Method and system for distributing post quantum cryptography and quantum key

Abstract

The invention provides a post quantum cryptography and quantum key distribution method and system. The method comprises the following steps: a first client sends a first session establishment request to a first gateway through a classic network; the first gateway determines a second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through a classic network; the second gateway sends a third session establishment request to the second client through the classic network, and feeds back a work key sending success prompt to the first gateway through the classic network after the third session establishment request is successfully sent; the first gateway sends a fourth session establishment request to the first client through the classic network; and the first client and the second client perform encrypted communication by using the quantum working key. Firstly, a sender gateway generates a quantum working key and sends the quantum working key to a receiver proxy gateway, then the proxy gateways at the two ends distribute the quantum working key to clients respectively, and the bit error rate, the signal attenuation and the equipment cost can be reduced in a long-distance and complex network environment.

Description

Technical Field

[0001] The present invention relates to the field of communications, and in particular to a method and system for post-quantum cryptography fused with quantum key distribution. Background Art

[0002] With the rapid development of quantum technology, especially the substantial improvement of quantum computing capabilities, traditional cryptographic systems are facing unprecedented severe security challenges. Quantum key distribution (QKD) technology provides unconditional security in theory, which is based on the basic principles of quantum mechanics, such as the uncertainty principle and the no-cloning theorem. However, in practical applications, especially in long-distance and complex network environments, QKD systems face many technical challenges, including increased bit error rate, signal attenuation, and high equipment costs. Summary of the invention

[0003] The purpose of the present invention is to provide a method and system for post-quantum cryptography fused with quantum key distribution to improve the above-mentioned problems.

[0004] In order to achieve the above purpose, the technical solution adopted by the embodiment of the present invention is as follows:

[0005] In a first aspect, an embodiment of the present invention provides a method for post-quantum cryptography fusion quantum key distribution, which is applied to a quantum key distribution system, wherein the quantum key distribution system includes a first gateway, a second gateway, a first client, and a second client, wherein the first client needs to establish a communication connection with the second client, and the method for post-quantum cryptography fusion quantum key distribution includes:

[0006] The first client sends a first session establishment request to the first gateway through a classic network, wherein the first session establishment request includes an identifier of the second client;

[0007] The first gateway determines the second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and the quantum working key generated by the first gateway;

[0008] The second gateway sends a third session establishment request to the second client through the classical network, and after the sending is successful, feeds back a working key sending success prompt to the first gateway through the classical network, wherein the third session establishment request includes the quantum working key;

[0009] After receiving the working key sending success prompt fed back by the second gateway, the first gateway sends a fourth session establishment request to the first client through the classical network, wherein the fourth session establishment request includes the quantum working key;

[0010] The first client and the second client perform encrypted communication using the quantum working key.

[0011] In a second aspect, an embodiment of the present invention provides a quantum key distribution system, the quantum key distribution system comprising a first gateway, a second gateway, a first client and a second client, wherein the first client needs to establish a communication connection with the second client;

[0012] The first client is used to send a first session establishment request to the first gateway through a classic network, wherein the first session establishment request includes an identifier of the second client;

[0013] The first gateway is used to determine the second gateway according to the identifier of the second client, and send a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and the quantum working key generated by the first gateway;

[0014] The second gateway is used to send a third session establishment request to the second client through the classical network, and after the sending is successful, feed back a working key sending success prompt to the first gateway through the classical network, wherein the third session establishment request includes the quantum working key;

[0015] The first gateway is used to send a fourth session establishment request to the first client through the classical network after receiving a prompt indicating that the working key is sent successfully fed back by the second gateway, wherein the fourth session establishment request includes the quantum working key;

[0016] The first client and the second client are used to perform encrypted communication using the quantum working key.

[0017] Compared with the prior art, an embodiment of the present invention provides a method and system for post-quantum cryptography fusion quantum key distribution. The quantum key distribution system includes a first gateway, a second gateway, a first client and a second client. The first client sends a first session establishment request to the first gateway through a classical network, wherein the first session establishment request includes an identifier of the second client; the first gateway determines the second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and a quantum working key generated by the first gateway; the second gateway sends a third session establishment request to the second client through the classical network, and after the sending is successful, feeds back a working key sending success prompt to the first gateway through the classical network, wherein the third session establishment request includes the quantum working key; after receiving the working key sending success prompt fed back by the second gateway, the first gateway sends a fourth session establishment request to the first client through the classical network, wherein the fourth session establishment request includes the quantum working key; the first client and the second client use the quantum working key for encrypted communication. First, the sending gateway generates a quantum working key and sends it to the receiving proxy gateway. Then the proxy gateways at both ends distribute the quantum working key to the client respectively. This can reduce the bit error rate, alleviate signal attenuation, and reduce equipment costs in long-distance and complex network environments.

[0018] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0020] Figure 1 A schematic diagram of the structure of a quantum key distribution system provided in an embodiment of the present invention.

[0021] Figure 2 This is one of the communication interaction diagrams provided in the embodiment of the present invention.

[0022] Figure 3 The second communication interaction diagram provided for the embodiment of the present invention.

[0023] Figure 4 A flowchart of a method for integrating post-quantum cryptography with quantum key distribution provided in an embodiment of the present invention.

[0024] In the figure: 10 - first client; 20 - first gateway; 30 - second gateway; 40 - second client. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0026] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0027] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings. At the same time, in the description of the present invention, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0028] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0029] In the description of the present invention, it should be noted that the terms "upper", "lower", "inside", "outside", etc. indicate directions or positional relationships based on the directions or positional relationships shown in the accompanying drawings, or are directions or positional relationships in which the product of the invention is usually placed when in use. They are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore should not be understood as a limitation on the present invention.

[0030] In the description of the present invention, it is also necessary to explain that, unless otherwise clearly specified and limited, the terms "disposed" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be an indirect connection through an intermediate medium, or it can be the internal communication of two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0031] Some embodiments of the present invention are described in detail below in conjunction with the accompanying drawings. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0032] In long-distance and complex network environments, QKD systems face many technical challenges, including increased bit error rate, signal attenuation, and high equipment costs. To solve these problems, a proxy gateway architecture can be introduced. The proxy gateway architecture is introduced to optimize the performance of the QKD network, reduce costs, and maintain its security. The proxy gateway architecture uses a dual-layer key system of quantum session keys and quantum working keys.

[0033] The quantum session key is used to protect the transmission process of distributing quantum working keys. Among them, the quantum session key between proxy gateways is directly distributed through the quantum key distribution network (QKD network for short), which takes advantage of the core advantage of QKD technology, that is, the ability to securely generate and distribute keys without worrying about eavesdropping or tampering. The quantum session key between the proxy gateway and the client is preset, which is usually done when the system is deployed to ensure a secure communication foundation at the initial stage.

[0034] The quantum work key is used to protect the actual business data transmission and is distributed through the classical network. First, the sender gateway generates the quantum work key, protects it with the quantum session key between proxy gateways, and sends it to the receiver proxy gateway. Then, the proxy gateways at both ends use the preset client quantum session key to protect it and distribute the quantum work key to the client.

[0035] The above two-layer key system and "proxy gateway" mechanism greatly reduce the load on the QKD network and improve the efficiency of quantum key distribution. However, in practical applications, if the quantum session keys of the proxy gateway and the client are preset, there are problems in terms of security or ease of use.

[0036] For example, in the manual configuration method, the administrators of the proxy gateway and the client manually configure the quantum session key shared by both parties. This method is prone to errors and may lead to failure in distributing quantum working keys. If the administrator of the other party is notified by email or text message, it can reduce errors, but there is a high risk of session key leakage.

[0037] In the centralized distribution method, the client distributes the quantum session key centrally at the proxy gateway and then transports it to the site for deployment. This method can ensure the security of distributing the client quantum session key, but when the number of clients is large, the deployment cost is high, the efficiency is low, the operation is complex, and the ease of use is low.

[0038] In the offline distribution method, the proxy gateway generates the client quantum session key and injects it into the client offline through a secure storage medium or a charging machine. Although this method is an improvement over the centralized distribution method, it still has shortcomings in terms of deployment cost, efficiency, and ease of use when there are a large number of clients.

[0039] In view of the above-mentioned security, cost, efficiency and usability problems caused by the preset quantum session keys between the proxy gateway and the client, an embodiment of the present invention provides a quantum key distribution system, which is based on quantum key distribution protected by post-quantum cryptography. Through the fusion of post-quantum cryptography and QKD, the quantum session keys between the proxy gateways are distributed by the QKD network, and the quantum session keys between the proxy gateway and the client are automatically distributed online in the classical network and protected by post-quantum cryptography, providing confidentiality, integrity and identity authentication for the distribution process, and having the ability to resist potential quantum attacks, providing a more efficient, easier to use and secure quantum key distribution method for large-scale client deployment.

[0040] Please refer to Figure 1 , Figure 1 A schematic diagram of the structure of a quantum key distribution system provided in an embodiment of the present invention. The quantum key distribution system includes a first gateway 20, a second gateway 30, a first client 10, and a second client 40. The first gateway 20 and the second gateway 30 are quantum key service gateways (referred to as gateways). The first gateway 20 and the second gateway 30 can communicate through a classical network and a QKD network. The gateway and the client can communicate through a classical network.

[0041] The embodiment of the present invention also provides a quantum key distribution method, which is applied to Figure 1 The quantum key distribution system shown. Please refer to Figure 2 , Figure 2 This is one of the communication interaction diagrams provided by an embodiment of the present invention. When the first client 10 needs to establish a communication connection with the second client 40, the method of post-quantum cryptography fusion quantum key distribution includes: S13, S22, S35, S36, S23 and S17, which are specifically described as follows.

[0042] S13: The first client sends a first session establishment request to the first gateway through the classic network.

[0043] The first session establishment request includes an identifier of the second client.

[0044] S22: The first gateway determines a second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classic network.

[0045] The second session establishment request includes an identifier of the second client and a quantum working key generated by the first gateway.

[0046] S35: The second gateway sends a third session establishment request to the second client through the classic network.

[0047] S36, after the third session establishment request is sent successfully, the second gateway feeds back a prompt of successful sending of the working key to the first gateway through the classic network.

[0048] The third session establishment request includes the quantum working key.

[0049] S23: After receiving a prompt indicating that the working key is sent successfully fed back by the second gateway, the first gateway sends a fourth session establishment request to the first client through the classic network.

[0050] The fourth session establishment request includes the quantum working key.

[0051] S17, the first client and the second client perform encrypted communication using the quantum working key.

[0052] In the quantum key distribution system provided in the embodiment of the present invention, the sending gateway first generates a quantum working key and sends it to the receiving proxy gateway, and then the proxy gateways at both ends distribute the quantum working key to the client respectively, which can reduce the bit error rate, alleviate signal attenuation and reduce equipment costs in long-distance and complex network environments.

[0053] exist Figure 2 On the basis of how to ensure the security of the quantum key distribution process, the embodiment of the present invention also provides an optional implementation method, please refer to Figure 3 , Figure 3 The second communication interaction diagram provided for the embodiment of the present invention.

[0054] Before the first client sends a first session establishment request to the first gateway through the classical network, the method of post-quantum cryptography fusion quantum key distribution also includes: S11 and S12, as follows.

[0055] S11, the first client uses its stored first quantum session key as an authentication key to perform a digest operation on the first client's identifier and the second client's identifier to generate a first digest value (MAC1).

[0056] The first quantum session key is a quantum session key between the first client and the first gateway. The client identifier may be, but is not limited to, the client ID, and may also be the client name.

[0057] It should be noted that in the implementation of the present invention, the authentication key is used for digest calculation, and the digest algorithm can be selected from HMAC-SM3, HMAC-SHA1, HMAC-SHA224, HMAC-SHA384, HMAC-SHA512, etc.

[0058] S12: The first client generates a first session establishment request including an identifier of the first client, an identifier of the second client, and a first digest value.

[0059] After the first gateway receives the first session establishment request transmitted by the first client, the method of post-quantum cryptography fusion quantum key distribution also includes: S21, which is as follows.

[0060] S21, the first gateway performs verification according to the first quantum session key, the identifier of the first client, the identifier of the second client, and the first digest value stored therein.

[0061] If the verification is successful, the first gateway determines the second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classic network.

[0062] It should be noted that the first gateway can query the key record stored therein to determine the first quantum session key corresponding to the identifier of the first client.

[0063] Optionally, the first gateway uses the first quantum session key stored in it as the authentication key, performs a digest operation on the identifier of the first client and the identifier of the second client to generate a first digest verification value, compares the first digest value (MAC1) and the first digest verification value, and considers the verification to be successful when the two match (which may be the same). The same is true for the verification between other digest verification values ​​and digest values ​​hereinafter, which will not be described in detail hereinafter.

[0064] If the first digest value verification fails, quantum key distribution is stopped. The communication between the first gateway and the first client is protected by the first quantum session key.

[0065] exist Figure 3 Based on the content in S22, the embodiment of the present invention also provides an optional implementation. Please refer to the following, S22, the first gateway determines the second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classic network, including: S221, S222, S223, S224 and S225, which are specifically described as follows.

[0066] S221: The first gateway determines a second gateway according to the identifier of the second client.

[0067] The first gateway may query the second gateway corresponding to the identifier of the second client through the QKD network, or the first gateway may store the correspondence between each gateway and the clients it manages.

[0068] S222: The first gateway obtains a second quantum session key.

[0069] The second quantum session key is a quantum session key between the first gateway and the second gateway.

[0070] Optionally, S222, the step of the first gateway obtaining the second quantum session key, includes: S222A, S222B and S222C, which are specifically described as follows.

[0071] S222A, the first gateway queries the stored key record to determine whether the key record includes the second quantum session key corresponding to the second gateway. If yes, execute S222B; if no, execute S222C.

[0072] S222B, the first gateway obtains the second quantum session key according to the key record stored therein.

[0073] S222C, the first gateway generates a second quantum session key, and transmits the generated second quantum session key to the second gateway through the QKD network.

[0074] It should be noted that the second gateway will store the received second quantum session key.

[0075] S223, the first gateway generates a quantum work key, uses the second quantum session key to symmetric encrypt the quantum work key to generate a first encrypted quantum work key, and uses the first encrypted quantum work key as an authentication key to perform a digest operation on the quantum work key to generate a second digest value.

[0076] Among them, the quantum working key can be expressed as Q_KEY, the first encrypted quantum working key can be expressed as ENC_Q_KEY1, and the second summary value can be expressed as MAC2.

[0077] In the implementation of the present invention, the symmetric encryption algorithm may be SM4, AES, 3DES, etc.

[0078] S224: The first gateway generates a second session establishment request including an identifier of the second client, a first encrypted quantum working key, and a second digest value.

[0079] S225: The first gateway sends a second session establishment request to the second gateway through the classic network.

[0080] Based on the above, regarding how the second gateway ensures communication security, the embodiment of the present invention also provides an optional implementation method. Figure 3 After the second gateway receives the second session establishment request transmitted by the first gateway, the method of post-quantum cryptography fusion quantum key distribution also includes: S31, S32, S33 and S34, which are specifically described as follows.

[0081] S31, the second gateway decrypts the first encrypted quantum working key in the second session establishment request according to the second quantum session key stored therein to generate a quantum working key.

[0082] S312: The second gateway uses the first encrypted quantum work key in the second session establishment request as an authentication key, and performs a digest operation on the obtained quantum work key to generate a second digest verification value.

[0083] S33: The second gateway performs a comparison verification based on the second digest value and the second digest verification value. If the verification is successful, S34 is executed; otherwise, the process ends.

[0084] S34: The second gateway generates a third session establishment request.

[0085] Based on the above, regarding how the second gateway generates the third session establishment request, the embodiment of the present invention further provides an optional implementation. Please refer to the following, S34, the step of the second gateway generating the third session establishment request includes: S341 and S342, which are specifically described as follows.

[0086] S341, the second gateway uses the third quantum session key to symmetrically encrypt the quantum work key to generate a second encrypted quantum work key (ENC_Q_KEY2), and uses the second encrypted quantum work key as the authentication key to perform a digest operation on the quantum work key (Q_KEY) to generate a third digest value (MAC3).

[0087] The third quantum session key is a quantum session key between the second gateway and the second client.

[0088] S342: The second gateway generates a third session establishment request including a third digest value and a second encrypted quantum working key.

[0089] After the second client receives the third session establishment request, the method of post-quantum cryptography fusion quantum key distribution also includes: S41, S42, S43 and S44, which are specifically described as follows.

[0090] S41, the second client decrypts the second encrypted quantum working key in the third session establishment request according to the third quantum session key stored therein to generate a quantum working key.

[0091] S42: The second client uses the second encrypted quantum work key in the third session establishment request as an authentication key, and performs a digest operation on the obtained quantum work key to generate a third digest verification value.

[0092] S43, the second client performs a comparison verification based on the third digest value and the third digest verification value. If the verification passes, S44 is executed; if not, the process ends.

[0093] S44, the second client feeds back a verification success prompt to the second gateway.

[0094] To inform the second gateway that the second client has successfully obtained the quantum working key.

[0095] Based on the above, regarding the content in S23, the embodiment of the present invention also provides an optional implementation, please refer to the following. S23, after the first gateway receives the working key sending success prompt fed back by the second gateway, the step of sending a fourth session establishment request to the first client through the classic network includes: S231, S232 and S233, which are specifically described as follows.

[0096] S231, the first gateway uses the first quantum session key to symmetrically encrypt the quantum work key to generate a third encrypted quantum work key (ENC_Q_KEY3), and uses the third encrypted quantum work key as an authentication key to perform a digest operation on the quantum work key (Q_KEY) to generate a fourth digest value (MAC4).

[0097] S232: The first gateway generates a fourth session establishment request including a fourth digest value and a third encrypted quantum working key.

[0098] S233: The first gateway sends a fourth session establishment request to the first client through the classic network.

[0099] Please continue to refer to Figure 3 After the first client receives the fourth session establishment request, the method of post-quantum cryptography fusion quantum key distribution also includes: S14, S15 and S16, which are specifically described as follows.

[0100] S14: The first client decrypts the third encrypted quantum working key in the fourth session establishment request according to the first quantum session key stored therein to generate a quantum working key.

[0101] S15: The first client uses the third encrypted quantum work key in the fourth session establishment request as an authentication key, and performs a digest operation on the obtained quantum work key to generate a fourth digest verification value.

[0102] S16, the first client performs a comparison verification based on the fourth digest value and the fourth digest verification value; if the verification is successful, the first client feeds back a verification success prompt to the first gateway.

[0103] It should be noted that after the fourth summary verification value is verified, S17 can be executed, and the first client and the second client use the quantum working key to perform encrypted communication, and the channel between the two has quantum resistance.

[0104] Based on the above, regarding how the gateway distributes quantum session keys to the client, the embodiment of the present invention also provides an optional implementation method, please refer to Figure 4 , Figure 4 A flow chart of a method for post-quantum cryptography fusion quantum key distribution provided by an embodiment of the present invention. The method for post-quantum cryptography fusion quantum key distribution includes: S510 to S530 and S610 to S660, which are specifically described as follows.

[0105] S510: The target client signs the first signature original data using the PQC signature private key of the target client to generate first target signature data.

[0106] The first signature original data includes the identifier of the target client, the PQC signature certificate of the target client, and the PQC encryption public key of the target client.

[0107] It should be noted that the target client is any client in the system, and the target gateway is the gateway corresponding to the target client.

[0108] S520: The target client sends a connection establishment request to the target gateway.

[0109] The connection establishment request includes the first target signature data and the first signature original data.

[0110] S610: After receiving the connection establishment request, the target gateway verifies the PQC signature certificate of the target client according to the first target signature data.

[0111] Among them, PQC stands for post-quantum cryptography.

[0112] It should be noted that the PQC signature certificate of the target client includes the ID of the target client, the certificate validity period and the PQC signature public key.

[0113] Parse the PQC signature certificate of the target client to obtain the target client ID, certificate validity period, and PQC signature public key.

[0114] Verify that the target client's ID meets the expected rules;

[0115] Verify whether the certificate is within the validity period;

[0116] The signature is verified according to the PQC signature public key, the first signature original data and the first target signature data to determine whether the signature verification is successful.

[0117] When the above judgment result is no, it is determined that the verification has failed, otherwise, the PQC signature certificate verification is successful.

[0118] S620: When the PQC signature certificate of the target client is verified, the target gateway generates a target quantum session key corresponding to the target client.

[0119] S630, the target gateway encrypts the target quantum session key by using the PQC encryption public key of the target client to generate a quantum session key ciphertext.

[0120] S640, the target gateway concatenates the PQC signature certificate of the target gateway and the quantum session key ciphertext to generate second signature original data.

[0121] S650: The target gateway signs the second signature original data using the PQC signature private key of the target gateway to generate second target signature data.

[0122] S660, the target gateway feeds back the second target signature data, the PQC signature certificate of the target gateway, and the quantum session key ciphertext to the target client.

[0123] S530, the target client performs signature verification according to the second target signature data and the PQC signature certificate of the target gateway. If the verification passes, the quantum session key ciphertext is decrypted using the PQC encryption private key of the target client to obtain the target quantum session key.

[0124] It should be noted that the process of signature verification of the PQC signature certificate of the target gateway is the same as that of signature verification of the PQC signature certificate of the target client, which will not be repeated here.

[0125] It should be noted that post-quantum cryptographic algorithms include the PQC signature algorithm for identity authentication and the PQC encryption algorithm for key encapsulation. The PQC signature algorithm can be the Dilithium, FALCON and SPHINCS+ signature algorithms published by NIST, and the PQC encryption algorithm can be the Kyber algorithm published by NIST.

[0126] Before distributing the client quantum session key, the gateway and client need to initialize the PQC key and have a PQC signature certificate issued by a third-party digital certificate system. The CN field in the certificate subject information is the ID of the gateway or client.

[0127] It should be noted that the client's quantum session key is stored in a volatile memory (kept updated) and is lost after a power failure or restart. Each time the client starts up and establishes a session with the gateway, it needs to request the gateway to distribute the client's quantum session key.

[0128] The method of post-quantum cryptography fusion quantum key distribution provided by the embodiment of the present invention improves the security of quantum key distribution and builds a multi-level, all-round security guarantee. The quantum session key between gateways is distributed using the QKD network system, the quantum session key between the gateway and the client is distributed based on post-quantum cryptographic protection, and the quantum working key of the client is distributed based on quantum session key protection. In the whole process of quantum key distribution, security functions such as confidentiality, integrity and data source identity authentication are realized, and the ability to resist future quantum computing attacks is possessed. In long-distance and complex network environments, the integration of post-quantum cryptography and QKD can be used to resist potential quantum attacks, while providing a more efficient, easier-to-use and secure quantum key distribution method for large-scale client deployment, reducing equipment costs.

[0129] It realizes the online automatic distribution of client quantum session keys, solves the security, cost, efficiency and usability defects of the client quantum session key pre-setting method, and provides a more efficient, easier to use, more flexible and secure quantum key distribution method for large-scale client deployment.

[0130] The embodiment of the present invention also provides a quantum key distribution system, such as Figure 1 As shown, the quantum key distribution system includes a first gateway, a second gateway, a first client and a second client, wherein the first client needs to establish a communication connection with the second client.

[0131] The first client is used to send a first session establishment request to the first gateway through the classic network, wherein the first session establishment request includes an identifier of the second client.

[0132] The first gateway is used to determine the second gateway according to the identifier of the second client, and send a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and the quantum working key generated by the first gateway.

[0133] The second gateway is used to send a third session establishment request to the second client through the classical network, and after successful sending, feedback a working key sending success prompt to the first gateway through the classical network, wherein the third session establishment request includes the quantum working key.

[0134] The first gateway is used to send a fourth session establishment request to the first client through the classical network after receiving a working key sending success prompt fed back by the second gateway, wherein the fourth session establishment request includes the quantum working key.

[0135] The first client and the second client are used for encrypted communication using the quantum working key.

[0136] It should be noted that the quantum key distribution system provided in this embodiment can execute the method flow shown in the above method flow embodiment to achieve the corresponding technical effect. For the sake of brief description, for the parts not mentioned in this embodiment, please refer to the corresponding content in the above embodiment.

[0137] In summary, an embodiment of the present invention provides a method and system for post-quantum cryptography fusion quantum key distribution. The quantum key distribution system includes a first gateway, a second gateway, a first client and a second client. The first client sends a first session establishment request to the first gateway through a classical network, wherein the first session establishment request includes an identifier of the second client; the first gateway determines the second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and the quantum work key generated by the first gateway; the second gateway sends a third session establishment request to the second client through the classical network, and after the sending is successful, feeds back a successful prompt of the working key sending to the first gateway through the classical network, wherein the third session establishment request includes the quantum work key; after receiving the successful prompt of the working key sending fed back by the second gateway, the first gateway sends a fourth session establishment request to the first client through the classical network, wherein the fourth session establishment request includes the quantum work key; the first client and the second client use the quantum work key for encrypted communication. First, the sending gateway generates a quantum working key and sends it to the receiving proxy gateway. Then the proxy gateways at both ends distribute the quantum working key to the client respectively. This can reduce the bit error rate, alleviate signal attenuation, and reduce equipment costs in long-distance and complex network environments.

[0138] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

[0139] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.

Claims

1. A method for post-quantum cryptography fusion quantum key distribution, characterized in that: Applied to a quantum key distribution system, the quantum key distribution system includes a first gateway, a second gateway, a first client and a second client, wherein the first client needs to establish a communication connection with the second client, and the method includes: The first client sends a first session establishment request to the first gateway through a classic network, wherein the first session establishment request includes an identifier of the second client; The first gateway determines the second gateway according to the identifier of the second client, and sends a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and the quantum working key generated by the first gateway; The second gateway sends a third session establishment request to the second client through the classical network, and after the sending is successful, feeds back a working key sending success prompt to the first gateway through the classical network, wherein the third session establishment request includes the quantum working key; After receiving the working key sending success prompt fed back by the second gateway, the first gateway sends a fourth session establishment request to the first client through the classical network, wherein the fourth session establishment request includes the quantum working key; The first client and the second client perform encrypted communication using the quantum working key.

2. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 1, characterized in that: Before the first client sends a first session establishment request to the first gateway through the classic network, the method further includes: The first client uses the first quantum session key stored therein as an authentication key to perform a digest operation on the identifier of the first client and the identifier of the second client to generate a first digest value, wherein the first quantum session key is a quantum session key between the first client and the first gateway; The first client generates a first session establishment request including an identifier of the first client, an identifier of the second client, and the first digest value; After the first gateway receives the first session establishment request transmitted by the first client, the method further includes: The first gateway queries the key record stored therein to determine a first quantum session key corresponding to the identifier of the first client; The first gateway performs verification based on the first quantum session key, the identifier of the first client, the identifier of the second client, and the first digest value stored therein. If the verification passes, the first gateway determines the second gateway based on the identifier of the second client, and sends a second session establishment request to the second gateway through the classical network.

3. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 2, characterized in that: The step of the first gateway determining the second gateway according to the identifier of the second client, and sending a second session establishment request to the second gateway through the classic network includes: The first gateway determines the second gateway according to the identifier of the second client; The first gateway obtains a second quantum session key, wherein the second quantum session key is a quantum session key between the first gateway and the second gateway; The first gateway generates a quantum work key, symmetrically encrypts the quantum work key using a second quantum session key to generate a first encrypted quantum work key, and uses the first encrypted quantum work key as an authentication key to perform a digest operation on the quantum work key to generate a second digest value; The first gateway generates the second session establishment request including the identifier of the second client, the first encrypted quantum working key, and the second digest value; The first gateway sends the second session establishment request to the second gateway through the classic network.

4. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 3, characterized in that: The step of the first gateway acquiring the second quantum session key comprises: The first gateway queries the key record stored therein to determine whether the key record includes the second quantum session key corresponding to the second gateway; If included, the first gateway obtains the second quantum session key according to the key record stored therein; If not included, the first gateway generates a second quantum session key and transmits the generated second quantum session key to the second gateway through the QKD network.

5. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 3, characterized in that: After the second gateway receives the second session establishment request transmitted by the first gateway, the method further includes: The second gateway decrypts the first encrypted quantum working key in the second session establishment request according to the second quantum session key stored therein to generate a quantum working key; The second gateway uses the first encrypted quantum work key in the second session establishment request as an authentication key, and performs a digest operation on the obtained quantum work key to generate a second digest verification value; The second gateway performs comparison and verification according to the second digest value and the second digest verification value; If the verification is successful, the second gateway generates a third session establishment request.

6. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 5, characterized in that: The step of the second gateway generating a third session establishment request comprises: The second gateway symmetrically encrypts the quantum work key using the third quantum session key to generate a second encrypted quantum work key, and uses the second encrypted quantum work key as an authentication key to perform a digest operation on the quantum work key to generate a third digest value; The third quantum session key is a quantum session key between the second gateway and the second client; The second gateway generates a third session establishment request including the third digest value and the second encrypted quantum working key; After the second client receives the third session establishment request, the method further includes: The second client decrypts the second encrypted quantum working key in the third session establishment request according to the third quantum session key stored therein to generate a quantum working key; The second client uses the second encrypted quantum work key in the third session establishment request as an authentication key, and performs a digest operation on the obtained quantum work key to generate a third digest verification value; The second client performs a comparison and verification based on the third digest value and the third digest verification value; If the verification is successful, the second client feeds back a verification success prompt to the second gateway.

7. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 1, characterized in that: After receiving the working key sending success prompt fed back by the second gateway, the first gateway sends a fourth session establishment request to the first client through the classic network, including: The first gateway symmetrically encrypts the quantum work key using the first quantum session key to generate a third encrypted quantum work key, and uses the third encrypted quantum work key as an authentication key to perform a digest operation on the quantum work key to generate a fourth digest value; The first gateway generates a fourth session establishment request including the fourth digest value and the third encrypted quantum working key; The first gateway sends a fourth session establishment request to the first client through the classic network.

8. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 7, characterized in that: After the first client receives the fourth session establishment request, the method further includes: The first client decrypts the third encrypted quantum working key in the fourth session establishment request according to the first quantum session key stored therein to generate a quantum working key; The first client uses the third encrypted quantum work key in the fourth session establishment request as an authentication key, and performs a digest operation on the obtained quantum work key to generate a fourth digest verification value; The first client performs a comparison and verification based on the fourth digest value and the fourth digest verification value; If the verification is successful, the first client feeds back a verification success prompt to the first gateway.

9. The method for post-quantum cryptography fusion quantum key distribution as claimed in claim 7, characterized in that: The method further comprises: The target client signs the first signature original data using the PQC signature private key of the target client to generate first target signature data, wherein the first signature original data includes the identifier of the target client, the PQC signature certificate of the target client, and the PQC encryption public key of the target client; The target client sends a connection establishment request to the target gateway, wherein the connection establishment request includes the first target signature data and the first signature original data; After receiving the connection establishment request, the target gateway verifies the PQC signature certificate of the target client according to the first target signature data; When the PQC signature certificate of the target client is verified, the target gateway generates a target quantum session key corresponding to the target client; The target gateway encrypts the target quantum session key by using the PQC encryption public key of the target client to generate a quantum session key ciphertext; The target gateway concatenates the PQC signature certificate of the target gateway and the quantum session key ciphertext to generate second signature original data; The target gateway signs the second signature original data using the PQC signature private key of the target gateway to generate second target signature data; The target gateway feeds back the second target signature data, the PQC signature certificate of the target gateway, and the quantum session key ciphertext to the target client; The target client performs signature verification according to the second target signature data and the PQC signature certificate of the target gateway. If the verification passes, the quantum session key ciphertext is decrypted using the PQC encryption private key of the target client to obtain the target quantum session key.

10. A quantum key distribution system, characterized in that: The quantum key distribution system includes a first gateway, a second gateway, a first client and a second client, wherein the first client needs to establish a communication connection with the second client; The first client is used to send a first session establishment request to the first gateway through a classic network, wherein the first session establishment request includes an identifier of the second client; The first gateway is used to determine the second gateway according to the identifier of the second client, and send a second session establishment request to the second gateway through the classical network, wherein the second session establishment request includes the identifier of the second client and the quantum working key generated by the first gateway; The second gateway is used to send a third session establishment request to the second client through the classical network, and after the sending is successful, feed back a working key sending success prompt to the first gateway through the classical network, wherein the third session establishment request includes the quantum working key; The first gateway is used to send a fourth session establishment request to the first client through the classical network after receiving a prompt indicating that the working key is sent successfully fed back by the second gateway, wherein the fourth session establishment request includes the quantum working key; The first client and the second client are used to perform encrypted communication using the quantum working key.

Images