the quantum key using any decryption algorithm. The security basis of quantum key distribution is that the key source cannot be predicted and the channel eavesdropping is detectable. The key source cannot be predicted means that the QKD key source is a quantum true random number and therefore cannot be predicted. The channel eavesdropping is detectable means that the quantum state sent into the channel satisfies the quantum non-cloning theorem, and the eavesdropping behavior in the channel will disturb the quantum state, which can be detected by the receiver.

[0046] 7. Quantum key (QK): It is a symmetric key generated by both communicating parties based on the QKD protocol. In this application, the quantum key is generated and distributed by quantum devices.

[0047] 8. Symmetric encryption algorithm: refers to an algorithm in which the sender and the receiver use the same key for encryption and decryption. Currently commonly used symmetric encryption algorithms include the AES algorithm, the SM4 block cipher algorithm, and the data encryption standard (DES) algorithm.

[0048] 9. Link Layer Discovery Protocol (LLDP): It is a layer 2 protocol that provides a standard link layer discovery method. LLDP enables a device connected to the network to send its main capabilities, management address, device identification, interface identification and other information to other devices connected to the same LAN. LLDP only supports information notification and does not confirm communication information. When a device receives information from other devices on the network through LLDP frames, the device stores this information in the form of MIB, and then the user confirms how to use the MIB information. Optionally, the LLDP frame is encapsulated in Ethernet II format or in Sub-Network Access Protocol (SNAP) format.

[0049] The communication network can adopt the open system interconnection (OSI) reference model or the transmission control protocol / Internet protocol (TCP / IP) reference model. The OSI reference model is a seven-layer model, which divides the communication network from low to high into the physical layer, data link layer, network layer, transport layer, session layer, presentation layer and application layer. The TCP / IP reference model is a five-layer model, which divides the communication network from low to high into the physical layer, data link layer, network layer, transport layer and application layer. Among them, the data link layer is also called the medium access control (MAC) layer. At present, the application equipment supports secure data transmission for each layer of the communication network, and usually adopts the symmetric encryption algorithm in the existing cryptographic algorithm system. For example, the secure shell (SSH) protocol is adopted for various application programs at the application layer. The transport layer security (TLS) protocol or the datagram transport layer security (DTLS) protocol is adopted for the transport layer. The Internet Protocol security (IPSec) protocol is adopted for the network layer. For the data link layer, point to point protocol (PPP) or media access control security (MACSec) protocol is used. For the physical layer, data encryption is implemented through optical modules.

[0050] With the development of quantum computing, traditional keys may be cracked by quantum attacks in the future, resulting in the inability to guarantee the security of data encrypted and transmitted using traditional keys. This is a huge threat to confidential information that needs to be stored for a long time (such as identity data, financial data, and medical data). Therefore, the symmetric encryption algorithm used in the above security protocols for data encryption transmission in communication networks needs to support keys that are resistant to quantum attacks. Applying quantum keys to the symmetric encryption algorithms used in the above security protocols can effectively solve this problem. Quantum keys are generated and distributed by quantum devices. If an application device wants to use quantum keys, it needs to request quantum keys from the quantum device.

[0051] In the related art, the IP address and port number of the quantum device are configured on the application device by manual configuration. The application device establishes a connection with the quantum device according to the configuration information, and then obtains the quantum key from the quantum device. In this way, both application devices that need to use quantum keys for data encryption transmission obtain the same quantum key through the configured quantum devices respectively, and establish a secure channel, such as an IPSec channel, based on the quantum key. The process of both application devices obtaining quantum keys from quantum devices can replace the key negotiation process in security protocols such as IPSec, and inject the quantum key into the session as the session key.

[0052] However, in related technologies, the information of quantum terminals on application devices is completely dependent on manual configuration. On the one hand, manual configuration is highly complex and inefficient. For scenarios where a large number of application devices need to obtain quantum keys from quantum devices, it will cause a huge configuration workload, and the correctness and speed of online access cannot be guaranteed, resulting in low reliability. On the other hand, the network is changing rapidly, and equipment going online, network failures, or network attacks may all trigger network changes, and manual configuration solutions cannot respond to network changes in a timely manner.

[0053] Based on this, the present application proposes a technical solution for automatically discovering quantum devices. The quantum device actively notifies the application device of its own address information, so that the application device can automatically discover the quantum device with quantum key distribution capability, and then can request the quantum device to obtain the quantum key according to the address information provided by the quantum device. Compared with the related art, the present application does not need to manually configure the information of the quantum device on the application device, so it can improve the efficiency and convenience of the application device in obtaining the quantum key, and help to realize the widespread application of quantum keys in classical networks. In addition, the present application solution can better respond to network changes, thereby improving network reliability. For example, when the number of application devices increases, by applying the present application solution, the newly added application devices can automatically discover the quantum devices that can provide quantum keys. For another example, when the quantum device changes, by applying the present application solution, the application device can automatically discover the changed quantum device.

[0054] Optionally, the object of the quantum device notification address information includes an application device located in the broadcast domain of the quantum device and / or an application device with a tunnel established between the quantum device. Optionally, the application device located in the broadcast domain of the quantum device belongs to the same local area network as the quantum device. The application device with a tunnel established between the quantum device is the tunnel peer device of the quantum device, and the quantum device and the application device are two tunnel endpoints of the tunnel respectively. Optionally, the application device connected by the tunnel does not belong to the same local area network as the quantum device. Optionally, the tunnel established between the application device and the quantum device is a virtual or logical link, including but not limited to a generic routing encapsulation (GRE) tunnel, a virtual extensible local area network (VXLAN) tunnel or an IPSec tunnel. Optionally, the physical link for implementing the tunnel passes through an Internet service provider (ISP) network.

[0055] The following is a detailed introduction to this technical solution from multiple angles, including application scenarios, method flow, system, hardware devices, and software devices.

[0056] The following is an example of an application scenario of the embodiment of the present application.

[0057] For example, Figure 1 This is a schematic diagram of an application scenario provided by an embodiment of the present application. Figure 1 As shown in the figure, this application scenario mainly involves two types of devices, namely application devices and quantum devices. Among them, quantum devices are located in the quantum key distribution network, and application devices are located in the classical network.

[0058] Optionally, a quantum device is used to provide quantum services for one or more application devices, that is, a quantum device can distribute quantum keys to one or more application devices. The one or more application devices are located in the broadcast domain of the quantum device, or a tunnel is established between the one or more application devices and the quantum device. Optionally, the quantum device and the application device communicate through a classical network. For example, the quantum device and the application device communicate based on the Transmission Control Protocol / Internet Protocol (TCP / IP).

[0059] Optionally, the application device includes but is not limited to network devices such as routers, switches, or firewalls. Alternatively, the application device is a terminal device such as a computer, a mobile phone, or an Internet of Things (IoT) terminal. Alternatively, the application device is other devices with communication needs such as a server or a cloud platform. The quantum device is a quantum computer that can generate or store quantum keys. The quantum device in the embodiment of the present application may also be referred to as a quantum key distribution device. Optionally, the quantum device communicates directly or indirectly with the application device. For example, the quantum device communicates with the application device through a quantum key server ( Figure 1 (not shown) communications.

[0060] The following is an example of the method flow of the embodiment of the present application.

[0061] For example, Figure 2 2 is a schematic diagram of an implementation flow of a quantum device discovery method 200 provided in an embodiment of the present application. Figure 2 As shown, method 200 includes but is not limited to the following steps 201 to 203. Optionally, method 200 also includes the following steps 204 to 205. Optionally, the quantum device in method 200 is Figure 1 The application device in method 200 is Figure 1 Application equipment in.

[0062] Step 201: A quantum device generates a notification message, where the notification message includes address information of the quantum device.

[0063] The address information is used by the application device to request a quantum key from the quantum device. In other words, the notification message is used to instruct the application device that receives the notification message to request a quantum key from the quantum device based on the address information. The address information of the quantum device includes the port number of the quantum device, which is used by the quantum device to provide the quantum key to the application device, that is, the port number carried in the address information is the port number used by the quantum device to provide the quantum key. Optionally, the address information of the quantum device also includes the IP address of the quantum device.

[0064] Optionally, the notification message is an LLDP frame, and the address information of the quantum device is carried in the TLV field of the LLDP frame. Figure 3 Schematic diagram of the structure of a notification message provided by an embodiment of the present application. Figure 3As shown, the notification message includes a destination MAC address, a source MAC address, a type field, a data field, and a frame check sequence (FCS). Among them, the destination MAC address is a fixed multicast MAC address 0x0180-C200-000E. The source MAC address is the port MAC address or device MAC address of the quantum device (if there is a port MAC address, the port MAC address is used, otherwise the device MAC address is used). The type field indicates the message type. If the notification message is an LLDP frame, the type field value is 0x88CC. The data field is an LLDP data unit (LLDPDU), which consists of multiple TLVs, including but not limited to a chassis ID TLV, a port ID TLV, a time to live (TTL) TLV, and an end of LLDPDU TLV. The explanation of these TLVs can refer to the relevant content defined in LLDP, and the embodiments of this application will not be repeated here. The address information of the quantum device is encoded in TLV and carried in the data field. For example, a QKD TLV is extended in the data field, see Figure 3 , the QKD TLV includes a QKD type field, a QKD length field, and a QKD value field, wherein the QKD type field is used to indicate that the QKD value field carries the address information of the quantum device. The QKD length field is used to indicate the length of the QKD value field. The QKD value field is used to carry the address information of the quantum device. Optionally, the value range of the QKD type field is 9 to 126, for example, the value of the QKD type field is defined as 33. In one possible implementation, the QKD value field includes the IP address and port number of the quantum device. Optionally, the IP address of the quantum device is an Internet Protocol version 4 (IPv4) address with a length of 4 bytes or an Internet Protocol version 6 (IPv6) address with a length of 16 bytes. For example, it is defined that the IP address of the quantum device occupies 0 to 15 bytes of the QKD value field of the QKD TLV, and the port number occupies 16 to 17 bytes of the QKD value field. If the quantum device uses an IPv4 address, the IPv4 address is set in bytes 0 to 3 of the QKD value field, and the following 12 bytes (bytes 4 to 15) are filled with 0.

[0065] In this implementation, both quantum devices and application devices need to support LLDP. Specifically, quantum devices need to support LLDP extended TLV capability. Application devices need to support LLDP extended TLV parsing capability.

[0066] In the embodiment of the present application, the notification message generated by the quantum device can be obtained by extending LLDP. The notification message can also be a message in other formats or a message in a custom format. The embodiment of the present application does not limit the message format of the notification message.

[0067] Step 202: The quantum device sends the notification message to the application device.

[0068] Optionally, the object to which the quantum device sends the notification message includes an application device located in the broadcast domain of the quantum device and / or an application device with a tunnel established with the quantum device, wherein the application device is located in a classical network.

[0069] In one possible implementation, the quantum device broadcasts a notification message, that is, the quantum device publishes a notification message in a broadcast domain. In this implementation, the address information carried in the notification message includes the IP address and port number of the quantum device. In this way, the application device in the broadcast domain can request the quantum device to obtain the quantum key based on the address information of the quantum device. Optionally, a broadcast domain is a local area network.

[0070] In this implementation mode, there is no need to configure the information of the application device on the quantum device, nor is there any need to configure the information of the quantum device on the application device. By publishing a notification message in the broadcast domain by the quantum device, the application device in the broadcast domain can find the quantum device that can provide the quantum key and the address information that can be used to request the quantum key, thereby realizing the automatic discovery of the quantum device and further realizing the acquisition of the quantum key.

[0071] Optionally, the quantum device periodically publishes notification messages in the broadcast domain. In this way, if a new application device accesses the network, the application device can automatically discover the quantum device that can provide the quantum key, thereby improving the efficiency and convenience of the application device in obtaining the quantum key. This implementation method can cope with network changes, thereby improving network reliability.

[0072] Another possible implementation is that the quantum device sends a notification message to the application device through a tunnel. In this implementation, the address information carried in the notification message includes at least the port number of the quantum device. In this implementation, before the quantum device sends a notification message to the application device, the quantum device needs to establish a tunnel with the application device based on the IP address of the application device. In other words, before the application device receives a notification message from the quantum device, the application device needs to establish a tunnel with the quantum device based on the IP address of the quantum device.

[0073] Optionally, the quantum device is configured with an IP address of the application device. The quantum device sends a tunnel establishment request to the application device according to the IP address of the application device, and the tunnel establishment request includes the IP address of the quantum device. Then the application device sends a tunnel establishment response corresponding to the tunnel establishment request to the quantum device, thereby completing the tunnel establishment between the quantum device and the application device. In this case, the application device can obtain the IP address used by the quantum device to establish a tunnel with the application device during the process of establishing a tunnel with the quantum device.

[0074] Alternatively, the application device is configured with the IP address of the quantum device. The application device sends a tunnel establishment request to the quantum device according to the IP address of the quantum device, and the tunnel establishment request includes the IP address of the application device. Then the quantum device sends a tunnel establishment response corresponding to the tunnel establishment request to the application device, thereby completing the tunnel establishment between the quantum device and the application device. In this case, before establishing a tunnel with the quantum device, the application device can obtain the IP address used by the quantum device to establish a tunnel with the application device from the configuration information.

[0075] In this implementation, since the application device can obtain the IP address of the quantum device during the process of establishing a tunnel with the quantum device or before establishing a tunnel with the quantum device, the notification message sent by the quantum device through the tunnel may only include the port number of the quantum device, but not the IP address of the quantum device. Of course, the embodiment of the present application does not exclude the implementation method in which the notification message sent by the quantum device through the tunnel also includes the IP address of the quantum device. In addition, in this implementation, it is necessary to configure the IP address of the application device in the quantum device so that the quantum device can actively establish a tunnel with the application device. Alternatively, it is necessary to configure the IP address of the quantum device in the application device so that the application device can actively establish a tunnel with the quantum device. Compared with the related art, this implementation requires less information to be manually configured in the device, so it can reduce the configuration complexity and improve the configuration efficiency.

[0076] For example, Figure 4 This is a schematic diagram of an implementation scenario provided by an embodiment of the present application. Figure 4As shown, the application scenario includes a quantum device, an application device A and an application device B. The quantum device is located in a quantum key distribution network. Application device A and application device B are located in a classical network. Application device A is located in the broadcast domain of the quantum device, and the quantum device publishes a notification message in the broadcast domain, and the notification message includes the IP address and port number of the quantum device, so that application device A obtains the IP address and port number of the quantum device. A tunnel is established between application device B and the quantum device, and the quantum device sends a notification message to application device B through the tunnel, and the notification message includes the port number of the quantum device, so that application device B obtains the port number of the quantum device. Optionally, the physical link for implementing the tunnel passes through application device A and the ISP network. Optionally, the tunnel includes but is not limited to a GRE tunnel, a VXLAN tunnel or an IPSec tunnel.

[0077] Optionally, the quantum device sends a notification message to one or more application devices. After any application device receives the notification message from the quantum device, the following step 203 is performed.

[0078] Step 203: The application device stores the address information of the quantum device.

[0079] Optionally, one implementation of step 203 is that the application device obtains the IP address and port number of the quantum device according to the address information of the quantum device, and then the application device stores the IP address and port number of the quantum device. Optionally, if the application device stores the old address information provided by the quantum device, after obtaining the new address information provided by the quantum device, the application device updates the stored old address information to the new address information. In this way, when the quantum device changes, such as when the old quantum device goes offline, the application device can request the new quantum device to obtain the quantum key through the latest address information, thereby improving the reliability of the application device in obtaining the quantum key in the network change scenario.

[0080] Optionally, the notification message received by the application device is an LLDP frame. After the application device parses the data field of the LLDP frame to obtain the address information of the quantum device, the application device stores the address information of the quantum device in a management information base (MIB). Afterwards, the application device can obtain the address information of the quantum device for providing the quantum key from the MIB.

[0081] Optionally, when the application device needs to obtain a quantum key from a quantum device, the following step 204 is performed.

[0082] Step 204: The application device sends a key acquisition request to the quantum device based on the address information of the quantum device.

[0083] Optionally, one implementation of step 204 is that the application device establishes a TCP connection with the quantum device based on the IP address and port number of the quantum device, and then the application device sends a key acquisition request to the quantum device through the TCP connection.

[0084] Optionally, a tunnel is established between the application device and the quantum device. When the address information provided by the quantum device includes the port number of the quantum device, the implementation method of the application device sending a key acquisition request to the quantum device based on the address information includes: the application device sends the key acquisition request to the quantum device according to the IP address used to establish the tunnel between the quantum device and the application device, and the port number obtained from the address information.

[0085] Optionally, when the address information provided by the quantum device includes the IP address and port number of the quantum device, the implementation method of the application device sending a key acquisition request to the quantum device based on the address information includes: the application device sends a key acquisition request to the quantum device according to the IP address and port number obtained from the address information.

[0086] Step 205: The quantum device sends a key acquisition response corresponding to the key acquisition request to the application device, where the key acquisition response includes the quantum key assigned by the quantum device to the application device.

[0087] Optionally, in order to improve the transmission security and reliability of the quantum key, in the process of the application device requesting the quantum device to obtain the quantum key, the quantum device and the application device perform identity authentication on each other. In one implementation, the key acquisition request sent by the application device to the quantum device includes the device identification of the application device, the target public key and the first message authentication code value. If the quantum device verifies the first message authentication code value, the quantum device sends a key acquisition response to the application device, and the key acquisition response includes the ciphertext and the second message authentication code value. If the application device verifies the second message authentication code value, the application device uses the target private key to decrypt the ciphertext to obtain the quantum key information assigned to the application device by the quantum device. The quantum key information includes the quantum key.

[0088] Among them, the target public key and the target private key come from the public-private key pair obtained by the application device running the post-quantum key generation algorithm. The ciphertext is obtained by the quantum device using the target public key to encrypt the quantum key information assigned to the application device. Since the target public key used by the quantum device to encrypt the quantum key information is obtained by the application device running the post-quantum key generation algorithm, the quantum device will use the post-quantum encryption algorithm to encrypt the quantum key and transmit the quantum key to the application device in the form of ciphertext, ensuring the confidentiality of the transmission of the quantum key. In addition, since the transmitted ciphertext is encrypted using the post-quantum encryption algorithm, it can resist quantum attacks and prevent the ciphertext from being cracked by a quantum computer and causing the leakage of the quantum key.

[0089] The first message authentication code value is calculated by the application device based on the shared key corresponding to the quantum device and the device identifier for the first authentication information, and the first authentication information includes the target public key. After the quantum device receives the key acquisition request from the application device, it obtains the first authentication information and the storage information corresponding to the device identifier in the key acquisition request based on the key acquisition request, and the storage information includes the shared key corresponding to the quantum device and the device identifier. Then the quantum device verifies the first message authentication code value based on the acquired shared key and the first authentication information. If the quantum device verifies the first message authentication code value, it means that the key acquisition request comes from the other party holding the shared key, and the content carried by the key acquisition request in the first authentication information (including the target public key) has not been tampered with during the transmission process. Therefore, the first message authentication code value can be used by the quantum device to authenticate the application device (i.e., verify the source reliability of the key acquisition request), and can also be used by the quantum device to verify the message integrity of the key acquisition request.

[0090] The second message authentication code value is calculated by the quantum device based on the shared key corresponding to the quantum device and the device identifier for the second authentication information, and the second authentication information includes the ciphertext. After the application device receives the key acquisition response from the quantum device, it obtains the second authentication information based on the key acquisition response. Then the application device verifies the second message authentication code value based on the shared key corresponding to the quantum device and the device identifier and the second authentication information. If the application device verifies the second message authentication code value, it means that the key acquisition response comes from the other party holding the shared key, and the content (including ciphertext) carried by the key acquisition response in the second authentication information has not been tampered with during the transmission process. Therefore, the second message authentication code value can be used by the application device to authenticate the quantum device (i.e., verify the source reliability of the key acquisition response), and can also be used by the application device to verify the message integrity of the key acquisition response.

[0091] Therefore, by transmitting quantum keys through the above implementation method, two-way identity authentication can be performed between the application device and the quantum device, and the message integrity of the messages received by each can be verified respectively, while also ensuring the confidentiality of quantum key transmission. This achieves the security and reliability of quantum key transmission.

[0092] Alternatively, the key acquisition request sent by the application device to the quantum device carries the public key of the public-private key pair generated by the application device. After the quantum device uses the public key to encrypt the quantum key assigned to the application device, it carries the encrypted quantum key in the key acquisition response and sends it to the application device. Afterwards, the application device uses the private key generated in the public-private key pair to decrypt the encrypted quantum key to obtain the quantum key. The embodiment of the present application does not limit the manner in which the quantum device provides the quantum key to the application device. Any solution that can ensure the secure transmission of the quantum key between the quantum device and the application device can be applied to the embodiment of the present application.

[0093] Optionally, after the application device obtains the quantum key, it applies the quantum key to data encryption transmission at any layer in the communication network, including the physical layer, data link layer, network layer, transport layer or application layer.

[0094] In the quantum device discovery method provided in the embodiment of the present application, the quantum device actively notifies the application device of its address information, so that the application device can automatically discover the quantum device with quantum key distribution capability, and then request the quantum device to obtain the quantum key according to the address information provided by the quantum device. Compared with the related art, the present application does not need to manually configure the information of the quantum device on the application device, so it can improve the efficiency and convenience of the application device in obtaining the quantum key, which is helpful to realize the wide application of quantum keys in classical networks. In addition, the present application solution can better respond to network changes, thereby improving network reliability.

[0095] The sequence of the steps of the quantum device discovery method provided in the embodiments of the present application can be adjusted appropriately, and the steps can be increased or decreased accordingly. Any method that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application.

[0096] The following is an example of the system in the embodiment of the present application.

[0097] The embodiment of the present application provides a quantum device discovery system, including: a quantum device and an application device. The detailed working process of the application device and the quantum device can refer to the implementation process of the above method 200. For example, the quantum device is used to execute steps 201, 202, and 205 in the above method 200. The application device is used to execute steps 203 to 204 in the above method 200.

[0098] For example, Figure 5 Schematic diagram of a communication system provided by an embodiment of the present application. Figure 5As shown, the system includes a first quantum device and a second quantum device located in a quantum key distribution network, and a first application device and a second application device located in a classical network. The first application device is located in the broadcast domain of the first quantum device or has a tunnel established with the first quantum device. The second application device is located in the broadcast domain of the second quantum device or has a tunnel established with the second quantum device. The way in which the first application device discovers the first quantum device and the way in which the second application device discovers the second quantum device can refer to steps 201 to 203 in the above method 200. The first quantum device communicates with the second quantum device through a quantum network. The first application device communicates with the second application device through a classical network. Optionally, the first application device communicates with the first quantum device through a classical network. The second application device communicates with the second quantum device through a classical network.

[0099] Optionally, the first application device is a communication initiator, and the second application device is a communication receiver. If a quantum key is required for data encryption transmission between the first application device and the second application device, the same quantum key can be obtained through the following implementation method.

[0100] The first application device sends a first key acquisition request to the first quantum device. The first quantum device sends a first key acquisition response corresponding to the first key acquisition request to the first application device, and the first key acquisition response includes the quantum key assigned to the first application device by the first quantum device and the key identifier of the quantum key. The first quantum device sends the assigned quantum key and the key identifier of the quantum key to the second quantum device. The first application device sends the key identifier of the quantum key assigned to the first application device by the first quantum device to the second application device. The second application device sends a second key acquisition request to the second quantum device, and the second key acquisition request includes the key identifier provided by the first application device. The second quantum device sends a second key acquisition response corresponding to the second key acquisition request to the second application device, and the second key acquisition response includes the quantum key corresponding to the key identifier carried in the second key acquisition request, that is, the quantum key assigned to the first application device by the first quantum device. At this point, the first application device and the second application device obtain the same quantum key. Afterwards, the first application device and the second application device can communicate securely based on the quantum key.

[0101] Figure 5 The communication system shown is described by taking the quantum device (first quantum device) that provides quantum services to the first application device as an example and the quantum device (second quantum device) that provides quantum services to the second application device as an example. If the first application device and the second application device are provided with quantum services by the same quantum device, then when implementing the technical solution, the step of synchronizing quantum key information between the two quantum devices is omitted.

[0102] The following is an example of the basic hardware structure of a quantum device.

[0103] For example, Figure 6 Schematic diagram of the hardware structure of a quantum device provided in an embodiment of the present application. Figure 6 As shown, the quantum device 600 includes a processor 601 and a memory 602 , and the memory 601 and the memory 602 are connected via a bus 603 . Figure 6 The processor 601 and the memory 602 are described as being independent of each other. Optionally, the processor 601 and the memory 602 are integrated together. Figure 1 Come and see, Figure 6 The quantum device 600 is Figure 1 or Figure 4 The quantum device shown.

[0104] The memory 602 is used to store computer programs, including operating systems and program codes. The memory 602 is a storage medium of various types, such as read-only memory (ROM), random access memory (RAM), electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM), flash memory, optical storage, register, optical disk storage, optical disk storage, magnetic disk or other magnetic storage devices.

[0105] The processor 601 is a general-purpose processor or a special-purpose processor. The processor 601 may be a single-core processor or a multi-core processor. The processor 601 includes at least one circuit to execute the actions performed by the quantum device in the above method 200 provided in the embodiment of the present application.

[0106] Optionally, the quantum device 600 further includes a network interface 604, which is connected to the processor 601 and the memory 602 via a bus 603. The network interface 604 enables the quantum device 600 to communicate with an application device or other quantum devices. The processor 601 can interact with the application device through the network interface 604 to send a notification message to the application device, and provide a quantum key to the application device.

[0107] Optionally, the quantum device 600 further includes an input / output (I / O) interface 605, which is connected to the processor 601 and the memory 602 via the bus 603. The processor 601 can receive input commands or data, etc. through the I / O interface 605. The I / O interface 605 is used for the quantum device 600 to connect input devices, such as keyboards, mice, etc. Optionally, in some possible scenarios, the above-mentioned network interface 604 and I / O interface 605 are collectively referred to as communication interfaces.

[0108] Optionally, the quantum device 600 further includes a display 606, which is connected to the processor 601 and the memory 602 via a bus 603. The display 606 can be used to display intermediate results and / or final results generated by the processor 601 executing the above method. In a possible implementation, the display 606 is a touch display screen to provide a human-computer interaction interface.

[0109] The bus 603 is any type of communication bus for interconnecting the internal devices of the quantum device 600, such as a system bus. The embodiment of the present application takes the interconnection of the above-mentioned devices in the quantum device 600 through the bus 603 as an example. Optionally, the above-mentioned devices in the quantum device 600 are connected to each other in a communication manner other than the bus 603, such as the above-mentioned devices in the quantum device 600 are interconnected through a logical interface in the quantum device 600.

[0110] The above devices may be arranged on independent chips, or at least partially or completely on the same chip. Whether to arrange each device independently on different chips or to integrate them on one or more chips often depends on the needs of product design. The embodiments of the present application do not limit the specific implementation form of the above devices.

[0111] Figure 6 The quantum device 600 shown is merely exemplary. During implementation, the quantum device 600 includes other components, which are not listed here one by one. Figure 6 The quantum device 600 shown can realize automatic discovery of quantum devices by executing all or part of the steps of the method provided in the above embodiment.

[0112] The following is an example of the basic hardware structure of the application equipment.

[0113] For example, Figure 7 Schematic diagram of the hardware structure of an application device provided in an embodiment of the present application. Figure 7 As shown, the application device 700 includes a processor 701 and a memory 702 , and the memory 701 and the memory 702 are connected via a bus 703 . Figure 7The processor 701 and the memory 702 are described as being independent of each other. Optionally, the processor 701 and the memory 702 are integrated together. Optionally, in combination Figure 1 Come and see, Figure 7 The application device 700 is Figure 1 Any application device shown or Figure 4 Application device A or application device B shown.

[0114] The memory 702 is used to store computer programs, including operating systems and program codes. The memory 702 is a storage medium of various types, such as ROM, RAM, EEPROM, CD-ROM, flash memory, optical storage, register, optical disk storage, optical disk storage, magnetic disk or other magnetic storage device.

[0115] The processor 701 is a general-purpose processor or a special-purpose processor. The processor 701 may be a single-core processor or a multi-core processor. The processor 701 includes at least one circuit to execute the actions performed by the application device in the above method 200 provided in the embodiment of the present application.

[0116] Optionally, the application device 700 further includes a network interface 704, which is connected to the processor 701 and the memory 702 via the bus 703. The network interface 704 enables the application device 700 to communicate with the quantum device or other application devices. The processor 701 can interact with the quantum device through the network interface 704 to receive notification messages sent by the quantum device, and request quantum keys from the quantum device.

[0117] Optionally, the application device 700 further includes an I / O interface 705, which is connected to the processor 701 and the memory 702 via the bus 703. The processor 701 can receive input commands or data, etc. via the I / O interface 705. The I / O interface 705 is used for the application device 700 to connect input devices, such as keyboards, mice, etc. Optionally, in some possible scenarios, the above-mentioned network interface 704 and the I / O interface 705 are collectively referred to as communication interfaces.

[0118] Optionally, the application device 700 further includes a display 706, which is connected to the processor 701 and the memory 702 via the bus 703. The display 706 can be used to display the intermediate results and / or final results generated by the processor 701 executing the above method. In a possible implementation, the display 706 is a touch display screen to provide a human-computer interaction interface.

[0119] The bus 703 is any type of communication bus for interconnecting the internal devices of the application device 700. For example, a system bus. The embodiment of the present application takes the above-mentioned devices in the application device 700 being interconnected through the bus 703 as an example. Optionally, the above-mentioned devices in the application device 700 are connected to each other in a communication manner other than the bus 703, for example, the above-mentioned devices in the application device 700 are interconnected through a logical interface in the application device 700.

[0120] The above devices may be arranged on independent chips, or at least partially or completely on the same chip. Whether to arrange each device independently on different chips or to integrate them on one or more chips often depends on the needs of product design. The embodiments of the present application do not limit the specific implementation form of the above devices.

[0121] Figure 7 The application device 700 shown is merely exemplary. During implementation, the application device 700 includes other components, which are not listed one by one in this article. Figure 7 The application device 700 shown can realize automatic discovery of quantum devices by executing all or part of the steps of the method provided in the above embodiment.

[0122] The following is an example of a virtual device in an embodiment of the present application.

[0123] Figure 8 Schematic diagram of a quantum device provided in an embodiment of the present application. Figure 8 The quantum device of the structure shown implements the functions of the quantum device in the solution described in the above embodiment. Figure 8 The quantum device shown is Figure 1 , Figure 4 or Figure 5 Quantum devices in the application scenarios shown, or Figure 6 The quantum device shown performs Figure 2 The functions of the quantum devices described in the illustrated embodiments are shown. Figure 8 As shown, the quantum device 800 includes a processing module 801 and a transceiver module 802 .

[0124] The processing module 801 is used to generate a notification message, where the notification message includes address information of the quantum device, and the address information is used by the application device to request a quantum key from the quantum device.

[0125] The transceiver module 802 is used to send a notification message to the application device.

[0126] Here, please refer to the description in the previous method embodiment for the detailed working process of the processing module 801 and the transceiver module 802. For example, the processing module 801 generates a notification message using step 201 in method 200. The transceiver module 802 sends a notification message to the application device using step 202 in method 200. The present application embodiment will not be described again here.

[0127] Optionally, the application device and the quantum device are located in the same broadcast domain, and the transceiver module 802 is specifically used to: broadcast a notification message, the address information includes the Internet Protocol IP address and port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device.

[0128] Optionally, the transceiver module 802 is used to: before sending a notification message to the application device, establish a tunnel with the application device based on the IP address of the application device; send a notification message to the application device through the tunnel, and the address information includes the port number of the quantum device, which is used by the quantum device to provide a quantum key to the application device.

[0129] Optionally, the notification message is an LLDP frame, and the address information is carried in a type-length-value TLV field of the LLDP frame.

[0130] Optionally, the transceiver module 802 is further used to: receive a key acquisition request sent by the application device; and send a key acquisition response corresponding to the key acquisition request to the application device, wherein the key acquisition response includes the quantum key assigned by the quantum device to the application device. Here, the detailed working process of the transceiver module 802 can refer to steps 204 to 205 in method 200.

[0131] Fig. 9 Schematic diagram of the structure of an application device provided in an embodiment of the present application. Fig. 9 The application device of the structure shown implements the functions of the application device in the solution described in the above embodiment. Fig. 9 The application equipment shown is Figure 1 , Figure 4 or Figure 5 Any application device in the application scenario shown, or Figure 7 The application equipment shown here performs Figure 2 The functions of the application devices described in the illustrated embodiment. Fig. 9 As shown, the application device 900 includes a transceiver module 901 and a processing module 902 .

[0132] The transceiver module 901 is used to receive a notification message from a quantum device, where the notification message includes address information of the quantum device, and the address information is used by the application device to request a quantum key from the quantum device;

[0133] The processing module 902 is used to store address information.

[0134] Here, please refer to the description in the previous method embodiment for the detailed working process of the transceiver module 901 and the processing module 902. For example, the transceiver module 901 uses step 202 in method 200 to receive the notification message from the quantum device. The processing module 902 uses step 203 in method 200 to store the address information of the quantum device. The embodiment of this application will not be repeated here.

[0135] Optionally, the notification message is an LLDP frame, and the address information is carried in a type-length-value TLV field of the LLDP frame. The processing module 902 is specifically configured to obtain the address information from the TLV field and store the address information in a management information base.

[0136] Optionally, the transceiver module 901 is further used to: send a key acquisition request to the quantum device based on the address information; receive a key acquisition response corresponding to the key acquisition request sent by the quantum device, wherein the key acquisition response includes the quantum key assigned by the quantum device to the application device. Here, the detailed working process of the transceiver module 901 can refer to steps 204 to 205 in method 200.

[0137] Optionally, the address information includes a port number of the quantum device, which is used by the quantum device to provide a quantum key to the application device. The transceiver module 901 is used to: before receiving a notification message from the quantum device, establish a tunnel with the quantum device based on the IP address of the quantum device; and send a key acquisition request to the quantum device according to the IP address used by the quantum device to establish a tunnel with the application device and the port number obtained from the address information.

[0138] Optionally, the address information includes an IP address and a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device. The transceiver module 901 is specifically used to send a key acquisition request to the quantum device according to the IP address and the port number obtained from the address information.

[0139] The embodiment of the present application further provides a computer-readable storage medium, on which instructions are stored, and when the instructions are executed by a processor of an application device, the steps executed by the application device in the above method 200 are implemented. Alternatively, when the instructions are executed by a processor of a quantum device, the steps executed by the quantum device in the above method 200 are implemented.

[0140] The embodiment of the present application further provides a computer program product, including a computer program, wherein when the computer program is executed by a processor of an application device, the steps performed by the application device in the above method 200 are implemented. Alternatively, when the computer program is executed by a processor of a quantum device, the steps performed by the quantum device in the above method 200 are implemented.

[0141] A person skilled in the art will understand that all or part of the steps to implement the above embodiments may be accomplished by hardware or by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, and the above-mentioned storage medium may be a read-only memory, a disk or an optical disk, etc.

[0142] In the embodiments of the present application, the terms “first”, “second” and “third” are used for descriptive purposes only and should not be understood as indicating or implying relative importance.

[0143] The term "and / or" in this application is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0144] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in this application are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0145] The above description is only an optional embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the concept and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A quantum device discovery method, characterized in that: The method comprises: The quantum device generates a notification message, wherein the notification message includes address information of the quantum device, and the address information is used by the application device to request a quantum key from the quantum device; The quantum device sends the notification message to the application device.

2. The method according to claim 1, characterized in that: The application device and the quantum device are located in the same broadcast domain, and the quantum device sends the notification message to the application device, including: The quantum device broadcasts the notification message, and the address information includes an Internet Protocol IP address and a port number of the quantum device, where the port number is used by the quantum device to provide a quantum key to the application device.

3. The method according to claim 1, characterized in that: Before the quantum device sends the notification message to the application device, the method further includes: The quantum device establishes a tunnel with the application device based on the IP address of the application device; The quantum device sending the notification message to the application device includes: The quantum device sends the notification message to the application device through the tunnel, and the address information includes a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device.

4. The method according to any one of claims 1 to 3, characterized in that: The notification message is a Link Layer Discovery Protocol (LLDP) frame, and the address information is carried in a Type Length Value (TLV) field of the LLDP frame.

5. The method according to any one of claims 1 to 4, characterized in that: The method further comprises: The quantum device receives a key acquisition request sent by the application device; The quantum device sends a key acquisition response corresponding to the key acquisition request to the application device, where the key acquisition response includes the quantum key assigned by the quantum device to the application device.

6. A quantum device discovery method, characterized in that: The method comprises: The application device receives a notification message from the quantum device, wherein the notification message includes address information of the quantum device, and the address information is used by the application device to request a quantum key from the quantum device; The application device stores the address information.

7. The method according to claim 6, characterized in that The notification message is a link layer discovery protocol LLDP frame, the address information is carried in a type length value TLV field of the LLDP frame, and the application device stores the address information, including: The application device obtains the address information from the TLV field and stores the address information in a management information base.

8. The method according to claim 6 or 7, characterized in that: The method further comprises: The application device sends a key acquisition request to the quantum device based on the address information; The application device receives a key acquisition response corresponding to the key acquisition request sent by the quantum device, where the key acquisition response includes the quantum key assigned by the quantum device to the application device.

9. The method according to claim 8, characterized in that The address information includes a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device. Before the application device receives the notification message from the quantum device, the method further includes: The application device establishes a tunnel with the quantum device based on the Internet Protocol IP address of the quantum device; The application device sends a key acquisition request to the quantum device based on the address information, including: The application device sends the key acquisition request to the quantum device according to the IP address used by the quantum device to establish a tunnel with the application device and the port number obtained from the address information.

10. The method according to claim 8, characterized in that The address information includes the IP address and port number of the quantum device, the port number is used by the quantum device to provide the quantum key to the application device, and the application device sends a key acquisition request to the quantum device based on the address information, including: The application device sends the key acquisition request to the quantum device according to the IP address and the port number obtained from the address information.

11. A quantum device, characterized in that: include: memory, a network interface and at least one processor, The memory is used to store program instructions. After the at least one processor reads the program instructions stored in the memory, the quantum device performs the following operations: Generate a notification message, wherein the notification message includes address information of the quantum device, and the address information is used by an application device to request a quantum key from the quantum device; The notification message is sent to the application device.

12. The quantum device according to claim 11, characterized in that The application device and the quantum device are located in the same broadcast domain, and after the program instructions are read by the at least one processor, the quantum device performs the following operations: The notification message is broadcasted, wherein the address information includes an Internet Protocol IP address and a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device.

13. The quantum device according to claim 11, characterized in that After the program instructions are read by the at least one processor, the quantum device further performs the following operations: Before sending the notification message to the application device, establishing a tunnel with the application device based on the IP address of the application device; The notification message is sent to the application device through the tunnel, and the address information includes a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device.

14. The quantum device according to any one of claims 11 to 13, characterized in that: The notification message is a Link Layer Discovery Protocol (LLDP) frame, and the address information is carried in a Type Length Value (TLV) field of the LLDP frame.

15. The quantum device according to any one of claims 11 to 14, characterized in that: After the program instructions are read by the at least one processor, the quantum device further performs the following operations: Receiving a key acquisition request sent by the application device; A key acquisition response corresponding to the key acquisition request is sent to the application device, where the key acquisition response includes the quantum key assigned by the quantum device to the application device.

16. An application device, characterized in that: include: memory, a network interface and at least one processor, The memory is used to store program instructions. After the at least one processor reads the program instructions stored in the memory, the application device performs the following operations: receiving a notification message from a quantum device, wherein the notification message includes address information of the quantum device, and the address information is used by the application device to request a quantum key from the quantum device; The address information is stored.

17. The application device according to claim 16, characterized in that: The notification message is a link layer discovery protocol LLDP frame, the address information is carried in a type length value TLV field of the LLDP frame, and after the program instruction is read by the at least one processor, the application device performs the following operations: The address information is obtained from the TLV field, and the address information is stored in a management information base.

18. The application device according to claim 16 or 17, characterized in that: After the program instructions are read by the at least one processor, the application device further performs the following operations: Sending a key acquisition request to the quantum device based on the address information; A key acquisition response corresponding to the key acquisition request sent by the quantum device is received, where the key acquisition response includes the quantum key assigned by the quantum device to the application device.

19. The application device according to claim 18, characterized in that: The address information includes a port number of the quantum device, and the port number is used by the quantum device to provide a quantum key to the application device. After the program instruction is read by the at least one processor, the application device further performs the following operations: Before receiving the notification message from the quantum device, establishing a tunnel with the quantum device based on an Internet Protocol IP address of the quantum device; The key acquisition request is sent to the quantum device according to the IP address used by the quantum device to establish a tunnel with the application device and the port number obtained from the address information.

20. The application device according to claim 18, characterized in that: The address information includes the IP address and port number of the quantum device, the port number is used by the quantum device to provide the quantum key to the application device, and after the program instructions are read by the at least one processor, the application device performs the following operations: The key acquisition request is sent to the quantum device according to the IP address and the port number obtained from the address information.

21. A quantum device discovery system, characterized in that: include: A quantum device and an application device, wherein the quantum device is used to execute the method according to any one of claims 1 to 5, and the application device is used to execute the method according to any one of claims 6 to 10.

22. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores instructions, and when the instructions are executed by a processor of a quantum device, the method according to any one of claims 1 to 5 is implemented; or when the instructions are executed by a processor of an application device, the method according to any one of claims 6 to 10 is implemented.

Images