Method, device, medium and apparatus for synchronizing quantum keys

Abstract

The present invention provides a method, an apparatus, a medium and a device for synchronizing quantum keys, wherein the method comprises: first, using the identifier of the quantum key sequence to respectively obtain the quantum key sequence generated by the QKD device through quantum key distribution from the QKD device connected to the two terminals, and then, using the index position of the quantum key to respectively obtain the quantum key for encryption / decryption from the two terminals that have obtained the quantum key sequence, so as to ensure that both terminals can synchronously update to the symmetric quantum key from the connected QKD device, thereby providing guarantee for the secure transmission of data between the terminals.

Description

Technical Field

[0001] The present invention relates to the field of quantum communication technology, and in particular to a method, device, medium and equipment for synchronizing quantum keys. Background Art

[0002] In the Quantum Key Distribution (QKD) system, the transmitter generates quantum states through a quantum bit source (such as photons), encodes the quantum states using the characteristics of quantum mechanics (such as the quantum no-cloning theorem and the uncertainty principle), and transmits them to the receiver. The transmitter and receiver randomly select a measurement basis to measure the quantum state, compare the measurement basis through a classical channel and select consistent bits, and then go through post-processing steps such as key negotiation and private amplification to finally generate a secure quantum key. This process ensures the randomness, uniqueness, and unconditional security of the key.

[0003] Therefore, how to achieve real-time synchronous storage and management of quantum keys at both ends of QKD has always been an urgent problem to be solved in the field of confidential communications. This is not only the basis for ensuring that both parties in communication can use completely consistent keys for encryption and decryption operations, but also the core of maintaining the security of the communication process. By synchronously storing keys, it is also possible to resist potential risks of key leakage and tampering, ensuring that only legitimate parties in communication can decrypt information, thereby providing solid security protection for encrypted communications today as the threat of quantum computing grows. Summary of the invention

[0004] The object of the present invention is to provide a method, an apparatus, a medium and a device for synchronizing quantum keys.

[0005] According to one aspect of the present invention, a method for synchronizing quantum keys is provided, the method comprising: S111. A first terminal receives a quantum key sequence from a first QKD device, and in response to receiving the quantum key sequence from the first QKD device, sends a quantum key cache synchronization message to a second terminal, wherein the quantum key cache synchronization message includes an identifier of the quantum key sequence; S112. A second terminal receives the quantum key cache synchronization message from the first terminal, and in response to receiving the quantum key cache synchronization message from the first terminal, obtains a quantum key sequence having the identifier from the second QKD device, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence having the identifier from the second QKD device; S113. The first terminal receives the quantum key cache synchronization response message from the second terminal, and in response to receiving the quantum key cache synchronization response message from the second terminal, sends a local quantum key synchronization message to the second terminal; S114. The second terminal receives a local quantum key synchronization message from the first terminal, and in response to receiving the local quantum key synchronization message from the first terminal, backs up the quantum key currently used for decrypting data in the second terminal, then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used for decrypting data in the second terminal and sends a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes an index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; S115. The first terminal receives a local quantum key synchronization response message from the second terminal, and in response to receiving the local quantum key synchronization response message from the second terminal, obtains the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used for encrypting data in the first terminal, wherein the first terminal is connected to the first QKD device, the second terminal is connected to the second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0006] According to another aspect of the present invention, a method for synchronizing quantum keys is provided, the method comprising performing the following steps at a first terminal: receiving a quantum key sequence from a first QKD device; sending a quantum key cache synchronization message to a second terminal in response to receiving the quantum key sequence from the first QKD device, the quantum key cache synchronization message comprising an identifier of the quantum key sequence, so that the second terminal obtains a quantum key sequence having the identifier from the second QKD device in response to receiving the quantum key cache synchronization message from the first terminal, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence having the identifier from the second QKD device; receiving a quantum key cache synchronization response message from the second terminal; sending a quantum key cache synchronization response message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal. A local quantum key synchronization message, so that the second terminal backs up the quantum key currently used to decrypt data in the second terminal in response to receiving the local quantum key synchronization message from the first terminal, and then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and sends a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; receives the local quantum key synchronization response message from the second terminal; in response to receiving the local quantum key synchronization response message from the second terminal, obtains the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal, wherein the first terminal is connected to the first QKD device, the second terminal is connected to the second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0007] According to another aspect of the present invention, a method for synchronizing quantum keys is provided, the method comprising performing the following steps at a second terminal: receiving a quantum key cache synchronization message from a first terminal, the quantum key cache synchronization message comprising an identifier of a quantum key sequence received by the first terminal from a first QKD device; acquiring a quantum key sequence having the identifier from a second QKD device in response to receiving the quantum key cache synchronization message from the first terminal; sending a quantum key cache synchronization response message to the first terminal in response to acquiring the quantum key sequence having the identifier from the second QKD device, so that the first terminal sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal; receiving a local quantum key synchronization message from the first terminal; A quantum key synchronization message; in response to receiving a local quantum key synchronization message from the first terminal, backing up the quantum key currently used to decrypt data in the second terminal; obtaining a first quantum key from a quantum key sequence from a second QKD device as the quantum key currently used to decrypt data in the second terminal; sending a local quantum key synchronization response message to the first terminal, the local quantum key synchronization response message including an index position corresponding to the first quantum key in the quantum key sequence from the second QKD device, so that the first terminal obtains a second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal in response to receiving the local quantum key synchronization response message from the second terminal, wherein the first terminal is connected to the first QKD device, the second terminal is connected to the second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0008] According to another aspect of the present invention, a device for synchronizing quantum keys is provided, the device comprising: a quantum key receiving unit, for receiving a quantum key sequence from a first QKD device; a first message sending unit, for sending a quantum key cache synchronization message to a second terminal in response to receiving the quantum key sequence from the first QKD device, the quantum key cache synchronization message comprising an identifier of the quantum key sequence, so that the second terminal obtains the quantum key sequence with the identifier from the second QKD device in response to receiving the quantum key cache synchronization message from the first terminal, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence with the identifier from the second QKD device; a first response receiving unit, for receiving the quantum key cache synchronization response message from the second terminal; a second message sending unit, for sending a quantum key cache synchronization response message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal. The second terminal sends a local quantum key synchronization message, so that the second terminal backs up the quantum key currently used to decrypt data in the second terminal in response to receiving the local quantum key synchronization message from the first terminal, and then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and sends a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; a second response receiving unit is used to receive the local quantum key synchronization response message from the second terminal; a quantum key acquisition unit is used to obtain the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal in response to receiving the local quantum key synchronization response message from the second terminal, wherein the first terminal is connected to the first QKD device, the second terminal is connected to the second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0009] According to another aspect of the present invention, a device for synchronizing quantum keys is provided, the device comprising: a first message receiving unit, configured to receive a quantum key cache synchronization message from a first terminal, the quantum key cache synchronization message comprising an identifier of a quantum key sequence received by the first terminal from a first QKD device; a quantum key synchronization unit, configured to obtain a quantum key sequence having the identifier from a second QKD device in response to receiving the quantum key cache synchronization message from the first terminal; a first response sending unit, configured to send a quantum key cache synchronization response message to the first terminal in response to obtaining a quantum key sequence having the identifier from the second QKD device, so that the first terminal sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal; and a second message receiving unit, configured to receive a local quantum key synchronization message from the first terminal. A quantum key synchronization message; a local key backup unit, used to back up the quantum key currently used to decrypt data in the second terminal in response to receiving the local quantum key synchronization message from the first terminal; a quantum key acquisition unit, used to acquire the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal; a second response sending unit, used to send a local quantum key synchronization response message to the first terminal, the local quantum key synchronization response message including the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device, so that the first terminal obtains the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal in response to receiving the local quantum key synchronization response message from the second terminal, wherein the first terminal is connected to the first QKD device, the second terminal is connected to the second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0010] According to another aspect of the present invention, a computer-readable storage medium storing a computer program is also provided. When the computer program is executed by a processor, the method for synchronizing quantum keys as described above is implemented.

[0011] According to another aspect of the present invention, a computer device is also provided, comprising: a processor; and a memory storing a computer program, wherein when the computer program is executed by the processor, the method for synchronizing quantum keys as described above is implemented.

[0012] The method, apparatus, medium and device for synchronizing quantum keys provided by the present invention not only enable the terminal to synchronously update to the symmetric quantum key from the connected QKD device without interrupting data encryption / decryption, but also enable the terminal to adaptively adjust its synchronous update rate of the quantum key as the quantum key generation rate of the QKD device changes. In particular, when the QKD device generates quantum keys at a high speed or a certain number of quantum keys are stored in the QKD device cache, quantum key updates can be achieved in seconds, which makes the data encryption / decryption between terminals more secure and stable. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The above objects and features of the present invention will become more apparent from the following description in conjunction with the accompanying drawings.

[0014] Figure 1 A flow chart of a method for synchronizing quantum keys according to an exemplary embodiment of the present invention is schematically shown.

[0015] Figure 2 The structure of a device for synchronizing quantum keys according to an exemplary embodiment of the present invention is schematically shown.

[0016] Figure 3 The data interaction process for synchronizing quantum keys according to an exemplary embodiment of the present invention is schematically illustrated. DETAILED DESCRIPTION

[0017] Figure 1 A flow chart of a method for synchronizing quantum keys according to an exemplary embodiment of the present invention is schematically shown.

[0018] like Figure 1 As shown, in an exemplary embodiment of the present invention, the method for synchronizing quantum keys may include at least the following steps, so that the terminal can synchronize and update to the symmetric quantum key from the connected QKD device without interrupting data encryption / decryption.

[0019] First, in step S111, the first terminal receives a quantum key sequence from a first QKD device, stores the received quantum key sequence in a cache of the first terminal, and then sends a quantum key cache synchronization message to the second terminal in response to receiving the quantum key sequence from the first QKD device, wherein the quantum key cache synchronization message includes an identifier of the quantum key sequence.

[0020] Next, in step S112, the second terminal receives the quantum key cache synchronization message from the first terminal, and in response to receiving the quantum key cache synchronization message from the first terminal, obtains the quantum key sequence with the identifier from the second QKD device, stores the obtained quantum key sequence in the second terminal cache, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence with the identifier from the second QKD device.

[0021] Next, in step S113, the first terminal receives the quantum key cache synchronization response message from the second terminal, and sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal.

[0022] Next, in step S114, the second terminal receives a local quantum key synchronization message from the first terminal, and in response to receiving the local quantum key synchronization message from the first terminal, backs up the quantum key currently used to decrypt data in the second terminal, then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and sends a local quantum key synchronization response message to the first terminal, the local quantum key synchronization response message including the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device.

[0023] Next, in step S115, the first terminal receives a local quantum key synchronization response message from the second terminal, and in response to receiving the local quantum key synchronization response message from the second terminal, obtains a second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal.

[0024] In an exemplary embodiment of the present invention, the first terminal is connected to a first QKD device, the second terminal is connected to a second QKD device, and a quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0025] When the encryption / decryption directions at both ends are switched, in order to ensure that corresponding symmetric quantum keys can be provided at both ends, after executing step 115, the method for synchronizing quantum keys may further include the following steps: Figure 1 not shown).

[0026] Next, in step S116, the first terminal backs up the quantum key currently used to decrypt data in the first terminal, and then obtains a third quantum key from the quantum key sequence from the first QKD device as the quantum key currently used to decrypt data in the first terminal and sends another local quantum key synchronization message to the second terminal, the other local quantum key synchronization message including another index position corresponding to the third quantum key in the quantum key sequence from the first QKD device.

[0027] Next, in step S117, the second terminal receives another local quantum key synchronization message from the first terminal, and in response to receiving the local quantum key synchronization message from the first terminal, obtains a fourth quantum key from the quantum key sequence from the second QKD device according to another index position as the quantum key currently used to encrypt data in the second terminal, and then sends another local quantum key synchronization response message to the first terminal.

[0028] In addition, in order to enable the terminal to adaptively adjust its rate of synchronously updating the quantum key as the quantum key generation rate of the QKD device changes, before executing step 111, the method for synchronizing the quantum key may also include the following steps: Figure 1 not shown).

[0029] First, in step S109, the first QKD device sends the quantum key generation rate of the first QKD device and / or the number of quantum keys in the cache of the first QKD device to the first terminal.

[0030] Next, in step S110, the first terminal receives the above-mentioned quantum key generation rate and / or the number of quantum keys from the first QKD device, and adjusts the quantum key synchronization update rate of the first terminal and the second terminal according to the above-mentioned quantum key generation rate and / or the number of quantum keys, so that the quantum key synchronization update rate of the first terminal and the second terminal increases in response to the increase of the above-mentioned quantum key generation rate and / or the number of quantum keys, and decreases in response to the decrease of the above-mentioned quantum key generation rate and / or the number of quantum keys.

[0031] In one example, the quantum key synchronization update process of the first terminal and the second terminal may include steps S111 to S115. In another example, the quantum key synchronization update process of the first terminal and the second terminal may include steps S111 to S117.

[0032] In addition, in an exemplary embodiment of the present invention, step S111 may further include the following steps: the first terminal sends a quantum key acquisition request to the first QKD device; the first QKD device receives the quantum key acquisition request from the first terminal, and sends a quantum key sequence to the first terminal in response to receiving the quantum key acquisition request from the first terminal.

[0033] Accordingly, in an exemplary embodiment of the present invention, step S112 may further include the following steps: the second terminal sends a quantum key acquisition request to the second QKD device, the quantum key acquisition request including the identifier of the quantum key quantum key sequence in the quantum key cache synchronization message from the first terminal; the second QKD device receives the quantum key acquisition request from the second terminal, and in response to receiving the quantum key acquisition request from the second terminal, sends the quantum key sequence with the identifier to the second terminal.

[0034] Figure 2 The structure of a device for synchronizing quantum keys according to an exemplary embodiment of the present invention is schematically shown.

[0035] Reference Figure 2 , Figure 2 The quantum key synchronization device shown can be deployed at the first terminal and the second terminal respectively. Figure 2 As shown, the first terminal is connected to the first QKD device, the second terminal is connected to the second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

[0036] exist Figure 2 In the first terminal shown, the device for synchronizing a quantum key may at least include a quantum key receiving unit, a first message sending unit, a first response receiving unit, a second message sending unit, a second response receiving unit, and a quantum key acquisition unit.

[0037] The quantum key receiving unit is used to receive a quantum key sequence from a first QKD device; the first message sending unit is used to send a quantum key cache synchronization message to a second terminal in response to receiving a quantum key sequence from the first QKD device, the quantum key cache synchronization message including an identifier of the quantum key sequence, so that the second terminal obtains a quantum key sequence with the identifier from the second QKD device in response to receiving the quantum key cache synchronization message from the first terminal, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence with the identifier from the second QKD device; the first response receiving unit is used to receive a quantum key cache synchronization response message from the second terminal; the second message sending unit is used to send a local quantum key synchronization message to the second terminal in response to receiving a quantum key cache synchronization response message from the second terminal, The second terminal is configured to back up the quantum key currently used to decrypt data in the second terminal in response to receiving a local quantum key synchronization message from the first terminal, and then obtain the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and send a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; the second response receiving unit is configured to receive the local quantum key synchronization response message from the second terminal; and the quantum key acquisition unit is configured to obtain the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal in response to receiving the local quantum key synchronization response message from the second terminal.

[0038] exist Figure 2 In the second terminal shown, the device for synchronizing quantum keys may include at least a first message receiving unit, a quantum key synchronization unit, a first response sending unit, a second message receiving unit, a local key backup unit, a quantum key acquisition unit and a second response sending unit.

[0039] The first message receiving unit is used to receive a quantum key cache synchronization message from the first terminal, and the quantum key cache synchronization message includes an identifier of a quantum key sequence received by the first terminal from the first QKD device; the quantum key synchronization unit is used to obtain a quantum key sequence with the identifier from the second QKD device in response to receiving the quantum key cache synchronization message from the first terminal; the first response sending unit is used to send a quantum key cache synchronization response message to the first terminal in response to obtaining a quantum key sequence with the identifier from the second QKD device, so that the first terminal sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal; the second message receiving unit is used to receive a local quantum key synchronization message from the first terminal; the local key backup ... The unit is used to back up the quantum key currently used to decrypt data in the second terminal in response to receiving a local quantum key synchronization message from the first terminal; the quantum key acquisition unit is used to acquire the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal; the second response sending unit is used to send a local quantum key synchronization response message to the first terminal, the local quantum key synchronization response message includes the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device, so that the first terminal obtains the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal in response to receiving the local quantum key synchronization response message from the second terminal.

[0040] Figure 3 The data interaction process for synchronizing quantum keys according to an exemplary embodiment of the present invention is schematically illustrated.

[0041] Reference Figure 3 , QKD-A is connected to encryption terminal A, QKD-B is connected to encryption terminal B, and the quantum key sequence is generated by QKD-A and QKD-B via free space and / or optical fiber (such as Figure 3 It is generated by quantum key distribution over the quantum channel shown in the figure.

[0042] like Figure 3 As shown, QKD-A, QKD-B, encryption terminal A and encryption terminal B can respectively perform the following data processing processes.

[0043] QKD-A sends the quantum key generation rate of QKD-A and / or the number of quantum keys in the cache of QKD-A to encryption terminal A.

[0044] Encryption terminal A receives the quantum key generation rate and / or the number of quantum keys from QKD-A, and adjusts the quantum key synchronization update rate of encryption terminal A and encryption terminal B according to the received quantum key generation rate and / or the number of quantum keys, so that the quantum key synchronization update rate of encryption terminal A and encryption terminal B increases in response to the increase of the quantum key generation rate of QKD-A and / or the number of quantum keys in the QKD-A cache, and decreases in response to the decrease of the quantum key generation rate of QKD-A and / or the number of quantum keys in the QKD-A cache.

[0045] exist Figure 3 In the example shown, the quantum key synchronization update process of encryption terminal A and encryption terminal B may include the following interactive processing.

[0046] Encryption terminal A sends a quantum key acquisition request to QKD-A.

[0047] QKD-A receives a quantum key acquisition request from encryption terminal A, and sends a quantum key sequence Qkey_Cache to encryption terminal A in response to receiving the quantum key acquisition request from encryption terminal A.

[0048] Encryption terminal A receives the quantum key sequence Qkey_Cache from QKD-A, and then sends a quantum key cache synchronization message to encryption terminal B in response to receiving the quantum key sequence Qkey_Cache from QKD-A. The quantum key cache synchronization message includes an identification ID of the quantum key sequence Qkey_Cache.

[0049] Encryption terminal B receives the quantum key cache synchronization message from encryption terminal A, and in response to receiving the quantum key cache synchronization message from encryption terminal A, sends a quantum key acquisition request to QKD-B, which quantum key acquisition request includes the identification ID of the quantum key sequence Qkey_Cache in the quantum key cache synchronization message from encryption terminal A.

[0050] QKD-B receives a quantum key acquisition request from encryption terminal B, and in response to receiving the quantum key acquisition request from encryption terminal B, sends a quantum key sequence Qkey_Cache with an identification ID to encryption terminal B.

[0051] Encryption terminal B receives the quantum key sequence Qkey_Cache from QKD-B, and sends a quantum key cache synchronization response message to encryption terminal A in response to obtaining the quantum key sequence Qkey_Cache with identification ID from QKD-B.

[0052] Encryption terminal A receives a quantum key cache synchronization response message from encryption terminal B, and sends a local quantum key synchronization message to encryption terminal B in response to receiving the quantum key cache synchronization response message from encryption terminal B.

[0053] Encryption terminal B receives a local quantum key synchronization message from encryption terminal A, and in response to receiving the local quantum key synchronization message from encryption terminal A, backs up the quantum key qkey_dec_cur_B currently used to decrypt data in encryption terminal B as qkey_dec_old_B, then obtains the quantum key Qkey1 from the quantum key sequence Qkey_Cache from QKD-B as the quantum key qkey_dec_cur_B currently used to decrypt data in encryption terminal B and sends a local quantum key synchronization response message to encryption terminal A, which includes the index position qkey_dec_offset_B corresponding to the quantum key Qkey1 in the quantum key sequence Qkey_Cache from QKD-B.

[0054] Encryption terminal A receives a local quantum key synchronization response message from encryption terminal B, and in response to receiving the local quantum key synchronization response message from encryption terminal B, obtains quantum key Qkey2 from the quantum key sequence Qkey_Cache from QKD-A according to the index position qkey_dec_offset_B as the quantum key currently used to encrypt data in encryption terminal A, and then backs up the quantum key qkey_dec_cur_A currently used to decrypt data in encryption terminal A as qkey_dec_old_A, and then continues to obtain quantum key Qkey3 from the quantum key sequence Qkey_Cache from QKD-A as the quantum key currently used to decrypt data in encryption terminal A and sends a local quantum key synchronization message to encryption terminal B again, which includes the index position qkey_dec_offset_A corresponding to the quantum key Qkey3 in the quantum key sequence Qkey_Cache from QKD-A.

[0055] Encryption terminal B receives a local quantum key synchronization message from encryption terminal A, and in response to receiving a local quantum key synchronization message from encryption terminal A again, obtains quantum key Qkey4 from the quantum key sequence Qkey_Cache from QKD-B according to index position qkey_dec_offset_A as the quantum key currently used to encrypt data in encryption terminal B.

[0056] It can be seen that the method and device for synchronous acquisition of synchronized quantum keys provided by the present invention not only enable the terminal to synchronously update to the symmetric quantum key from the connected QKD device without interrupting data encryption / decryption, but also enable the terminal to adaptively adjust its synchronous update rate of the quantum key as the quantum key generation rate of the QKD device changes. In particular, when the QKD device generates quantum keys at a high speed or a certain number of quantum keys are stored in the QKD device cache, quantum key updates can be achieved in seconds, which makes data encryption / decryption between terminals more secure and stable.

[0057] According to an exemplary embodiment of the present invention, a computer-readable storage medium storing a computer program may also be provided. The computer-readable storage medium stores a computer program that, when executed by a processor, causes the processor to perform a method for synchronizing quantum keys according to the present invention. The computer-readable recording medium is any data storage device that can store data read out by a computer system. Examples of computer-readable recording media include: read-only memory, random access memory, read-only optical disk, magnetic tape, floppy disk, optical data storage device, and carrier wave (such as data transmission through the Internet via a wired or wireless transmission path).

[0058] According to an exemplary embodiment of the present invention, a computer device may also be provided. The computer device includes a processor and a memory. The memory is used to store a computer program. The computer program is executed by the processor so that the processor executes the computer program of the method for synchronizing quantum keys according to the present invention.

[0059] While the present application has been shown and described with reference to preferred embodiments, it will be understood by those skilled in the art that various modifications and variations may be made to these embodiments without departing from the spirit and scope of the present application as defined by the appended claims.

Claims

1. A method for synchronizing quantum keys, characterized in that: include: S111. The first terminal receives a quantum key sequence from a first QKD device, and in response to receiving the quantum key sequence from the first QKD device, sends a quantum key cache synchronization message to the second terminal, wherein the quantum key cache synchronization message includes an identifier of the quantum key sequence; S112. The second terminal receives the quantum key cache synchronization message from the first terminal, and in response to receiving the quantum key cache synchronization message from the first terminal, obtains the quantum key sequence with the identifier from the second QKD device, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence with the identifier from the second QKD device; S113. The first terminal receives the quantum key cache synchronization response message from the second terminal, and sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal; S114. The second terminal receives the local quantum key synchronization message from the first terminal, and in response to receiving the local quantum key synchronization message from the first terminal, backs up the quantum key currently used to decrypt data in the second terminal, then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and sends a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes the index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; S115. The first terminal receives a local quantum key synchronization response message from the second terminal, and in response to receiving the local quantum key synchronization response message from the second terminal, obtains a second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal, The first terminal is connected to a first QKD device, the second terminal is connected to a second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

2. The method according to claim 1, characterized in that Also includes: S116. The first terminal backs up the quantum key currently used to decrypt data in the first terminal, then obtains a third quantum key from the quantum key sequence from the first QKD device as the quantum key currently used to decrypt data in the first terminal and sends another local quantum key synchronization message to the second terminal, wherein the another local quantum key synchronization message includes another index position corresponding to the third quantum key in the quantum key sequence from the first QKD device; S117. The second terminal receives another local quantum key synchronization message from the first terminal, and in response to receiving another local quantum key synchronization message from the first terminal, obtains a fourth quantum key from the quantum key sequence from the second QKD device according to the other index position as the quantum key currently used to encrypt data in the second terminal, and then sends another local quantum key synchronization response message to the first terminal.

3. The method according to claim 2, characterized in that Also includes: S109. The first QKD device sends the quantum key generation rate of the first QKD device and / or the number of quantum keys in the cache of the first QKD device to the first terminal; S110. The first terminal receives the quantum key generation rate and / or the number of quantum keys from the first QKD device, and adjusts the quantum key synchronization update rate of the first terminal and the second terminal according to the quantum key generation rate and / or the number of quantum keys, so that the quantum key synchronization update rate of the first terminal and the second terminal increases in response to an increase in the quantum key generation rate and / or the number of quantum keys, and decreases in response to a decrease in the quantum key generation rate and / or the number of quantum keys, wherein the quantum key synchronization update process of the first terminal and the second terminal includes steps S111 to S115, or steps S111 to S117.

4. A method for synchronizing quantum keys, characterized in that: The first terminal includes performing the following steps: receiving a quantum key sequence from a first QKD device; In response to receiving a quantum key sequence from the first QKD device, a quantum key cache synchronization message is sent to the second terminal, wherein the quantum key cache synchronization message includes an identifier of the quantum key sequence, so that the second terminal obtains the quantum key sequence with the identifier from the second QKD device in response to receiving the quantum key cache synchronization message from the first terminal, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence with the identifier from the second QKD device; Receiving a quantum key cache synchronization response message from a second terminal; In response to receiving a quantum key cache synchronization response message from the second terminal, a local quantum key synchronization message is sent to the second terminal, so that the second terminal backs up the quantum key currently used to decrypt data in the second terminal in response to receiving the local quantum key synchronization message from the first terminal, and then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and sends a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes an index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; Receiving a local quantum key synchronization response message from a second terminal; In response to receiving a local quantum key synchronization response message from the second terminal, obtaining a second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal, The first terminal is connected to a first QKD device, the second terminal is connected to a second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

5. The method according to claim 4, characterized in that The process also includes executing the following steps at the first terminal: Backing up the quantum key currently used to decrypt data in the first terminal; A third quantum key is obtained from the quantum key sequence from the first QKD device as the quantum key currently used to decrypt data in the first terminal, and another local quantum key synchronization message is sent to the second terminal, wherein the other local quantum key synchronization message includes another index position corresponding to the third quantum key in the quantum key sequence from the first QKD device, so that the second terminal obtains a fourth quantum key from the quantum key sequence from the second QKD device according to the other index position as the quantum key currently used to encrypt data in the second terminal in response to receiving another local quantum key synchronization message from the first terminal, and then sends another local quantum key synchronization response message to the first terminal.

6. A method for synchronizing quantum keys, characterized in that: The second terminal includes the following steps: Receiving a quantum key cache synchronization message from the first terminal, the quantum key cache synchronization message including an identifier of a quantum key sequence received by the first terminal from the first QKD device; acquiring a quantum key sequence having the identification from a second QKD device in response to receiving a quantum key cache synchronization message from the first terminal; In response to acquiring a quantum key sequence with the identifier from the second QKD device, sending a quantum key cache synchronization response message to the first terminal, so that the first terminal sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal; Receiving a local quantum key synchronization message from the first terminal; backing up a quantum key currently used to decrypt data in a second terminal in response to receiving a local quantum key synchronization message from the first terminal; Obtaining a first quantum key from a quantum key sequence from a second QKD device as a quantum key currently used to decrypt data in a second terminal; Sending a local quantum key synchronization response message to the first terminal, the local quantum key synchronization response message including an index position corresponding to the first quantum key in the quantum key sequence from the second QKD device, so that the first terminal, in response to receiving the local quantum key synchronization response message from the second terminal, obtains the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal, The first terminal is connected to a first QKD device, the second terminal is connected to a second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

7. The method according to claim 6, characterized in that The process also includes executing the following steps at the second terminal: receiving another local quantum key synchronization message from the first terminal, the another local quantum key synchronization message including another index position corresponding to the third quantum key in the quantum key sequence from the first QKD device, the third quantum key being the quantum key currently used for decrypting data in the first terminal, which is obtained from the quantum key sequence from the first QKD device after the first terminal backs up the quantum key currently used for decrypting data in the first terminal; In response to receiving another local quantum key synchronization message from the first terminal, a fourth quantum key is obtained from the quantum key sequence from the second QKD device according to the other index position as the quantum key currently used to encrypt data in the second terminal, and then another local quantum key synchronization response message is sent to the first terminal.

8. A device for synchronizing quantum keys, characterized in that: include: A quantum key receiving unit, configured to receive a quantum key sequence from a first QKD device; A first message sending unit is configured to send a quantum key cache synchronization message to a second terminal in response to receiving a quantum key sequence from a first QKD device, wherein the quantum key cache synchronization message includes an identifier of the quantum key sequence, so that the second terminal obtains a quantum key sequence having the identifier from the second QKD device in response to receiving the quantum key cache synchronization message from the first terminal, and then sends a quantum key cache synchronization response message to the first terminal in response to obtaining the quantum key sequence having the identifier from the second QKD device; A first response receiving unit, configured to receive a quantum key cache synchronization response message from a second terminal; a second message sending unit, configured to send a local quantum key synchronization message to the second terminal in response to receiving a quantum key cache synchronization response message from the second terminal, so that the second terminal backs up the quantum key currently used to decrypt data in the second terminal in response to receiving the local quantum key synchronization message from the first terminal, and then obtains the first quantum key from the quantum key sequence from the second QKD device as the quantum key currently used to decrypt data in the second terminal and sends a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes an index position corresponding to the first quantum key in the quantum key sequence from the second QKD device; A second response receiving unit, configured to receive a local quantum key synchronization response message from a second terminal; a quantum key acquisition unit, configured to acquire a second quantum key from the quantum key sequence from the first QKD device according to the index position in response to receiving a local quantum key synchronization response message from the second terminal as the quantum key currently used to encrypt data in the first terminal, The first terminal is connected to a first QKD device, the second terminal is connected to a second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

9. A device for synchronizing quantum keys, characterized in that: include: A first message receiving unit, configured to receive a quantum key cache synchronization message from a first terminal, wherein the quantum key cache synchronization message includes an identifier of a quantum key sequence received by the first terminal from a first QKD device; a quantum key synchronization unit, configured to obtain a quantum key sequence having the identifier from a second QKD device in response to receiving a quantum key cache synchronization message from the first terminal; A first response sending unit, configured to send a quantum key cache synchronization response message to the first terminal in response to acquiring a quantum key sequence with the identifier from the second QKD device, so that the first terminal sends a local quantum key synchronization message to the second terminal in response to receiving the quantum key cache synchronization response message from the second terminal; A second message receiving unit, configured to receive a local quantum key synchronization message from the first terminal; A local key backup unit, configured to back up a quantum key currently used to decrypt data in a second terminal in response to receiving a local quantum key synchronization message from the first terminal; A quantum key acquisition unit, used to acquire a first quantum key from a quantum key sequence from a second QKD device as a quantum key currently used for decrypting data in a second terminal; a second response sending unit, configured to send a local quantum key synchronization response message to the first terminal, wherein the local quantum key synchronization response message includes an index position corresponding to the first quantum key in the quantum key sequence from the second QKD device, so that the first terminal, in response to receiving the local quantum key synchronization response message from the second terminal, obtains the second quantum key from the quantum key sequence from the first QKD device according to the index position as the quantum key currently used to encrypt data in the first terminal, The first terminal is connected to a first QKD device, the second terminal is connected to a second QKD device, and the quantum key sequence is generated by quantum key distribution between the first QKD device and the second QKD device via free space and / or optical fiber.

10. A computer-readable storage medium storing a computer program, wherein: When the computer program is executed by a processor, the method for synchronizing quantum keys described in any one of claims 1 to 7 is implemented.

11. A computing device comprising: processor; A memory storing a computer program, which, when executed by a processor, implements the method for synchronizing quantum keys as described in any one of claims 1 to 7.

Images