Quantum communication session key forming method, quantum communication system and electronic equipment

Abstract

The invention provides a quantum communication session key forming method, a quantum communication system and electronic equipment, and relates to the technical field of quantum communication. The quantum communication session key forming method comprises the following steps: receiving a first communication message from a first node or a second node, wherein the first communication message is used for determining that the first node and the second node have completed negotiation for a first data sequence; generating a session key address corresponding to the first data sequence according to the first communication message; and sending the session key address to the first node and the second node, so that the first node and the second node form a second data sequence based on the first data sequence and the session key address, and communicate based on the second data sequence. According to the embodiment of the invention, the security of quantum communication can be improved, and unreliable relay nodes are prevented from stealing information.

Description

Background Art

[0002] In existing quantum secure communications, data communication between core nodes needs to be encrypted using a negotiated session key before being sent.

[0003] Since the distance between core nodes is long and the quantum transmission distance is limited, long-distance quantum communication is generally achieved by adding relay nodes (relay QKD nodes), and the session key negotiation or formation process also needs to be carried out through these relay nodes. In the process of forming a session key between the two parties, the relay node needs to decrypt the received encrypted transmission session key and encrypt it according to its own key to send it to the next relay node or to the core node of the other end. If there is an untrusted relay node that is attacked, the attacker is very likely to obtain the formed session key and then steal subsequent communication data. In addition, in order to prevent the session key from being cracked or stolen, each session key is deactivated after being used a preset number of times. Therefore, it is necessary to perform session key negotiation regularly to update the session key. As a result, the session key formation action is frequent, and each formation needs to pass through the relay node, which increases the possibility of leakage of the session key.

[0004] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to ordinary technicians in the field. Summary of the invention

[0005] The purpose of the present disclosure is to provide a quantum communication session key formation method, a quantum communication system and an electronic device, which are used to solve the problem that the security of quantum communication is reduced due to the participation of relay nodes in the formation of session keys in quantum communication.

[0006] According to a first aspect of an embodiment of the present disclosure, a method for forming a quantum communication session key is provided, comprising: receiving a first communication message from a first node or a second node, the first communication message being used to determine that the first node and the second node have completed negotiation on a first data sequence; generating a session key address corresponding to the first data sequence according to the first communication message; sending the session key address to the first node and the second node, so that the first node and the second node form a second data sequence based on the first data sequence and the session key address, and communicate based on the second data sequence.

[0007] According to a second aspect of an embodiment of the present disclosure, a quantum communication system is provided, characterized in that it includes: a first node, used to perform session key formation and quantum communication; a second node, used to perform session key negotiation with the first node to complete session key formation, and perform quantum communication with the first node based on the session key; a control center node, communicating with the first node and the second node, and used to control the session key formation process; a cryptographic management service node, communicating with the first node and the second node, and used to execute the method as described in any embodiment of the present disclosure, assisting the first node and the second node in generating a session key; at least one relay node, located between the first node and the second node, and the first node and the second node communicate through the relay node.

[0008] According to a third aspect of the present disclosure, there is provided an electronic device, comprising: a memory; and a processor coupled to the memory, wherein the processor is configured to execute any one of the methods described above based on instructions stored in the memory.

[0009] According to a fourth aspect of the present disclosure, a computer-readable storage medium is provided, on which a program is stored, and when the program is executed by a processor, the method for forming a quantum communication session key as described in any one of the above items is implemented.

[0010] The disclosed embodiment enables the first data sequence instead of the session key to be transmitted between the nodes of the two parties in the conversation, and sends the session key address to the nodes of the two parties in the conversation respectively after determining the first data sequence, so that the two parties in the conversation can determine the second data sequence used as the subsequent session key according to the session key address and the first data sequence. This can avoid the problem of session key leakage that may be caused by transmitting the session key through a relay node in the related technology, and at the same time ensure that only the two parties in the conversation know the session key, which can greatly improve the security of quantum communication.

[0011] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.

[0013] Figure 1 is a schematic diagram of a quantum communication system in an exemplary embodiment of the present disclosure.

[0014] Figure 2It is a flowchart of a method for forming a quantum communication session key in an exemplary embodiment of the present disclosure.

[0015] Figure 3 It is a schematic diagram of a session key address in one embodiment of the present disclosure.

[0016] Figure 4 It is a schematic diagram of forming multiple second data sequences based on a first data sequence in an embodiment of the present disclosure.

[0017] Figure 5 It is a sub-flow chart of step S3 in one embodiment of the present disclosure.

[0018] Figure 6 is a flowchart of method 200 in one embodiment of the present disclosure.

[0019] Figure 7 It is an interaction diagram of the session key formation process in the embodiment of the present disclosure.

[0020] Figure 8 It is a block diagram of a quantum communication session key forming device in an exemplary embodiment of the present disclosure.

[0021] Fig. 9 is a block diagram of an electronic device in an exemplary embodiment of the present disclosure. DETAILED DESCRIPTION

[0022] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as being limited to the examples set forth herein; on the contrary, these embodiments are provided so that the present disclosure will be more comprehensive and complete, and the concepts of the example embodiments are fully conveyed to those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced while omitting one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0023] In addition, the accompanying drawings are only schematic diagrams of the present disclosure, and the same reference numerals in the drawings represent the same or similar parts, so their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities, which do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0024] The exemplary embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0025] Figure 1 is a schematic diagram of a quantum communication system in an exemplary embodiment of the present disclosure.

[0026] refer to Figure 1 , the quantum communication system 100 may include:

[0027] The first node 11 is used for session key formation and quantum communication.

[0028] The second node 12 is used to negotiate a session key with the first node to complete the formation of the session key, and to perform quantum communication with the first node 11 based on the session key.

[0029] The control center node 13 communicates with the first node 11 and the second node 12 to control the session key forming process.

[0030] The password management service node 14 communicates with the first node 11 and the second node 12, and is used to execute the method provided by the embodiment of the present disclosure to assist the first node 11 and the second node 12 in generating a session key.

[0031] At least one relay node 15 is located between the first node 11 and the second node 12 , and the first node 11 and the second node 12 communicate with each other through the relay node 15 .

[0032] Among them, the first node 11 and the second node 12 are both QKD nodes, and both can be core nodes. The two perform quantum communication through at least one relay node 15 to negotiate a session key and use the session key for subsequent communication. In this process, the two have equal status. That is, in the embodiment of the present disclosure, any two nodes in the quantum communication system that have equal status and need to use a session key for quantum communication can be regarded as the first node 11 and the second node 12. Since the communication process is bidirectional, the first node 11 and the second node 12 can be referred to as the sending end and the receiving end, or, the receiving end and the sending end.

[0033] The process of negotiating a session key and using the session key for communication between the first node 11 and the second node 12 is mainly carried out through a quantum channel, assisted by a classical channel. For example, quantum states are transmitted between two QKD nodes through a quantum channel, and at the same time, the classical channel is used to detect the bit error rate and exchange error correction information to ensure the accuracy and security of the distributed key.

[0034] In some embodiments, the roles of the first node 11 and the second node 12 may also be different. Exemplarily, the first node 11 is, for example, a quantum key distribution access point (QKDA), also known as a QKDA node. As a key node in the quantum key formation network, the QKDA node is mainly responsible for accessing the user terminal device (which may be referred to as a QKDB node) to realize the formation of quantum session keys for one or more QKDB nodes, so that the user terminal device can use the quantum session key for encrypted communication. The QKDA node uses the characteristics of quantum mechanics, such as the quantum non-cloning theorem and the Heisenberg uncertainty principle, to ensure that the quantum session key formed to the QKDB node has extremely high security and cannot be eavesdropped or cracked. However, when forming a session key for a long-distance QKDB node, it is necessary to pass through one or more relay nodes, and the formed session key has the possibility of being stolen. In the related art, there is a method of encrypting the session key and then transmitting it through the relay node, but when facing a relay node with strong computing power, this method still has the possibility of decrypting to obtain the session key.

[0035] Correspondingly, the second node 12 is, for example, a quantum key database node QKDB (Quantum Key Distribution Database), also known as a QKDB node, which is usually a user terminal device. Quantum communication between different second nodes 12 requires encryption through session keys. A first node 11 can be connected to one or more second nodes 12, and a second node 12 may also be connected to multiple first nodes 11. Two second nodes 12 performing quantum communication may be connected to the same first node 11, or may be connected to different first nodes 11. The embodiment of the present disclosure does not impose any special restrictions on this. The second node 12 can store a certain number of session keys to complete quantum communication. When a session key reaches its corresponding maximum number of uses, the session key is deleted. When the number of session keys is less than a certain number, the first node 11 is requested to supplement and form a new session key, or the session key actively sent by the first node 11 is received and stored.

[0036] The relay node 15 is also a QKD node, and is located between the first node 11 and the second node 12 . The first node 11 and the second node 12 communicate with each other through the relay node 15 .

[0037] The control center node 13 is, for example, a QKD control center. The QKD control center is responsible for monitoring, scheduling and controlling the entire quantum communication system. The QKD control center monitors the generation, formation and update process of quantum keys in the quantum communication network to ensure the safe and reliable transmission of quantum keys. According to the characteristics of quantum communication, corresponding security strategies are formulated, such as the selection of quantum key encryption algorithms, key update frequency, and security authentication mechanisms, to ensure the security and confidentiality of communications. During the quantum key formation process, the first node 11 and the second node 12 work closely with the QKD control center, follow the instructions of the QKD control center to perform key formation operations, and promptly feedback the formation status and results to ensure the efficiency and accuracy of the entire key formation process.

[0038] The cryptographic management service node 14 is, for example, a CMSP (Cryptogram Management Service Platform). The CMSP is responsible for centrally managing various cryptographic resources, including keys in traditional cryptographic systems such as symmetric keys and asymmetric keys, and uniformly storing, updating and maintaining different types of cryptographic keys to ensure the availability and security of cryptographic keys.

[0039] The control center node 13 and the cryptographic management service node 14 are both inherent nodes in the quantum communication system. The embodiment of the present disclosure can implement the quantum communication session key formation method 200 by modifying these inherent nodes instead of adding new multifunctional modules.

[0040] In some embodiments of the present disclosure, the cryptographic management service node 14 may be configured to execute the quantum communication session key forming method 200. In other embodiments, the control center node 13 may also be configured to execute the quantum communication session key forming method 200.

[0041] Figure 2 It is a flowchart of a method for forming a quantum communication session key in an exemplary embodiment of the present disclosure.

[0042] refer to Figure 2 , the quantum communication session key formation method 200 may include:

[0043] Step S1, receiving a first communication message from a first node or a second node, where the first communication message is used to determine that the first node and the second node have completed negotiation on a first data sequence;

[0044] Step S2, generating a session key address corresponding to the first data sequence according to the first communication message;

[0045] Step S3: Send the session key address to the first node and the second node, so that the first node and the second node form a second data sequence based on the first data sequence and the session key address, and communicate based on the second data sequence.

[0046] The disclosed embodiment enables the first data sequence instead of the session key to be transmitted between the nodes of the two parties in the conversation, and sends the session key address to the nodes of the two parties in the conversation respectively after determining the first data sequence, so that the two parties in the conversation can determine the second data sequence used as the subsequent session key according to the session key address and the first data sequence. This can avoid the problem of session key leakage that may be caused by transmitting the session key through a relay node in the related technology, and at the same time ensure that only the two parties in the conversation know the session key, which can greatly improve the security of quantum communication.

[0047] Next, each step of the quantum communication session key forming method 200 is described in detail.

[0048] In step S1, a first communication message is received from a first node or a second node, where the first communication message is used to determine that the first node and the second node have completed negotiation on a first data sequence.

[0049] In some embodiments, before performing quantum communication, each node in the system 100 may first obtain a digital certificate based on a PQC (Post-Quantum Cryptography) algorithm from a CA center (Certification Authority) to resist quantum computing attacks and improve communication security. Then, the first node 11 and the second node 12 begin to negotiate a first data sequence. The negotiation process, for example, generates a first data sequence by using the characteristics of quantum mechanics, such as quantum entanglement and the quantum non-cloning theorem, through a quantum channel. Common methods include encoding based on the polarization, phase and other characteristics of photons to generate a first data sequence. For example, the first node 11 as a transmitter emits a series of specifically encoded photons, and the second node 12 as a receiver receives these photons and measures them, and generates a first data sequence based on the measurement results and the encoding rules agreed upon by both parties.

[0050] When the control center node 13 or the password management service node 14 executing method 200 receives the first communication message, the negotiation of the first data sequence has been completed between the first node 11 and the second node 12. The first data sequence is, for example, a random string of characters, and the length can be a preset length or can be specified in real time before the negotiation. Exemplarily, quantum technology can be used between the first node 11 and the second node 12 to generate a string of secure, random bit string data, such as 1 million bits, as the first data sequence. Since the first data sequence is random data and does not have information attributes, even if it is stolen by a relay node during the negotiation process, it cannot leak valid session key information, which can greatly improve the security of key formation over a long distance.

[0051] In the embodiment of the present disclosure, regardless of whether method 200 is executed by the control center node 13 or the password management service node 14, controlling the first node 11 and the second node 12 to start negotiating the first data sequence can be controlled by either the control center node 13 or the password management service node 14.

[0052] In an exemplary embodiment, the control center node 13 may control the first node 11 and the second node 12 to start negotiating the first data sequence, for example, by sending a key negotiation instruction to the first node 11 and the second node 12 to control the first node 11 and the second node 12 to start negotiating the first data sequence. In some embodiments, the control center node 13 may determine the length of the first data sequence before sending the key negotiation instruction, and carry the length information in the key negotiation instruction. In other embodiments, the first node 11 and the second node 12 may also negotiate the first data sequence according to a preset length (for example, 1 million bits), or the control center node 13 determines a queue of the length of the first data sequence (including multiple lengths arranged in sequence) before sending the key negotiation instruction to the first node 11 and the second node 12 for the first time, and the first node 11 and the second node 12 determine the length of the first data sequence negotiated in the subsequent negotiation of the first data sequence according to the corresponding relationship between the number of negotiations and the queue sequence number.

[0053] In some embodiments, the first node 11 and the second node 12 are controlled by the password management service node 14 to start negotiating the first data sequence. At this time, the password management service node 14 sends a key negotiation instruction to the first node 11 and the second node 12, so that the first node and the second node respond to the key negotiation instruction to start negotiating the first data sequence. In some embodiments, the key negotiation instruction includes the length of the first data sequence. The password management service node 14 can determine the length of the first data sequence before sending the key negotiation instruction, and carry the length information in the key negotiation instruction. In other embodiments, the first node 11 and the second node 12 can also negotiate the first data sequence according to a preset length (for example, 1 million bits), or the password management service node 14 determines the queue of the length of the first data sequence (including multiple lengths arranged in sequence) before sending the key negotiation instruction to the first node 11 and the second node 12 for the first time, and the first node 11 and the second node 12 determine the length of the first data sequence negotiated in the subsequent negotiation of the first data sequence according to the corresponding relationship between the number of negotiations and the queue sequence number.

[0054] In an exemplary embodiment, the first data sequence is, for example, a random number sequence, a binary sequence with a specific coding rule, a data sequence processed by an encryption algorithm, a sequence converted from a specific quantum state corresponding value, a sequence with a check bit to ensure data accuracy, or other data sequences that can be recognized by a quantum communication system. Among them, a random number sequence can provide initial uncertainty for the generation of a quantum key; a binary sequence with a specific coding rule can efficiently transmit and store quantum information; a data sequence processed by an encryption algorithm increases the security of the data and further prevents illegal theft and tampering; a sequence converted from a specific quantum state corresponding value can better match the physical process of quantum communication and improve the efficiency and reliability of communication; a sequence with a check bit to ensure data accuracy can promptly detect and correct errors during data transmission to ensure the stability of quantum communication.

[0055] The first data sequence serves as a data source and, in conjunction with the subsequent session key address, can provide one or more session keys, so that the first node 11 and the second node 12 can obtain a highly confidential session key after one negotiation communication, greatly improving the efficiency of session key supplementation and reducing the probability of session key leakage.

[0056] In step S2, a session key address corresponding to the first data sequence is generated according to the first communication message.

[0057] In an exemplary embodiment, in step S2, the length of the first data sequence and the length N of the second data sequence may be determined first, and then, based on the length of the first data sequence, N bits may be randomly selected from the first data sequence to form a session key address based on the N bits.

[0058] Figure 3 It is a schematic diagram of a session key address in one embodiment of the present disclosure.

[0059] refer to Figure 3 , assuming that the length of the first data sequence 31 is M bits (bit), and the length of the second data sequence is N bits (M>>N), the control center node 13 or the password management service node 14 that executes method 200 randomly selects N bits in the first data sequence 31 to form a second data sequence 32. Figure 3 For simplicity, N is set to 3.

[0060] In this process, the control center node 13 or the password management service node 14 does not need to know the specific content of the first data sequence 31, but only needs to know the length of the first data sequence 31. Therefore, the control center node 13 or the password management service node 14 does not know the specific content of the second data sequence finally formed, which can further improve the security of the session key formation.

[0061] In addition, for the same first data sequence 31, the control center node 13 or the password management service node 14 can output one session key address at a time, or multiple session key addresses multiple times, or multiple session key addresses at a time, so that the first node 11 and the second node 12 can form multiple second data sequences 32 through one negotiation, reducing the number of times the first node 11 and the second node 12 communicate through the relay node, thereby further improving the security of the session key formation and improving the efficiency of the session key formation.

[0062] Figure 4 It is a schematic diagram of forming multiple second data sequences based on a first data sequence in an embodiment of the present disclosure.

[0063] refer to Figure 4 In an exemplary embodiment, multiple session key addresses can be formed based on a first data sequence 31, so that the first node 11 and the second node 12 form multiple second data sequences 32 based on the multiple session key addresses and the first data sequence 31.

[0064] like Figure 4 As shown, based on a plurality of second data sequences 32 formed from a first data sequence 31, the data bits of the session key address may be completely different or partially the same, but not completely the same.

[0065] Of course, if the two session key addresses correspond to first data sequences generated at different times, the data bits of the two session key addresses may be completely the same.

[0066] After forming one or more session key addresses, the control center node 13 or the cryptographic management service node 14 may send the session key addresses to the first node 11 and the second node 12 simultaneously.

[0067] In step S3, the session key address is sent to the first node and the second node, so that the first node and the second node form a second data sequence based on the first data sequence and the session key address, and communicate based on the second data sequence.

[0068] Figure 5 It is a sub-flow chart of step S3 in one embodiment of the present disclosure.

[0069] refer to Figure 5 In an exemplary embodiment, step S3 may include:

[0070] Step S31, obtaining the first PQC certificate encryption public key corresponding to the first node, the second PQC certificate encryption public key corresponding to the second node, and the third PQC certificate encryption private key corresponding to itself;

[0071] Step S32, after encrypting the session key address according to the first PQC certificate encryption public key, use the third PQC encryption private key to sign to form a third data sequence, and send the third data sequence to the first node;

[0072] Step S33: After encrypting the session key address according to the second PQC certificate encryption public key, use the third PQC encryption private key to sign to form a fourth data sequence, and send the fourth data sequence to the second node.

[0073] Before executing method 200, each node in system 100 may obtain a PQC certificate from a CA center, and communicate with each other to determine the PQC certificate encryption public key of other nodes and the PQC certificate encryption private key of the node.

[0074] When sending the session key address, the control center node 13 or the password management service node 14 can use the PQC certificate encryption public key corresponding to the node to encrypt one or more session key addresses, use its own PQC certificate encryption private key to sign, and send it to the corresponding node.

[0075] By using the PQC certificate of the corresponding node to encrypt the public key and using the encrypted private key of this node to sign, the security of the session key formation can be further improved. In addition to using the public key and private key provided by the PQC certificate for encryption, the public key and private key provided by other means can also be used for encryption. Those skilled in the art can choose according to actual needs, and this disclosure does not impose any special restrictions on this.

[0076] In addition, since the session key address formation process only involves the communication between the control center node 13 and the first node 11 and the second node 12, or the communication between the password management service node 14 and the first node 11 and the second node 12, the security is relatively high. In some embodiments, the session key address can also be directly sent to the first node 11 and the second node 12 without encryption to improve the efficiency of session key formation.

[0077] After receiving the session key address, the first node 11 / second node 12 uses the encrypted public key corresponding to the node that will generate the session key address to authenticate the signature, and then uses the encrypted private key of this node to decrypt the third data sequence / fourth data sequence to obtain the session key address.

[0078] Next, the first node 11 / the second node 12 locally queries the current first data sequence according to the session key address to determine the second data sequence, and saves the second data sequence as a session key for subsequent use.

[0079] When multiple session key addresses are received at one time, the first node 11 and the second node 12 can query the current first data sequence in the order of the session key addresses to determine multiple second data sequences in sequence, and save the multiple second data sequences as multiple session keys for subsequent use.

[0080] In an exemplary embodiment, the control center node 13 can monitor the number of remaining session keys of the first node 11 / the second node 12, and when the number of remaining session keys is insufficient, promptly start the action of supplementing the session keys. At this time, the first node 11 and the second node 12 can be directly controlled to renegotiate a new first data sequence, or a session key update instruction can be generated to enable the control center node 13 or the password management service node 14 to regenerate one or more session key addresses based on the current first data sequence.

[0081] Figure 6 is a flowchart of method 200 in one embodiment of the present disclosure.

[0082] refer to Figure 6 In an exemplary embodiment, the method 200 may further include:

[0083] Step S4, responding to the session key update instruction, generating an updated session key address corresponding to the first data sequence;

[0084] Step S5, sending the updated session key address to the first node and the second node, so that the first node and the second node form an updated second data sequence based on the first data sequence and the updated session key address, and communicate based on the updated second data sequence.

[0085] implement Figure 6 The execution subject and execution of the method of the embodiment shown Figure 2 The execution subjects of the methods in the illustrated embodiments are consistent, and can be the control center node 13 or the password management service node 14 .

[0086] If a session key address is generated for the first time, a session key address can be generated after receiving the session key update instruction; if multiple session key addresses are generated for the first time, multiple session key addresses can be generated after receiving the session key update instruction, and it is only necessary to ensure that the session key addresses are not repeated. In some embodiments, the number of session key addresses can also be carried in the session key update instruction according to the number of session keys currently missing from the first node 11 / the second node 12, and the number of session key addresses carried each time can be different, so that the session keys missing from the first node 11 / the second node 12 can be supplemented through one session key address transmission. The calculation method of the number of session keys missing from the first node 11 / the second node 12 can be set according to different working conditions, and the present disclosure does not impose any special restrictions on this.

[0087] When the length of the first data sequence is much larger than the length of the second data sequence, the session key address can be updated multiple times based on the same first data sequence, which greatly reduces the frequency of information transmission through relay nodes, further reduces the possibility of session key leakage through relay nodes, and improves the security of the session key formation process.

[0088] Figure 7 It is an interaction diagram of the session key formation process in the embodiment of the present disclosure.

[0089] refer to Figure 7 When the method 200 is performed by the cryptographic management service node 14, the session key formation process may include:

[0090] Step S71, when the network is initialized, the first node 11, the second node 12 and the cryptographic management service node 14 (CMSP) respectively obtain digital certificates based on the PQC algorithm from the CA center to resist quantum computing attacks.

[0091] Step S72: The first node 11 and the second node 12 generate a first data sequence based on quantum channel negotiation.

[0092] Step S73, the cryptographic management service node 14 (CMSP) formulates a session key policy for the first node 11 and the second node 12, and generates a session key address.

[0093] Step S74, the cryptographic service node 14 (CMSP) uses the certificates of the first node 11 and the second node 12 to encrypt the session key address respectively, and signs it with the CMSP's own certificate.

[0094] In step S75, the cryptographic service node 14 (CMSP) sends the session key address encrypted with the certificate of the first node 11 and signed with the CMSP certificate to the first node 11, and sends the session key address encrypted with the certificate of the second node 12 and signed with the CMSP certificate to the second node 12.

[0095] Step S76, the first node 11 authenticates the session key address based on the CMSP certificate public key, and decrypts the session key address based on its own private key; the second node 12 authenticates the session key address based on the CMSP certificate public key, and decrypts the session key address based on its own private key.

[0096] Step S77: The first node 11 generates a session key based on the first data sequence and the session key address obtained through the quantum channel, and the second node 12 generates a session key based on the first data sequence and the session key address obtained through the quantum channel.

[0097] In step S78, the first node 11 and the second node 12 perform secure communication based on the session key address.

[0098] CMSP can update the session key address between core nodes A and B at any time, that is, generate a new session key and repeat the above steps.

[0099] Figure 7In the illustrated embodiment, in the quantum key formation network, a digital certificate based on PQC is first issued to each core node. Then, quantum technology is used between two QKD core nodes to generate a string of secure, random bit string data, such as 1 million bits. The first node 11 and the second node 12 perform a session key negotiation process through the password management service platform CMSP, which requires CMSP to encrypt based on the public key of the PQC certificate of the first node 11 and the second node 12. The password management service platform CMSP generates a session key address, which is encrypted with the public key of the first node 11 and signed with its own private key (or not signed) and sent to the first node 11, and encrypted with the public key of the second node 12 and signed with its own private key (or not signed) and sent to the second node 12. The first node 11 and the second node 12 authenticate the CMSP based on the PQC certificate and decrypt based on their own private keys, obtain the session key address and generate the second data sequence as the session key based on the first data sequence obtained by the quantum channel. If the password management service platform CMSP wants to update the session key, a new session key address is generated and forwarded to the first node 11 and the second node 12 respectively. Even if an untrusted relay steals the first data sequence, it cannot obtain the session key, thereby increasing the efficiency of session key generation.

[0100] In summary, the method of the embodiment of the present disclosure not only ensures that the session keys between core nodes are not stolen by relay nodes, but also improves the efficiency of session key generation, and can realize the formation of multiple session keys in one quantum channel transmission.

[0101] Corresponding to the above method embodiments, the present disclosure also provides a quantum communication session key forming device, which can be used to execute the above method embodiments.

[0102] Figure 8 It is a block diagram of a quantum communication session key forming device in an exemplary embodiment of the present disclosure.

[0103] refer to Figure 8 , the quantum communication session key forming device 800 may include:

[0104] A sequence formation notification module 81 is configured to receive a first communication message from a first node or a second node, wherein the first communication message is used to determine that the first node and the second node have completed negotiation on a first data sequence;

[0105] A key address generating module 82, configured to generate a session key address corresponding to the first data sequence according to the first communication message;

[0106] The key address synchronization module 83 is configured to send the session key address to the first node and the second node, so that the first node and the second node form a second data sequence based on the first data sequence and the session key address, and communicate based on the second data sequence.

[0107] Since the functions of the device 800 have been described in detail in the corresponding method embodiments, the present disclosure will not elaborate on them here.

[0108] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0109] In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

[0110] It will be appreciated by those skilled in the art that various aspects of the present invention may be implemented as a system, method or program product. Therefore, various aspects of the present invention may be specifically implemented in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as a "circuit", "module" or "system".

[0111] Refer to the following Fig. 9 An electronic device 900 according to this embodiment of the present invention will be described. Fig. 9 The electronic device 900 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0112] like Fig. 9 As shown, the electronic device 900 is in the form of a general computing device. The components of the electronic device 900 may include but are not limited to: at least one processing unit 910, at least one storage unit 920, and a bus 930 connecting different system components (including the storage unit 920 and the processing unit 910).

[0113] The storage unit stores program codes, which can be executed by the processing unit 910, so that the processing unit 910 performs the steps according to various exemplary embodiments of the present invention described in the above “Exemplary Method” section of this specification. For example, the processing unit 910 can perform the method shown in the embodiment of the present disclosure.

[0114] The storage unit 920 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 9201 and / or a cache storage unit 9202 , and may further include a read-only storage unit (ROM) 9203 .

[0115] The storage unit 920 may also include a program / utility 9204 having a set (at least one) of program modules 9205, such program modules 9205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0116] Bus 930 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0117] The electronic device 900 may also communicate with one or more external devices 1000 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 900, and / or communicate with any device that enables the electronic device 900 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 950. Furthermore, the electronic device 900 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 960. As shown, the network adapter 960 communicates with other modules of the electronic device 900 via a bus 930. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 900, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0118] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0119] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, on which a program product capable of implementing the above method of the present specification is stored. In some possible implementations, various aspects of the present invention can also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps according to various exemplary embodiments of the present invention described in the above "Exemplary Method" section of the present specification.

[0120] The program product for implementing the above method according to an embodiment of the present invention can adopt a portable compact disk read-only memory (CD-ROM) and include program code, and can be run on a terminal device, such as a personal computer. However, the program product of the present invention is not limited thereto, and in this document, a readable storage medium can be any tangible medium containing or storing a program, which can be used by or in combination with an instruction execution system, an apparatus or a device.

[0121] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0122] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0123] The program code embodied on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0124] Program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).

[0125] In addition, the above-mentioned figures are only schematic illustrations of the processes included in the method according to an exemplary embodiment of the present invention, and are not intended to be limiting. It is easy to understand that the processes shown in the above-mentioned figures do not indicate or limit the time sequence of these processes. In addition, it is also easy to understand that these processes can be performed synchronously or asynchronously, for example, in multiple modules.

[0126] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The specification and examples are to be considered exemplary only, and the true scope and concept of the present disclosure are indicated by the claims.

Claims

1. A method for forming a quantum communication session key, characterized in that: include: receiving a first communication message from a first node or a second node, wherein the first communication message is used to determine that the first node and the second node have completed negotiation on a first data sequence; generating a session key address corresponding to the first data sequence according to the first communication message; The session key address is sent to the first node and the second node, so that the first node and the second node form a second data sequence based on the first data sequence and the session key address, and communicate based on the second data sequence.

2. The method for forming a quantum communication session key according to claim 1, wherein: Before receiving the first communication message, the method further includes: A key negotiation instruction is sent to the first node and the second node, so that the first node and the second node respond to the key negotiation instruction and start negotiating the first data sequence.

3. The method for forming a quantum communication session key according to claim 2, characterized in that: The key negotiation instruction includes the length of the first data sequence.

4. The method for forming a quantum communication session key according to claim 1, wherein: Generating a session key address corresponding to the first data sequence according to the first communication message includes: Determine the length of the first data sequence and the length N of the second data sequence; According to the length of the first data sequence, N bits are randomly selected in the first data sequence, and the session key address is formed according to the N bits.

5. The method for forming a quantum communication session key according to claim 1, wherein: Sending the session key address to the first node and the second node includes: Obtain a first PQC certificate encryption public key corresponding to the first node, a second PQC certificate encryption public key corresponding to the second node, and a third PQC certificate encryption private key corresponding to itself; After encrypting the session key address according to the first PQC certificate encryption public key, using the third PQC encryption private key to sign to form a third data sequence, and sending the third data sequence to the first node; After encrypting the session key address according to the second PQC certificate encryption public key, the third PQC encryption private key is used to sign to form a fourth data sequence, and the fourth data sequence is sent to the second node.

6. The method for forming a quantum communication session key according to claim 1 or 4, characterized in that: Also includes: In response to the session key update instruction, generating an updated session key address corresponding to the first data sequence; The updated session key address is sent to the first node and the second node, so that the first node and the second node form an updated second data sequence based on the first data sequence and the updated session key address, and communicate based on the updated second data sequence.

7. A quantum communication system, characterized in that: include: A first node, used for session key formation and quantum communication; a second node, configured to perform session key negotiation with the first node to complete session key formation, and perform quantum communication with the first node based on the session key; A control center node, communicating with the first node and the second node, for controlling the session key formation process; A cryptographic management service node, communicating with the first node and the second node, for executing the method as described in any one of claims 1 to 6, assisting the first node and the second node in generating a session key; At least one relay node is located between the first node and the second node, and the first node and the second node communicate with each other through the relay node.

8. An electronic device, characterized in that: include: Memory; as well as A processor coupled to the memory, the processor being configured to execute the method according to any one of claims 1 to 6 based on instructions stored in the memory.

9. A computer-readable storage medium having a program stored thereon, wherein when the program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images