Optical transport network cross-domain quantum key distribution method based on integrated controller

Abstract

The embodiment of the invention provides an optical transport network cross-domain quantum key distribution method based on a centralized controller. The method comprises the following steps: a networking centralized controller receives a quantum key acquisition request sent by home terminal optical transport network equipment through a home terminal network management platform; the quantum key acquisition request is used for indicating to acquire a quantum key paired with the opposite-end optical transport network equipment; sending a cross-domain key acquisition request to a home terminal quantum cryptography service platform corresponding to the home terminal optical transport network equipment according to the quantum key acquisition request; receiving a quantum key which is paired with the opposite-end optical transport network equipment and is sent by the home-end quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transport network equipment is generated by negotiating between the home-end quantum cryptography service platform and the opposite-end quantum cryptography service platform; and the quantum key paired with the opposite-end optical transport network equipment is sent to the home-end optical transport network equipment, so that the cross-domain engineering of quantum key transmission is maintained, and the application cost is saved.

Description

Technical Field

[0001] The present invention relates to the technical field of quantum secure communication, and in particular to a method for distributing quantum keys across domains in an optical transmission network based on a centralized controller. Background Art

[0002] Currently, operators' network transmission channels mainly use OTN (Optical Transport Network) for data transmission, and the security of OTN transmission mainly depends on key privacy and computational complexity. However, with the development of attack technology and the enhancement of human computing power, lossless eavesdropping and camouflage attack methods have emerged for optical cables. At the same time, with the gradual maturity of quantum computing technology, the difficulty and time of cracking traditional encryption algorithms based on computational complexity have decreased exponentially, and the risk of cracking traditional confidentiality systems is increasing day by day.

[0003] In order to achieve confidential communication, node devices in the network usually need to encrypt information with keys when conducting business communications. QKD (Quantum Key Distribution) technology is increasingly being used because of its theoretical advantage of "unconditional security". At present, quantum key distribution networks are being built simultaneously in cities across the country. How to maintain the cross-domain engineering of quantum key transmission and save the application cost of cross-domain engineering is a problem currently faced. Summary of the invention

[0004] In order to solve the above problems, an embodiment of the present invention discloses a cross-domain quantum key distribution method for an optical transmission network based on a centralized controller.

[0005] In a first aspect, an embodiment of the present invention provides a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, which is applied to a networking centralized controller, and the method includes:

[0006] Receiving a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to acquire a quantum key paired with the opposite optical transmission network device;

[0007] According to the quantum key acquisition request, a cross-domain key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device;

[0008] Receiving the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transmission network device is generated by negotiation between the local-end quantum cryptography service platform and the opposite-end quantum cryptography service platform;

[0009] The quantum key paired with the opposite-end optical transmission network device is sent to the local-end optical transmission network device.

[0010] Optionally, before receiving the quantum key acquisition request sent by the local optical transmission network device through the local network management platform, the method further includes:

[0011] The configuration information sent by the local network management platform is acquired, and a service path for pairing the local optical transmission network device with the opposite optical transmission network device is established according to the configuration information.

[0012] Optionally, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0013] Optionally, the quantum key acquisition request includes an identification code and an encryption port number of the local optical transmission network device, and sending a cross-domain key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request includes:

[0014] Determine the identification code and encryption port number of the opposite optical transmission network device according to the paired service path of the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device;

[0015] Obtaining an identification code of a local quantum cryptography service platform corresponding to the local optical transmission network device and an identification code of a peer quantum cryptography service platform corresponding to the peer optical transmission network device;

[0016] Based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform, a cross-domain key acquisition request is sent to the local quantum cryptography service platform.

[0017] Optionally, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0018] In a second aspect, an embodiment of the present invention provides a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, which is applied to a local quantum cryptography service platform. The method includes:

[0019] Receiving a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct the acquisition of a quantum key paired with a peer optical transmission network device;

[0020] According to the cross-domain key acquisition request, negotiate with the peer quantum cryptography service platform to generate the quantum key paired with the peer optical transmission network device;

[0021] The quantum key paired with the opposite optical transmission network device is sent to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0022] Optionally, before receiving the cross-domain key acquisition request sent by the networking centralized controller, the method further includes:

[0023] The local optical transmission network device is pre-filled with quantum keys through a filling terminal, and the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform are sent to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform.

[0024] Optionally, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller based on the service path paired between the local optical transmission network device and the opposite optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device, and the identification code of the opposite optical transmission network device is obtained based on the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device. The identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated; the service path paired between the local optical transmission network device and the opposite optical transmission network device is established by the networking centralized controller based on the configuration information sent by the local network management platform.

[0025] Optionally, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0026] Optionally, the step of negotiating with a peer quantum cryptography service platform according to the cross-domain key acquisition request to generate the quantum key paired with the peer optical transport network device includes:

[0027] According to the cross-domain key acquisition request, the quantum network node is called to perform key negotiation with the peer quantum cryptography service platform to generate the quantum key paired with the peer optical transmission network device.

[0028] In a third aspect, an embodiment of the present invention provides a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, which is applied to a local optical transmission network device, and the method includes:

[0029] Sending a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0030] Receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request.

[0031] Optionally, before sending the quantum key acquisition request to the networking centralized controller through the local network management platform, the method further includes:

[0032] Connecting the local quantum cryptography service platform through the charging terminal so that the local quantum cryptography service platform performs quantum key pre-charging on the local optical transmission network device, and sending the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform;

[0033] After receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, the quantum key paired with the opposite optical transmission network device is decrypted based on the pre-filled quantum key.

[0034] Optionally, the method further comprises:

[0035] According to the identification code and encryption port number of the local optical transmission network device, the local optical transmission network device is registered to the local network management platform through the local quantum gateway, so that the local network management platform sends the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device registered to the local network management platform by the opposite quantum gateway to the networking centralized controller, and the networking centralized controller establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

[0036] Optionally, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller based on the service path paired between the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are obtained based on the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

[0037] Optionally, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0038] In a fourth aspect, an embodiment of the present invention provides a cross-domain quantum key distribution system for an optical transmission network based on a centralized controller, the system comprising: a networking centralized controller, a local quantum cryptography service platform, a local optical transmission network device, and a local network management platform;

[0039] The networking centralized controller is used to receive a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transmission network device; according to the quantum key acquisition request, a cross-domain key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; receiving the quantum key paired with the peer optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the peer optical transmission network device is generated by negotiation between the local quantum cryptography service platform and the peer quantum cryptography service platform; and sending the quantum key paired with the peer optical transmission network device to the local optical transmission network device;

[0040] The local quantum cryptography service platform is used to receive a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request sent by the local optical transmission network device through the local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; according to the cross-domain key acquisition request, negotiate with the opposite quantum cryptography service platform to generate the quantum key paired with the opposite optical transmission network device; send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0041] The local optical transmission network device is used to send a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request;

[0042] The local network management platform is used to send the quantum key acquisition request to the networking centralized controller.

[0043] Optionally, the local network management platform is further used to send configuration information to the networking centralized controller;

[0044] The networking centralized controller is further used to obtain the configuration information sent by the local network management platform, and establish a service path for pairing the local optical transmission network device with the opposite optical transmission network device according to the configuration information;

[0045] The local quantum cryptography service platform is further used to pre-fill the local optical transmission network device with a quantum key through a filling terminal, and send the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform;

[0046] The local optical transmission network device is also used to connect to the local quantum cryptography service platform through a charging terminal, so that the local quantum cryptography service platform pre-charges the local optical transmission network device with a quantum key, and sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform; after receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, the quantum key paired with the opposite optical transmission network device is decrypted based on the pre-charged quantum key.

[0047] Optionally, the system further includes: a local quantum gateway and a peer quantum gateway; the configuration information includes: an identification code and an encryption port number of the local optical transmission network device, and an identification code and an encryption port number of the peer optical transmission network device;

[0048] The local quantum gateway is used to register the identification code and encryption port number of the local optical transmission network device to the local network management platform;

[0049] The peer quantum gateway is used to register the identification code and encryption port number of the peer optical transmission network device to the local network management platform;

[0050] The local network management platform is also used to send the identification code and encrypted port number of the local optical transmission network device, as well as the identification code and encrypted port number of the opposite optical transmission network device, to the networking centralized controller.

[0051] Optionally, the quantum key acquisition request includes an identification code and an encryption port number of the local optical transmission network device;

[0052] The networking centralized controller is used to determine the identification code and encryption port number of the opposite-end optical transmission network device according to the service path paired between the local optical transmission network device and the opposite-end optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device; obtain the identification code of the local quantum cryptography service platform corresponding to the local optical transmission network device, and the identification code of the opposite-end quantum cryptography service platform corresponding to the opposite-end optical transmission network device; and send a cross-domain key acquisition request to the local quantum cryptography service platform based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite-end optical transmission network device, the identification code of the local quantum cryptography service platform, and the identification code of the opposite-end quantum cryptography service platform.

[0053] Optionally, the system further comprises a quantum network node;

[0054] The local quantum cryptography service platform is used to call the quantum network node according to the cross-domain key acquisition request, perform key negotiation with the peer quantum cryptography service platform, and generate the quantum key paired with the peer optical transmission network device;

[0055] The quantum network node is used to obtain the quantum key paired with the opposite optical transmission network device.

[0056] In a fifth aspect, an embodiment of the present invention provides a cross-domain quantum key distribution device for an optical transmission network based on a centralized controller, which is applied to a networking centralized controller, and the device includes:

[0057] A quantum key request receiving module, used to receive a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0058] A cross-domain key request sending module, used to send a cross-domain key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request;

[0059] A cross-domain quantum key receiving module, used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transmission network device is generated by negotiation between the local-end quantum cryptography service platform and the opposite-end quantum cryptography service platform;

[0060] The paired quantum key sending module is used to send the quantum key paired with the opposite end optical transmission network device to the local end optical transmission network device.

[0061] Optionally, before the quantum key request receiving module, the device further includes:

[0062] The paired service path establishing module is used to obtain the configuration information sent by the local network management platform and establish a paired service path between the local optical transmission network device and the opposite optical transmission network device according to the configuration information.

[0063] Optionally, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0064] Optionally, the quantum key acquisition request includes an identification code and an encryption port number of the local optical transmission network device, and the cross-domain key request sending module includes:

[0065] The peer device information determination submodule is used to determine the identification code and encryption port number of the peer optical transmission network device according to the service path paired between the local optical transmission network device and the peer optical transmission network device, and the identification code and encryption port number of the local optical transmission network device;

[0066] A service platform information acquisition submodule, used to obtain an identification code of a local quantum cryptography service platform corresponding to the local optical transmission network device, and an identification code of a peer quantum cryptography service platform corresponding to the peer optical transmission network device;

[0067] The cross-domain key request sending submodule is used to send a cross-domain key acquisition request to the local quantum cryptography service platform based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

[0068] Optionally, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0069] In a sixth aspect, an embodiment of the present invention provides a cross-domain quantum key distribution device for an optical transmission network based on a centralized controller, which is applied to a local quantum cryptography service platform, and the device includes:

[0070] A cross-domain key request receiving module is used to receive a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct the acquisition of a quantum key paired with a peer optical transmission network device;

[0071] A cross-domain quantum key generation module, configured to negotiate with the peer quantum cryptography service platform according to the cross-domain key acquisition request to generate the quantum key paired with the peer optical transmission network device;

[0072] A cross-domain quantum key sending module is used to send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0073] Optionally, before the cross-domain key request receiving module, the device further includes:

[0074] The quantum key pre-filling module is used to perform quantum key pre-filling on the local optical transmission network device through the filling terminal, and send the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform.

[0075] Optionally, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller based on the service path paired between the local optical transmission network device and the opposite optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device, and the identification code of the opposite optical transmission network device is obtained based on the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device. The identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated; the service path paired between the local optical transmission network device and the opposite optical transmission network device is established by the networking centralized controller based on the configuration information sent by the local network management platform.

[0076] Optionally, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0077] Optionally, the cross-domain quantum key generation module includes:

[0078] The cross-domain quantum key generation submodule is used to call the quantum network node according to the cross-domain key acquisition request, perform key negotiation with the peer quantum cryptography service platform, and generate the quantum key paired with the peer optical transmission network device.

[0079] In a seventh aspect, an embodiment of the present invention provides an optical transmission network cross-domain quantum key distribution device based on a centralized controller, which is applied to a local optical transmission network device, and the device includes:

[0080] A quantum key request sending module, used to send a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0081] The paired quantum key receiving module is used to receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request.

[0082] Optionally, before the quantum key request sending module, the device further includes:

[0083] A charging terminal connection module, used to connect to the local quantum cryptography service platform through a charging terminal, so that the local quantum cryptography service platform performs quantum key pre-charging on the local optical transmission network device, and sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform;

[0084] After pairing the quantum key receiving module, the device further includes:

[0085] The quantum key decryption module is used to decrypt the quantum key paired with the opposite optical transmission network device based on the pre-filled quantum key.

[0086] Optionally, the device further comprises:

[0087] An optical transmission network device registration module is used to register the local optical transmission network device to the local network management platform through the local quantum gateway according to the identification code and encryption port number of the local optical transmission network device, so that the local network management platform sends the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device registered by the opposite quantum gateway to the local network management platform to the networking centralized controller, and the networking centralized controller establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

[0088] Optionally, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller based on the service path paired between the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are obtained based on the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

[0089] Optionally, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0090] In an eighth aspect, the present invention shows an electronic device, comprising: a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller when executing the computer program.

[0091] In the ninth aspect, the present invention shows a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller are implemented.

[0092] The embodiments of the present invention include the following advantages:

[0093] The embodiment of the present invention can receive a quantum key acquisition request sent by a local optical transmission network device through a local network management platform through a networking centralized controller; the quantum key acquisition request is used to indicate the acquisition of a quantum key paired with an opposite optical transmission network device; according to the quantum key acquisition request, a cross-domain key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request is received; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform and the opposite quantum cryptography service platform through negotiation; the quantum key paired with the opposite optical transmission network device is sent to the local optical transmission network device, so that in the process of cross-domain quantum key distribution, the cross-domain engineering of quantum key transmission can be maintained and the application cost of the cross-domain engineering can be saved. BRIEF DESCRIPTION OF THE DRAWINGS

[0094] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0095] Figure 1 This is a flowchart of a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0096] Figure 2 is a flowchart of another method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0097] Figure 3 is a flowchart of another method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0098] Figure 4 It is a logic diagram of a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0099] Figure 5 It is a structural block diagram of a cross-domain quantum key distribution system of an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0100] Figure 6 This is a structural block diagram of a cross-domain quantum key distribution device for an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0101] Figure 7 This is a structural block diagram of another cross-domain quantum key distribution device for an optical transmission network based on a centralized controller according to an embodiment of the present invention;

[0102] Figure 8 It is a structural block diagram of another cross-domain quantum key distribution device of an optical transmission network based on a centralized controller according to an embodiment of the present invention.

[0103] Description of reference numerals:

[0104] Quantum key distribution system 50, networking centralized controller 51, local quantum cryptography service platform 52, local optical transmission network equipment 53, local network management platform 54, local quantum gateway 55, opposite quantum gateway 56, quantum network node 57, opposite optical transmission network equipment 58, opposite quantum cryptography service platform 59, opposite network management platform 510. DETAILED DESCRIPTION

[0105] The present invention proposes a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, the purpose of which is to maintain local and cross-domain quantum key distribution of quantum keys. In order to achieve this goal, the embodiment of the present invention uses the networking centralized controller agent of each city / county to implement cross-domain quantum key distribution to each regional optical transmission network device through different quantum cryptography service platforms, so that in the process of cross-domain quantum key distribution, the cross-domain engineering of quantum key transmission can be maintained and the application cost of the cross-domain engineering can be saved.

[0106] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0107] Reference Figure 1 , shows a flowchart of a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention, which is applied to a networking centralized controller. The method may specifically include the following steps:

[0108] Step 101, receiving a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to acquire a quantum key paired with a peer optical transmission network device;

[0109] In an embodiment of the present invention, the networking centralized controller may receive a quantum key acquisition request sent by the local optical transmission network device through the local network management platform to obtain a quantum key paired with the opposite optical transmission network device. Specifically, the process in which the local optical transmission network device sends a quantum key acquisition request to the networking centralized controller through the local network management platform may include: the local optical transmission network device sends a quantum key update request to the local network management platform; the local network management platform may send a quantum key acquisition request to the networking centralized controller according to the quantum key update request.

[0110] In one embodiment, before receiving a quantum key acquisition request sent by a local optical transmission network device through a local network management platform, the method may include: obtaining configuration information sent by the local network management platform, and establishing a service path for pairing the local optical transmission network device and the opposite optical transmission network device according to the configuration information.

[0111] In one embodiment, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0112] In an embodiment of the present invention, after the local optical transmission network device is deployed and put online, it can be registered to the local network management platform by connecting to the local quantum gateway, and at the same time, the opposite optical transmission network device can also be registered to the local network management platform. Specifically, the opposite optical transmission network device is deployed in other cities / counties and belongs to the same manufacturer as the local optical transmission network device. By deploying the manufacturer corresponding to the local optical transmission network device in the city / county where the opposite optical transmission network device is located, the opposite optical transmission network device can be registered to the local network management platform, so that the service path for pairing the local optical transmission network device and the opposite optical transmission network device can be configured on the local network management platform.

[0113] The local network management platform can push the configuration information of the service path to the outside, including {the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device}. The networking centralized controller can obtain the configuration information of the service path according to the message queue, and then establish the service path of the local optical transmission network device and the opposite optical transmission network device according to the configuration information.

[0114] In the embodiment of the present invention, by registering the local optical transmission network device and the opposite optical transmission network device to the local network management platform, the local optical transmission network device and the opposite optical transmission network device can be authenticated. The authentication and authorization follows the GB 15843.2 standard, and uses the pre-filled quantum key to calculate HMAC (a+b) and HMAC (b+a) bidirectional authentication to achieve the authentication, registration and authentication of the local optical transmission network device and the opposite optical transmission network device, thereby ensuring the security of access to the local optical transmission network device and the opposite optical transmission network device. The pre-filled quantum key of the local optical transmission network device is obtained by the local quantum cryptography service platform performing quantum key pre-filling on the filling terminal of the local optical transmission network device, and the pre-filled quantum key of the opposite optical transmission network device is obtained by the opposite quantum cryptography service platform performing quantum key pre-filling on the filling terminal of the opposite optical transmission network device.

[0115] GB 15843.2 standard specifically refers to "Information Technology Security Technology Entity Authentication Part 2: Mechanisms Using Symmetric Encryption Algorithms". This standard specifies the methods and requirements for using symmetric encryption algorithms for entity authentication in the field of information technology. Entity authentication is the process of ensuring the authenticity of the identities of both parties in communication. It involves verifying whether the identity of an entity (such as a user, device or system) is consistent with its claimed identity. In the field of information security, entity authentication is a key step in preventing unauthorized access and protecting data integrity. HMAC is the abbreviation of "Hash-based Message Authentication Code", which means "hash-based message authentication code". HMAC is a specific type of message authentication code (MAC) that uses a cryptographic hash function (such as MD5, SHA-1, SHA-256, etc.) and a key to generate a fixed-length authentication tag. This tag can then be used to verify the integrity and authenticity of the message.

[0116] Step 102: sending a cross-domain key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request;

[0117] In one embodiment, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device, and the step of sending the cross-domain key acquisition request to the local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request may include the following sub-steps:

[0118] Sub-step S11, determining the identification code and encryption port number of the opposite optical transmission network device according to the service path of the pairing of the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device;

[0119] Sub-step S12, obtaining an identification code of a local quantum cryptography service platform corresponding to the local optical transmission network device, and an identification code of a peer quantum cryptography service platform corresponding to the peer optical transmission network device;

[0120] Sub-step S13, based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform, sending a cross-domain key acquisition request to the local quantum cryptography service platform.

[0121] In an embodiment of the present invention, the networking centralized controller can determine the identification code and encryption port number of the opposite optical transmission network device paired with the local optical transmission network device according to the service path of the local optical transmission network device and the opposite optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device. Then, according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are obtained. Then, based on the above-obtained information, a cross-domain key acquisition request is sent to the local quantum cryptography service platform.

[0122] Among them, when the local quantum cryptography service platform performs quantum key pre-charging for the local optical transmission network device, it can send the association relationship between the identification code of the local quantum cryptography service platform and the identification code of the local optical transmission network device to the networking centralized controller in advance; when the opposite-end quantum cryptography service platform performs quantum key pre-charging for the opposite-end optical transmission network device, it can also send the association relationship between the identification code of the opposite-end quantum cryptography service platform and the identification code of the opposite-end optical transmission network device to the networking centralized controller.

[0123] Step 103, receiving the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transmission network device is generated by negotiation between the local-end quantum cryptography service platform and the opposite-end quantum cryptography service platform;

[0124] In one embodiment, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0125] In an embodiment of the present invention, the quantum key paired with the opposite optical transmission network device can be generated by the local quantum cryptography service platform by calling the quantum network node and performing key negotiation with the opposite quantum cryptography service platform.

[0126] In one embodiment, the networking centralized controller can also be connected to the quantum network node through the quantum network link control center. The quantum key paired with the opposite optical transmission network device can also be generated in advance by the networking centralized controller, according to the service path paired with the local optical transmission network device and the opposite optical transmission network device, by calling the quantum network link control center to negotiate and generate the quantum key between the quantum network node of the local quantum cryptography service platform and the quantum network node of the opposite quantum cryptography service platform. After the local optical transmission network device initiates a quantum key acquisition request, the networking centralized controller obtains the cross-domain quantum key negotiated in advance by the local quantum cryptography service platform.

[0127] Among them, the local optical transmission network equipment and the opposite optical transmission network equipment are used to obtain quantum keys from the connected quantum key distribution network, realize the transmission encryption processing of business data, and obtain ciphertext information. The quantum key distribution network includes quantum network nodes and quantum network link control centers to realize quantum key generation, quantum key provision and other services. The network centralized controller is used to proxy quantum key acquisition and distribution, and maintain the mapping relationship between the local optical transmission network equipment and the local quantum cryptography service platform, and the mapping relationship between the opposite optical transmission network equipment and the opposite quantum cryptography service platform. At the same time, it establishes the path information of the local optical transmission network equipment to open the dedicated line service encryption port.

[0128] Step 104: Send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0129] In an embodiment of the present invention, the quantum key acquisition request may also include the address of the local network management platform. The networking centralized controller may send the quantum key paired with the opposite optical transmission network device to the local network management platform according to the address of the local network management platform, so that the local network management platform sends the quantum key to the local optical transmission network device.

[0130] The embodiment of the present invention can receive a quantum key acquisition request sent by the local optical transmission network device through the local network management platform through the networking centralized controller; the quantum key acquisition request is used to indicate the acquisition of the quantum key paired with the opposite optical transmission network device; according to the quantum key acquisition request, send a cross-domain key acquisition request to the local quantum cryptography service platform corresponding to the local optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform and the opposite quantum cryptography service platform through negotiation; send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device, so that in the process of cross-domain quantum key distribution, the cross-domain engineering of quantum key transmission can be maintained and the application cost of the cross-domain engineering can be saved. The embodiment of the present invention can also realize the authentication of quantum keys based on the local network management platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0131] Reference Figure 2 , shows a flowchart of another method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention, which is applied to a local quantum cryptography service platform. The method may specifically include the following steps:

[0132] Step 201, receiving a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct the acquisition of a quantum key paired with a peer optical transmission network device;

[0133] In one embodiment, before receiving the cross-domain key acquisition request sent by the networking centralized controller, the method may also include: pre-filling the local optical transmission network device with quantum keys through a filling terminal, and sending the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform.

[0134] In an embodiment of the present invention, the local quantum cryptography service platform can pre-fill quantum keys on the local optical transmission network device through the filling terminal, and send the association relationship between the identification code of the local quantum cryptography service platform and the identification code of the local optical transmission network device to the networking centralized controller; the opposite-end quantum cryptography service platform can also pre-fill quantum keys on the opposite-end optical transmission network device through the filling terminal, and send the association relationship between the identification code of the opposite-end quantum cryptography service platform and the identification code of the opposite-end optical transmission network device to the networking centralized controller, so that the networking centralized controller establishes the association relationship between the local optical transmission network device and the local quantum cryptography service platform, as well as the association relationship between the opposite-end optical transmission network device and the opposite-end quantum cryptography service platform.

[0135] In one embodiment, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller based on the service path paired between the local optical transmission network device and the opposite optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device, and the identification code of the opposite optical transmission network device is obtained based on the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device. The identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated; the service path paired between the local optical transmission network device and the opposite optical transmission network device is established by the networking centralized controller based on the configuration information sent by the local network management platform.

[0136] In one embodiment, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0137] Step 202: According to the cross-domain key acquisition request, negotiate with the peer quantum cryptography service platform to generate the quantum key paired with the peer optical transmission network device;

[0138] In one embodiment, the step of negotiating with the peer quantum cryptography service platform according to the cross-domain key acquisition request to generate the quantum key paired with the peer optical transmission network device may include: calling a quantum network node according to the cross-domain key acquisition request, performing key negotiation with the peer quantum cryptography service platform, and generating the quantum key paired with the peer optical transmission network device.

[0139] In an embodiment of the present invention, the quantum key paired with the opposite optical transmission network device can be generated by the local quantum cryptography service platform by calling the quantum network node and negotiating the key with the opposite quantum cryptography service platform. The networking centralized controller can also be connected to the quantum network node through the quantum network link control center. The quantum key paired with the opposite optical transmission network device can also be generated in advance by the networking centralized controller by calling the quantum network link control center according to the service path paired with the local optical transmission network device and the opposite optical transmission network device, and negotiating the quantum key between the quantum network node of the local quantum cryptography service platform and the quantum network node of the opposite quantum cryptography service platform. After the local optical transmission network device initiates a request to obtain the quantum key, the networking centralized controller obtains the cross-domain quantum key negotiated in advance by the local quantum cryptography service platform.

[0140] Step 203: Send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0141] The embodiment of the present invention can receive a cross-domain key acquisition request sent by a networking centralized controller through a local quantum cryptography service platform; negotiate with a peer quantum cryptography service platform according to the cross-domain key acquisition request to generate a quantum key paired with a peer optical transmission network device; send the quantum key paired with the peer optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the peer optical transmission network device to the local optical transmission network device, thereby maintaining the cross-domain engineering of quantum key transmission in the process of cross-domain quantum key distribution and saving the application cost of the cross-domain engineering.

[0142] Reference Figure 3 , shows a flowchart of another method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller according to an embodiment of the present invention, which is applied to a local optical transmission network device. The method may specifically include the following steps:

[0143] Step 301, sending a quantum key acquisition request to a networking centralized controller through a local network management platform, wherein the quantum key acquisition request is used to instruct acquisition of a quantum key paired with an optical transmission network device at the opposite end;

[0144] In one embodiment, before sending a quantum key acquisition request to the networking centralized controller through the local network management platform, the method may further include: connecting the local quantum cryptography service platform through a charging terminal so that the local quantum cryptography service platform pre-charges the local optical transmission network device with a quantum key, and sending the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller so that the networking centralized controller establishes an association between the local optical transmission network device and the local quantum cryptography service platform; after receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, decrypting the quantum key paired with the opposite optical transmission network device based on the pre-charged quantum key.

[0145] In one embodiment, the method may also include: registering the local optical transmission network device to the local network management platform through the local quantum gateway according to the identification code and encryption port number of the local optical transmission network device, so that the local network management platform sends the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device registered by the opposite quantum gateway to the local network management platform to the networking centralized controller, and the networking centralized controller establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

[0146] In one embodiment, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller according to the service path paired between the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are obtained according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

[0147] Step 302, receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request.

[0148] In one embodiment, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0149] In an embodiment of the present invention, a local optical transmission network device can send a quantum key acquisition request to a networking centralized controller through a local network management platform, where the quantum key acquisition request is used to indicate the acquisition of a quantum key paired with an opposite optical transmission network device; and receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, thereby maintaining the cross-domain engineering of quantum key transmission during the cross-domain quantum key distribution process and saving the application cost of the cross-domain engineering.

[0150] Reference Figure 4 , shows a logic diagram of a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller provided by an embodiment of the present invention, in order to enable those skilled in the art to better understand the embodiment of the present invention, the following is a Figure 4 The embodiments of the present invention are described as follows:

[0151] Step 401, before the local optical transmission network device is deployed and used, the local cryptographic service platform is connected to the local cryptographic service platform through the charging terminal to perform quantum key master key charging. After the charging is completed, the networking centralized controller obtains the association relationship between the local optical transmission network device and the local quantum cryptographic service platform from the local quantum cryptographic service platform.

[0152] Specifically, the local optical transmission network device is connected to the local quantum cryptography service platform through the charging terminal to pre-charge the quantum key; the local quantum cryptography service platform sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller; the networking centralized controller obtains the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform, and establishes an association relationship between {the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform}; the networking centralized controller synchronously establishes an association relationship between {the identification code of the opposite optical transmission network device and the identification code of the opposite quantum cryptography service platform} according to the above method.

[0153] Step 402, when the local optical transmission network device is deployed on site, it is registered to the local network management platform by connecting to the local quantum gateway, and the local network management platform configures the service path. The networking centralized controller obtains the configuration information of the service paths of the local optical transmission network device and the opposite optical transmission network device from the local network management platform in real time.

[0154] Specifically, the local optical transmission network device is registered to the local network management platform, and the opposite optical transmission network device is registered to the opposite network management platform or the local network management platform; the local network management platform and the opposite network management platform configure the quantum service path; the configuration information of the service path includes {the identification code of the local optical transmission network device, the encryption port number of the local optical transmission network device, the identification code of the opposite optical transmission network device, and the encryption port number of the opposite optical transmission network device}; the networking centralized controller obtains the configuration information of the service path from the local network management platform in real time and establishes the service path; the networking centralized controller establishes the service logic relationship of {the identification code of the local optical transmission network device, the identification code of the local quantum cryptography service platform, the encryption port number of the local optical transmission network device, the identification code of the opposite optical transmission network device, the identification code of the opposite quantum cryptography service platform, and the encryption port number of the opposite optical transmission network device}.

[0155] Step 403: The local optical transmission network device initiates a quantum key acquisition request to the networking centralized controller through the local network management platform, and the centralized controller initiates a cross-domain key acquisition request to the local quantum cryptography service platform.

[0156] Specifically, the local optical transmission network device sends a quantum key update request to the local network management platform; the quantum key update request includes the identification code of the local optical transmission network device and the encryption port number of the local optical transmission network device; the local network management platform sends a quantum key acquisition request to the security networking centralized controller according to the quantum key update request; the quantum key acquisition request includes the identification code of the local optical transmission network device, the encryption port number of the local optical transmission network device and the address of the local network management platform; the networking centralized controller obtains the identification code of the opposite optical transmission network device, the encryption port number of the opposite optical transmission network device and the identification code of the opposite quantum cryptography service platform according to the identification code of the local optical transmission network device and the encryption port number of the local optical transmission network device; the networking centralized controller sends a quantum key acquisition request to the local quantum cryptography service platform The service platform initiates a cross-domain key acquisition request; the local quantum cryptography service platform triggers the key negotiation process based on the cross-domain key acquisition request, and negotiates a consistent cross-domain quantum key through the local quantum cryptography service platform and the other-end quantum cryptography service platform; the local quantum cryptography service platform sends the ciphertext of the cross-domain quantum key to the networking centralized controller; the networking centralized controller sends the ciphertext of the cross-domain quantum key to the local network management platform based on the address of the local network management platform; the local network management platform sends the ciphertext of the cross-domain quantum key to the local optical transmission network device; the local optical transmission network device receives the ciphertext of the cross-domain quantum key, and decrypts the ciphertext of the cross-domain quantum key based on the pre-injected quantum key; the other-end optical transmission network device executes the above process to obtain the corresponding cross-domain quantum key.

[0157] The local optical transmission network device and the opposite optical transmission network device can use the acquired quantum key to perform transmission encryption processing on the service data to obtain ciphertext information. Then, the local optical transmission network device and the opposite optical transmission network device can perform encrypted communication through the local optical transmission network city / county ring, the provincial trunk optical transmission network, and the opposite optical transmission network city / county ring.

[0158] The embodiment of the present invention proposes a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller. The centralized controller of the network maintains the association relationship between the optical transmission network device and its corresponding quantum cryptography service platform, the logical relationship of the business path of quantum encryption, and the logical relationship between the optical transmission network device and its network management platform, thereby realizing the synchronization of cross-domain key distribution negotiation of the optical transmission network device, solving the problem of obtaining cross-domain quantum keys for interaction between the optical transmission network devices in each region and their corresponding quantum cryptography service platforms, and realizing cross-domain encrypted intercommunication of the optical transmission network devices in scenarios such as application private network applications and public network applications.

[0159] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0160] Reference Figure 5 , shows a structural block diagram of a cross-domain quantum key distribution system of an optical transmission network based on a centralized controller provided by an embodiment of the present invention, wherein the quantum key distribution system 50 includes: a networking centralized controller 51, a local quantum cryptography service platform 52, a local optical transmission network device 53 and a local network management platform 54;

[0161] The networking centralized controller 51 is used to receive a quantum key acquisition request sent by the local optical transmission network device through the local network management platform; the quantum key acquisition request is used to indicate the acquisition of a quantum key paired with the opposite optical transmission network device; according to the quantum key acquisition request, a cross-domain key acquisition request is sent to the local quantum cryptography service platform corresponding to the local optical transmission network device; receiving the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform and the opposite quantum cryptography service platform through negotiation; and sending the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0162] The local quantum cryptography service platform 52 is used to receive a cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request sent by the local optical transmission network device through the local network management platform; the quantum key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; according to the cross-domain key acquisition request, negotiate with the opposite quantum cryptography service platform to generate the quantum key paired with the opposite optical transmission network device; send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device;

[0163] The local optical transmission network device 53 is used to send a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct the acquisition of the quantum key paired with the opposite optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request;

[0164] The local network management platform 54 is used to send the quantum key acquisition request to the networking centralized controller.

[0165] In the embodiment of the present invention, the local network management platform 54 is also used to send configuration information to the networking centralized controller;

[0166] The networking centralized controller 51 is further used to obtain the configuration information sent by the local network management platform, and establish a service path for pairing the local optical transmission network device with the opposite optical transmission network device according to the configuration information;

[0167] The local quantum cryptography service platform 52 is further used to pre-fill the local optical transmission network device with a quantum key through a filling terminal, and send the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform;

[0168] The local optical transmission network device 53 is also used to connect to the local quantum cryptography service platform through a charging terminal so that the local quantum cryptography service platform pre-charges the local optical transmission network device with a quantum key, and sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform; after receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, the quantum key paired with the opposite optical transmission network device is decrypted based on the pre-charged quantum key.

[0169] In the embodiment of the present invention, the system 50 further includes: a local quantum gateway 55 and a peer quantum gateway 56; the configuration information includes: an identification code and an encryption port number of the local optical transmission network device, and an identification code and an encryption port number of the peer optical transmission network device;

[0170] The local quantum gateway 55 is used to register the identification code and encryption port number of the local optical transmission network device to the local network management platform;

[0171] The peer quantum gateway 56 is used to register the identification code and encryption port number of the peer optical transmission network device to the local network management platform;

[0172] The local network management platform 54 is also used to send the identification code and encryption port number of the local optical transmission network device, as well as the identification code and encryption port number of the opposite optical transmission network device, to the networking centralized controller.

[0173] In an embodiment of the present invention, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device;

[0174] The networking centralized controller 51 is used to determine the identification code and encryption port number of the opposite-end optical transmission network device according to the service path paired between the local optical transmission network device and the opposite-end optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device; obtain the identification code of the local quantum cryptography service platform corresponding to the local optical transmission network device, and the identification code of the opposite-end quantum cryptography service platform corresponding to the opposite-end optical transmission network device; based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite-end optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite-end quantum cryptography service platform, send a cross-domain key acquisition request to the local quantum cryptography service platform.

[0175] In an embodiment of the present invention, the system further comprises a quantum network node 57;

[0176] The local quantum cryptography service platform 52 is used to call the quantum network node according to the cross-domain key acquisition request, perform key negotiation with the peer quantum cryptography service platform, and generate the quantum key paired with the peer optical transmission network device;

[0177] The quantum network node 57 is used to obtain the quantum key paired with the opposite optical transmission network device.

[0178] In addition, refer to Figure 5 The quantum key distribution system 50 also includes: a peer optical transmission network device 58, a peer quantum cryptography service platform 59, and a peer network management platform 510.

[0179] Reference Figure 6, shows a structural block diagram of a cross-domain quantum key distribution device for an optical transmission network based on a centralized controller provided by an embodiment of the present invention, which is applied to a networking centralized controller and may specifically include the following modules:

[0180] The quantum key request receiving module 601 is used to receive a quantum key acquisition request sent by the local optical transmission network device through the local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0181] A cross-domain key request sending module 602 is used to send a cross-domain key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request;

[0182] The cross-domain quantum key receiving module 603 is used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transmission network device is generated by negotiation between the local quantum cryptography service platform and the opposite-end quantum cryptography service platform;

[0183] The paired quantum key sending module 604 is used to send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0184] In the embodiment of the present invention, before the quantum key request receiving module 601, the device further includes:

[0185] The paired service path establishing module is used to obtain the configuration information sent by the local network management platform and establish a paired service path between the local optical transmission network device and the opposite optical transmission network device according to the configuration information.

[0186] In an embodiment of the present invention, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0187] In this embodiment of the present invention, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device, and the cross-domain key request sending module 602 includes:

[0188] The peer device information determination submodule is used to determine the identification code and encryption port number of the peer optical transmission network device according to the service path paired between the local optical transmission network device and the peer optical transmission network device, and the identification code and encryption port number of the local optical transmission network device;

[0189] A service platform information acquisition submodule, used to obtain an identification code of a local quantum cryptography service platform corresponding to the local optical transmission network device, and an identification code of a peer quantum cryptography service platform corresponding to the peer optical transmission network device;

[0190] The cross-domain key request sending submodule is used to send a cross-domain key acquisition request to the local quantum cryptography service platform based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

[0191] In an embodiment of the present invention, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0192] The embodiment of the present invention can receive a quantum key acquisition request sent by the local optical transmission network device through the local network management platform through the networking centralized controller; the quantum key acquisition request is used to indicate the acquisition of the quantum key paired with the opposite optical transmission network device; according to the quantum key acquisition request, send a cross-domain key acquisition request to the local quantum cryptography service platform corresponding to the local optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform and the opposite quantum cryptography service platform through negotiation; send the quantum key paired with the opposite optical transmission network device to the local optical transmission network device, so that in the process of cross-domain quantum key distribution, the cross-domain engineering of quantum key transmission can be maintained and the application cost of the cross-domain engineering can be saved. The embodiment of the present invention can also realize the authentication of quantum keys based on the local network management platform, so that when transmitting sensitive data, an additional security layer can be provided to ensure that these data are not stolen or tampered with during the transmission process.

[0193] Reference Figure 7 , shows a structural block diagram of another optical transmission network cross-domain quantum key distribution device based on a centralized controller provided by an embodiment of the present invention, which is applied to a local quantum cryptography service platform and may specifically include the following modules:

[0194] The cross-domain key request receiving module 701 is used to receive a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transmission network device;

[0195] A cross-domain quantum key generation module 702 is used to negotiate with the peer quantum cryptography service platform according to the cross-domain key acquisition request to generate the quantum key paired with the peer optical transmission network device;

[0196] The cross-domain quantum key sending module 703 is used to send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

[0197] In the embodiment of the present invention, before the cross-domain key request receiving module 701, the device further includes:

[0198] The quantum key pre-filling module is used to perform quantum key pre-filling on the local optical transmission network device through the filling terminal, and send the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform.

[0199] In an embodiment of the present invention, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller based on the service path paired between the local optical transmission network device and the opposite optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device, and the identification code of the opposite optical transmission network device is obtained based on the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device. The identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated; the service path paired between the local optical transmission network device and the opposite optical transmission network device is established by the networking centralized controller based on the configuration information sent by the local network management platform.

[0200] In an embodiment of the present invention, the configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

[0201] In this embodiment of the present invention, the cross-domain quantum key generation module 702 includes:

[0202] The cross-domain quantum key generation submodule is used to call the quantum network node according to the cross-domain key acquisition request, perform key negotiation with the peer quantum cryptography service platform, and generate the quantum key paired with the peer optical transmission network device.

[0203] The embodiment of the present invention can receive a cross-domain key acquisition request sent by a networking centralized controller through a local quantum cryptography service platform; negotiate with a peer quantum cryptography service platform according to the cross-domain key acquisition request to generate a quantum key paired with a peer optical transmission network device; send the quantum key paired with the peer optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the peer optical transmission network device to the local optical transmission network device, thereby maintaining the cross-domain engineering of quantum key transmission in the process of cross-domain quantum key distribution and saving the application cost of the cross-domain engineering.

[0204] Reference Figure 8 , shows a structural block diagram of another optical transmission network cross-domain quantum key distribution device based on a centralized controller provided by an embodiment of the present invention, which is applied to a local optical transmission network device and may specifically include the following modules:

[0205] A quantum key request sending module 801 is used to send a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device;

[0206] The paired quantum key receiving module 802 is used to receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request.

[0207] In the embodiment of the present invention, before the quantum key request sending module 801, the device further includes:

[0208] A charging terminal connection module, used to connect to the local quantum cryptography service platform through a charging terminal, so that the local quantum cryptography service platform performs quantum key pre-charging on the local optical transmission network device, and sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform;

[0209] After pairing the quantum key receiving module 802, the device further includes:

[0210] The quantum key decryption module is used to decrypt the quantum key paired with the opposite optical transmission network device based on the pre-filled quantum key.

[0211] In an embodiment of the present invention, the device further includes:

[0212] An optical transmission network device registration module is used to register the local optical transmission network device to the local network management platform through the local quantum gateway according to the identification code and encryption port number of the local optical transmission network device, so that the local network management platform sends the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device registered by the opposite quantum gateway to the local network management platform to the networking centralized controller, and the networking centralized controller establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

[0213] In an embodiment of the present invention, the quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller according to the service path paired between the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device, and the identification code of the opposite optical transmission network device is obtained according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device. The identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

[0214] In an embodiment of the present invention, the quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling a quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

[0215] In an embodiment of the present invention, a local optical transmission network device can send a quantum key acquisition request to a networking centralized controller through a local network management platform, where the quantum key acquisition request is used to indicate the acquisition of a quantum key paired with an opposite optical transmission network device; and receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, thereby maintaining the cross-domain engineering of quantum key transmission during the cross-domain quantum key distribution process and saving the application cost of the cross-domain engineering.

[0216] As for the system and device embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0217] An embodiment of the present invention also provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller when executing the computer program.

[0218] An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller are implemented.

[0219] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0220] Those skilled in the art will appreciate that the embodiments of the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more machine-readable media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0221] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0222] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0223] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0224] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0225] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0226] The above is a detailed introduction to a cross-domain quantum key distribution method for an optical transmission network based on a centralized controller provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, characterized in that: Applied to a networking centralized controller, the method comprises: Receiving a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to acquire a quantum key paired with the opposite optical transmission network device; According to the quantum key acquisition request, a cross-domain key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; Receiving the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transmission network device is generated by negotiation between the local-end quantum cryptography service platform and the opposite-end quantum cryptography service platform; The quantum key paired with the opposite-end optical transmission network device is sent to the local-end optical transmission network device.

2. The method according to claim 1, characterized in that Before receiving the quantum key acquisition request sent by the local optical transmission network device through the local network management platform, the method further includes: The configuration information sent by the local network management platform is acquired, and a service path for pairing the local optical transmission network device with the opposite optical transmission network device is established according to the configuration information.

3. The method according to claim 2, characterized in that The configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

4. The method according to claim 2, characterized in that: The quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device, and sending the cross-domain key acquisition request to the local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request includes: Determine the identification code and encryption port number of the opposite optical transmission network device according to the paired service path of the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device; Obtaining an identification code of a local quantum cryptography service platform corresponding to the local optical transmission network device and an identification code of a peer quantum cryptography service platform corresponding to the peer optical transmission network device; Based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform, a cross-domain key acquisition request is sent to the local quantum cryptography service platform.

5. The method according to claim 1, characterized in that: The quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling the quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

6. A method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, characterized in that: Applied to the local quantum cryptography service platform, the method includes: Receiving a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct the acquisition of a quantum key paired with a peer optical transmission network device; According to the cross-domain key acquisition request, negotiate with the peer quantum cryptography service platform to generate the quantum key paired with the peer optical transmission network device; The quantum key paired with the opposite optical transmission network device is sent to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

7. The method according to claim 6, characterized in that Before receiving the cross-domain key acquisition request sent by the networking centralized controller, the method further includes: The local optical transmission network device is pre-filled with quantum keys through a filling terminal, and the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform are sent to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform.

8. The method according to claim 7, characterized in that The quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller according to the service path paired between the local optical transmission network device and the opposite optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are obtained according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device; the service path paired between the local optical transmission network device and the opposite optical transmission network device is established by the networking centralized controller according to the configuration information sent by the local network management platform.

9. The method according to claim 8, characterized in that The configuration information includes: the identification code and encryption port number of the local optical transmission network device, and the identification code and encryption port number of the opposite optical transmission network device; the identification code and encryption port number of the local optical transmission network device are registered by the local quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller; the identification code and encryption port number of the opposite optical transmission network device are registered by the opposite quantum gateway to the local network management platform, and sent by the local network management platform to the networking centralized controller.

10. The method according to claim 6, characterized in that The step of negotiating with the peer quantum cryptography service platform according to the cross-domain key acquisition request to generate the quantum key paired with the peer optical transmission network device includes: According to the cross-domain key acquisition request, the quantum network node is called to perform key negotiation with the peer quantum cryptography service platform to generate the quantum key paired with the peer optical transmission network device.

11. A method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller, characterized in that: Applied to a local optical transmission network device, the method comprises: Sending a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; Receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request.

12. The method according to claim 11, characterized in that Before sending the quantum key acquisition request to the networking centralized controller through the local network management platform, the method further includes: Connecting the local quantum cryptography service platform through the charging terminal so that the local quantum cryptography service platform performs quantum key pre-charging on the local optical transmission network device, and sending the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform; After receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, the quantum key paired with the opposite optical transmission network device is decrypted based on the pre-filled quantum key.

13. The method according to claim 12, characterized in that The method further comprises: According to the identification code and encryption port number of the local optical transmission network device, the local optical transmission network device is registered to the local network management platform through the local quantum gateway, so that the local network management platform sends the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device registered to the local network management platform by the opposite quantum gateway to the networking centralized controller, and the networking centralized controller establishes a service path for pairing the local optical transmission network device and the opposite optical transmission network device according to the identification code and encryption port number of the local optical transmission network device and the identification code and encryption port number of the opposite optical transmission network device.

14. The method according to claim 13, characterized in that The quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; the cross-domain key acquisition request is determined by the networking centralized controller according to the service path paired between the local optical transmission network device and the opposite optical transmission network device, and the identification code and encryption port number of the local optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are obtained according to the identification code of the local optical transmission network device and the identification code of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform are generated based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite optical transmission network device, and the identification code of the local quantum cryptography service platform and the identification code of the opposite quantum cryptography service platform.

15. The method according to claim 11, characterized in that The quantum key paired with the opposite-end optical transmission network device is generated by the local quantum cryptography service platform by calling the quantum network node and performing key negotiation with the opposite-end quantum cryptography service platform.

16. A cross-domain quantum key distribution system for optical transmission network based on a centralized controller, characterized in that: The system includes: a networking centralized controller, a local quantum cryptography service platform, a local optical transmission network device and a local network management platform; The networking centralized controller is used to receive a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with a peer optical transmission network device; according to the quantum key acquisition request, a cross-domain key acquisition request is sent to a local quantum cryptography service platform corresponding to the local optical transmission network device; receiving the quantum key paired with the peer optical transmission network device sent by the local quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the peer optical transmission network device is generated by negotiation between the local quantum cryptography service platform and the peer quantum cryptography service platform; and sending the quantum key paired with the peer optical transmission network device to the local optical transmission network device; The local quantum cryptography service platform is used to receive a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request sent by the local optical transmission network device through the local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; according to the cross-domain key acquisition request, negotiate with the opposite quantum cryptography service platform to generate the quantum key paired with the opposite optical transmission network device; send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device; The local optical transmission network device is used to send a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain the quantum key paired with the opposite optical transmission network device; receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request; The local network management platform is used to send the quantum key acquisition request to the networking centralized controller.

17. The system according to claim 16, characterized in that The local network management platform is also used to send configuration information to the networking centralized controller; The networking centralized controller is further used to obtain the configuration information sent by the local network management platform, and establish a service path for pairing the local optical transmission network device with the opposite optical transmission network device according to the configuration information; The local quantum cryptography service platform is further used to pre-fill the local optical transmission network device with a quantum key through a filling terminal, and send the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform; The local optical transmission network device is also used to connect to the local quantum cryptography service platform through a charging terminal, so that the local quantum cryptography service platform pre-charges the local optical transmission network device with a quantum key, and sends the identification code of the local optical transmission network device and the identification code of the local quantum cryptography service platform to the networking centralized controller, so that the networking centralized controller establishes an association relationship between the local optical transmission network device and the local quantum cryptography service platform; after receiving the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller, the quantum key paired with the opposite optical transmission network device is decrypted based on the pre-charged quantum key.

18. The system according to claim 17, characterized in that The system further includes: a local quantum gateway and a peer quantum gateway; the configuration information includes: an identification code and an encryption port number of the local optical transmission network device, and an identification code and an encryption port number of the peer optical transmission network device; The local quantum gateway is used to register the identification code and encryption port number of the local optical transmission network device to the local network management platform; The peer quantum gateway is used to register the identification code and encryption port number of the peer optical transmission network device to the local network management platform; The local network management platform is also used to send the identification code and encrypted port number of the local optical transmission network device, as well as the identification code and encrypted port number of the opposite optical transmission network device, to the networking centralized controller.

19. The system according to claim 18, characterized in that The quantum key acquisition request includes the identification code and encryption port number of the local optical transmission network device; The networking centralized controller is used to determine the identification code and encryption port number of the opposite-end optical transmission network device according to the service path paired between the local optical transmission network device and the opposite-end optical transmission network device, as well as the identification code and encryption port number of the local optical transmission network device; obtain the identification code of the local quantum cryptography service platform corresponding to the local optical transmission network device, and the identification code of the opposite-end quantum cryptography service platform corresponding to the opposite-end optical transmission network device; and send a cross-domain key acquisition request to the local quantum cryptography service platform based on the identification code and encryption port number of the local optical transmission network device, the identification code and encryption port number of the opposite-end optical transmission network device, the identification code of the local quantum cryptography service platform, and the identification code of the opposite-end quantum cryptography service platform.

20. The system according to claim 19, characterized in that The system also includes a quantum network node; The local quantum cryptography service platform is used to call the quantum network node according to the cross-domain key acquisition request, perform key negotiation with the peer quantum cryptography service platform, and generate the quantum key paired with the peer optical transmission network device; The quantum network node is used to obtain the quantum key paired with the opposite optical transmission network device.

21. A cross-domain quantum key distribution device for an optical transmission network based on a centralized controller, characterized in that: Applied to a networking centralized controller, the device comprises: A quantum key request receiving module, used to receive a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; A cross-domain key request sending module, used to send a cross-domain key acquisition request to a local quantum cryptography service platform corresponding to the local optical transmission network device according to the quantum key acquisition request; A cross-domain quantum key receiving module, used to receive the quantum key paired with the opposite-end optical transmission network device sent by the local-end quantum cryptography service platform according to the cross-domain key acquisition request; the quantum key paired with the opposite-end optical transmission network device is generated by negotiation between the local-end quantum cryptography service platform and the opposite-end quantum cryptography service platform; The paired quantum key sending module is used to send the quantum key paired with the opposite end optical transmission network device to the local end optical transmission network device.

22. A cross-domain quantum key distribution device for an optical transmission network based on a centralized controller, characterized in that: Applied to the local quantum cryptography service platform, the device includes: A cross-domain key request receiving module is used to receive a cross-domain key acquisition request sent by a networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to a quantum key acquisition request sent by a local optical transmission network device through a local network management platform; the quantum key acquisition request is used to instruct the acquisition of a quantum key paired with a peer optical transmission network device; A cross-domain quantum key generation module, configured to negotiate with the peer quantum cryptography service platform according to the cross-domain key acquisition request to generate the quantum key paired with the peer optical transmission network device; A cross-domain quantum key sending module is used to send the quantum key paired with the opposite optical transmission network device to the networking centralized controller, so that the networking centralized controller sends the quantum key paired with the opposite optical transmission network device to the local optical transmission network device.

23. A cross-domain quantum key distribution device for an optical transmission network based on a centralized controller, characterized in that: Applied to local optical transmission network equipment, the device comprises: A quantum key request sending module, used to send a quantum key acquisition request to the networking centralized controller through the local network management platform, wherein the quantum key acquisition request is used to instruct to obtain a quantum key paired with the opposite optical transmission network device; The paired quantum key receiving module is used to receive the quantum key paired with the opposite optical transmission network device sent by the networking centralized controller; the quantum key paired with the opposite optical transmission network device is generated by the local quantum cryptography service platform through negotiation with the opposite quantum cryptography service platform according to the cross-domain key acquisition request sent by the networking centralized controller; the cross-domain key acquisition request is generated by the networking centralized controller according to the quantum key acquisition request.

24. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller are implemented as described in any one of claims 1 to 5 or claims 6 to 10 or claims 11 to 15.

25. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of a method for cross-domain quantum key distribution in an optical transmission network based on a centralized controller are implemented as described in any one of claims 1-5 or claims 6-10 or claims 11-15.

Images