Key distribution method and system, electronic equipment and storage medium

Abstract

The embodiment of the invention relates to the technical field of quantum, and discloses a key distribution method and system, electronic equipment and a storage medium. The key distribution method comprises the following steps: synchronously acquiring consistent key components from quantum key distribution nodes connected with another key distribution node with the quantum key distribution node, wherein the quantum key distribution nodes are connected through a quantum key distribution network; and through secure connection based on an anti-quantum cryptography algorithm, sending different key components in the consistent key components to the client by another key distribution node, so that the client and another client receiving the same key component negotiate to synthesize a symmetric key according to the acquired key components, and sending the symmetric key to the client. The same key component of the other client is from the key distribution node and the other key distribution node, and the key components from the key distribution node in the same key components are at least partially different. At least the deployment and application cost of the key distribution scheme is reduced, and the security of key distribution is ensured.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of quantum technology, and in particular to a key distribution method, system, electronic device and storage medium. Background Art

[0002] The confidentiality protection of data is mainly achieved by symmetric cryptographic technology. In the confidentiality protection of data transmission, it is necessary to realize the symmetric key distribution between the two communicating parties. The key negotiation protocol based on asymmetric cryptographic algorithm is often used to realize the distribution of symmetric keys. For example, Figure 1 A typical symmetric key negotiation method is shown in Figure 1. Alice, the initiator, first sends the encrypted public key key to Bob, the responder. pub , and Bob receives the key pub Then, use key pub The locally generated protection key KEK (Key Encryption Key) is input to Alice, so that Alice can encrypt the private key key pri Decrypt the received exploit key pub The encrypted key protection key, that is, the KEK ciphertext, obtains the KEK plaintext, that is, the symmetric key protection key KEK is negotiated between the two communicating parties using an asymmetric algorithm, and then Alice uses the KEK plaintext to encrypt the locally generated key k and transmit it to Bob. Bob obtains the key k encrypted by KEK, that is, the ciphertext K, and then uses KEK to decrypt it to obtain the plaintext key k, that is, the key k finally used to encrypt business data is encrypted by KEK. The key k is synchronized between the two parties. However, with the emergence and development of quantum technology, the above symmetric key negotiation process is easy to be cracked. In order to solve the impact of quantum computing on the existing cryptographic system, two main ideas are proposed: quantum key distribution (Quantum Key Distribution, QKD) and anti-quantum cryptography (PostQuantum Cryptography, PQC) algorithm. Among them, quantum key distribution technology belongs to the category of quantum information theory. Quantum information theory relies on the established principles of quantum physics. If these principles are overturned, it means creating new physics. Therefore, quantum key distribution is considered to have a high level of security.

[0003] However, the deployment and application cost of quantum key distribution solutions is too high, which is not conducive to application, and solutions that are resistant to quantum cryptographic algorithms have the risk of being cracked. Summary of the invention

[0004] The embodiments of the present application provide a key distribution method, system, electronic device and storage medium, which are at least beneficial for reducing the deployment and application cost of the key distribution solution while ensuring the security of key distribution.

[0005] According to some embodiments of the present application, a first aspect of the embodiments of the present application provides a key distribution method, which is applied to a key distribution node, and the method comprises: synchronously obtaining consistent key components from respectively connected quantum key distribution nodes with another key distribution node, wherein each of the quantum key distribution nodes is connected through a quantum key distribution network; through a secure connection based on an anti-quantum cryptographic algorithm, sending different key components of the consistent key components to the client with the other key distribution node respectively, so that the client and another client that receives the same key component negotiate a synthetic symmetric key based on the obtained key component, wherein the same key component of the other client comes from the key distribution node and the other key distribution node, and the same key components of the other client and the client include key components from the key distribution node at least partially different.

[0006] According to some embodiments of the present application, a second aspect of the embodiments of the present application further provides a key distribution method, which is applied to a client, and the method includes: sending a key application request to a key distribution node through a secure connection based on a quantum-resistant cryptographic algorithm; receiving key components sent by the key distribution node and another key distribution node through a secure connection based on a quantum-resistant cryptographic algorithm; and negotiating a synthetic symmetric key with another client that has received the same key component based on the received key component through a secure connection based on a quantum-resistant cryptographic algorithm, wherein the same key component of the other client comes from the key distribution node and the other key distribution node, and the key components of the same key components of the other client and the client that come from the key distribution node are at least partially different.

[0007] According to some embodiments of the present application, a third aspect of the embodiments of the present application further provides a key distribution system, comprising: at least two key distribution centers, several clients and a quantum key distribution network, wherein each of the key distribution centers includes a key distribution node and a quantum key distribution node, and the client accesses at least two different key distribution centers through at least two different key distribution nodes, and each of the quantum key distribution nodes is connected to the quantum key distribution network; wherein the key distribution node and the client are used to implement the key distribution method provided corresponding to the embodiments of the present application.

[0008] According to some embodiments of the present application, a fourth aspect of the embodiments of the present application also provides an electronic device, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute any one of the key distribution methods provided in the embodiments of the present application.

[0009] According to some embodiments of the present application, a fifth aspect of the embodiments of the present application further provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements any key distribution method provided in the embodiments of the present application.

[0010] The technical solution provided in the embodiment of the present application has at least the following advantages:

[0011] On the basis of the distribution capability provided by the quantum key distribution network, a key distribution node is introduced as an intermediary between the quantum key distribution node and the client, so that the client no longer has to use optical fiber access, which is conducive to deployment and application. In addition, the key components of the synthetic key on the same client come from different key distribution nodes, and different key distribution nodes distribute different key components to different clients, making it impossible to obtain complete key information through a single connection. At the same time, a secure connection based on a quantum-resistant cryptographic algorithm transmits key components between the client and the key distribution node, ensuring the security of key component distribution, and achieving the goal of reducing the deployment and application cost of the key distribution solution while ensuring the security of key distribution. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0013] Figure 1 It is a schematic diagram of the negotiation process of the existing symmetric key;

[0014] Figure 2 It is a structural diagram of a key distribution system provided in an embodiment of the present application;

[0015] Figure 3 This is the process of the key distribution method provided in the embodiment of the present application Figure 1 ;

[0016] Figure 4 This is the process of the key distribution method provided in the embodiment of the present application Figure 2 ;

[0017] Figure 5 This is the process of the key distribution method provided in the embodiment of the present application Figure 3 ;

[0018] Figure 6 This is the process of the key distribution method provided in the embodiment of the present application Figure 4 ;

[0019] Figure 6 This is the process of the key distribution method provided in the embodiment of the present application Figure 4 ;

[0020] Figure 7 This is a schematic diagram of an application scenario of the key distribution method provided in an embodiment of the present application;

[0021] Figure 8 It is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] As can be seen from the background technology, the deployment and application cost of the current quantum key distribution solution is too high, which is not conducive to application, and the solution of anti-quantum cryptographic algorithm has the risk of being cracked.

[0023] After analysis, it was found that the reason for the above problems is that quantum key distribution technology can realize secure symmetric key distribution with resistance to quantum computing, and has been commercialized on a small scale, but it is limited to the deployment of optical fiber access quantum key distribution network and the deployment of large quantum key distribution nodes. It cannot be applied at low cost on PCs and mobile devices. At the same time, quantum-resistant cryptographic algorithms are based on the assumption of difficult mathematical problems. For example, some quantum-resistant cryptographic algorithms and protocols are now constructed based on difficult lattice problems. Although some quantum-resistant cryptographic algorithms have been theoretically proven to be resistant to quantum computing attacks and their security relies on the assumption of difficult mathematical problems, the existing quantum-resistant cryptographic algorithms still need to undergo the test of time. With the development of quantum computers and the discovery of new attack algorithms, there is a small probability of being cracked, and the standardization of quantum-resistant cryptographic algorithms is still in progress.

[0024] Further analysis found that quantum key distribution and quantum-resistant cryptographic algorithms differ in application scenarios and implementation of specific cryptographic functions, and have complementary advantages. The integrated application of the two can achieve a more comprehensive quantum-resistant cryptographic solution.

[0025] Based on this, a key distribution method, system, electronic device and storage medium are provided in the embodiments of the present application. By combining quantum key distribution technology and anti-quantum cryptographic algorithms, on the one hand, a solution is provided for clients to obtain key components distributed by a quantum key distribution network without optical fiber access to the quantum key distribution network. On the other hand, the connection established by the client through a non-optical fiber method is based on a secure connection using an anti-quantum cryptographic algorithm, which ensures security. At the same time, by setting the keys of different clients to be synthesized from key components from different connections, the distribution of key components of different clients is obtained through different nodes, avoiding the leakage problem caused by leakage of a single connection, and further ensuring security. Ultimately, while reducing the deployment and application cost of the key distribution solution, the security of key distribution is also guaranteed.

[0026] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the embodiments of the present application will be described in detail below in conjunction with the accompanying drawings. However, it will be appreciated by those skilled in the art that in the embodiments of the present application, many technical details are provided in order to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical scheme claimed in the present application can be implemented.

[0027] The division of the following embodiments is for the convenience of description and shall not constitute any limitation on the specific implementation of the present application. The embodiments may be combined with each other and referenced to each other without contradiction.

[0028] To facilitate a better understanding by those skilled in the art, the key distribution system provided in the embodiment of the present application is first described below. Figure 2 As shown, the system includes at least two key distribution centers (Key Distribution Center, KDC), several clients and a quantum key distribution network (Quantum Key Distribution Network, QKDN), wherein each key distribution center includes a key distribution node (Key Distribution Node, KDN) and a quantum key distribution node (Quantum Key Distribution, QKD), the client accesses at least two different key distribution centers through at least two different key distribution nodes, and each quantum key distribution node is connected to the quantum key distribution network.

[0029] In this way, different key distribution centers can complete negotiation through the quantum key distribution network connected by the quantum key distribution nodes within them, and obtain consistent quantum keys (components), so that different key distribution nodes can obtain consistent key components based on the quantum key distribution nodes of the same key distribution center, thereby ensuring the consistency of the key components sent to the client. Furthermore, different clients can access the key distribution center through the key distribution node and obtain the same key component. Since the key distribution node is different from the quantum key distribution node, it does not need to be accessed through optical fiber, so there is no need to deploy an optical fiber network for client access, reducing deployment and application costs. At the same time, the same client can achieve the acquisition of multi-line key components by connecting to different key distribution nodes, avoiding quantum key leakage caused by leakage of a single connection, and can ensure the security of communication through a secure connection with the key distribution node, such as a secure connection based on an anti-quantum key algorithm.

[0030] It should be noted that the embodiment of the present application does not limit the number of key distribution centers. It is understandable that they can be deployed based on the distribution range of the client. For example, the key distribution center can be deployed in a distributed manner according to the distribution of the client to support the client's nearby access, improve the response efficiency of providing services to the client, and enhance the user experience. Of course, the above is only an example. In some embodiments, the number and distribution of key distribution centers can be implemented in other ways, which will not be listed here one by one.

[0031] It should also be noted that in the embodiments of the present application, the quantum key distribution node is mainly a general term for devices (or clusters, etc.) in the key distribution center that support connection and interaction with the quantum key distribution network, and the key distribution node is mainly a general term for devices (or clusters, etc.) in the key distribution center that support access and interaction with clients, rather than referring to specific devices, devices, etc. in the key distribution center. Among them, the quantum key distribution network refers to the general term for networks composed of quantum key distribution metropolitan area networks, quantum key distribution backbone networks, etc., rather than specifically referring to a single network.

[0032] On the basis of the key distribution system provided in the above embodiments, a key distribution method is also provided in the embodiments of the present application, and the key distribution method can be applied to the key distribution node. Therefore, by introducing the key distribution node as the intermediary between the quantum key distribution node and the client on the basis of the distribution capability provided by the quantum key distribution network, the client no longer has to use optical fiber access, which is conducive to deployment and application. In addition, the key components of the synthetic key on the same client come from different key distribution nodes, and different key distribution nodes distribute different key components to different clients, making it impossible to obtain complete key information through a single connection. At the same time, a secure connection based on an anti-quantum cryptographic algorithm transmits key components between the client and the key distribution node, thereby ensuring the security of key component distribution, and achieving the goal of reducing the deployment and application cost of the key distribution solution while also ensuring the security of key distribution. For ease of understanding, the following will be combined with the following: Figures 3 to 5 The method flow shown is described.

[0033] In some embodiments, the key distribution method applied to the key distribution node has a process such as Figure 3 As shown, the following steps are included:

[0034] Step 101, synchronously with another key distribution node to obtain consistent key components from respective connected quantum key distribution nodes, wherein each quantum key distribution node is connected via a quantum key distribution network.

[0035] Step 102: Through a secure connection based on a quantum-resistant cryptographic algorithm, different key components in the consistent key components are respectively sent to the client with another key distribution node, so that the client and another client that receives the same key components negotiate a synthetic symmetric key based on the acquired key components, wherein the same key components of the other client come from the key distribution node and the other key distribution node, and the same key components of the other client and the client that come from the key distribution node are at least partially different.

[0036] In this way, the key components of different key distribution nodes are obtained synchronously with another key distribution node from the quantum key distribution node to which they are connected, which ensures the consistency of the key components of different key distribution nodes and supports the consistency of the key components distributed to different clients in the future. In addition, the client no longer needs to access the quantum key distribution node through optical fiber, which reduces the deployment cost and difficulty of distributing quantum keys to clients. At the same time, the connection between the client and the key distribution node is a secure connection based on a quantum-resistant cryptographic algorithm, and the key components used by the client to synthesize the key come from different key distribution nodes, and the key components used to generate the same key distributed by the same key distribution node to different clients are different, which avoids the leakage problem caused by a single connection of clients with encrypted communication requirements, and ensures the security of key distribution and synthesis. Ultimately, it is achieved that the deployment and application cost of the key distribution solution is reduced while also ensuring the security of key distribution.

[0037] To facilitate better understanding of those skilled in the art Figure 3 The embodiment shown, the steps of which will be explained below.

[0038] In step 101, synchronize with another key distribution node to obtain consistent key components from the quantum key distribution nodes to which they are connected. Among them, the embodiment of the present application does not limit the number of consistent key components, nor does it limit the timing of acquisition, which can be set or configured according to the needs of the client, the needs of the key distribution node, the storage performance of the key distribution node, etc. For example, the key distribution node can actively apply to the quantum key distribution node for a certain number of key components according to its own needs. In another example, the key distribution node can also passively accept the key components issued in batches by the quantum key distribution node. In another example, the key distribution node can trigger the acquisition process of a certain number of key components based on the request of the client. For another example, the key distribution node can be triggered to obtain key components when the current key component reserves are reduced to a threshold, etc., which will not be listed here one by one.

[0039] In addition, considering that the key component can be obtained directly or indirectly by splitting the key. Therefore, in some embodiments, in order to further improve the security of the quantum key, the synchronization with another key distribution node to obtain a consistent key component from the quantum key distribution node connected to each other can be achieved in the following ways: applying for a key from the quantum key distribution node connected to each other based on the same key application strategy with another key distribution node; splitting the obtained key based on the same key splitting strategy with at least another key distribution node to obtain a consistent key component. In this way, the security of the key component is enhanced by the splitting operation, thereby further improving the security of the key synthesized based on the key component. At the same time, the synchronous acquisition with another key distribution node is achieved through the same strategy, rather than through message interaction, which is conducive to further improving security. Of course, in some embodiments, the data sent by the quantum key distribution node to the key distribution node is directly the key component, that is, the key distribution node directly obtains the key component from the quantum key distribution node without performing a key splitting operation, so that the efficiency of the key distribution node in obtaining the key component can be improved. Alternatively, in some embodiments, when obtaining a key component from a quantum key distribution node connected to itself, the key distribution node may also notify another quantum key distribution node connected to another key distribution node through the quantum key distribution node through the quantum key distribution network to distribute the key component to the corresponding other key distribution node. After waiting for the other quantum key distribution node to complete sending the key component, the other quantum key distribution node may notify the quantum key distribution node connected to the key distribution node through the quantum key distribution network to send the corresponding key component. In this way, the process may be roughly the same as some existing quantum key distribution processes, thereby having stronger compatibility, being more conducive to reuse of existing networks and resources, and being able to reduce costs, etc., which will not be listed one by one here.

[0040] In step 102, different key components in the consistent key components are sent to the client with another key distribution node through a secure connection based on a quantum-resistant cryptographic algorithm. The embodiment of the present application does not limit the quantum-resistant cryptographic algorithm specifically used for the secure connection, and it can adopt a secure connection formed by any one or some quantum-resistant cryptographic algorithms. It is understandable that quantum-resistant signature algorithms, quantum-resistant key agreement protocols, and / or quantum-resistant grouping algorithms can help enhance the security of the connection, that is, establish a secure connection based on the above-mentioned quantum-resistant cryptographic algorithms, and they will not be listed one by one here.

[0041] Furthermore, the embodiments of the present application do not limit the sending method. It can be understood that the key can be synthesized by two or more key components. According to different requirements, the number of key components sent by a key distribution node and another key distribution node to the same client can be flexibly set. The key components sent by a key distribution node and another key distribution node to the same client can be the same or different. As long as it can support the synthesis of two or more key components, and can support the same key distribution node and another key distribution node to send different clients with different key components, and ultimately different clients receive the same key components, its security can be enhanced through the above-mentioned key component distribution, and the key leakage problem caused by the leakage of a single connection can be avoided. It will not be listed here.

[0042] It should be noted that the embodiments of the present application do not limit how a key distribution node and another key distribution node determine the key components that each needs to send to the corresponding client. They can be negotiated through the quantum key distribution nodes and quantum key distribution networks to which they are connected. For example, the key distribution node determines the key components that it and another key distribution node send to the client and another client respectively, and notifies the other key distribution node. In order to enhance the security of the quantum key, the content of the notification can be the identification of the key component, or the key distribution node and another key distribution node determine the key components that they each send to the client, and then notify each other, etc., which will not be listed one by one here.

[0043] It should also be noted that in the embodiments of the present application, the connection between the key distribution node and the client does not use quantum communication, which can ensure the security of communication. Therefore, anti-quantum cryptographic algorithms are used to enhance security. In some embodiments, in order to further improve security, in addition to quantum communication and other methods of communication (mainly the internal connection of the quantum key distribution network, the connection between the quantum key distribution network and the quantum key distribution node, and the connection between the quantum key distribution node and the key distribution node (wherein, the connection between the quantum key distribution node and the key distribution node is located in the key distribution center, which is convenient for deployment, and the cost can be controlled. The client distribution is random and the distribution range is wide, which is not conducive to cost control. Optical fiber connection can be used)), the remaining connections are all based on anti-quantum cryptographic algorithms. Secure connections, such as using cryptographic algorithms for key encryption protection, negotiation, verification, etc. can be implemented based on anti-quantum cryptographic algorithms (or secure connections based on anti-quantum cryptographic algorithms) to improve anti-quantum security.

[0044] Based on the above embodiments, it can also be understood that the consistency of key components is the basis for subsequent client negotiation of synthesized symmetric keys. Therefore, in order to ensure the consistency of key components, in some embodiments, such as Figure 4 As shown, the key distribution method applied to the key distribution node may further include the following steps:

[0045] Step 201, synchronously with another key distribution node to obtain consistent key components from the quantum key distribution nodes respectively connected, wherein each quantum key distribution node is connected through a quantum key distribution network.

[0046] Step 202: Send a hash value of a consistent key component obtained by the key distribution node to another key distribution node, so that the other key distribution node can verify the received hash value according to the consistent key component obtained by the other key distribution node; and / or receive a hash value of a consistent key component obtained by another key distribution node sent by another key distribution node, and verify the received hash value according to the consistent key component obtained by the key distribution node; wherein the key distribution node communicates with the other key distribution node through their respective connected quantum key distribution nodes and quantum key distribution networks.

[0047] Step 203: When the consistent key components pass verification, different key components in the consistent key components are respectively sent to the client through a secure connection based on a quantum-resistant cryptographic algorithm with another key distribution node, so that the client and another client that receives the same key components negotiate a synthetic symmetric key based on the acquired key components, wherein the same key components of the other client come from the key distribution node and the other key distribution node, and the key components of the same key components of the other client and the client that come from the key distribution node are at least partially different.

[0048] In this way, on the basis of the aforementioned embodiment, by verifying the key components received by the key distribution node and another key distribution node, the consistency of the key components of the key distribution node and another key distribution node is further guaranteed, so that the consistency of sending key components to different clients can be better supported in the future, and different clients can be supported to negotiate and synthesize consistent quantum keys.

[0049] For ease of understanding Figure 4 The steps of the embodiment shown are explained below. Among them, step 201 and step 203 are substantially the same as step 101-step 102 in the above embodiment, and the main difference is that step 202 is introduced between step 201 and step 203, and step 201 and step 203 are not described here.

[0050] In step 202, the hash value of the consistent key component obtained by the key distribution node is sent to another key distribution node, so that the other key distribution node can verify the received hash value according to the consistent key component obtained by the other key distribution node; and / or, the hash value of the consistent key component obtained by the other key distribution node sent by another key distribution node is received, and the received hash value is verified according to the consistent key component obtained by the key distribution node. Among them, the embodiment of the present application does not limit the verification method. For example, it can be the verification of the responder by the initiator (the key distribution node may be the initiator or the responder), and it can also be the verification of the initiator by the responder. For another example, it can be the mutual verification of the initiator and the responder, etc. In addition, the embodiment of the present application does not limit the specific verification method, for example, it can be the hash calculation of each key component and the verification of each key component. If one key component fails to pass the verification, the distribution fails. For another example, all key components can be hashed and verified. If one character is inconsistent, the distribution fails. For another example, hash calculation may be performed on each key component and each key component identifier, and verification may be performed on each key component. Key components and their identifiers that pass the verification may be retained, and the rest may be deleted, etc. These are not listed one by one here.

[0051] Based on the above embodiments, it can also be understood that the key components may change on the key distribution node. Therefore, in order to further ensure the consistency of the key components distributed to different clients, in some embodiments, such as Figure 5 As shown, the key distribution method applied to the key distribution node may further include the following steps:

[0052] Step 301, synchronously with another key distribution node to obtain consistent key components from the quantum key distribution nodes respectively connected, wherein each quantum key distribution node is connected through a quantum key distribution network.

[0053] Step 302: Negotiate with another key distribution node to determine at least two key components from consistent key components.

[0054] Step 303: Verify at least two key components with another key distribution node.

[0055] Step 304: When at least two key components pass verification, different key components among the consistent key components are sent to the client through a secure connection based on a quantum-resistant cryptographic algorithm with another key distribution node, so that the client and another client that receives the same key component negotiate a synthetic symmetric key based on the acquired key components, wherein the same key component of the other client comes from the key distribution node and the other key distribution node, and the same key components of the other client and the client that come from the key distribution node are at least partially different.

[0056] In this way, on the basis of the aforementioned embodiment, by verifying the key components to be sent to the client before sending them, the consistency of the key components sent to the client is further guaranteed, so that the consistency of key components sent to different clients can be better supported in the future, and different clients can be supported to negotiate and synthesize consistent quantum keys.

[0057] For ease of understanding Figure 5 The steps of the embodiment shown are explained below. Among them, step 301 and step 304 are roughly the same as step 101-step 102 in the above embodiment, and the main difference is that step 302-step 303 is introduced between step 301 and step 304, and step 301 and step 304 are not described here.

[0058] In step 302, at least two key components are determined from consistent key components through negotiation with another key distribution node. In this embodiment of the present application, the number of key components sent to the client by the key distribution node, another key distribution node, and the two together is not limited. It can be understood that it can be set or configured according to security requirements, the client, the redundancy of the key components of the key distribution node, etc. For example, in some embodiments, at least two key components are determined from consistent key components through negotiation with another key distribution node, which can be achieved in the following ways: determining the key components to be sent to the client by the key distribution node and the other key distribution node respectively from the consistent key components, and notifying the other key distribution node of the determined key components to be sent to the client; or receiving a notification of the key components to be sent to the client by the key distribution node sent by another key distribution node. They will not be listed one by one here.

[0059] In step 303, at least two key components are verified with another key distribution node. The embodiment of the present application does not limit the specific verification method. It is understandable that different verification schemes will be generated according to different requirements. For example, verifying at least two key components with another key distribution node can be achieved in the following manner: sending the identifier of the key component to be sent to the client by another key distribution node, and the hash value of the key component and its identifier to be sent to the client by another key distribution node to another key distribution node, so that the other key distribution node can verify the received information according to the key component and its identifier in the other key distribution node; and / or, receiving the identifier of the key component to be sent to the client by the key distribution node in another key distribution node, and the hash value of the key component and its identifier to be sent to the client by the key distribution node, so as to verify the received information according to the corresponding key component and its identifier in the key distribution node. In this way, while the key components that the key distribution node and another key distribution node need to send to the client are verified, the amount of data that needs to be interacted and verified in order to achieve verification can be reduced, which is conducive to improving efficiency. For example, verifying at least two key components with another key distribution node can also be achieved in the following manner: sending the hash values ​​of at least two key components in the key distribution node to another key distribution node, so that the other key distribution node can verify the received hash value according to at least two key components in the other key distribution node, and / or receiving the hash value of at least two quantum keys in another key distribution node sent by another key distribution node, so as to verify the received hash value based on at least two key components in the key distribution node. In this way, it is not necessary to distinguish the key components that need to be sent by the node and the peer node during verification, and the verification process performed on each node will be the same, which is conducive to reducing the development difficulty of the verification service and improving the development efficiency. Among them, when verifying in the above example, the hash calculation and verification of each key component can be performed one by one, and if one key component fails the verification, it will no longer be sent to the client. For example, all key components that need to be sent to the client can be hashed and verified, and if one character is inconsistent, it will no longer be sent to the client. For another example, hash calculation may be performed on each key component and verification may be performed on each key component. If one key component fails the verification, the client to be sent to is re-determined until the number of consistent key components between the key distribution node and another key distribution node is less than two or a preset number, etc., which are not listed one by one here.

[0060] Of course, the above are only examples, and in some embodiments, other methods may be used to implement the invention, which will not be described in detail here.

[0061] It should be noted that Figure 5 The embodiment shown is only Figure 3 Based on the embodiment shown in FIG. 1 , an example of verification before key component distribution is introduced. In some embodiments, Figure 2 On the basis of the illustrated embodiment, verification before key component distribution is introduced, that is, steps 302 to 303 are also performed before step 203, which will not be described in detail here.

[0062] Accordingly, the embodiment of the present application also provides a key distribution method, which can be applied to a client, which is any electronic device that uses quantum keys to implement business or services, such as a mobile phone, a computer, etc. Figure 6 The process shown illustrates the key distribution method applied to the client.

[0063] In some embodiments, Figure 6 As shown, the key distribution method applied to the client may include the following steps:

[0064] Step 401: Send a key application request to a key distribution node via a secure connection based on a quantum-resistant cryptographic algorithm.

[0065] Step 402: Receive key components sent by a key distribution node and another key distribution node through a secure connection based on a quantum-resistant cryptographic algorithm.

[0066] Step 403: through a secure connection based on a quantum-resistant cryptographic algorithm, negotiate a synthetic symmetric key with another client that has received the same key component based on the received key component, wherein the same key component of the other client comes from the key distribution node and another key distribution node, and the key component from the key distribution node in the same key component of the other client and the client is at least partially different.

[0067] In this way, by introducing a key distribution node as an intermediary between the quantum key distribution node and the client on the basis of the distribution capability provided by the quantum key distribution network, the client no longer has to use optical fiber access, which is conducive to deployment and application. In addition, the key components of the synthetic key on the same client come from different key distribution nodes, and different key distribution nodes distribute different key components to different clients, making it impossible to obtain complete key information through a single connection. At the same time, a secure connection based on an anti-quantum cryptographic algorithm transmits key components between the client and the key distribution node, ensuring the security of key component distribution, and achieving the goal of reducing the deployment and application cost of the key distribution solution while also ensuring the security of key distribution.

[0068] In some embodiments, the negotiation of synthesizing a symmetric key based on the received key component with another client that has received the same key component can be achieved in the following manner: based on a secure connection with a quantum-resistant cryptographic algorithm, sending a hash value of the key synthesized by the client to another client, so that the other client can verify the received hash value based on the key synthesized by the other client; and / or, based on a secure connection with a quantum-resistant cryptographic algorithm, receiving a hash value of the key synthesized by another client sent by another client, and verifying the received hash value based on the key synthesized by the client. In other words, the client and the other client autonomously synthesize a key based on the received key component, and one party verifies the other party at the same time, or the two parties verify each other, which not only avoids leakage, but also ensures the symmetry of the key between the client and the other client through verification, thereby ensuring the effectiveness and reliability of subsequent encrypted communications.

[0069] It is not difficult to find that this embodiment is a method embodiment corresponding to the above embodiment, and this embodiment can be implemented in conjunction with the above embodiment. The relevant technical details mentioned in the above embodiment are still valid in this embodiment, and in order to reduce repetition, they are not repeated here. Accordingly, the relevant technical details mentioned in this embodiment can also be applied in the above embodiment.

[0070] In order to facilitate those skilled in the art to better understand the key distribution method provided in the embodiments of the present application, the following will be combined with Figure 7 The application scenario shown is described below.

[0071] like Figure 7 As shown, there are two clients that need to perform encrypted communication: User1 and User2. User1 uses the client KDN-Client1, and User2 uses the client KDN-Client2. KDN-Client1 can access the key distribution node KDN1 through a secure connection 2 based on a quantum-resistant cryptographic algorithm, and access the key distribution node KDN2 through a secure connection 3 based on a quantum-resistant cryptographic algorithm; KDN-Client2 can access the key distribution node KDN1 through a secure connection 4 based on a quantum-resistant cryptographic algorithm, and access the key distribution node KDN2 through a secure connection 5 based on a quantum-resistant cryptographic algorithm. And KDN1 belongs to the key distribution center KDC1, KDN2 belongs to the key distribution center KDC2, and the quantum key distribution node QKD1 in KDC1 and the quantum key distribution node QKD2 in KDC1 are connected through a quantum key distribution network QKDN. Among them, the other communication application components in this scenario are not the focus of the key distribution method provided in the embodiments of the present application. Therefore, in Figure 7 It's not shown in the video, but that doesn't mean it doesn't exist.

[0072] The following is an example of the process of distributing keys to KDN-Client1 and KDN-Client2. It should be noted that the communication parties have completed identity authentication in some way. At the same time, QKD1 and QKD2 implement quantum key distribution based on QKDN and can continuously output quantum keys. This is basically the same as the existing process of distributing keys to QKD based on QKDN, so it will not be repeated here.

[0073] First, KDN1 and KDN2 synchronously obtain the same key components. Specifically:

[0074] 1. KDN1 and KDN2 execute key application strategy S1, apply for quantum keys from QKD1 and QKD2 respectively, and split them into n key components {k1, k2, ..., k n}, corresponding to the key index number {kid1,kid2,...,kid n}.

[0075] 2. KDN1 for the key components of this node {k1, k2, ..., k n} respectively calculate the hash values ​​{H1,H2,...,H n} and send it to KDN2.

[0076] 3. KDN2 for the key components of this node {k1, k2, ..., k n} respectively calculate the hash values ​​{H1′,H2′,...,H n ′}, and {H1,H2,...,H n} Compare them one by one. If they are all consistent, the verification is passed, and the currently obtained key component is recognized as an available key component for the key distribution stage to be provided to the client. Otherwise, the verification fails (or fails), and the currently obtained key component is discarded. Sometimes KDN2 can also send a confirmation message to KDN1 when the verification passes, or send an error message to KDN1 when the verification fails, so as to pass the verification result to KDN1 so that KDN1 can respond. Alternatively, KDN1 assumes that the verification is passed or failed if no result is received and performs corresponding processing.

[0077] That is, each KDN sets a key pool strategy according to the user's key distribution requirements, and achieves consistent key pool key generation among KDNs based on the QKD network.

[0078] Secondly, KDN1 and KDN2 send corresponding key components to KDN-Client1 and KDN-Client2 respectively.

[0079] Specifically:

[0080] 1. KDN-Client1 initiates registration with KDN1 through connection 2 to establish a secure link with KDN1 based on quantum-resistant cryptographic algorithms, and initiates registration with KDN2 through connection 3 to establish a secure link with KDN2 based on quantum-resistant cryptographic algorithms.

[0081] 2. KDN-Client2 initiates registration with KDN1 through connection 4 to establish a secure link with KDN1 based on quantum-resistant cryptographic algorithms, and initiates registration with KDN2 through connection 5 to establish a secure link with KDN2 based on quantum-resistant cryptographic algorithms.

[0082] 3. KDN-Client 1 and KDN-Client 2 start a key negotiation process through connection 1.

[0083] 4. KDN-Client1 initiates a key application request to KDN1, and KDN1 prepares to send the key component k i1 As the key component that this node is about to send to KDN-Client1, it also notifies KDN2 to send the key component k to KDN-Client1. i1+1 The notification method is to send the key component k i1 and key component k i1+1 The identifiers kid(i1) and kid(i 1+1 )Notify KDN2.

[0084] 5. KDN2 sends key component k to KDN-Client1 i1+1 , the identifier of the key component kid(i 1+1 ) and key component k i1+1 The hash value H of the three i1+1 , the key component k in KDN-Client1's local node i1+1 , the identifier of the key component kid(i 1+1 ) and key component k i1+1 The hash values ​​of the three are combined with H i1+1 After verification, a confirmation message is sent to KDN2. It should be noted that the key component k here i1+1 and key component k i1 The examples are provided only for ease of understanding; other key components or more key components may be used and are not listed here.

[0085] 6. After receiving the confirmation message returned to KDN-Client1, KDN2 replies to KDN1 that the key component of this node to KDN-Client1 has been sent, and KDN1 sends the key component k to KDN-Client1. i1, the identifier of the key component kid(i1) and the key component k i1 The hash value H i1 , KDN-Client1 uses the relevant information of this node to i1 Perform verification, and if the verification passes, reply a confirmation message to KDN1.

[0086] 7. KDN-Client1 informs KDN-Client2 that the local key component has been received. Then, KDN-Client2 obtains the key component k from KDN1 as described in the previous steps. i1+1 , get the key component k from KDN2 i1 .

[0087] 8. KDN-Client2 sends the key component identifiers kid(i1) and kid(i 1+1 ) and the hash values ​​of the corresponding key components. KDN-Client1 verifies the hash value based on the information stored on the local end. If the verification passes, it means that both ends have received two consistent key components.

[0088] Sometimes, according to different requirements, KDN-Client1 and KDN-Client2 can continue to obtain key components, such as repeating the above steps 21 times until both KDN-Client1 and KDN-Client2 obtain key components {k i1 ,k i2 ,...,k i2l}, where connections 2 and 4 send l key components, and connections 3 and 5 send the other l key components.

[0089] That is, the KDN-Client and each KDN execute the key distribution protocol based on the secure connection of PQC. Only a part of the key component is transmitted on a link between the KDN-Client and KDN, and the attacker cannot obtain all the key components from one link.

[0090] Finally, KDN-Client1 and KDN-Client2 negotiate the synthetic key. Specifically:

[0091] 1. KDN-Client1 and KDN-Client2 securely negotiate the key synthesis method and the ID number KID of the synthesized key through connection 1, and respectively select the same key component from the key components obtained previously on the local end, and synthesize the key K locally. Among them, there can be many ways to synthesize the key, such as using various key derivation algorithms to derive and realize key synthesis, etc., which will not be described one by one here.

[0092] 2. KDN-Client1 calculates the hash value H of K and sends KID and H to KDN-Client2. KDN-Client2 calculates the hash value of the locally synthesized key K and verifies it. If the verification is consistent, the key distribution process between the two parties is completed.

[0093] That is, KDN-Client collaborates to complete the synthesis of key components to ensure that the KDC side does not know the key that the user ultimately uses.

[0094] It is not difficult to see that the key distribution method provided in the embodiment of the present application can combine the two technologies of quantum key distribution and anti-quantum cryptography to improve the security of key distribution between the two communicating parties. And the quantum key distribution network ensures the high security of key distribution and synchronization between key distribution centers. On this basis, on the classical link between the key distribution center and the user (specifically, the key distribution node to the client), the anti-quantum cryptographic algorithm is used to improve the security of link transmission, and the attacker cannot obtain the complete key plaintext or ciphertext information from a single key distribution link, nor can it obtain all key components from a single key distribution link. Compared with the direct use of anti-quantum key negotiation protocol between users to obtain symmetric keys, if the attacker has anti-quantum cryptographic capabilities, the final negotiated key can be directly obtained. In addition, compared with the deployment of quantum key distribution equipment on the user side and the optical fiber access quantum key distribution network to realize symmetric key distribution, the embodiment of the present application uses a classical link between the key distribution center and the user, without the need to deploy quantum key distribution equipment on the user side, which can greatly reduce the cost of users obtaining quantum keys. Users can use the key components obtained from key distribution as materials to negotiate quantum key synthesis methods securely and flexibly, preventing attackers from obtaining the user's final key from the operator of the key distribution center, and meeting the user's key security requirements. Ultimately, by combining quantum key distribution and quantum-resistant cryptography, the two technologies are combined to improve the security of key distribution.

[0095] It should be noted that the description in the above embodiments is mainly based on two clients and two key distribution nodes as an example. When multi-party group communication and multiple key distribution nodes are involved, it can be regarded as implementing the solution provided in the above embodiments on any two clients and key distribution nodes among the multiple clients and key distribution nodes, which will not be described one by one here.

[0096] The step division of the above methods is only for the purpose of clear description. When implemented, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent; adding insignificant modifications to the algorithm or process or introducing insignificant designs without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0097] Another aspect of the present application embodiment further provides an electronic device, such as Figure 8 As shown, it includes: at least one processor 801; and a memory 802 that is communicatively connected to the at least one processor 801; wherein the memory 802 stores instructions that can be executed by the at least one processor 801, and the instructions are executed by the at least one processor 801 so that the at least one processor 801 can execute the key distribution method described in any of the above method embodiments.

[0098] The memory 802 and the processor 801 are connected in a bus manner, and the bus may include any number of interconnected buses and bridges, and the bus connects various circuits of one or more processors 801 and the memory 802 together. The bus can also connect various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be one element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices on a transmission medium. The data processed by the processor 801 is transmitted on a wireless medium via an antenna, and further, the antenna also receives data and transmits the data to the processor 801.

[0099] The processor 801 is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management and other control functions. The memory 802 can be used to store data used by the processor 801 when performing operations.

[0100] Another aspect of the present application embodiment further provides a computer-readable storage medium storing a computer program. When the computer program is executed by a processor, the above method embodiment is implemented.

[0101] That is, those skilled in the art can understand that all or part of the steps in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a program, and the program is stored in a storage medium, including a number of instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0102] Those skilled in the art will appreciate that the above embodiments are specific embodiments for implementing the present application, and in actual applications, various changes may be made thereto in form and detail without departing from the spirit and scope of the present application.

Claims

1. A key distribution method, characterized in that: Applied to a key distribution node, the method comprises: Synchronously with another key distribution node to obtain a consistent key component from a respective connected quantum key distribution node, wherein each of the quantum key distribution nodes is connected via a quantum key distribution network; Through a secure connection based on a quantum-resistant cryptographic algorithm, different key components among the consistent key components are sent to the client respectively with the other key distribution node, so that the client and the other client that receives the same key components negotiate a synthetic symmetric key based on the acquired key components, wherein the same key components of the other client come from the key distribution node and the other key distribution node, and the key components of the same key components of the other client and the client that come from the key distribution node are at least partially different.

2. The key distribution method according to claim 1, characterized in that: After synchronizing with another key distribution node to obtain a consistent key component from a respective connected quantum key distribution node, the method further includes: Sending the hash value of the consistent key component obtained by the key distribution node to the other key distribution node, so that the other key distribution node can verify the received hash value according to the consistent key component obtained by the other key distribution node; and / or, receiving a hash value of the consistent key component obtained by the other key distribution node and sent by the other key distribution node, and verifying the received hash value according to the consistent key component obtained by the key distribution node; The key distribution node communicates with the other key distribution node through the quantum key distribution node and the quantum key distribution network to which they are respectively connected.

3. The key distribution method according to claim 1, characterized in that: Before the another key distribution node and the other key distribution node respectively send different key components among the consistent key components to the client, the method further includes: Negotiate with the other key distribution node to determine at least two key components from the consistent key components; The at least two key components are verified with the another key distribution node.

4. The key distribution method according to claim 3, characterized in that: The verifying the at least two key components with the other key distribution node includes: Sending the identifier of the key component to be sent by the other key distribution node to the client, and the hash value of the key component and its identifier to be sent by the other key distribution node to the client, to the other key distribution node, so that the other key distribution node can verify the received information according to the key component and its identifier in the other key distribution node; and / or, The other key distribution node receives the identifier of the key component to be sent to the client by the key distribution node in the other key distribution node, and the hash value of the key component and its identifier to be sent to the client by the key distribution node, so as to verify the received information according to the corresponding key component and its identifier in the key distribution node.

5. The key distribution method according to any one of claims 1 to 4, characterized in that: The step of synchronously acquiring a consistent key component from a quantum key distribution node connected to the other key distribution node comprises: Applying for a key from the quantum key distribution node to which they are respectively connected based on the same key application strategy as the other key distribution node; The obtained key is split with the at least another key distribution node based on the same key splitting strategy to obtain the consistent key components.

6. A key distribution method, characterized in that: Applied to a client, the method comprises: Send a key request to the key distribution node through a secure connection based on quantum-resistant cryptographic algorithms; Receiving key components sent by the key distribution node and another key distribution node through a secure connection based on a quantum-resistant cryptographic algorithm; Through a secure connection based on a quantum-resistant cryptographic algorithm, a synthetic symmetric key is negotiated with another client that has received the same key component based on the received key component, wherein the same key component of the other client comes from the key distribution node and the other key distribution node, and the key component of the same key component of the other client and the client that comes from the key distribution node is at least partially different.

7. The key distribution method according to claim 6, characterized in that: The step of negotiating a synthetic symmetric key with another client that has received the same key component according to the received key component includes: Based on a secure connection with a quantum-resistant cryptographic algorithm, sending a hash value of the key synthesized by the client to the other client, so that the other client can verify the received hash value according to the key synthesized by the other client; and / or, Based on a secure connection of a quantum-resistant cryptographic algorithm, a hash value of a key synthesized by the other client and sent by the other client is received, and the received hash value is verified according to the key synthesized by the client.

8. A key distribution system, characterized in that: include: At least two key distribution centers, a plurality of clients and a quantum key distribution network, wherein each of the key distribution centers includes a key distribution node and a quantum key distribution node, the client accesses at least two different key distribution centers through at least two different key distribution nodes, and each of the quantum key distribution nodes is connected to the quantum key distribution network; The key distribution node is used to implement the key distribution method according to any one of claims 1 to 5, and the client is used to implement the key distribution method according to claim 6 or 7.

9. An electronic device, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the key distribution method as described in any one of claims 1 to 5, or the key distribution method as described in claim 6 or 7.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the computer program implements the key distribution method according to any one of claims 1 to 5, or implements the key distribution method according to claim 6 or 7.

Images