Routing configuration method based on error code analysis

Abstract

According to the routing configuration method based on the error code analysis provided by the invention, a whole network router or a routing control center forms a routing configuration strategy containing a link communication state, a security attribute and a reliability attribute according to bandwidth overhead, a path, a security weight and a bit error rate; depending on the robustness of the communication network, bypassing and avoiding of the safety switching information and the reliable information on the hidden link are realized.

Description

Technical Field

[0001] The present invention belongs to the fields of quantum communication, optical fiber sensing, computer network and the like, and specifically refers to a routing configuration technology that quantitatively evaluates the security, reliability and availability of a router direct communication link through quantum bit error monitoring, data bit error monitoring and link communication overhead, generates link security path overhead and notifies routers of the entire network or summarizes it in a routing control center of the entire network, and forms a link security level priority routing strategy, and more particularly relates to a routing configuration method based on quantum error link monitoring. Background Art

[0002] Quantum communication technology is a communication technology that can achieve secure information transmission from the perspective of communication links. Its essence is to realize information interaction through the synchronous sharing of quantum states of remote users. Attackers cannot predict quantum state information, separate quantum states, or replicate quantum states after measurement before measurement. Any interference with the communication link (whether from attacks with eavesdropping motives or from force majeure) will destroy the synchronous sharing mechanism of quantum states of remote users and cause the awareness of both communicating parties.

[0003] The most mature quantum communication technology at this stage is quantum secure communication technology, which mainly implements plaintext information encryption and decryption operations through quantum key distribution. Quantum secure communication systems usually adopt a point-to-point working mode and have certain networking capabilities, but they are still far from being practical for large-scale engineering. The main reasons include: quantum key distribution requires independent quantum channels (such as passive optical fibers); the quantum key distribution rate is usually much lower than the classical communication rate, and can only support low-speed transmission in the "one-time one-key" working mode; the quantum key distribution system is not compatible with existing network relay routing equipment.

[0004] In routing communication configuration, the commonly used routing protocols today are RIP, OSPF, IS-IS, BGP, etc. Among them, RIP, OSPF, and IS-IS are interior gateway protocols (IGPs), which are applicable to an autonomous system (AS) that contains an ISP operating network and uses the same routing protocol.

[0005] RIP (Routing Information Protocol) is a simple distance vector-based routing protocol based on the classic distance vector routing algorithm with a maximum hop count of 15. The OSPF (Open Shortest Path First) protocol was developed and recommended by IETF. It consists of three parts: the Hello protocol, the exchange protocol, and the diffusion protocol. They complete link checking, route exchange, and route database synchronization functions respectively. It has no hop count limit and can converge quickly, making it suitable for large-scale Internet. IS-IS (Intermediate System to Intermediate System), like OSPF, uses Hello packets to establish and maintain adjacent relationships, identifies link status with timeliness and metrics, and uses the Dijkstra algorithm to maintain the link state database. Unlike OSPF, which is based on a backbone center and other areas are linked to the backbone center, the regional boundaries in ISIS fall on the links.

[0006] Autonomous systems use external gateway protocols to exchange routing information, and the most common protocol is BGP. BGP (Border Gateway Protocol) is an advanced distance vector routing protocol that comes with AS path information and attribute information to complicate the measurement of AS external paths. It is generally used in the Internet and is an optimal route distance vector routing selection protocol. Its main features are route optimization, control of route propagation, and efficient maintenance of large amounts of routing information.

[0007] The existing mature routing configuration methods only identify and measure the communication overhead and time efficiency, and only use availability as the measurement value of the link status, lacking the measurement of security and reliability and the comprehensive status identification after multi-dimensional measurement. The present invention monitors the quantum bit error rate through quantum communication technology, quantitatively measures the security of the communication link, monitors the communication bit error of the communication link through traditional bit error monitoring technology, quantitatively measures the reliability of the communication link, comprehensively considers the link overhead and time efficiency, and provides a new routing configuration method based on quantum bit error link monitoring to solve the problem of insufficient security and reliability of traditional routing technology. Summary of the invention

[0008] In view of the above-mentioned defects, the present invention innovatively proposes a routing configuration method based on error analysis. The routers of the entire network or the routing control center forms a routing configuration strategy including link communication status, security attributes and reliability attributes according to bandwidth overhead, traversed paths, security weights and bit error rates. Relying on the robustness of the communication network, it realizes the circumvention of potential danger links by using security concern information and reliable information.

[0009] In order to achieve the above-mentioned effects, the routing configuration method based on error analysis provided by the present invention includes communication link security metric analysis, communication link availability metric analysis and communication link reliability metric analysis. Through path overhead, reliability status and secure path overhead routing configuration, link reliability and secure path overhead are notified to the entire network and incorporated into the routing configuration strategy, forming comprehensive link status information of link secure path overhead, link communication overhead and link reliability status and notifying the entire network, completing routing configuration that takes into account safety performance, bandwidth performance and reliability performance.

[0010] Preferably, the above method quantifies the path overhead by analyzing the communication consumption between communication nodes, monitoring and recording the consumption value of each path; monitoring the bit error rate of data transmission of communication nodes, setting thresholds according to each reliability, and quantifying the communication reliability status; establishing a remote connection between multiple different users through a communication link that transmits quantum signals and communication signals in parallel, and remotely and synchronously sharing quantum bits, wherein one user realizes real-time monitoring of the communication link using the quantum bit error rate as a physical quantity, and the measured results are unified as a link security path overhead that can be quantitatively evaluated.

[0011] Preferably, the above method specifically comprises the following steps:

[0012] Step 1: Construct a communication link security metric analysis based on quantum bit error, and realize the synchronous sharing of quantum bits by remote users through the quantum key distribution system; the router monitors the quantum bit error rate of all connected communication links in real time, and quantitatively measures the security of the communication link through the measured value of the quantum bit error rate;

[0013] Step 2: Construct a communication link availability metric analysis based on timeliness, use the SPF calculation method to calculate the cost value between each node in the link as the routing metric, and form a weighted vector network topology structure based on the cost value;

[0014] Step 3: Construct a communication link reliability metric analysis based on bit error rate. The router monitors the bit error rate of all connected links in real time, divides the result values ​​into different levels according to the value range, assigns different weight values ​​to different levels, and quantitatively measures the reliability of the communication link through the defined bit error rate weight value.

[0015] Step 4: The router accumulates the path security metric, availability metric, and reliability metric to obtain a comprehensive cost.

[0016] Preferably, in the above-mentioned step 1, quantum bit transmission, end-to-end transmission of quantum bits is achieved through a quantum key distribution system, and quantum signals and classical signals modulated in different bands will share the same spatial channel for transmission.

[0017] Preferably, the above-mentioned quantum bit error rate monitoring and link security path overhead generation quantitatively evaluate the quantum bit error rate degradation of the connected communication links in units of routers, and normalize the link security index to the bit error rate index.

[0018] Preferably, the above analysis based on quantum error link monitoring includes:

[0019] S1. One party uses the quantum bit error rate as a physical quantity to achieve real-time monitoring of the communication link, and uses the measured results as a link security path overhead that can be quantitatively evaluated. The link security path overhead is notified to the entire network and incorporated into the routing configuration strategy. Relying on the robustness of the communication network, security concern information can be used to circumvent the potential danger link, and remote users can share quantum bits synchronously.

[0020] S2. Remote users share information in accordance with the uncertainty principle, the non-replicability principle, and the non-cloning principle. Through negotiation interaction and information post-processing, the two parties can calculate the quantum bit error rate and obtain the effective quantum bit sequence. The quantum key distribution system can be used to achieve synchronous sharing of quantum bits.

[0021] Preferably, the above-mentioned remote users are interconnected by a communication link that transmits classical signals and quantum signals in parallel. The sender A generates a binary random number sequence, modulates it into a quantum state and sends it to the receiver B; the receiver measures the quantum state and exchanges its measurement method with the sender through a reverse communication link to estimate the information that may be obtained by an eavesdropper; the sender and the receiver determine the quantum bit error rate through negotiation and interaction.

[0022] Preferably, the above step 2 adopts the Floyd-Warshall algorithm, uses a two-dimensional array MAP to store the weight of each edge, and the result is stored in a link state database (LSDB).

[0023] Preferably, the information routing forwarding in step 3 above will avoid all links that are determined to have been invaded. If there are multiple optional routes, a path with low link overhead and low bit error rate is selected as the best route.

[0024] The present invention provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the above method is implemented.

[0025] Compared with the prior art, the present invention has achieved the following remarkable effects:

[0026] First, the present invention is mainly applied to the physical layer of the communication network. After the attacker intercepts the communication signal from the channel, it is necessary to perform inverse waveform transformation to obtain the logical information and perform subsequent (decoding) operations, which greatly increases the difficulty for the attacker to eavesdrop on the plaintext information.

[0027] Secondly, the present invention can realize synchronous sharing of waveform transformation between the two communicating parties through synchronous sharing of quantum true random numbers. Digital quantum bits can realize hidden transmission of dozens of (or more) data bits. The higher the complexity of the interference waveform, the longer the duration, and the larger the amount of data that can be hidden by a single interference waveform, the lower the demand for quantum bit rate. In other words, the fixed rate quantum distribution system can support a larger amount of secure communication data.

[0028] Thirdly, the shared waveform library includes but is not limited to discrete signal waveforms, sine and cosine waveforms of various frequencies, triangle waveforms / square waveforms / sawtooth waveforms and other types of irregular waveforms and their superposition forms. The waveform sharing rules include but are not limited to one-to-one mapping (selecting a single waveform according to the fixed-length quantum bit number), one-to-many mapping (selecting multiple waveforms according to the fixed-length quantum bit number for weighted superposition), etc., which theoretically has infinitely complex compilation capabilities;

[0029] Finally, the secure communication scheme described in the present invention can operate together with various types of passwords, that is, the information input into the secure communication system can be either plaintext or ciphertext. The present invention only provides secure communication services at the channel level (based on quantum distribution waveform sharing), which has no impact on the upper layer structure of the communication network and is highly compatible with the existing communication network architecture. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solution of the embodiment of the present invention, the following briefly introduces the drawings required for use in the embodiment of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0031] Figure 1 A schematic diagram of the process of the routing configuration method based on error analysis of the present invention is shown;

[0032] Figure 2 A schematic diagram of a weighted vector topology based on cost value generated in a routing configuration method based on error analysis of the present invention is shown;

[0033] Figure 3 shows a schematic diagram of traditional path overhead;

[0034] Figure 4 A schematic diagram showing the availability, reliability and security overhead of the routing configuration method based on error analysis of the present invention is shown;

[0035] Figure 5 A schematic diagram of a router (interface) having a quantum bit error monitoring function in a routing configuration method based on bit error analysis of the present invention is shown;

[0036] Figure 6A schematic diagram of routing configuration for quantum bit error link monitoring in the routing configuration method based on bit error analysis of the present invention is shown. DETAILED DESCRIPTION

[0037] The features and exemplary embodiments of various aspects of the present invention will be described in detail below. In order to make the purpose, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and Examples. It should be understood that the specific embodiments described herein are only configured to explain the present invention and are not configured to limit the present invention. For those skilled in the art, the present invention can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present invention by illustrating examples of the present invention.

[0038] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0039] The present invention provides an embodiment of a routing configuration method based on error analysis, including communication link security metric analysis, communication link availability metric analysis and communication link reliability metric analysis. Through path overhead, reliability status and secure path overhead routing configuration, link reliability and secure path overhead are notified to the entire network and incorporated into the routing configuration strategy, forming comprehensive link status information of link secure path overhead, link communication overhead and link reliability status and notifying the entire network, thereby completing routing configuration that takes into account security performance, bandwidth performance and reliability performance.

[0040] In some embodiments, the communication consumption between communication nodes is analyzed, the consumption value of each path is monitored and recorded, and the path overhead is quantified; the bit error rate of data transmission of the communication nodes is monitored, and the threshold value is set according to each reliability to quantify the communication reliability status; a communication link through which quantum signals and communication signals are transmitted in parallel is remotely connected between multiple different users, and quantum bits are remotely and synchronously shared, in which one user uses the quantum bit error rate as a physical quantity to realize real-time monitoring of the communication link, and the measured results are unified as a link security path overhead that can be quantitatively evaluated.

[0041] like Figure 1 As shown, the present invention provides an embodiment of a routing configuration method based on error analysis, comprising the following steps:

[0042] Step 1: Construct a communication link security metric analysis based on quantum bit error, and realize the synchronous sharing of quantum bits by remote users through the quantum key distribution system; the router monitors the quantum bit error rate of all connected communication links in real time, and quantitatively measures the security of the communication link through the measured value of the quantum bit error rate;

[0043] Step 2: Construct a communication link availability metric analysis based on timeliness, use the SPF calculation method to calculate the cost value between each node in the link as the routing metric, and form a weighted vector network topology structure based on the cost value;

[0044] Step 3: Construct a communication link reliability metric analysis based on bit error rate. The router monitors the bit error rate of all connected links in real time, divides the result values ​​into different levels according to the value range, assigns different weight values ​​to different levels, and quantitatively measures the reliability of the communication link through the defined bit error rate weight value.

[0045] Step 4: The router accumulates the path security metric, availability metric, and reliability metric to obtain a comprehensive cost.

[0046] In some embodiments, step one of quantum bit transmission is to achieve end-to-end transmission of quantum bits through a quantum key distribution system, and quantum signals and classical signals modulated in different bands will share the same spatial channel for transmission.

[0047] In some embodiments, quantum bit error rate monitoring and link security path overhead generation are used to quantitatively evaluate the quantum bit error rate degradation of connected communication links on a router basis, and the link security index is normalized to the bit error rate index.

[0048] In some embodiments, analysis based on quantum error link monitoring includes:

[0049] S1. One party uses the quantum bit error rate as a physical quantity to achieve real-time monitoring of the communication link, and uses the measured results as a link security path overhead that can be quantitatively evaluated. The link security path overhead is notified to the entire network and incorporated into the routing configuration strategy. Relying on the robustness of the communication network, security concern information can be used to circumvent the potential danger link, and remote users can share quantum bits synchronously.

[0050] S2. Remote users share information in accordance with the uncertainty principle, the non-replicability principle, and the non-cloning principle. Through negotiation interaction and information post-processing, the two parties can calculate the quantum bit error rate and obtain the effective quantum bit sequence. The quantum key distribution system can be used to achieve synchronous sharing of quantum bits.

[0051] In some embodiments, remote users are interconnected by a communication link that transmits classical signals and quantum signals in parallel. Sender A generates a binary random number sequence, modulates it into a quantum state and sends it to receiver B. The receiver measures the quantum state and exchanges its measurement method with the sender through a reverse communication link to estimate the information that an eavesdropper may obtain. The sender and receiver determine the quantum bit error rate through negotiated interaction.

[0052] In some embodiments, step 2 uses the Floyd-Warshall algorithm, uses a two-dimensional array MAP to store the weight of each edge, and the result is stored in a link state database (LSDB).

[0053] In some embodiments, the information routing forwarding in step 3 will avoid all links that are determined to have been invaded. If there are multiple optional routes, a path with low link overhead and low bit error rate is selected as the best route.

[0054] This embodiment provides a routing configuration method based on error analysis, which includes three parts: constructing a communication link security metric analysis based on quantum error, constructing a communication link availability metric analysis based on timeliness, and constructing a communication link reliability metric analysis based on bit error rate, forming comprehensive link status information of link security path overhead, link communication overhead, and link reliability status and notifying the entire network, completing routing configuration that takes into account security performance, bandwidth performance, and reliability performance.

[0055] 1. Construct a communication link security metric analysis based on quantum bit error.

[0056] The quantum key distribution system is used to achieve synchronous sharing of quantum bits by remote users (directly connected to routers); the router monitors the quantum bit error rate of all connected communication links in real time, and the security of the communication link is quantitatively measured by the measured value of the quantum bit error rate. In particular, when the quantum bit error rate is higher than the threshold, the communication link is considered to be completely unsafe (i.e., it has been attacked).

[0057] Quantum bit transmission, that is, the end-to-end transmission of quantum bits is achieved through the quantum key distribution system. It should be noted that quantum signals and classical signals modulated in different bands will share the same spatial channel (fiber paralleling) for transmission;

[0058] Quantum bit error rate monitoring and link security path overhead generation: quantitatively evaluate the quantum bit error rate degradation of the connected communication links in units of routers, and normalize the link security index to the bit error rate index;

[0059] The present invention provides an analysis embodiment based on quantum error link monitoring, including:

[0060] (1) Remote users (directly connected to the router) synchronously share quantum bits.

[0061] One of the parties uses the quantum bit error rate as a physical quantity to achieve real-time monitoring of the communication link, and uses the measured results as the link security path overhead that can be quantitatively evaluated (when the measured results are higher than the threshold, the link security path overhead is infinite). Drawing on the traditional minimum path overhead routing configuration idea, the link security path overhead notification to the entire network is incorporated into the routing configuration strategy. Relying on the robustness of the communication network, security concern information is used to circumvent the risk links, providing an important reference for large-scale practical safe and reliable communication networks.

[0062] (2) Synchronous sharing of quantum bits can be achieved through the quantum key distribution system.

[0063] The information shared by remote users (directly connected routers) meets the uncertainty principle, the non-copyability principle, and the non-cloning principle. The two parties can calculate the quantum bit error rate and obtain a valid quantum bit sequence through negotiation interaction and information post-processing. Remote users (directly connected routers) are interconnected by a communication link that transmits classical signals and quantum signals in parallel. Sender A generates a binary random number sequence, modulates it into a quantum state, and sends it to receiver B; the receiver measures the quantum state and exchanges its measurement method (not the measurement result) with the sender through a reverse communication link to estimate the information that an eavesdropper may obtain; the sender and receiver determine the quantum bit error rate through negotiation interaction;

[0064] Quantum key distribution protocols include but are not limited to BB84 protocol, E91 protocol, BBM92 protocol, high-dimensional quantum key distribution protocol, time-energy entanglement protocol, TF protocol, continuous variable quantum key distribution protocol, etc.; information carriers include but are not limited to light quanta, spin electrons, etc., quantum channels include but are not limited to optical fibers, cables, free space, etc., and coding degrees of freedom include but are not limited to polarization, time bits, phase, frequency, mode field, spin direction, etc.

[0065] The fiber-coaxial transmission mechanism of quantum signals and communication signals can be realized through a wavelength division multiplexing system, or through a mode division multiplexing system, a time division multiplexing system, or a polarization division multiplexing system. Its characteristics are: classical signals and quantum signals operate in different bands (or mode fields, time windows, polarization directions), the crosstalk between classical signals and quantum signals is low, and there is no nonlinear effect that significantly affects the transmission of quantum signals, and the classical signals and quantum signals can be effectively separated.

[0066] 2. Construct a communication link availability measurement analysis based on communication efficiency.

[0067] like Figure 2 As shown, the SPF calculation method is used to calculate the cost value between each node in the link as the routing metric, forming a weighted vector network topology structure based on the cost value. The Floyd-Warshall algorithm can be used to store the weight of each edge in a two-dimensional array MAP, and the result is stored in the link state database (LSDB).

[0068] Table 1 Breadth-first search path table

[0069] MAP A B C D A 0 5 ∞ ∞ B / 0 4 7 C / / 0 2 D / / / 0

[0070] As shown in Table 1, when analyzing the availability metric value based on the routing consumption, a path tree for communication between nodes is constructed. Taking the communication from A to D as an example, Figure 3 As shown in the figure, the shortest path (SPF) cost 11 has the highest weight, which is 1, and the longest path cost 12 has the lowest weight, which is 5. The lower the weight value, the lower the cost value and the higher the link availability.

[0071] 3. Construct a communication link reliability metric analysis based on bit error rate.

[0072] The router monitors the bit error rate of all connected links in real time. The lower the bit error rate, the smaller the probability of bit errors in data transmission, the higher the confidence level, and the higher the transmission reliability.

[0073] Based on the acceptable lower limit of the bit error rate (such as 10-12), the result value is divided into different levels according to the range of values, such as BER>10 -12 ∞ indicates that the link is unreliable, 10 -13 <BER≤10 -12 The weight is 5, 10 -13 <BER≤10 -12 The weight is 4, 10 -14 <BER≤10 -13 The weight is 3, 10 -15 <BER≤10 -14 The weight is 2, BER<10 -1The weight is 1; different levels are assigned different weight values, and the reliability of the communication link is quantitatively measured by the defined bit error rate weight value. The lower the weight value, the higher the link reliability. In particular, when the bit error rate is lower than the acceptable lower limit, that is, the weight is ∞, the communication link is considered to be completely unreliable and unsuitable for use.

[0074] like Figure 4 As shown in Figure 1, the comprehensive link state information (linkstate) is constructed by integrating the security, availability, and reliability metrics. The router can accumulate the path security metric, availability metric, and reliability metric to obtain the comprehensive overhead. The formed comprehensive overhead containing link security weight (quantum error), availability weight (path consumption), and reliability weight (bit error rate) is notified to the routers of the entire network or summarized in the routing control center of the entire network.

[0075] The comprehensive link security path overhead can be measured by the ratio of the actual quantum bit error rate to the theoretical value. When the quantum bit error rate is higher than a threshold (usually determined by the quantum key distribution protocol), a path overhead value is taken that can indicate that the link is disconnected. The routing configuration can be implemented based on the link security path overhead, or the quantum bit error rate can be converted into a quantitative parameter through other calculation methods and used as one of the routing configuration strategies.

[0076] The routing configuration technology aims to minimize the link security path overhead. Its characteristics are: information routing forwarding will avoid all links that have been determined to have been invaded. If there are multiple optional routes, a path with low link overhead and low bit error rate will be selected as the best route. The routing configuration technology can also weigh the link security path overhead, traditional path overhead, reliability status based on traditional bit error rate, or combine factors such as the transmission distance of each link, bandwidth allocation and traffic distribution to reasonably configure the route.

[0077] The process of notifying the entire network of link security status, path overhead, and reliability status can be achieved by notifying all routers in the entire network or aggregating them in the routing control center of the entire network. The routing algorithm can be run independently in each router or uniformly in the routing control center of the entire network. The routing configuration strategy can be implemented by notifying each router or uniformly implemented by the routing control center of the entire network. There is no limit on the routing configuration strategy data format, manual or automatic configuration mode, router structure, interface type, forwarding method, networking method, etc.

[0078] The present invention also provides an embodiment of a computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, the steps of the above method are implemented.

[0079] like Figure 5As shown, the present invention provides an embodiment of a router (interface) with a quantum error monitoring function, in which a classical signal modulated in the X-band and a quantum signal modulated in the Y-band are combined through a wavelength division multiplexer (Wavelength-division Multiplexing, WDM) and transmitted to the input end of the router (interface) via a common fiber.

[0080] The X-band and Y-band must meet the following conditions:

[0081] (1) The X-band and the Y-band do not overlap in the spectrum;

[0082] (2) Various nonlinear effects in the X-band, such as stimulated Raman scattering and four-wave mixing, will not have a serious impact on the Y-band quantum signals;

[0083] (3) The transmission loss of X-band and Y-band in single-mode optical fiber is as small as possible;

[0084] (4) WDM's X-band channels have high isolation from the Y-band, and vice versa;

[0085] (5) The crosstalk between the X-band and the Y-band can be ignored.

[0086] The router (interface) shown in the figure receives classical signals and quantum signals from the optical fiber at the same time and separates them through WDM; the classical signal is detected by a classical communication detector, and the obtained data information is input into the cache, and the traditional path overhead is analyzed from a logical level (bandwidth flow, distance delay); the quantum signal is detected by a single-photon detector and the actual value of the quantum bit error rate is obtained (through negotiation), which is compared with the theoretical value of the quantum bit error rate (which is directly related to the length of the optical fiber link) to form a link security path overhead; the traditional path overhead and the link security path overhead are simultaneously input into the routing algorithm to form a comprehensive path overhead and announced to the entire network through the classical channel; the data output from the cache also needs to be forwarded to the next-hop device through the classical channel. It should be noted that the classical communication detector, cache, routing algorithm with traditional path overhead as input, classical signal transmitter and other parts in the figure are components of traditional routers (interfaces); single-photon detectors, routing algorithms with link security path overhead (quantum bit error rate calculation results) as input, and quantum signal transmitters constitute the quantum error link monitoring system; except for the shared fiber channel, routing algorithm and other necessary interface equipment, the classical signal flow and quantum signal flow can be regarded as running independently, which is completely different from the classical signal-quantum signal encryption and decryption process in the quantum secure communication system.

[0087] like Figure 6As shown, the present invention discloses a routing configuration embodiment based on quantum error link monitoring. If the host in the lower left corner wants to establish a dialogue with the host in the upper right corner, it needs to go through a three-horizontal and three-vertical grid communication network composed of routers; the black numbers in the figure represent the traditional path overhead of each link. According to the principle of minimum path overhead, the two hosts will establish a connection relationship through five routers (1, 1)-(1, 2)-(2, 2)-(3, 2)-(3, 3). At this time, the sum of the traditional path overhead is 5; the gray numbers in the figure represent the link reliability overhead, which is related to the bit error rate. The lower the bit error rate, the higher the link reliability. The bit error rate is higher than the threshold. When the value is greater than , the link is judged to be unreliable and can be marked as a broken circuit. The blue number in the figure represents the link security path overhead, which is negatively correlated with the degree of degradation of the quantum bit error rate. That is, the closer the quantum bit error rate is to the theoretical value, the smaller the link security path overhead value is. If the quantum bit error rate is higher than the threshold, it is judged that the link is under attack and marked as a broken circuit. Finally, considering the link availability overhead, reliability overhead, and security overhead, according to the principle of minimum link path overhead, the two hosts will establish a connection relationship through five routers (1, 1)-(1, 2)-(1, 3)-(2, 3)-(3, 3). At this time, the sum of the link comprehensive overhead is 15 and the sum of the traditional path overhead is 6. Figure 6 Only the simplest case is shown, where the minimum algebraic sum (rather than weighted sum) of the traditional path overhead and the link security path overhead is used as the routing configuration standard; in actual applications, factors such as the transmission distance of each link, bandwidth allocation, and traffic distribution must also be considered.

[0088] The present invention discloses an embodiment. Firstly, a quantum bit module (quantum bit transmission or quantum bit reception) is installed in a local router equipped with an optical module (light transmission and light reception), and the quantum bit module is integrated into the same interface through a wavelength division multiplexing system, so as to ensure that the crosstalk between the quantum signal working band and the classical (optical) signal working band is low; secondly, an adjacent router connected to the local router by a single hop will negotiate with the local router the quantum signal transmission and reception rules, and for a specific communication link (here, a communication optical fiber), the local router will serve as a quantum bit transmission end or a quantum bit reception end; thirdly, the local router will calculate the theoretical value of the quantum bit error rate for the communication link that undertakes the quantum bit reception end according to factors such as the quantum bit encoding type (i.e., quantum key distribution protocol), the communication link loss (optical fiber distance), the quantum light source and the single photon detector working frequency, monitor the measured value and compare it with the theoretical value, so as to form a quantitative value (or fuse value) of the link security path overhead; finally, the local router will notify the whole network routers of the real-time calculation result of the link security path overhead that it undertakes the quantum bit reception end or summarize it in the whole network routing control center, so as to form various routing configuration strategies and complete the routing configuration that takes into account both bandwidth performance and security performance.

[0089] Another simple embodiment provided by the present invention is a routing configuration technology based on error detection. Compared with the traditional technology, it adds a quantum error monitoring function. Remote users (directly connected routers) share quantum bits. One party uses the quantum bit error rate as a physical quantity to realize real-time monitoring of the communication link, and uses the measured result as a link security path overhead that can be quantitatively evaluated (when the measured result is higher than the threshold, the link security path overhead is infinite). Drawing on the traditional minimum path overhead routing configuration idea, the link security path overhead is incorporated into the routing configuration strategy. Relying on the robustness of the communication network, security concern information can be used to circumvent the potential danger link, providing an important reference for large-scale practical safe and reliable communication networks.

[0090] The embodiment of the routing configuration method based on error analysis provided by the present invention is a routing configuration method based on communication efficiency, bit error rate analysis, and quantum error rate analysis; by analyzing the communication consumption between communication nodes, monitoring and recording the consumption value of each path, and quantifying the path overhead; monitoring the bit error rate of data transmission of communication nodes, setting thresholds according to each reliability, and quantifying the communication reliability state; establishing a remote connection between multiple different users through a communication link that transmits quantum signals and communication signals in parallel, remotely and synchronously sharing quantum bits, wherein one user uses the quantum bit error rate as a physical quantity to realize real-time monitoring of the communication link, and the measured results are identical to the link security path overhead that can be quantitatively evaluated. Through the routing configuration of path overhead, reliability status, and secure path overhead, the link reliability and secure path overhead are notified to the entire network and incorporated into the routing configuration strategy.

[0091] In some embodiments, the fiber-coaxial transmission mechanism of quantum signals and communication signals can be realized through a wavelength division multiplexing system, or through a mode division multiplexing system, a time division multiplexing system, or a polarization division multiplexing system, and is characterized in that classical signals and quantum signals operate in different bands (or mode fields, time windows, polarization directions), the crosstalk between classical signals and quantum signals is low, and no nonlinear effects that significantly affect the transmission of quantum signals occur, and the classical signals and quantum signals can be effectively separated.

[0092] In some embodiments, the link reliability status can be measured by the ratio of the actual measured value of the bit error rate to the theoretical expected value. When the bit error rate is higher than a threshold (the highest requirement of the communication protocol for the bit error rate), a path overhead value that can identify the link as unreliable is taken; the link security path overhead can be measured by the ratio of the actual measured value of the quantum bit error rate to the theoretical value. When the quantum bit error rate is higher than a threshold (usually depending on the quantum key distribution protocol), a path overhead value that can indicate that the link is disconnected is taken; the routing configuration can be implemented based on the link security path overhead, and the quantum bit error rate can also be converted into a quantitative parameter through other calculation methods and used to formulate a routing configuration strategy.

[0093] In some embodiments, the minimum path cost routing configuration avoids all links that are determined to have been invaded and unreliable links through information routing forwarding. If there are multiple optional routes, the path with the smallest link security and reliable path cost is selected as the best route.

[0094] In some embodiments, the minimum path cost routing configuration may also balance the link security path cost, reliability status and traditional path cost, or reasonably configure the routing by combining factors such as the transmission distance of each link, bandwidth allocation and traffic distribution.

[0095] In some embodiments, the process of notifying the entire network of link security and reliable path costs is achieved by notifying the entire network of routers or aggregating them in the entire network routing control center. The routing algorithm can be run independently in each router or uniformly in the entire network routing control center.

[0096] In some embodiments, the routing configuration policy can be implemented by each router announcement or by the routing control center of the entire network. There are no restrictions on the routing configuration policy data format, manual or automatic configuration mode, router structure, interface type, forwarding method, networking method, etc.

[0097] Compared with the prior art, the present invention comprehensively considers link reliability and security on the basis of traditional routing overhead calculation, quantifies link reliability and security, and comprehensively obtains a routing configuration method that satisfies low overhead, high reliability, and high security at the same time. Different from traditional technology, the newly added quantum bit error rate monitoring in the direction of security is essentially a sensing technology, that is, the quantum bit error rate is used as a physical parameter to perform perimeter warning of the intrusion situation of the communication link (such as optical fiber). The communicating parties can still obtain a certain number of quantum bits, and thus encrypt and decrypt important information. In view of this, the present invention can combine the advantages of quantum secure communication technology and sensor line monitoring technology.

[0098] Compared with quantum secure communication technology, the solution of the present invention also has the following advantages:

[0099] (1) Only the deviation of the quantum bit error rate from the theoretical value (communication link performance degradation) and whether it is higher than the threshold (link intrusion) are of concern, and no high requirements are made on the quantum bit rate. This is different from the working mode of quantum secure communication, which requires a compromise between a higher communication rate and a longer transmission distance. That is, the present invention can increase the transmission distance as much as possible on the basis of the quantum bit error rate being higher than the threshold;

[0100] (2) Thanks to the network-wide notification mechanism, a single communication link only needs to monitor the quantum bit error rate in a single direction (without the need to equip both ends of the link with exactly the same quantum transceiver equipment). At the same time, the parallel fiber transmission mechanism of classical and quantum signals ensures that the quantum bit error rate directly reflects the link security.

[0101] (3) The technical solution of the present invention has a high tolerance for the stability of quantum bit transmission. A significant increase in the quantum bit error rate can be identified as a degradation of the working performance of the communication link. However, it will not have a significant impact on network performance until the threshold is exceeded to determine intrusion or the forwarding strategy is changed according to the path overhead;

[0102] (4) For communication networks with different topologies, the routing configuration technology described in the present invention can ensure different levels of link security. In extreme cases, cutting off all invaded communication links will not cause physical isolation between any users in the entire network. In this case, the present invention can achieve security protection from the perspective of the entire network link (bandwidth may be affected).

[0103] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0104] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0105] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0106] The present application may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0107] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0108] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0109] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0110] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0111] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0112] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0113] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0114] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A routing configuration method based on error analysis, characterized in that The method includes communication link security metric analysis, communication link availability metric analysis and communication link reliability metric analysis. Through path overhead, reliability status and secure path overhead routing configuration, link reliability and secure path overhead are notified to the entire network and incorporated into the routing configuration strategy, forming comprehensive link status information of link secure path overhead, link communication overhead and link reliability status and notifying the entire network, completing routing configuration that takes into account security performance, bandwidth performance and reliability performance.

2. The method for routing configuration based on error analysis according to claim 1, characterized in that The method analyzes the communication consumption between communication nodes, monitors and records the consumption value of each path, and quantifies the path overhead; monitors the bit error rate of data transmission of communication nodes, sets thresholds according to each reliability, and quantifies the communication reliability status; establishes a remote connection between multiple different users through a communication link that transmits quantum signals and communication signals in parallel, and remotely and synchronously shares quantum bits, wherein one user uses the quantum bit error rate as a physical quantity to realize real-time monitoring of the communication link, and the measured results are unified as a link security path overhead that can be quantitatively evaluated.

3. The method for routing configuration based on error analysis according to claim 1 or 2, characterized in that The method specifically comprises the following steps: Step 1: Construct a communication link security metric analysis based on quantum bit error, and realize the synchronous sharing of quantum bits by remote users through the quantum key distribution system; the router monitors the quantum bit error rate of all connected communication links in real time, and quantitatively measures the security of the communication link through the measured value of the quantum bit error rate; Step 2: Construct a communication link availability metric analysis based on timeliness, use the SPF calculation method to calculate the cost value between each node in the link as the routing metric, and form a weighted vector network topology structure based on the cost value; Step 3: Construct a communication link reliability metric analysis based on bit error rate. The router monitors the bit error rate of all connected links in real time, divides the result values ​​into different levels according to the value range, assigns different weight values ​​to different levels, and quantitatively measures the reliability of the communication link through the defined bit error rate weight value. Step 4: The router accumulates the path security metric, availability metric, and reliability metric to obtain a comprehensive cost.

4. The method for routing configuration based on error analysis according to claim 3 is characterized in that The step 1 quantum bit transmission is to realize the end-to-end transmission of quantum bits through a quantum key distribution system, and quantum signals and classical signals modulated in different bands will share the same spatial channel for transmission.

5. The method for routing configuration based on error analysis according to claim 3 or 4, characterized in that The quantum bit error rate monitoring and link security path overhead generation quantitatively evaluate the quantum bit error rate degradation of the connected communication links in units of routers, and normalize the link security index to the bit error rate index.

6. The method for routing configuration based on error analysis according to claim 5, characterized in that Analysis based on quantum error link monitoring includes: S1. One party uses the quantum bit error rate as a physical quantity to achieve real-time monitoring of the communication link, and uses the measured results as a link security path overhead that can be quantitatively evaluated. The link security path overhead is notified to the entire network and incorporated into the routing configuration strategy. Relying on the robustness of the communication network, security concern information can be used to circumvent the potential danger link, and remote users can share quantum bits synchronously. S2. Remote users share information in accordance with the uncertainty principle, the non-replicability principle, and the non-cloning principle. Through negotiation interaction and information post-processing, the two parties can calculate the quantum bit error rate and obtain the effective quantum bit sequence. The quantum key distribution system can be used to achieve synchronous sharing of quantum bits.

7. The method for routing configuration based on error analysis according to claim 6, characterized in that: The remote users are interconnected by a communication link that transmits classical signals and quantum signals in parallel. The sender A generates a binary random number sequence, modulates it into a quantum state and sends it to the receiver B; the receiver measures the quantum state and exchanges its measurement method with the sender through a reverse communication link to estimate the information that an eavesdropper may obtain; the sender and the receiver determine the quantum bit error rate through negotiation and interaction.

8. The method for routing configuration based on error analysis according to claim 3, characterized in that The step 2 adopts the Floyd-Warshall algorithm, uses a two-dimensional array MAP to store the weight of each edge, and the result is stored in a link state database (LSDB).

9. The method for routing configuration based on error analysis according to claim 3, characterized in that The information routing forwarding in step 3 will avoid all links that are determined to have been invaded. If there are multiple optional routes, a path with low link overhead and low bit error rate is selected as the best route.

10. A computer-readable storage medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the method according to any one of claims 1 to 9.

Images