Communication method and device for fusion of quantum key and IPv6 protocol

Abstract

The invention relates to the technical field of communication, and provides a quantum key and IPv6 protocol fusion communication method and device, and the method comprises the steps: a data transmitting end responds to a transmission request of an IPv6 data packet, and transmits a key obtaining request to a key generation end; the key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; the key generation end performs quantum adaptation packaging of an IPv6 extension head on the encrypted quantum key to obtain a key data packet, and sends the key data packet to a data sending end through an IP network channel; and the data sending end performs time validity verification on the key data packet and performs identity verification on the key data packet based on the public key after the time validity verification of the key data packet is passed, and the method realizes native packaging and routing of the quantum key in the standard IPv6 protocol stack.

Description

Technical Field

[0001] This application relates to the field of communication technologies, and in particular, to a communication method and apparatus for the integration of quantum key and IPv6 protocol. Background Art

[0002] Currently, with the rapid development of quantum computing technology, the traditional encryption system is at risk of being cracked by quantum algorithms. Quantum key distribution (abbreviated as QKD in English) has become an important technology to ensure future communication security due to its information-theoretic security. However, existing QKD systems usually rely on dedicated optical fibers and independent protocol stacks, and it is difficult to deeply integrate with large-scale deployed IPv6 networks, resulting in low key distribution efficiency and inability to achieve end-to-end dynamic encryption, which seriously restricts the large-scale application of quantum secure communication in scenarios such as the Internet, Internet of Things, and 5G / 6G. Summary of the Invention

[0003] This application provides a communication method and apparatus for the integration of quantum key and IPv6 protocol to solve the problems raised in the above background art.

[0004] In a first aspect, this application provides a communication method for the integration of quantum key and IPv6 protocol, which is used for a communication apparatus for the integration of quantum key and IPv6 protocol. The apparatus includes a data sending end and a key generation end. The method includes: The data sending end responds to a sending request of an IPv6 data packet and sends a key acquisition request to the key generation end; The key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; The key generation end performs quantum adaptation encapsulation of the encrypted quantum key with an IPv6 extension header to obtain a key data packet, and sends the key data packet to the data sending end through an IP network channel; The data sending end verifies the time validity of the key data packet, authenticates the key data packet based on the public key after the time validity verification of the key data packet passes, and encrypts the IPv6 data packet based on the key data packet after the authentication of the key data packet passes.

[0005] In a possible implementation manner, the key generation end encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, including: The key generation end performs fragmentation processing on the quantum key to obtain a plurality of fragments; The key generation end generates a public key and a private key based on a preset key generation method; The key generation end encrypts each of the shards based on the private key to obtain a plurality of encrypted shards; the encrypted shards constitute an encrypted quantum key.

[0006] In a possible implementation manner, the key generation end generates a public key and a private key based on a preset key generation method, including: The key generation end randomly generates an initial polynomial ; The key generation end generates all intermediate polynomials whose highest power is any integer within the interval [- , and the coefficients of each term of the polynomial are any integer within the interval [- , ; For each of the intermediate polynomials, the key generation end determines whether the intermediate polynomial is an ideal polynomial based on the initial polynomial ; the ideal polynomial is an intermediate polynomial that can be divided by the initial polynomial ; For each of the ideal polynomials, the key generation end divides the ideal polynomial by the initial polynomial to obtain a second intermediate polynomial; The key generation end generates a public key and a private key based on each of the second intermediate polynomials.

[0007] In a possible implementation manner, the key generation end generates a public key and a private key based on each of the second intermediate polynomials, including: For each of the second intermediate polynomials, the key generation end calculates the modulus corresponding to the second intermediate polynomial; The key generation end determines the second intermediate polynomial corresponding to the maximum modulus as the first target polynomial, and determines the polynomial corresponding to the minimum modulus as the second target polynomial; The key generation end generates the public key based on the first target polynomial and generates the private key based on the second target polynomial.

[0008] In a possible implementation manner, the key generation end generates the public key based on the first target polynomial, including: If the first target polynomial is one, the key generation end determines the first target polynomial as the public key; If the first target polynomial is multiple, the key generation end determines the product of each of the first target polynomials as the public key.

[0009] In a possible implementation manner, the key generation end generates the private key based on the second target polynomial, including: If there is only one second target polynomial, the key generation end determines the second target polynomial as the private key; If there are multiple second target polynomials, the key generation end determines the sum of all the second target polynomials as the public key.

[0010] In a possible implementation, the key generation end performs quantum adaptation encapsulation of the IPv6 extension header on the encrypted quantum key to obtain a key data packet, including: The key generation end adds a key generation timestamp to the encrypted quantum key; The key generation end adds an IPv6 basic header to the encrypted quantum key with the key generation timestamp added to obtain the key data packet.

[0011] In a possible implementation, the method further includes: After the time validity verification of the key data packet fails or the authentication of the key data packet fails, the data sending end sends a key acquisition request to the key generation end again.

[0012] In a second aspect, the present application provides a communication device for the integration of quantum key and IPv6 protocol, including a data sending end and a key generation end, and the functions of the device are as follows: The data sending end responds to the sending request of the IPv6 data packet and sends a key acquisition request to the key generation end; The key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; The key generation end performs quantum adaptation encapsulation of the IPv6 extension header on the encrypted quantum key to obtain a key data packet, and sends the key data packet to the data sending end through an IP network channel; The data sending end performs time validity verification on the key data packet, authenticates the key data packet based on the public key after the time validity verification of the key data packet passes, and encrypts the IPv6 data packet based on the key data packet after the authentication of the key data packet passes.

[0013] The present application provides a communication method and device for the integration of quantum key and IPv6 protocol, which are used for a communication device for the integration of quantum key and IPv6 protocol. The device includes a data sending end and a key generation end. The method includes: the data sending end responds to a sending request of an IPv6 data packet, and sends a key acquisition request to the key generation end; the key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; the key generation end performs quantum adaptation encapsulation of the encrypted quantum key with an IPv6 extension header to obtain a key data packet, and sends the key data packet to the data sending end through an IP network channel; the data sending end verifies the time validity of the key data packet, authenticates the key data packet based on the public key after the time validity verification of the key data packet passes, and encrypts the IPv6 data packet based on the key data packet after the authentication of the key data packet passes. For this method, first, by designing a quantum-adapted IPv6 extension header, the native encapsulation and routing of quantum keys in the standard IPv6 protocol stack are realized for the first time, solving the compatibility problem of traditional QKD systems relying on dedicated optical fibers and independent protocol stacks, enabling quantum keys to be efficiently transmitted through existing IPv6 network infrastructures, and improving the key distribution efficiency. Then, a dual-channel collaborative transmission mechanism (transmitting the public key through the quantum channel + transmitting the encrypted key through the IP network channel) is adopted. While ensuring quantum security, it breaks through the physical layer transmission distance limitation of traditional QKD, supports flexible networking across domains and multi-hops. Secondly, by introducing timestamp verification and encryption algorithms, a dynamic key management system is constructed, which not only solves the problem of rigid key management in the prior art, but also resists man-in-the-middle attacks through the public key authentication mechanism, realizing the trusted control of the entire life cycle of quantum keys. Finally, through the dynamic binding of quantum keys and IPv6 data packets, end-to-end quantum security encryption is achieved at the IP layer, which is not only compatible with existing IPSec / SSL protocol stacks, but also can resist quantum computing attacks, providing future secure communication guarantees for scenarios such as 5G / 6G and the Internet of Things, and promoting the large-scale commercial deployment of quantum secure communication. Description of the Drawings

[0014] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0015] Figure 1It is a schematic flowchart of a communication method for the integration of quantum key and IPv6 protocol provided by an embodiment of the present application; Figure 2 It is a schematic block diagram of the structure of a communication device for the integration of quantum key and IPv6 protocol provided by an embodiment of the present application. Detailed implementation manners

[0016] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some, but not all, of the embodiments of the present invention. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0017] The flowchart shown in the accompanying drawings is only an example illustration, and does not necessarily include all contents and operations / steps, nor does it necessarily need to be executed in the described order. For example, some operations / steps can also be decomposed, combined, or partially merged, so the actual execution order may be changed according to the actual situation.

[0018] It should also be understood that the terms used in the specification of the present application are only for the purpose of describing specific embodiments and are not intended to limit the present application. As used in the specification of the present application and the appended claims, unless the context clearly indicates otherwise, the singular forms "a", "an", and "the" are intended to include the plural forms.

[0019] It should be further understood that the term "and / or" used in the specification of the present application and the appended claims refers to any combination and all possible combinations of one or more of the related listed items, and includes these combinations.

[0020] Next, some real-time manners of the present application will be described in detail in conjunction with the accompanying drawings. Without conflict, the features in the following embodiments and the embodiments can be combined with each other.

[0021] Please refer to Figure 1 , Figure 1 It is a schematic flowchart of a communication method for the integration of quantum key and IPv6 protocol provided by an embodiment of the present application. The method is used for a communication device 100 for the integration of quantum key and IPv6 protocol. As Figure 2 shown, the communication device 100 for the integration of quantum key and IPv6 protocol includes a data sending end 110 and a key generation end 120. As Figure 1 shown, the communication method for the integration of quantum key and IPv6 protocol provided by the embodiment of the present application includes steps S1 to S5.

[0022] Step S1: The data sender responds to the sending request of the IPv6 data packet and sends a key acquisition request to the key generation end.

[0023] Step S2: The key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sender through a quantum channel.

[0024] Step S3: The key generation end performs quantum adaptation encapsulation of the IPv6 extension header on the encrypted quantum key to obtain a key data packet, and sends the key data packet to the data sender through an IP network channel.

[0025] Step S4: The data sender verifies the time validity of the key data packet, authenticates the key data packet based on the public key after the time validity verification of the key data packet passes, and encrypts the IPv6 data packet based on the key data packet after the authentication of the key data packet passes.

[0026] Specifically included in this embodiment are: As described in step S1 above, when the data sender receives the sending request of the IPv6 data packet, it sends a key acquisition request to the key generation end.

[0027] As described in step S2 above, when the key generation end receives the key acquisition request, it generates a quantum key and a key generation timestamp of the quantum key based on laser phase noise, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sender through a quantum channel.

[0028] As described in step S3 above, the key generation end first adds a key generation timestamp to the encrypted quantum key, and then adds an IPv6 base header to the encrypted quantum key with the key generation timestamp added to obtain the key data packet.

[0029] As described in step S4 above, after receiving the key data packet, the data sender parses the key data packet to obtain the key generation timestamp and the encrypted quantum key corresponding to the key data packet, then calculates the time difference between the current moment and the key generation timestamp, and further determines whether the time difference is greater than the survival period of the quantum key. If the time difference is not greater than the survival period of the quantum key, it is determined that the key data packet passes the time validity verification. Secondly, after the time validity verification of the key data packet passes, the encrypted quantum key is authenticated based on the public key, and after the authentication of the encrypted quantum key passes, the IPv6 data packet is encrypted based on the quantum key corresponding to the encrypted quantum key.

[0030] The method provided in this embodiment, firstly, by designing a quantum-adapted IPv6 extension header, for the first time realizes the native encapsulation and routing of quantum keys in the standard IPv6 protocol stack, solves the compatibility problem of traditional QKD systems relying on dedicated optical fibers and independent protocol stacks, enables quantum keys to be efficiently transmitted through the existing IPv6 network infrastructure, and improves the key distribution efficiency. Then, a dual-channel collaborative transmission mechanism (public key transmitted through the quantum channel + encrypted key transmitted through the IP network channel) is adopted to break through the physical layer transmission distance limitation of traditional QKD while ensuring quantum security, support flexible networking across domains and multiple hops. Secondly, by introducing timestamp verification and encryption algorithms, a dynamic key management system is constructed, which not only solves the problem of rigid key management in the prior art, but also resists man-in-the-middle attacks through the public key authentication mechanism, realizing the trusted control of the entire life cycle of quantum keys. Finally, through the dynamic binding of quantum keys and IPv6 data packets, end-to-end quantum security encryption is achieved at the IP layer, which is not only compatible with the existing IPSec / SSL protocol stack, but also can resist quantum computing attacks, providing future secure communication guarantees for scenarios such as 5G / 6G and the Internet of Things, and promoting the large-scale commercial deployment of quantum secure communication.

[0031] In some embodiments, the key generation end encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, including the following steps: The key generation end performs sharding processing on the quantum key to obtain a plurality of shards; The key generation end generates a public key and a private key based on a preset key generation method; The key generation end encrypts each of the shards based on the private key to obtain a plurality of encrypted shards; each of the encrypted shards constitutes the encrypted quantum key.

[0032] In this embodiment, the key generation end first performs a sharding process on the quantum key based on a preset sharding method to obtain multiple shards, then generates a public key and a private key based on a preset key generation method, and finally encrypts each of the shards based on the private key to obtain multiple encrypted shards.

[0033] The method provided in this embodiment first splits the complete key into multiple independent shards by performing a sharding process on the quantum key, enabling the key distribution process to have the ability of multi-path parallel transmission, which helps to improve the transmission efficiency of key distribution. Then, the dynamically generated public and private key pairs are used to independently encrypt the shards to ensure that each shard is protected against quantum computing attacks during the transmission process, improving the security of the shards during the transmission process. Secondly, each encrypted shard is independently encapsulated and transmitted through the IPv6 extension header, which not only is compatible with standard router forwarding but also can allocate different paths for different shards according to the network status, realizing intelligent load balancing of key distribution.

[0034] In some embodiments, the key generation end generates a public key and a private key based on a preset key generation method, including the following steps: The key generation end randomly generates an initial polynomial ; The key generation end generates all intermediate polynomials whose highest power is any integer within the interval [- , and the coefficients of each term of the polynomial are any integer within the interval [- , ; For each of the intermediate polynomials, the key generation end determines whether the intermediate polynomial is an ideal polynomial based on the initial polynomial ; The ideal polynomial is an intermediate polynomial that can be divisible by the initial polynomial ; For each of the ideal polynomials, the key generation end divides the ideal polynomial by the initial polynomial to obtain a second intermediate polynomial; The key generation end generates a public key and a private key based on each of the second intermediate polynomials.

[0035] In this embodiment, the key generation end first randomly generates an initial polynomial , and then generates all intermediate polynomials whose highest power is any integer within the interval [- , and the coefficients of each term of the polynomial are any integer within the interval [- , . Secondly, based on the initial polynomial Determine whether the intermediate polynomial is an ideal polynomial. Further, for each of the ideal polynomials, the key generation end divides the ideal polynomial by the initial polynomial , and obtains a second intermediate polynomial. Finally, a public key and a private key are generated based on each of the second intermediate polynomials.

[0036] The method provided in this embodiment first randomly generates an initial polynomial as the mathematical basis for key generation, ensuring the unpredictability of the key source, eliminating the possibility of brute-force cracking of the key from the root, and making the system have information-theoretic level security. Then, it adopts an intermediate polynomial generation mechanism under interval limiting conditions, effectively controlling the computational complexity while ensuring polynomial diversity, which helps improve the key generation efficiency. Secondly, through the ideal polynomial screening algorithm, only the intermediate polynomials divisible by the initial polynomial are selected to participate in subsequent operations, which not only ensures the mathematical correlation of the key pair but also filters out the polynomials that do not meet the security requirements. Finally, a public-private key pair is generated based on the second intermediate polynomial, making the public key and the private key have a strict mathematical correspondence but difficult to reverse-derive, meeting the security requirements of asymmetric encryption.

[0037] In some embodiments, the key generation end generates a public key and a private key based on each of the second intermediate polynomials, including the following steps: For each of the second intermediate polynomials, the key generation end calculates the modulus corresponding to the second intermediate polynomial; wherein, the modulus of the second intermediate polynomial is the sum of the squares of the coefficients of the second intermediate polynomial. The key generation end determines the second intermediate polynomial corresponding to the maximum modulus as the first target polynomial, and determines the polynomial corresponding to the minimum modulus as the second target polynomial; The key generation end generates the public key based on the first target polynomial and generates the private key based on the second target polynomial.

[0038] In this embodiment, the key generation end first calculates the modulus corresponding to each of the second intermediate polynomials, then determines the second intermediate polynomial corresponding to the maximum modulus as the first target polynomial and the polynomial corresponding to the minimum modulus as the second target polynomial, and finally generates the public key based on the first target polynomial and generates the private key based on the second target polynomial.

[0039] In this embodiment, the key generation end generates the public key based on the first target polynomial, including the following steps: If there is only one first target polynomial, the key generation end determines the first target polynomial as the public key; If there are multiple first target polynomials, the key generation end determines the product of all the first target polynomials as the public key.

[0040] The key generation end generates the private key based on the second target polynomial, including the following steps: If there is one second target polynomial, the key generation end determines the second target polynomial as the private key; If there are multiple second target polynomials, the key generation end determines the sum of all the second target polynomials as the public key.

[0041] For the method provided in this embodiment, first, by calculating the modulus of the second intermediate polynomial, an accurate mathematical quantization index is established, providing an objective screening basis for the generation of the key pair, and solving the problem that the key quality is difficult to quantitatively evaluate in the traditional method. Then, using the maximum modulus polynomial as the basis for generating the public key ensures that the public key has sufficient complexity and randomness, and can effectively resist brute-force cracking and mathematical analysis attacks. Finally, choosing the minimum modulus polynomial as the basis for generating the private key not only ensures the strong correlation between the private key and the public key, but also keeps the private key simple.

[0042] In some embodiments, the method further includes the following steps: After the time validity verification of the key data packet fails or the authentication of the key data packet fails, the data sending end sends a key acquisition request to the key generation end again.

[0043] For the method provided in this embodiment, by adopting the mechanism of automatically triggering key reapplication when verification fails, the on-demand dynamic update of the key is realized. Compared with the fixed-time rotation mode, the key update delay is shortened from the minute level to the millisecond level, significantly improving the response speed of the system to security threats.

[0044] Please refer to Figure 2 , Figure 2 which is a schematic block diagram of the communication device 100 integrating quantum key and IPv6 protocol provided by the embodiment of the present application. As Figure 2 shown, the communication device 100 integrating quantum key and IPv6 protocol provided by the embodiment of the present application includes a data sending end 110 and a key generation end 120. The functions of the data sending end 110 and the key generation end 120 are as follows: The data sending end responds to the sending request of the IPv6 data packet and sends a key acquisition request to the key generation end; The key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; The key generation end performs quantum adaptation encapsulation of the encrypted quantum key with an IPv6 extension header to obtain a key data packet, and sends the key data packet to the data sending end through an IP network channel; The data sending end performs time validity verification on the key data packet, and after the time validity verification of the key data packet passes, performs identity verification on the key data packet based on the public key, and after the identity verification of the key data packet passes, performs encryption processing on the IPv6 data packet based on the key data packet.

[0045] It should be noted that those skilled in the art can clearly understand that for the convenience and conciseness of description, the specific working processes of the above-described devices and each module can refer to the processes in the embodiments of the communication method for the fusion of quantum key and IPv6 protocol described above, and will not be elaborated here.

[0046] The above is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present application, and these modifications or replacements should all be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A communication method integrating quantum key and IPv6 protocol, characterized in that: A communication device for integrating quantum key with IPv6 protocol, the device comprising a data sending end and a key generating end, the method comprising: The data sending end responds to the sending request of the IPv6 data packet and sends a key acquisition request to the key generating end; The key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; The key generation end performs quantum adaptation encapsulation of the IPv6 extension header on the encrypted quantum key to obtain a key data packet, and sends the key data packet to the data sending end through an IP network channel; The data sending end verifies the time validity of the key data packet, and authenticates the key data packet based on the public key after the time validity verification of the key data packet passes, and encrypts the IPv6 data packet based on the key data packet after the identity authentication of the key data packet passes.

2. The communication method of integrating quantum key and IPv6 protocol according to claim 1, characterized in that: The key generation end encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, including: The key generation end performs sharding processing on the quantum key to obtain multiple shards; The key generation end generates a public key and a private key based on a preset key generation method; The key generation end encrypts each of the fragments based on the private key to obtain a plurality of encrypted fragments; each of the encrypted fragments constitutes an encrypted quantum key.

3. The communication method of integrating quantum key and IPv6 protocol according to claim 2, characterized in that: The key generation end generates a public key and a private key based on a preset key generation method, including: The key generation end randomly generates an initial polynomial ; The key generating end generates the highest power in the interval [- , ] and the coefficients of the polynomial are in the interval [- , ]; For each of the intermediate polynomials, the key generation end generates a key based on the initial polynomial. Determine whether the intermediate polynomial is an ideal polynomial; the ideal polynomial is a polynomial that can be divisible intermediate polynomials; For each of the ideal polynomials, the key generation end divides the ideal polynomial by the initial polynomial , get the second intermediate polynomial; The key generation end generates a public key and a private key based on each of the second intermediate polynomials.

4. The communication method of integrating quantum key and IPv6 protocol according to claim 3, characterized in that: The key generation end generates a public key and a private key based on each of the second intermediate polynomials, including: For each of the second intermediate polynomials, the key generating end calculates a modulus corresponding to the second intermediate polynomial; The key generating end determines the second intermediate polynomial corresponding to the maximum modulus as the first target polynomial, and determines the polynomial corresponding to the minimum modulus as the second target polynomial; The key generation end generates the public key based on the first target polynomial, and generates the private key based on the second target polynomial.

5. The communication method of integrating quantum key and IPv6 protocol according to claim 4, characterized in that: The key generation end generates the public key based on the first target polynomial, including: If the first target polynomial is one, the key generation end determines the first target polynomial as the public key; If there are multiple first target polynomials, the key generation end determines the product of the first target polynomials as the public key.

6. The communication method of combining quantum key and IPv6 protocol according to claim 4, characterized in that: The key generation end generates the private key based on the second target polynomial, including: If the second target polynomial is one, the key generating end determines the second target polynomial as the private key; If there are multiple second target polynomials, the key generation end determines the sum of the second target polynomials as the public key.

7. The communication method of integrating quantum key and IPv6 protocol according to claim 1, characterized in that: The key generation end performs quantum adaptation encapsulation of the IPv6 extension header on the encrypted quantum key to obtain a key data packet, including: The key generation end adds a key generation timestamp to the encrypted quantum key; The key generation end adds an IPv6 basic header to the encrypted quantum key with the key generation timestamp added to obtain the key data packet.

8. The communication method of integrating quantum key and IPv6 protocol according to claim 1, characterized in that: The method further comprises: After the time validity verification of the key data packet fails or the identity verification of the key data packet fails, the data sending end sends a key acquisition request to the key generating end again.

9. A communication device integrating quantum key and IPv6 protocol, comprising a data transmitting end and a key generating end, characterized in that: The data sending end responds to the sending request of the IPv6 data packet and sends a key acquisition request to the key generating end; The key generation end generates a quantum key based on the key acquisition request, encrypts the quantum key based on a preset encryption algorithm to obtain a public key and an encrypted quantum key, and sends the public key to the data sending end through a quantum channel; The key generation end performs quantum adaptation encapsulation of the IPv6 extension header on the encrypted quantum key to obtain a key data packet, and sends the key data packet to the data sending end through an IP network channel; The data sending end verifies the time validity of the key data packet, and authenticates the key data packet based on the public key after the time validity verification of the key data packet passes, and encrypts the IPv6 data packet based on the key data packet after the identity authentication of the key data packet passes.

Images