Quantum key distribution method and device of gateway network element based on optical transport network

Abstract

The embodiment of the invention provides a quantum key distribution method and device of a gateway network element based on an optical transport network, applied to a home terminal quantum gateway, and the method comprises the following steps: receiving a first key acquisition request sent by home terminal optical transport network equipment; the first key acquisition request is used for indicating to acquire a quantum key paired with opposite-end optical transport network equipment; sending a second key acquisition request to a home terminal quantum cryptography service platform corresponding to home terminal optical transport network equipment according to the first key acquisition request; receiving the quantum key which is paired with the opposite-end optical transport network equipment and is sent by the home-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transport network equipment is acquired by calling a home-end quantum network node by the home-end quantum cryptography service platform; and the quantum key paired with the opposite-end optical transport network equipment is sent to the local-end optical transport network equipment, so that local and cross-domain quantum key distribution is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of quantum secure communication, and in particular to a quantum key distribution method and device based on a gateway network element of an optical transmission network. Background Art

[0002] Currently, operators' network transmission channels mainly use OTN (Optical Transport Network) for data transmission, and the security of OTN transmission mainly depends on key privacy and computational complexity. However, with the development of attack technology and the enhancement of human computing power, lossless eavesdropping and camouflage attack methods have emerged for optical cables. At the same time, with the gradual maturity of quantum computing technology, the difficulty and time of cracking traditional encryption algorithms based on computational complexity have decreased exponentially, and the risk of cracking traditional confidentiality systems is increasing day by day.

[0003] In order to achieve confidential communication, node devices in the network usually need to encrypt information with keys when conducting business communications. QKD (Quantum Key Distribution) technology is increasingly being used because of its theoretical advantage of "unconditional security". At present, quantum key distribution networks are being built simultaneously in cities across the country. How to distribute cross-domain quantum keys nearby is a problem currently faced. Summary of the invention

[0004] In order to solve the above problems, an embodiment of the present invention discloses a quantum key distribution method and device based on a gateway network element of an optical transmission network.

[0005] In a first aspect, an embodiment of the present invention provides a quantum key distribution method based on a gateway network element of an optical transmission network, which is applied to a local quantum gateway, and the method includes:

[0006] Receiving a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0007] Sending a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the first key acquisition request;

[0008] receiving the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transmission network device is acquired by the local-end quantum cryptography service platform calling the local-end quantum network node;

[0009] The quantum key paired with the opposite-end optical transmission network device is sent to the local-end optical transmission network device.

[0010] Optionally, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0011] Optionally, the second key acquisition request further includes an address of the local quantum gateway, and the receiving the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request includes:

[0012] Receive the quantum key paired with the opposite-end optical transmission network device, which is sent by the local-end quantum cryptography service platform according to the address of the local-end quantum gateway.

[0013] Optionally, before receiving the first key acquisition request sent by the local optical transport network device, the method further includes:

[0014] According to the identification code and encrypted port number of the local optical transmission network device, the local optical transmission network device is registered to the local network management platform, so that the integrated network management platform obtains the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtains the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then sends the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform, and the networking operation platform establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device.

[0015] Optionally, the quantum key paired with the opposite optical transmission network device is called by the service management platform to a quantum network link control center according to the service path paired between the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0016] In a second aspect, an embodiment of the present invention provides a quantum key distribution method based on a gateway network element of an optical transmission network, which is applied to a local quantum cryptography service platform, and the method includes:

[0017] Receiving a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0018] According to the second key acquisition request, calling the local quantum network node to acquire the quantum key paired with the opposite optical transmission network device;

[0019] The quantum key paired with the opposite-end optical transmission network device is sent to the local-end quantum gateway, so that the local-end quantum gateway sends the quantum key paired with the opposite-end optical transmission network device to the local-end optical transmission network device.

[0020] Optionally, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device, and calling the local quantum network node to acquire the quantum key paired with the opposite optical transmission network device according to the second key acquisition request includes:

[0021] According to the identification code and encryption port number of the local optical transmission network device, obtaining the identification code and encryption port number of the opposite optical transmission network device from the networking operation platform;

[0022] According to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, obtaining the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform from the service management platform;

[0023] According to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform, the local quantum network node is called to obtain the quantum key paired with the opposite optical transmission network device.

[0024] Optionally, the second key acquisition request further includes an address of the local quantum gateway, and the sending the quantum key paired with the opposite optical transmission network device to the local quantum gateway includes:

[0025] According to the address of the local quantum gateway, the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway.

[0026] Optionally, the quantum key paired with the opposite optical transmission network device is called by the service management platform to a quantum network link control center according to the service path paired between the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0027] Optionally, the service path of the paired local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform to be established by the networking operation platform.

[0028] In a third aspect, an embodiment of the present invention provides a quantum key distribution method based on a gateway network element of an optical transmission network, which is applied to a local optical transmission network device, and the method includes:

[0029] Sending a first key acquisition request to the local quantum gateway, where the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0030] The quantum key paired with the opposite-end optical transmission network device is received and sent by the local quantum gateway; the quantum key paired with the opposite-end optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request.

[0031] Optionally, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0032] Optionally, the second key acquisition request also includes the address of the local quantum gateway, and the quantum key paired with the opposite optical transmission network device is sent by the local quantum cryptography service platform to the local quantum gateway according to the address of the local quantum gateway.

[0033] Optionally, the quantum key paired with the opposite optical transmission network device is called by the service management platform to a quantum network link control center according to the service path paired between the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0034] Optionally, the service path of the paired local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform to be established by the networking operation platform.

[0035] In a fourth aspect, an embodiment of the present invention provides a quantum key distribution system based on a gateway network element of an optical transmission network, the system comprising: a local quantum gateway, a local quantum cryptography service platform, a local optical transmission network device and a local quantum network node;

[0036] The local quantum gateway is configured to receive a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to acquire a quantum key paired with the opposite optical transmission network device; according to the first key acquisition request, send a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform calling a local quantum network node; send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0037] The local quantum cryptography service platform is used to receive a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; according to the second key acquisition request, the local quantum network node is called to obtain the quantum key paired with the opposite optical transmission network device; the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0038] The local optical transmission network device is used to send a first key acquisition request to the local quantum gateway, where the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request;

[0039] The local quantum network node is used to obtain the quantum key paired with the opposite optical transmission network device.

[0040] Optionally, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the system further includes: a networking operation platform and a service management platform;

[0041] The local quantum cryptography service platform is further used to obtain the identification code and encryption port number of the opposite optical transmission network device from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; obtain the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device; call the local quantum network node to obtain the quantum key paired with the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform;

[0042] The networking operation platform is used to send the identification code and encryption port number of the opposite-end optical transmission network device to the local quantum cryptography service platform;

[0043] The business management platform is used to send the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform to the local quantum cryptography service platform.

[0044] Optionally, the second key acquisition request further includes an address of the local quantum gateway;

[0045] The local quantum gateway is further configured to receive the quantum key paired with the opposite optical transmission network device, which is sent by the local quantum cryptography service platform according to the address of the local quantum gateway;

[0046] The local quantum cryptography service platform is also used to send the quantum key paired with the opposite-end optical transmission network device to the local quantum gateway according to the address of the local quantum gateway.

[0047] Optionally, the system further comprises: a local network management platform and an integrated network management platform;

[0048] The local quantum gateway is further used to register the local optical transmission network device to the local network management platform according to the identification code and encryption port number of the local optical transmission network device;

[0049] The local network management platform is used to register the local optical transmission network device according to the identification code and encryption port number of the local optical transmission network device; and send the identification code and encryption port number of the local optical transmission network device to the integrated network management platform;

[0050] The integrated network management platform is used to obtain the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtain the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform; send the identification code and encrypted port number of the local optical transmission network device, and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform;

[0051] The networking operation platform is also used to establish a service path for pairing the local optical transmission network device and the opposite optical transmission network device based on the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

[0052] Optionally, the system further comprises: a quantum network link control center;

[0053] The service management platform is further used to call the quantum network link control center according to the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform;

[0054] The quantum network link control center is used to negotiate and generate quantum keys using the quantum network nodes;

[0055] The quantum network nodes are also used to negotiate and generate quantum keys.

[0056] In a fifth aspect, an embodiment of the present invention provides a quantum key distribution device based on a gateway network element of an optical transmission network, which is applied to a local quantum gateway, and the device includes:

[0057] A first key request receiving module is used to receive a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0058] A second key request sending module is used to send a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the first key acquisition request;

[0059] A second quantum key receiving module is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transmission network device is acquired by the local-end quantum cryptography service platform calling the local-end quantum network node;

[0060] The first quantum key sending module is used to send the quantum key paired with the opposite end optical transmission network device to the local end optical transmission network device.

[0061] Optionally, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0062] Optionally, the second key acquisition request further includes an address of the local quantum gateway, and the second quantum key receiving module includes:

[0063] The second quantum key receiving submodule is used to receive the quantum key paired with the opposite-end optical transmission network device, which is sent by the local quantum cryptography service platform according to the address of the local quantum gateway.

[0064] Optionally, before the first key request receiving module, the device further includes:

[0065] A service path establishment module is used to register the local optical transmission network device to the local network management platform according to the identification code and encrypted port number of the local optical transmission network device, so that the integrated network management platform obtains the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtains the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then sends the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform, and the networking operation platform establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device.

[0066] Optionally, the quantum key paired with the opposite optical transmission network device is called by the service management platform to a quantum network link control center according to the service path paired between the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0067] In a sixth aspect, an embodiment of the present invention provides a quantum key distribution device based on a gateway network element of an optical transmission network, which is applied to a local quantum cryptography service platform, and the device includes:

[0068] A second key request receiving module is used to receive a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0069] A paired quantum key calling module, configured to call a local quantum network node to obtain the quantum key paired with the opposite optical transmission network device according to the second key acquisition request;

[0070] The second quantum key sending module is used to send the quantum key paired with the opposite-end optical transmission network device to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite-end optical transmission network device to the local optical transmission network device.

[0071] Optionally, the second key acquisition request includes an identification code and an encryption port number of the local optical transmission network device, and the pairing quantum key calling module includes:

[0072] A first device information acquisition submodule, configured to acquire the identification code and the encryption port number of the opposite optical transmission network device from the networking operation platform according to the identification code and the encryption port number of the local optical transmission network device;

[0073] A first platform information acquisition submodule, configured to acquire an identification code of the local-end quantum cryptography service platform and an identification code of the opposite-end quantum cryptography service platform from a service management platform according to an identification code of the local-end optical transmission network device and an identification code of the opposite-end optical transmission network device;

[0074] The paired quantum key calling submodule is used to call the local quantum network node to obtain the quantum key paired with the opposite-end optical transmission network device according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite-end optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite-end quantum cryptography service platform.

[0075] Optionally, the second key acquisition request further includes an address of the local quantum gateway, and the second quantum key sending module includes:

[0076] The second quantum key sending submodule is used to send the quantum key paired with the opposite-end optical transmission network device to the local-end quantum gateway according to the address of the local-end quantum gateway.

[0077] Optionally, the quantum key paired with the opposite optical transmission network device is called by the service management platform to a quantum network link control center according to the service path paired between the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0078] Optionally, the service path of the paired local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform to be established by the networking operation platform.

[0079] In a seventh aspect, an embodiment of the present invention provides a quantum key distribution device based on a gateway network element of an optical transmission network, which is applied to a local optical transmission network device, and the device includes:

[0080] A first key request sending module, used to send a first key acquisition request to the local quantum gateway, wherein the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0081] The first quantum key receiving module is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite-end optical transmission network device is acquired by the local quantum cryptography service platform according to the second key acquisition request sent by the local quantum gateway, calling the local quantum network node; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request.

[0082] Optionally, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0083] Optionally, the second key acquisition request also includes the address of the local quantum gateway, and the quantum key paired with the opposite optical transmission network device is sent by the local quantum cryptography service platform to the local quantum gateway according to the address of the local quantum gateway.

[0084] Optionally, the quantum key paired with the opposite optical transmission network device is called by the service management platform to a quantum network link control center according to the service path paired between the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0085] Optionally, the service path of the paired local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform to be established by the networking operation platform.

[0086] In an eighth aspect, the present invention shows an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned method for quantum key distribution of a gateway network element based on an optical transmission network when executing the computer program.

[0087] In a ninth aspect, the present invention shows a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned quantum key distribution method for a gateway network element based on an optical transmission network are implemented.

[0088] The embodiments of the present invention include the following advantages:

[0089] In an embodiment of the present invention, a first key acquisition request sent by a local optical transmission network device can be received through a local quantum gateway; the first key acquisition request is used to indicate the acquisition of a quantum key paired with an opposite optical transmission network device; according to the first key acquisition request, a second key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; a quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request is received; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform calling a local quantum network node; the quantum key paired with the opposite optical transmission network device is sent to the local optical transmission network device, so that the local optical transmission network device can be connected to the local quantum cryptography service platform of one city and one pool nearby, thereby realizing local and cross-domain quantum key distribution. BRIEF DESCRIPTION OF THE DRAWINGS

[0090] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0091] Figure 1 It is a flowchart of the steps of a quantum key distribution method based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0092] Figure 2 is a flowchart of another method for quantum key distribution based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0093] Figure 3 is a flowchart of another method for quantum key distribution based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0094] Figure 4 It is a logic diagram of a quantum key distribution method based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0095] Figure 5 It is a structural block diagram of a quantum key distribution system based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0096] Figure 6 It is a structural block diagram of a quantum key distribution device based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0097] Figure 7 It is a structural block diagram of another quantum key distribution device based on a gateway network element of an optical transmission network according to an embodiment of the present invention;

[0098] Figure 8 It is a structural block diagram of another quantum key distribution device based on a gateway network element of an optical transmission network according to an embodiment of the present invention.

[0099] Description of reference numerals:

[0100] Quantum key distribution system 50, local quantum gateway 51, local quantum cryptography service platform 52, local optical transmission network equipment 53, local quantum network node 54, networking operation platform 55, business management platform 56, local network management platform 57, integrated network management platform 58, quantum network link control center 59, opposite quantum gateway 510, opposite quantum cryptography service platform 511, opposite optical transmission network equipment 512, opposite quantum network node 513, quantum network node 514, opposite network management platform 515. DETAILED DESCRIPTION

[0101] The present invention proposes a quantum key distribution method based on a gateway network element of an optical transmission network, the purpose of which is to realize local and cross-domain quantum key distribution of quantum keys. In order to achieve this goal, the embodiment of the present invention uses a local quantum gateway in the optical transmission network to proxy the local optical transmission network device to apply for a quantum key from the local quantum cryptography service platform, and calls the quantum network node through the local quantum cryptography service platform to obtain the quantum key paired with the cross-domain opposite optical transmission network device, thereby realizing the integration and docking of the metropolitan construction of quantum network nodes and the metropolitan construction of optical transmission networks, and meeting the scenario-based application of local metropolitan key distribution and cross-domain quantum key distribution of optical transmission network devices.

[0102] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0103] Reference Figure 1 , shows a flowchart of a quantum key distribution method based on a gateway network element of an optical transmission network according to an embodiment of the present invention, which is applied to a local quantum gateway. The method may specifically include the following steps:

[0104] Step 101, receiving a first key acquisition request sent by a local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transmission network device;

[0105] In an embodiment of the present invention, a local quantum gateway may receive a first key acquisition request sent by a local optical transmission network device, wherein the first key acquisition request is used to indicate the acquisition of a quantum key paired with the opposite optical transmission network device, and the first key acquisition request may include an identification code and an encryption port number of the local optical transmission network device.

[0106] In one embodiment, before receiving the first key acquisition request sent by the local optical transmission network device, the method may further include: registering the local optical transmission network device to the local network management platform based on the identification code and encryption port number of the local optical transmission network device, so that the integrated network management platform obtains the identification code and encryption port number of the local optical transmission network device sent by the local network management platform, and obtains the identification code and encryption port number of the opposite optical transmission network device sent by the opposite network management platform, and then sends the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device to the networking operation platform, and the networking operation platform establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device.

[0107] In an embodiment of the present invention, after the local optical transmission network device is deployed and put online, it can be registered to the local network management platform by connecting to the local quantum gateway. The local network management platform can configure the quantum service path based on the dedicated line service information synchronized by the integrated network management platform. The integrated network management platform can push the configuration information of the quantum service path to the outside based on the message queue, including {the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device}. The networking operation platform obtains the configuration information of the service path according to the message queue, and then establishes the service path that pairs the local optical transmission network device with the opposite optical transmission network device according to the configuration information.

[0108] In the embodiment of the present invention, by registering the local optical transmission network device to the local network management platform, the local optical transmission network device can be authenticated. The authentication and authorization follows the GB 15843.2 standard, and uses the pre-filled quantum key to calculate HMAC (a+b) and HMAC (b+a) bidirectional authentication to achieve the authentication, registration and authorization of the local optical transmission network device, thereby ensuring the security of the access to the local optical transmission network device. The pre-filled quantum key is obtained by pre-filling the quantum key of the filling terminal of the local optical transmission network device through the local quantum cryptography service platform.

[0109] GB 15843.2 standard specifically refers to "Information Technology Security Technology Entity Authentication Part 2: Mechanisms Using Symmetric Encryption Algorithms". This standard specifies the methods and requirements for using symmetric encryption algorithms for entity authentication in the field of information technology. Entity authentication is the process of ensuring the authenticity of the identities of both parties in communication. It involves verifying whether the identity of an entity (such as a user, device or system) is consistent with its claimed identity. In the field of information security, entity authentication is a key step in preventing unauthorized access and protecting data integrity. HMAC is the abbreviation of "Hash-based Message Authentication Code", which means "hash-based message authentication code". HMAC is a specific type of message authentication code (MAC) that uses a cryptographic hash function (such as MD5, SHA-1, SHA-256, etc.) and a key to generate a fixed-length authentication tag. This tag can then be used to verify the integrity and authenticity of the message.

[0110] In one embodiment, the quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0111] In the embodiment of the present invention, the service path can be sent to the service management platform through the operator's operating system after the dedicated line service is opened. At this time, the information of the sent service path can only be specific to the optical transmission network equipment and the equipment's location. The service management platform calls the quantum network link control center to negotiate the key of the quantum network node. After negotiation, it waits for the local optical transmission network equipment to initiate a request to the local quantum cryptography service platform, and the local quantum cryptography service platform calls the local quantum network node to obtain the local or cross-domain quantum key.

[0112] Among them, the local optical transmission network equipment and the opposite optical transmission network equipment are used to obtain quantum keys from the connected quantum key distribution network, realize the transmission encryption processing of business data, and obtain ciphertext information. The local quantum gateway and the opposite quantum gateway are used for proxy quantum key distribution, operation and maintenance management. The business management platform is used to maintain the mapping relationship between the local optical transmission network equipment and the local quantum cryptography service platform, as well as the mapping relationship between the opposite optical transmission network equipment and the opposite quantum cryptography service platform. The quantum key distribution network includes quantum network nodes and quantum network link control centers to realize quantum key generation, quantum key provision and other services. The networking operation platform is used to establish the path information of the local optical transmission network equipment to open the dedicated line business encryption port.

[0113] Step 102: sending a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the first key acquisition request;

[0114] Step 103, receiving the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transmission network device is acquired by the local-end quantum cryptography service platform calling the local-end quantum network node;

[0115] In one embodiment, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0116] In the embodiment of the present invention, the local quantum cryptography service platform can push {the identification code of the local optical transmission network device, the identification code of the local quantum cryptography service platform} information to the service management platform in advance. Similarly, the peer quantum cryptography service platform can also push {the identification code of the peer optical transmission network device, the identification code of the peer quantum cryptography service platform} in advance. That is, the service management platform can maintain the relationship between the identification code of the optical transmission network device that has been pre-charged with quantum keys and the quantum cryptography service platform.

[0117] In one embodiment, the second key acquisition request also includes the address of the local quantum gateway, and the step of receiving the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request may also include: receiving the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the address of the local quantum gateway.

[0118] Step 104: Send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0119] In the embodiment of the present invention, a first key acquisition request sent by a local optical transmission network device can be received through a local quantum gateway; the first key acquisition request is used to indicate the acquisition of a quantum key paired with an opposite optical transmission network device; according to the first key acquisition request, a second key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request is received; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform calling the local quantum network node; the quantum key paired with the opposite optical transmission network device is sent to the local optical transmission network device, so that the local optical transmission network device can be connected to the local quantum cryptography service platform of one city and one pool nearby, and local and cross-domain quantum key distribution can be realized. In the embodiment of the present invention, the authentication and authorization of quantum keys and the acquisition of quantum keys can also be realized based on the quantum gateway in the optical transmission network, and the service path for quantum encryption of optical transmission network devices can also be established based on the integrated network management platform and the networking operation platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0120] Reference Figure 2 , shows a flowchart of another quantum key distribution method based on a gateway network element of an optical transmission network according to an embodiment of the present invention, which is applied to a local quantum cryptography service platform. The method may specifically include the following steps:

[0121] Step 201, receiving a second key acquisition request sent by a local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to a first key acquisition request sent by a local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transmission network device;

[0122] In an embodiment of the present invention, the local quantum cryptography service platform may receive a second key acquisition request sent by the local quantum gateway, and the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device. The first key acquisition request may include the identification code and encryption port number of the local optical transmission network device, and the first key acquisition request is used to instruct the acquisition of the quantum key paired with the opposite optical transmission network device.

[0123] In one embodiment, the quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center is used by the quantum network node to negotiate and generate the quantum key. The service path of the pairing of the local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encryption port number of the local optical transmission network device sent by the local network management platform, and the identification code and encryption port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device are sent to the networking operation platform, and established by the networking operation platform.

[0124] In an embodiment of the present invention, after the local optical transmission network device is deployed and put online, it can be registered to the local network management platform by connecting to the local quantum gateway. The local network management platform can configure the quantum service path based on the dedicated line service information synchronized by the integrated network management platform. The integrated network management platform can push the configuration information of the quantum service path to the outside based on the message queue, including {the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device}. The networking operation platform obtains the configuration information of the service path according to the message queue, and then establishes the service path of the local optical transmission network device and the opposite optical transmission network device pairing according to the configuration information. The service path can be sent to the service management platform through the operator's operation system after the dedicated line service is opened. At this time, the information of the service path sent can only be specific to the optical transmission network device and the device's location. The service management platform calls the quantum network link control center to negotiate the key of the quantum network node. After the negotiation is completed, it waits for the local optical transmission network device to initiate a request to the local quantum cryptography service platform, and the local quantum cryptography service platform calls the local quantum network node to obtain the local or cross-domain quantum key.

[0125] Step 202: according to the second key acquisition request, calling the local quantum network node to acquire the quantum key paired with the opposite optical transmission network device;

[0126] In one embodiment, the second key acquisition request includes the identification code and encryption port number of the local optical transport network device, and the step of calling the local quantum network node to acquire the quantum key paired with the opposite optical transport network device according to the second key acquisition request may further include the following sub-steps:

[0127] Sub-step S11, obtaining the identification code and encryption port number of the opposite optical transmission network device from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device;

[0128] Sub-step S12, acquiring the identification code of the local-end quantum cryptography service platform and the identification code of the opposite-end quantum cryptography service platform from the service management platform according to the identification code of the local-end optical transmission network device and the identification code of the opposite-end optical transmission network device;

[0129] Sub-step S13, according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform, calling the local quantum network node to obtain the quantum key paired with the opposite optical transmission network device.

[0130] In an embodiment of the present invention, the local quantum cryptography service platform can obtain the identification code of the opposite optical transmission network device from the networking operation platform based on {the identification code of the local optical transmission network device and the encryption port number}. Then, based on {the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device}, obtain the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform connected to the service management platform. Then, based on the above-obtained information, establish the logical association information of {the identification code and encryption port number of the local optical transmission network device, the identification code of the local quantum cryptography service platform, the identification code and encryption port number of the opposite optical transmission network device, and the identification code of the opposite quantum cryptography service platform}, and call the local quantum network node to obtain the cross-domain quantum key.

[0131] Step 203: Send the quantum key paired with the opposite-end optical transmission network device to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite-end optical transmission network device to the local optical transmission network device.

[0132] In one embodiment, the second key acquisition request also includes the address of the local quantum gateway, and the step of sending the quantum key paired with the opposite optical transmission network device to the local quantum gateway may also include: sending the quantum key paired with the opposite optical transmission network device to the local quantum gateway according to the address of the local quantum gateway.

[0133] In the embodiment of the present invention, a second key acquisition request sent by a local quantum gateway can be received through a local quantum cryptography service platform; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to indicate the acquisition of a quantum key paired with the opposite optical transmission network device; according to the second key acquisition request, the local quantum network node is called to acquire the quantum key paired with the opposite optical transmission network device; the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device, so that the local optical transmission network device can be connected to the local quantum cryptography service platform of one city and one pool nearby, and local and cross-domain quantum key distribution can be realized. In the embodiment of the present invention, the authentication and authorization of quantum keys and the acquisition of quantum keys can be realized based on the quantum gateway in the optical transmission network, and the service path for quantum encryption of optical transmission network devices can be established based on the integrated network management platform and the networking operation platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0134] Reference Figure 3 , shows a flowchart of another method for quantum key distribution based on a gateway network element of an optical transmission network according to an embodiment of the present invention, which is applied to a local optical transmission network device. The method may specifically include the following steps:

[0135] Step 301, sending a first key acquisition request to a local quantum gateway, where the first key acquisition request is used to instruct to acquire a quantum key paired with a peer optical transport network device;

[0136] In one embodiment, the quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center is used by the quantum network node to negotiate and generate the quantum key. The service path of the pairing of the local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encryption port number of the local optical transmission network device sent by the local network management platform, and the identification code and encryption port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device are sent to the networking operation platform, and established by the networking operation platform.

[0137] Step 302, receiving the quantum key paired with the opposite optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform according to the second key acquisition request sent by the local quantum gateway, calling the local quantum network node; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request.

[0138] In one embodiment, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0139] In one embodiment, the second key acquisition request also includes the address of the local quantum gateway, and the quantum key paired with the opposite optical transmission network device is sent by the local quantum cryptography service platform to the local quantum gateway according to the address of the local quantum gateway.

[0140] The local optical transmission network device in the embodiment of the present invention can send a first key acquisition request to the local quantum gateway, the first key acquisition request is used to indicate the acquisition of the quantum key paired with the opposite optical transmission network device, and then receive the quantum key sent by the local quantum gateway and paired with the opposite optical transmission network device, so that the local optical transmission network device can access the local quantum cryptography service platform of one city and one pool nearby, and realize local and cross-domain quantum key distribution. The embodiment of the present invention can also realize the authentication and authorization of quantum keys and the acquisition of quantum keys based on the quantum gateway in the optical transmission network, and can also establish a service path for quantum encryption of optical transmission network devices based on the integrated network management platform and the networking operation platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0141] Reference Figure 4, shows a logic diagram of a quantum key distribution method based on a gateway network element of an optical transmission network provided by an embodiment of the present invention, in order to enable those skilled in the art to better understand the embodiment of the present invention, the following is a Figure 4 The embodiments of the present invention are described as follows:

[0142] Step 401, before the local optical transmission network device is deployed and used, the local quantum cryptography service platform is connected to perform quantum key master key charging through the charging terminal;

[0143] Specifically, the local optical transmission network device is connected to the local quantum cryptography service platform through the charging terminal to pre-charge the quantum key; the local quantum cryptography service platform sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the business management platform; the business management platform obtains the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform, and establishes the logical relationship of {the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform}; the business management platform synchronously establishes the logical relationship of {the identification code of the opposite optical transmission network device and the identification code of the opposite quantum cryptography service platform} according to the above method.

[0144] Step 402, when the local optical transmission network device is deployed on site, the local quantum gateway is connected to register with the local network management platform, the local network management platform configures the service path, and the networking operation platform obtains the configuration information of the service path of the local optical transmission network device from the local network management platform in real time;

[0145] Specifically, the local optical transmission network device is registered with the local optical transmission network network management by connecting to the local quantum gateway network element; the other-end optical transmission network device is registered with the other-end optical transmission network network management by connecting to the other-end quantum gateway network element; the local optical transmission network network management and the other-end optical transmission network network management configure the quantum service path based on the integrated network management platform; the configuration information of the service path includes {the identification code of the local optical transmission network device, the encryption port number of the local optical transmission network device, the identification code of the other-end optical transmission network device, the encryption port number of the other-end optical transmission network device}; the networking operation platform obtains the configuration information of the service path from the integrated network management platform in real time and establishes the service path.

[0146] Step 403: The local optical transmission network device initiates a quantum key acquisition request to the local quantum cryptography service platform through the local quantum gateway.

[0147] Specifically, the local optical transmission network device sends a first key acquisition request to the local quantum gateway network element; the first key acquisition request includes the identification code of the local optical transmission network device and the encryption port number of the local optical transmission network device; the local quantum gateway network element sends a second key acquisition request to the local quantum cryptography service platform according to the first key acquisition request; the second key acquisition request includes the identification code of the local optical transmission network device, the encryption port number of the local optical transmission network device and the address of the local quantum gateway network element; the local quantum cryptography service platform obtains the identification code and the encryption port number of the local optical transmission network device from the networking operation platform according to the identification code of the local optical transmission network device and the encryption port number of the local optical transmission network device. The device encrypts the port number and obtains the identification code of the other-end quantum cryptography service platform from the business management platform; the local quantum cryptography service platform establishes association information according to {the identification code of the local optical transmission network device, the encryption port number of the local optical transmission network device, the identification code of the local quantum cryptography service platform, the identification code of the other-end optical transmission network device, the encryption port number of the other-end optical transmission network device, and the identification code of the other-end quantum cryptography service platform}; the local quantum cryptography service platform obtains the cross-domain quantum key according to the association information, and sends the quantum key to the local quantum gateway network element according to the address of the local quantum gateway network element; the local quantum gateway network element receives the quantum key and sends the quantum key to the local optical transmission network device.

[0148] The local optical transmission network device and the opposite optical transmission network device can use the acquired quantum key to perform transmission encryption processing on the service data to obtain ciphertext information. Then, the local optical transmission network device and the opposite optical transmission network device can perform encrypted communication through the local optical transmission network city / county ring, the provincial trunk optical transmission network, and the opposite optical transmission network city / county ring.

[0149] An embodiment of the present invention proposes a quantum key distribution method based on a gateway network element of an optical transmission network, which is composed of a quantum key distribution network, an OTN city / county ring, a quantum gateway, etc., and realizes quantum key injection, quantum key authentication, and quantum key acquisition from optical transmission network equipment to a quantum cryptography service platform through quantum gateway agents in the optical communication networks of each city / county, thereby realizing the integrated docking of the metropolitan construction of quantum network nodes and the metropolitan construction of optical transmission networks, and meeting the scenario-based application of local metropolitan key distribution and cross-domain quantum key distribution of optical transmission network equipment.

[0150] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0151] Reference Figure 5 , shows a block diagram of a quantum key distribution system based on a gateway network element of an optical transmission network provided by an embodiment of the present invention, wherein the quantum key distribution system 50 includes: a local quantum gateway 51, a local quantum cryptography service platform 52, a local optical transmission network device 53 and a local quantum network node 54;

[0152] The local quantum gateway 51 is used to receive a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to indicate the acquisition of a quantum key paired with the opposite optical transmission network device; according to the first key acquisition request, a second key acquisition request is sent to the local quantum cryptography service platform corresponding to the local optical transmission network device; receiving the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform calling the local quantum network node; sending the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0153] The local quantum cryptography service platform 52 is used to receive a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; according to the second key acquisition request, the local quantum network node is called to obtain the quantum key paired with the opposite optical transmission network device; the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0154] The local optical transmission network device 53 is used to send a first key acquisition request to the local quantum gateway, where the first key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request;

[0155] The local quantum network node 54 is used to obtain the quantum key paired with the opposite optical transmission network device.

[0156] In the embodiment of the present invention, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the system 50 also includes: a networking operation platform 55 and a service management platform 56;

[0157] The local quantum cryptography service platform 52 is further used to obtain the identification code and encryption port number of the opposite optical transmission network device from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; obtain the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device; call the local quantum network node to obtain the quantum key paired with the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform;

[0158] The networking operation platform 55 is used to send the identification code and encryption port number of the opposite optical transmission network device to the local quantum cryptography service platform;

[0159] The business management platform 56 is used to send the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform to the local quantum cryptography service platform.

[0160] In an embodiment of the present invention, the second key acquisition request further includes the address of the local quantum gateway;

[0161] The local quantum gateway 51 is further configured to receive the quantum key paired with the opposite optical transmission network device, which is sent by the local quantum cryptography service platform according to the address of the local quantum gateway;

[0162] The local quantum cryptography service platform 52 is also used to send the quantum key paired with the opposite optical transmission network device to the local quantum gateway according to the address of the local quantum gateway.

[0163] In the embodiment of the present invention, the system 50 further includes: a local network management platform 57 and an integrated network management platform 58;

[0164] The local quantum gateway 51 is further used to register the local optical transmission network device to the local network management platform according to the identification code and encryption port number of the local optical transmission network device;

[0165] The local network management platform 57 is used to register the local optical transmission network device according to the identification code and encryption port number of the local optical transmission network device; and send the identification code and encryption port number of the local optical transmission network device to the integrated network management platform;

[0166] The integrated network management platform 58 is used to obtain the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtain the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform; send the identification code and encrypted port number of the local optical transmission network device, and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform;

[0167] The networking operation platform 55 is also used to establish a service path for pairing the local optical transmission network device with the opposite optical transmission network device based on the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

[0168] In the embodiment of the present invention, the system 50 further includes: a quantum network link control center 59;

[0169] The service management platform 56 is further used to call the quantum network link control center according to the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform;

[0170] The quantum network link control center 59 is used to negotiate and generate quantum keys using the quantum network nodes;

[0171] The quantum network node 54 is also used for negotiation and generation of quantum keys.

[0172] In addition, refer to Figure 5The quantum key distribution system 50 also includes: a peer quantum gateway 510, a peer quantum cryptography service platform 511, a peer optical transmission network device 512, a peer quantum network node 513, a quantum network node 514 and a peer network management platform 515.

[0173] An embodiment of the present invention proposes a quantum key distribution system based on a gateway network element of an optical transmission network, which is composed of a quantum key distribution network, an OTN city / county ring, a quantum gateway, etc. Through the quantum gateway agent in the optical communication network of each city / county, the optical transmission network equipment can perform quantum key injection, quantum key authentication, quantum key acquisition, etc. to the quantum cryptography service platform, thereby realizing the integrated docking of the metropolitan construction of quantum network nodes and the metropolitan construction of optical transmission networks, and meeting the scenario-based application of local metropolitan key distribution and cross-domain quantum key distribution of optical transmission network equipment.

[0174] Reference Figure 6 , shows a block diagram of a quantum key distribution device based on a gateway network element of an optical transmission network provided by an embodiment of the present invention, which is applied to a local quantum gateway and may specifically include the following modules:

[0175] A first key request receiving module 601 is used to receive a first key acquisition request sent by a local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transmission network device;

[0176] A second key request sending module 602 is used to send a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the first key acquisition request;

[0177] The second quantum key receiving module 603 is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transmission network device is acquired by the local-end quantum cryptography service platform calling the local-end quantum network node;

[0178] The first quantum key sending module 604 is used to send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0179] In an embodiment of the present invention, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0180] In this embodiment of the present invention, the second key acquisition request also includes the address of the local quantum gateway, and the second quantum key receiving module 603 includes:

[0181] The second quantum key receiving submodule is used to receive the quantum key paired with the opposite-end optical transmission network device, which is sent by the local quantum cryptography service platform according to the address of the local quantum gateway.

[0182] In the embodiment of the present invention, before the first key request receiving module 601, the device further includes:

[0183] A service path establishment module is used to register the local optical transmission network device to the local network management platform according to the identification code and encrypted port number of the local optical transmission network device, so that the integrated network management platform obtains the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtains the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then sends the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform, and the networking operation platform establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device.

[0184] In an embodiment of the present invention, the quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0185] In the embodiment of the present invention, a first key acquisition request sent by a local optical transmission network device can be received through a local quantum gateway; the first key acquisition request is used to indicate the acquisition of a quantum key paired with an opposite optical transmission network device; according to the first key acquisition request, a second key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request is received; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform calling the local quantum network node; the quantum key paired with the opposite optical transmission network device is sent to the local optical transmission network device, so that the local optical transmission network device can be connected to the local quantum cryptography service platform of one city and one pool nearby, and local and cross-domain quantum key distribution can be realized. In the embodiment of the present invention, the authentication and authorization of quantum keys and the acquisition of quantum keys can also be realized based on the quantum gateway in the optical transmission network, and the service path for quantum encryption of optical transmission network devices can also be established based on the integrated network management platform and the networking operation platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0186] Reference Figure 7 , shows a structural block diagram of another quantum key distribution device based on a gateway network element of an optical transmission network provided by an embodiment of the present invention, which is applied to a local quantum cryptography service platform and may specifically include the following modules:

[0187] The second key request receiving module 701 is used to receive a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0188] A paired quantum key calling module 702 is used to call the local quantum network node to obtain the quantum key paired with the opposite optical transmission network device according to the second key acquisition request;

[0189] The second quantum key sending module 703 is used to send the quantum key paired with the opposite optical transmission network device to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0190] In the embodiment of the present invention, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device, and the pairing quantum key calling module 702 includes:

[0191] A first device information acquisition submodule, configured to acquire the identification code and the encryption port number of the opposite optical transmission network device from the networking operation platform according to the identification code and the encryption port number of the local optical transmission network device;

[0192] A first platform information acquisition submodule, configured to acquire an identification code of the local-end quantum cryptography service platform and an identification code of the opposite-end quantum cryptography service platform from a service management platform according to an identification code of the local-end optical transmission network device and an identification code of the opposite-end optical transmission network device;

[0193] The paired quantum key calling submodule is used to call the local quantum network node to obtain the quantum key paired with the opposite-end optical transmission network device according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite-end optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite-end quantum cryptography service platform.

[0194] In this embodiment of the present invention, the second key acquisition request also includes the address of the local quantum gateway, and the second quantum key sending module 703 includes:

[0195] The second quantum key sending submodule is used to send the quantum key paired with the opposite-end optical transmission network device to the local-end quantum gateway according to the address of the local-end quantum gateway.

[0196] In an embodiment of the present invention, the quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0197] In an embodiment of the present invention, the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform to be established by the networking operation platform.

[0198] In the embodiment of the present invention, a second key acquisition request sent by a local quantum gateway can be received through a local quantum cryptography service platform; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to indicate the acquisition of a quantum key paired with the opposite optical transmission network device; according to the second key acquisition request, the local quantum network node is called to acquire the quantum key paired with the opposite optical transmission network device; the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device, so that the local optical transmission network device can be connected to the local quantum cryptography service platform of one city and one pool nearby, and local and cross-domain quantum key distribution can be realized. In the embodiment of the present invention, the authentication and authorization of quantum keys and the acquisition of quantum keys can be realized based on the quantum gateway in the optical transmission network, and the service path for quantum encryption of optical transmission network devices can be established based on the integrated network management platform and the networking operation platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0199] Reference Figure 8 , shows a structural block diagram of another quantum key distribution device based on a gateway network element of an optical transmission network provided by an embodiment of the present invention, which is applied to a local optical transmission network device and may specifically include the following modules:

[0200] A first key request sending module 801 is used to send a first key acquisition request to a local quantum gateway, where the first key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transport network device;

[0201] The first quantum key receiving module 802 is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite-end optical transmission network device is acquired by the local quantum cryptography service platform according to the second key acquisition request sent by the local quantum gateway, calling the local quantum network node; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request.

[0202] In an embodiment of the present invention, the second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

[0203] In an embodiment of the present invention, the second key acquisition request also includes the address of the local quantum gateway, and the quantum key paired with the opposite optical transmission network device is sent by the local quantum cryptography service platform to the local quantum gateway according to the address of the local quantum gateway.

[0204] In an embodiment of the present invention, the quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

[0205] In an embodiment of the present invention, the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform to be established by the networking operation platform.

[0206] The local optical transmission network device in the embodiment of the present invention can send a first key acquisition request to the local quantum gateway, the first key acquisition request is used to indicate the acquisition of the quantum key paired with the opposite optical transmission network device, and then receive the quantum key sent by the local quantum gateway and paired with the opposite optical transmission network device, so that the local optical transmission network device can access the local quantum cryptography service platform of one city and one pool nearby, and realize local and cross-domain quantum key distribution. The embodiment of the present invention can also realize the authentication and authorization of quantum keys and the acquisition of quantum keys based on the quantum gateway in the optical transmission network, and can also establish a service path for quantum encryption of optical transmission network devices based on the integrated network management platform and the networking operation platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0207] As for the system and device embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0208] An embodiment of the present invention also provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the steps of the above-mentioned method for quantum key distribution of a gateway network element based on an optical transmission network are implemented.

[0209] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned quantum key distribution method for a gateway network element based on an optical transmission network are implemented.

[0210] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0211] Those skilled in the art will appreciate that the embodiments of the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more machine-readable media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0212] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0213] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0214] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0215] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0216] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0217] The above is a detailed introduction to a quantum key distribution method and device for a gateway network element based on an optical transmission network provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scopes. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A quantum key distribution method based on a gateway network element of an optical transmission network, characterized in that: Applied to a local quantum gateway, the method includes: Receiving a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; Sending a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the first key acquisition request; receiving the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transmission network device is acquired by the local-end quantum cryptography service platform calling the local-end quantum network node; The quantum key paired with the opposite-end optical transmission network device is sent to the local-end optical transmission network device.

2. The method according to claim 1, characterized in that: The second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

3. The method according to claim 2, characterized in that The second key acquisition request also includes the address of the local quantum gateway, and the receiving of the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request includes: Receive the quantum key paired with the opposite-end optical transmission network device, which is sent by the local-end quantum cryptography service platform according to the address of the local-end quantum gateway.

4. The method according to claim 2, characterized in that: Before receiving the first key acquisition request sent by the local optical transport network device, the method further includes: According to the identification code and encrypted port number of the local optical transmission network device, the local optical transmission network device is registered to the local network management platform, so that the integrated network management platform obtains the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtains the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then sends the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform, and the networking operation platform establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device.

5. The method according to claim 4, characterized in that The quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

6. A quantum key distribution method based on a gateway network element of an optical transmission network, characterized in that: Applied to the local quantum cryptography service platform, the method includes: Receiving a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; According to the second key acquisition request, calling the local quantum network node to acquire the quantum key paired with the opposite optical transmission network device; The quantum key paired with the opposite-end optical transmission network device is sent to the local-end quantum gateway, so that the local-end quantum gateway sends the quantum key paired with the opposite-end optical transmission network device to the local-end optical transmission network device.

7. The method according to claim 6, characterized in that The second key acquisition request includes the identification code and encryption port number of the local optical transmission network device, and calling the local quantum network node to acquire the quantum key paired with the opposite optical transmission network device according to the second key acquisition request includes: According to the identification code and encryption port number of the local optical transmission network device, obtaining the identification code and encryption port number of the opposite optical transmission network device from the networking operation platform; According to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, obtaining the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform from the service management platform; According to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform, the local quantum network node is called to obtain the quantum key paired with the opposite optical transmission network device.

8. The method according to claim 7, characterized in that The second key acquisition request also includes the address of the local quantum gateway, and the sending of the quantum key paired with the opposite optical transmission network device to the local quantum gateway includes: According to the address of the local quantum gateway, the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway.

9. The method according to claim 7, characterized in that: The quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

10. The method according to claim 9, characterized in that The service path of the pairing of the local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform and established by the networking operation platform.

11. A quantum key distribution method based on a gateway network element of an optical transmission network, characterized in that: Applied to a local optical transmission network device, the method comprises: Sending a first key acquisition request to the local quantum gateway, where the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; The quantum key paired with the opposite-end optical transmission network device is received and sent by the local quantum gateway; the quantum key paired with the opposite-end optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request.

12. The method according to claim 11, characterized in that The second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; the identification code and encryption port number of the opposite optical transmission network device are acquired by the local quantum cryptography service platform from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are acquired by the local quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device.

13. The method according to claim 12, characterized in that The second key acquisition request also includes the address of the local quantum gateway, and the quantum key paired with the opposite optical transmission network device is sent by the local quantum cryptography service platform to the local quantum gateway according to the address of the local quantum gateway.

14. The method according to claim 12, characterized in that The quantum key paired with the opposite optical transmission network device is called by the service management platform according to the service path paired with the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform, and the quantum network link control center uses the quantum network node to negotiate and generate the quantum key.

15. The method according to claim 14, characterized in that The service path of the pairing of the local optical transmission network device and the opposite optical transmission network device is obtained by the integrated network management platform from the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform, and then the identification code and encrypted port number of the local optical transmission network device and the identification code and encrypted port number of the opposite optical transmission network device are sent to the networking operation platform and established by the networking operation platform.

16. A quantum key distribution system based on a gateway network element of an optical transmission network, characterized in that: The system comprises: a local quantum gateway, a local quantum cryptography service platform, a local optical transmission network device and a local quantum network node; The local quantum gateway is configured to receive a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to acquire a quantum key paired with the opposite optical transmission network device; according to the first key acquisition request, send a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform calling a local quantum network node; send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device; The local quantum cryptography service platform is used to receive a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; according to the second key acquisition request, the local quantum network node is called to obtain the quantum key paired with the opposite optical transmission network device; the quantum key paired with the opposite optical transmission network device is sent to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device; The local optical transmission network device is used to send a first key acquisition request to the local quantum gateway, where the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite optical transmission network device is acquired by the local quantum cryptography service platform by calling the local quantum network node according to the second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request; The local quantum network node is used to obtain the quantum key paired with the opposite optical transmission network device.

17. The system according to claim 16, characterized in that The second key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the system also includes: a networking operation platform and a service management platform; The local quantum cryptography service platform is further used to obtain the identification code and encryption port number of the opposite optical transmission network device from the networking operation platform according to the identification code and encryption port number of the local optical transmission network device; obtain the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform from the service management platform according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device; call the local quantum network node to obtain the quantum key paired with the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform; The networking operation platform is used to send the identification code and encryption port number of the opposite-end optical transmission network device to the local quantum cryptography service platform; The business management platform is used to send the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform to the local quantum cryptography service platform.

18. The system according to claim 17, characterized in that The second key acquisition request also includes the address of the local quantum gateway; The local quantum gateway is further configured to receive the quantum key paired with the opposite optical transmission network device, which is sent by the local quantum cryptography service platform according to the address of the local quantum gateway; The local quantum cryptography service platform is also used to send the quantum key paired with the opposite-end optical transmission network device to the local quantum gateway according to the address of the local quantum gateway.

19. The system according to claim 17, characterized in that The system also includes: a local network management platform and an integrated network management platform; The local quantum gateway is further used to register the local optical transmission network device to the local network management platform according to the identification code and encryption port number of the local optical transmission network device; The local network management platform is used to register the local optical transmission network device according to the identification code and encryption port number of the local optical transmission network device; and send the identification code and encryption port number of the local optical transmission network device to the integrated network management platform; The integrated network management platform is used to obtain the identification code and encrypted port number of the local optical transmission network device sent by the local network management platform, and obtain the identification code and encrypted port number of the opposite optical transmission network device sent by the opposite network management platform; send the identification code and encrypted port number of the local optical transmission network device, and the identification code and encrypted port number of the opposite optical transmission network device to the networking operation platform; The networking operation platform is also used to establish a service path for pairing the local optical transmission network device and the opposite optical transmission network device based on the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

20. The system according to claim 19, characterized in that The system also includes: a quantum network link control center; The service management platform is further used to call the quantum network link control center according to the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device sent by the networking operation platform; The quantum network link control center is used to negotiate and generate quantum keys using the quantum network nodes; The quantum network nodes are also used to negotiate and generate quantum keys.

21. A quantum key distribution device based on a gateway network element of an optical transmission network, characterized in that: Applied to a local quantum gateway, the device comprises: A first key request receiving module is used to receive a first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; A second key request sending module is used to send a second key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the first key acquisition request; A second quantum key receiving module is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the second key acquisition request; the quantum key paired with the opposite-end optical transmission network device is acquired by the local-end quantum cryptography service platform calling the local-end quantum network node; The first quantum key sending module is used to send the quantum key paired with the opposite end optical transmission network device to the local end optical transmission network device.

22. A quantum key distribution device based on a gateway network element of an optical transmission network, characterized in that: Applied to the local quantum cryptography service platform, the device includes: A second key request receiving module is used to receive a second key acquisition request sent by the local quantum gateway; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request sent by the local optical transmission network device; the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; A paired quantum key calling module, configured to call a local quantum network node to obtain the quantum key paired with the opposite optical transmission network device according to the second key acquisition request; The second quantum key sending module is used to send the quantum key paired with the opposite-end optical transmission network device to the local quantum gateway, so that the local quantum gateway sends the quantum key paired with the opposite-end optical transmission network device to the local optical transmission network device.

23. A quantum key distribution device based on a gateway network element of an optical transmission network, characterized in that: Applied to local optical transmission network equipment, the device comprises: A first key request sending module, used to send a first key acquisition request to the local quantum gateway, wherein the first key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; The first quantum key receiving module is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local quantum gateway; the quantum key paired with the opposite-end optical transmission network device is acquired by the local quantum cryptography service platform according to the second key acquisition request sent by the local quantum gateway, calling the local quantum network node; the second key acquisition request is generated by the local quantum gateway according to the first key acquisition request.

24. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of a quantum key distribution method for a gateway network element based on an optical transmission network are implemented as described in any one of claims 1 to 5 or claims 6 to 10 or claims 11 to 15.

25. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of a quantum key distribution method for a gateway network element based on an optical transmission network as described in any one of claims 1-5 or claims 6-10 or claims 11-15 are implemented.

Images