Distributed light quantum communication networking structure and communication method thereof

Abstract

The invention discloses a distributed light quantum communication networking structure, a quantum communication network comprises three layers of network structures, and the three layers of network structures are a top layer composed of at least two core stations, a middle layer composed of at least one convergence station and a bottom layer composed of at least one edge station. The convergence station is connected with at least two core stations, and the edge station is connected with the convergence station. The method for realizing communication by using the structure comprises the following steps: setting a core station, a convergence station and an edge station; deploying a distributed light quantum communication network; establishing a light quantum routing table; an application demand side proposes a quantum key demand request to the unified network management and control platform, and the unified network management and control platform sends an instruction to a corresponding QKM; and the application demand provides quantum key demand termination to the unified network management and control platform, and the unified network management and control platform sends an instruction to the corresponding QKM.

Description

Technical Field

[0001] The present invention relates to the field of quantum communication technology, and in particular to a distributed optical quantum communication networking structure and a communication method thereof. Background Art

[0002] This section merely provides background information related to the present disclosure and is not necessarily prior art.

[0003] Modern cryptography mainly includes two major systems: symmetric cryptography and asymmetric cryptography. In classical communications, the public key cryptography system (PKI) based on asymmetric cryptography usually provides authentication, message checking, and symmetric cryptographic distribution functions to ensure the confidentiality, integrity, and availability of classical communications. However, since asymmetric cryptographic security is based on mathematical problems such as large prime number decomposition problems, discrete logarithm problems, and elliptic curve problems, with the iteration of quantum computing algorithms such as Shor and Grover, the popularization of quantum computers, and the development of artificial intelligence technology, the threats faced by classical communications are increasing day by day.

[0004] To deal with the threat, we can optimize asymmetric cryptographic algorithms based on lattice, coding, multivariate polynomial and other theories to form the so-called "anti-quantum cryptographic algorithm (Post Quantum Cryptography, PQC)", further increasing the difficulty of mathematical problems; we can also use quantum physical properties such as non-cloning and uncertainty to rebuild a quantum key distribution (Quantum Key Distribution, QKD) system that is different from PKI, and optimize data encryption, message inspection, identity authentication and other processes. The former is feasible within a certain time frame, but the sustainability of the effect is not optimistic; the latter can be unconditionally secure in principle, but it must rely on a quantum key distribution network deployed on a large scale.

[0005] The traditional optical quantum communication networking structure consists of three types of sites: centralized control stations, access stations, and user stations. Among them, the first-layer centralized control stations and the second-layer access stations are basically similar in configuration, including quantum key distribution equipment (Quantum Key Distribution Equipment, QKDE), matrix optical quantum switches (Matrix Quantum Optical Switch, MQOS), quantum key registers (Quantum Key Register, QKR) and quantum key managers (Quantum Key Manager, QKM), etc. Compared with centralized control stations and access stations, user stations on the third layer do not contain MQOS. QKR is deployed in all three types of stations to store site quantum keys.

[0006] The centralized control station is usually set up in the user data center, and can directly connect to the QKDE from the user station or relay it from the user station through the access station; the access station is optional and its purpose is to extend the access distance of the user station.

[0007] like Figure 1 As shown in the figure, the traditional optical quantum communication network is essentially a star structure with serious single point failure risk. As the network scale expands, the scope of the single point failure risk continues to increase. Therefore, it is only suitable for local metropolitan area network applications and cannot cope with the deployment of quantum key distribution networks suitable for telecom-grade metropolitan area networks. The QKDE and QKR set up at the second-layer access station of the traditional optical quantum communication network increase the risk of quantum keys being intercepted midway. At the same time, the traditional optical quantum communication network cannot be planned and designed in advance, and its scalability is insufficient. Summary of the invention

[0008] In response to the above problems, the present invention provides a distributed optical quantum communication networking structure to solve the problem that the traditional optical quantum communication networking structure cannot cope with the deployment of quantum key distribution network in telecom-grade metropolitan area network, and can improve the reliability and scalability of quantum key distribution network. Its core is to organize quantum key distribution network based on quantum exchange station.

[0009] A distributed optical quantum communication networking structure, the quantum communication network includes a three-layer network structure, the three-layer network structure includes a top layer consisting of at least two core stations, a middle layer consisting of at least one aggregation station, and a bottom layer consisting of at least one edge station; the aggregation station is connected to at least two core stations, and the edge station is connected to the aggregation station.

[0010] Furthermore, quantum exchange stations are divided into three types of stations: core stations, aggregation stations, and edge stations. Compared with traditional optical quantum communication stations, the all-pass quantum optical switch (AQOS) is used to replace MQOS, and all optical ports support two-to-two interconnection.

[0011] Among them, the configurations of the first-layer centralized control station and the third-layer edge station are basically similar, including QKDE, AQOS, QKR, QKM, etc. The difference is that AQOS is an optional option for the edge station; the second-layer aggregation station only includes AQOS and QKM, and simply performs quantum key exchange, and no longer generates quantum keys.

[0012] Under the unified network management and control platform, QKM uses classical communication to achieve the management and control of AQOS, and flexibly distributes quantum keys across the entire network, effectively meeting the needs of telecommunications-grade quantum keys.

[0013] A distributed optical quantum communication networking structure communication method, comprising the following steps:

[0014] Step 1: Set up core stations, aggregation stations, and edge stations. The core station must meet the region's mid- and long-term business quantum key distribution needs. The typical location is a prefecture-level data center or an operator's core computer room, and is set up in pairs in the north-south or east-west directions. The typical location of the aggregation station is the operator's aggregation computer room. The typical location of the edge station is an edge data center or business computer room. Different aggregation stations cover different areas within the region and do not overlap with each other. The edge station belongs to a unique aggregation station based on its regional location.

[0015] Step 2: Deploy a distributed optical quantum communication network based on the sites set in step 1. The deployment rule is that the aggregation station uses a "V"-shaped dual-uplink core station, and the edge station is directly connected to its own aggregation station.

[0016] Step 3: Establish an optical quantum routing table based on the communication network deployed in step 2. Plan at least one optical quantum route between any points that may need quantum key distribution.

[0017] Step 4: The application demand side submits a quantum key demand request to the unified network control platform. The application demand side is the quantum key receiver, and the key source is the quantum key transmitter. The unified network control platform sends instructions to the corresponding QKM. According to the planned optical quantum routing table, the QKDE receiving port of the receiving end, the corresponding AQOS port in the link, and the QKDE transmitting port of the sending end are opened at the same time.

[0018] Step 5: The application demand direction proposes the termination of quantum key demand to the unified network control platform, and the unified network control platform sends instructions to the corresponding QKM. According to the planned optical quantum routing table, the QKDE receiving port at the sending end, the corresponding AQOS port in the link, and the QKDE transmitting port at the receiving end are closed at the same time.

[0019] Furthermore, the optical quantum routing described in step 2 includes four modes:

[0020] Mode 1: The core station and the edge station are defined as CE routing, that is, core station-aggregation station-edge station, a total of 2 hops.

[0021] Mode 2: The core stations are defined as C2 routes, that is, core station-aggregation station-core station, with a total of 2 hops.

[0022] Mode 3: The edge stations under the same aggregation station are defined as SE routing, that is, edge station-aggregation station-edge station, a total of 2 hops;

[0023] Mode 4: DE routing is defined between edge stations under different aggregation stations, that is, edge station-aggregation station-core station-aggregation station'-edge station', with a total of 4 hops.

[0024] Except for DE routing, all other routes are two-hop routing.

[0025] Furthermore, the optical quantum routing table is provided with a backup route. If the edge station and the core station have a backup route requirement, relying on the key added by the CE route through the C2 route, a CE1 can be added, that is, the core station'-aggregation station-edge station, which is enabled when the path between the core station and the aggregation station is interrupted to ensure the reliability of the communication network.

[0026] Furthermore, the networking architecture meets expansion requirements by deploying optical quantum routing.

[0027] To ensure the safety and reliability between the aggregation station and the edge station, a small-scale AQOS can be set up at the edge station to connect to the AQOS of the aggregation station or the AQOS of the adjacent aggregation station.

[0028] In order to ensure that quantum keys are available at any time and achieve instant adaptation to the business, quantum keys are managed in a pooled manner, that is, a distributed optical quantum communication is repeated in equal or unequal time periods during idle time.

[0029] The advantage of the present invention is that a distributed optical quantum communication networking structure and a communication method thereof are proposed. Compared with the traditional optical quantum communication networking structure, the aggregation site only includes AQOS, and QKDE and QKR are not set, which reduces the risk of quantum keys being intercepted midway. The scalability and reliability of the quantum key distribution network can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments, and the above and / or other advantages of the present invention will become more clear.

[0031] Figure 1 It is a typical topology of traditional optical quantum communication network.

[0032] Figure 2 This is a typical topology of a distributed optical quantum communication network provided in the embodiments of the present invention.

[0033] Figure 3 This is a diagram of the distributed optical quantum communication structure provided in the embodiment of the present invention.

[0034] Figure 4 It is a schematic diagram of AQOS, a distributed optical quantum communication networking structure provided in the embodiment of the present invention.

[0035] Figure 5 It is a flow chart of a distributed optical quantum communication method provided in the embodiment of the present invention. DETAILED DESCRIPTION

[0036] A certain place needs to build a new telecommunications-grade quantum key distribution network. Currently, there is only a demand for 6 business points in a single area, and in the future there will be a demand for 12 business points in 2 areas.

[0037] Step 1: Set up core stations, aggregation stations, and edge stations.

[0038] ① Set up core stations. Select one city-level data center and one operator core computer room, and name them Core Station 1 and Core Station 2 respectively. Deploy QKDE, AQOS, QKR, and QKM respectively.

[0039] ② Set up a convergence station. According to the locations of the six business nodes, select a convergence room, name it convergence station 1, and deploy AQOS and QKM.

[0040] ③ Set up an edge station. Set up one for each of the six business node rooms, named Edge Station 1, Edge Station 2, Edge Station 3, Edge Station 4, Edge Station 5, and Edge Station 6, and deploy QKDE, QKR, and QKM respectively.

[0041] Step 2: Deploy a distributed optical quantum communication network.

[0042] From the perspective of the aggregation station AQOS, aggregation station 1 is deployed to core station 1 and core station 2 through different paths through port A and port B; and is connected to edge station 1, edge station 2, edge station 3, edge station 4, edge station 5, and edge station 6 through ports c, d, e, f, g, and h, respectively. Figure 4 As shown, A, B, c, d, e, f, g, h, i, j, k, l, m, n, and o are optical quantum ports.

[0043] Step 3: Establish an optical quantum routing table. The typical topology of a distributed optical quantum communication network is as follows: Figure 2 shown.

[0044] ① If all core stations and edge stations have communication needs, 6 CE routes are set, namely CE1: core station 1-aggregation station 1-edge station 1, CE2: core station 1-aggregation station 1-edge station 2, CE3: core station 1-aggregation station 1-edge station 3, CE4: core station 1-aggregation station 1-edge station 4, CE5: core station 1-aggregation station 1-edge station 5, CE6: core station 1-aggregation station 1-edge station 6.

[0045] ② If there is a need for communication between core stations, set up one C2 route, namely core station 1-aggregation station 1-core station 2.

[0046] ③ If there is a need for communication between adjacent edge stations under the same aggregation station, set up SE routing C 26=15, namely SE1: edge station 1-aggregation station 1-edge station 2, SE2: edge station 1-aggregation station 1-edge station 3, SE3: edge station 1-aggregation station 1-edge station 4, SE4: edge station 1-aggregation station 1-edge station 5, SE5: edge station 1-aggregation station 1-edge station 6, SE6: edge station 2-aggregation station 1-edge station 3, SE7: edge station 2-aggregation station 1-edge station 4, SE8: edge station 2-aggregation station 1-edge station 5, SE9: edge station 2-aggregation station 1-edge station 6, SE10: edge station 3-aggregation station 1-edge station 4, SE11: edge station 3-aggregation station 1-edge station 5, SE12: edge station 3-aggregation station 1-edge station 6, SE13: edge station 4-aggregation station 1-edge station 5, SE14: edge station 4-aggregation station 1-edge station 6, SE15: edge station 5-aggregation station 1-edge station 6.

[0047] ④ There is no possibility of edge station communication under different aggregation stations, and there is no DE routing. Distributed optical quantum communication structure such as Figure 3 shown.

[0048] The distributed optical quantum communication method process is divided into two steps: step 4 and step 5. Figure 5 shown.

[0049] Step 4: The application demand direction submits a quantum key demand request to the unified network control platform. Edge station 3 needs a key from core station 1, so edge station 3 is the quantum key receiver and core station 1 is the quantum key transmitter. Core station 1 needs to distribute quantum keys to edge station 3.

[0050] The unified network management and control platform sends instructions to the corresponding QKM, and according to the planned optical quantum routing table CE3, it successively opens the QKDE receiving port of edge station 3, the corresponding AQOS port in the link, and the QKDE transmitting port of core station 1.

[0051] Step 5: The unified network management and control platform proposes the termination of quantum key demand in the direction of application demand.

[0052] The unified network management and control platform sends instructions to the corresponding QKM, and according to the planned optical quantum routing table CE3, it successively closes the QKDE transmitting port of core station 1, the corresponding AQOS port in the link, and the QKDE receiving port of edge station 3.

[0053] In order to ensure that quantum keys are available at any time and achieve instant adaptation to the business, quantum keys are managed in a "pooled" manner, that is, a distributed optical quantum communication is carried out in equal or unequal time periods during idle time.

[0054] In traditional optical quantum communication networks, the presence of access stations increases the possibility of quantum keys being intercepted, and there is no routing protection capability. Compared with traditional optical quantum communication networks, this networking architecture has better reliability, which is reflected in the fact that the aggregation site only contains AQOS, and QKDE and QKR are not set, reducing the risk of quantum keys being intercepted midway. And backup routes can be set in the optical quantum routing table. If edge station 1 and core station 1 have backup routing requirements, relying on the key backup route stored by the CE routing through the C2 routing, CE1 can be added, that is, core station 2-aggregation station 1-edge station 1, which is enabled when the path between core station 1 and aggregation station 1 is interrupted.

[0055] Traditional optical quantum communication networks cannot be planned and designed in advance, and they spread disorderly to follow business needs. This networking architecture has better scalability than the typical topology of traditional optical quantum communication networks, which is reflected in the fact that with the increase in the demand for quantum key distribution, the remaining two areas and 12 business points (or even more areas and business points) will still be networked and communicated according to the above method in the later stage. The difference is that the edge station communication routes under different aggregation stations need to be added to the optical quantum routing table. For example, for edge station 1-1 and edge station 3-6, DE routing can be set, edge station 1-1-aggregation station 1-core station 1-aggregation station 3-edge station 3-6.

[0056] The present invention provides a distributed optical quantum communication networking structure and its communication method. There are many methods and ways to implement the technical solution. The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the protection scope of the present invention. All components not specified in this embodiment can be implemented by existing technologies.

Claims

1. A distributed optical quantum communication networking structure, characterized in that: The quantum communication network includes a three-layer network structure, which includes a top layer consisting of at least two core stations, a middle layer consisting of at least one aggregation station, and a bottom layer consisting of at least one edge station; the aggregation station is connected to at least two core stations, and the edge station is connected to the aggregation station.

2. The distributed optical quantum communication networking structure according to claim 1 is characterized in that: The core station is equipped with QKM, AQOS, QKDE and QKR; The aggregation station is equipped with QKM and AQOS; The edge station is provided with QKM, AQOS, QKDE and QKR; All optical ports of the AQOS support two-to-two interconnection.

3. A distributed optical quantum communication networking structure communication method, characterized in that: The communication method realizes communication through a distributed optical quantum communication networking structure as described in any one of claims 1-2.

4. The distributed optical quantum communication networking structure communication method according to claim 3, characterized in that: The following steps are included: Step 1: Set up core stations, aggregation stations, and edge stations; Step 2: Deploy a distributed optical quantum communication network based on the sites set in step 1; Step 3: Establish an optical quantum routing table based on the communication network deployed in step 2; Step 4: The application demand direction submits a quantum key demand request to the unified network control platform, and the unified network control platform sends instructions to the corresponding QKM; Step 5: The application demands termination of quantum key demand to the unified network control platform, and the unified network control platform sends instructions to the corresponding QKM.

5. The distributed optical quantum communication networking structure communication method according to claim 4, characterized in that: The rule for deploying a distributed optical quantum communication network in step 2 is that the aggregation station adopts a "V"-shaped dual-uplink core station, and the edge station is directly connected to its own aggregation station.

6. The distributed optical quantum communication networking structure communication method according to claim 4, characterized in that: The optical quantum routing table in step 3 includes at least one optical quantum routing, and the optical quantum routing includes four modes: Mode 1: The core station and the edge station are defined as CE routing, that is, core station-aggregation station-edge station, a total of 2 hops:; Mode 2: The core stations are defined as C2 routes, that is, core station-aggregation station-core station, with a total of 2 hops; Mode 3: The edge stations under the same aggregation station are defined as SE routing, that is, edge station-aggregation station-edge station, a total of 2 hops; Mode 4: DE routing is defined between edge stations under different aggregation stations, that is, edge station-aggregation station-core station-aggregation station'-edge station', with a total of 4 hops.

7. The distributed optical quantum communication networking structure communication method according to claim 6, characterized in that: The optical quantum routing table is provided with a backup route.

8. The distributed optical quantum communication networking structure communication method according to claim 6, characterized in that: The networking architecture meets the expansion requirements by deploying optical quantum routing.

9. The distributed optical quantum communication networking structure communication method according to claim 4, characterized in that: Quantum keys are managed in a pooled manner.

10. The distributed optical quantum communication networking structure communication method according to claim 4, characterized in that: The core station described in step 1 is set up in a municipal data center or an operator's core computer room; the aggregation station is set up in an operator's aggregation computer room; and the edge station is set up in an edge data center or a business computer room.

Images