Communication method, electronic device and medium for quantum communication system
By adopting post-quantum cryptographic key encapsulation mechanism and encryption and forward coding technology in quantum communication systems, the problems of loss and security risks in quantum secure direct communication during long-distance transmission are solved, and safe and efficient quantum communication is achieved.
Patent Information
- Application Number
- CN202510855775.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-06-25
- Publication Date
- 2025-09-19
- Estimated Expiration
- 2045-06-25
AI Technical Summary
The existing quantum secure direct communication protocol suffers from extreme losses in long-distance transmission, while the quasi-quantum secure direct communication protocol based on one-way transmission of quantum states has security risks and cannot effectively improve the security and efficiency of communication.
A post-quantum cryptographic key encapsulation mechanism is used to establish a secure key for two-way authentication. The encryption key is used to encrypt and forward encode the information, encode it into the quantum state for transmission, and encode and decode the information bits and detection bits through basis vector modulation and masking mechanism to achieve secure transmission of quantum communication.
It improves the security and efficiency of quantum communication, saves classical channel resources, and eliminates the security risks caused by the reuse of key resources.
Smart Images

Figure CN120358031B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of quantum communication, and in particular to a communication method, electronic equipment, and medium for use in a quantum communication system. Background Art
[0002] With the continuous breakthroughs in quantum computing technology, the parallel computing capabilities of quantum computing will pose a huge threat to information security under classical cryptographic systems, especially public key cryptography. Practical quantum computers have the potential to break the currently widely used public key cryptography algorithms.
[0003] To improve communication security, currently, existing technologies mainly include the following two quantum communication methods that use quantum states to transmit confidential information:
[0004] One is quantum secure direct communication, which encodes information into quantum states and transmits confidential information directly without the need for establishing a key in advance. However, single-photon quantum secure direct communication protocols, such as the DL04-QSDC (Quantum Secure Direct Communication) protocol, require bidirectional transmission of quantum states. The transmission of quantum states in optical fibers decays exponentially with distance, so the single-photon DL04-QSDC protocol suffers from significant losses, making it unsuitable for long-distance transmission.
[0005] Another quasi-quantum secure direct communication protocol based on one-way transmission of quantum states requires establishing keys in advance through quantum key distribution (QKD) and extracting new keys from communication data for subsequent communications, which poses security risks. Summary of the Invention
[0006] This application proposes a communication method, electronic equipment and medium for a quantum communication system to solve the security problem of quantum communication.
[0007] According to one aspect of the present application, a communication method for a quantum communication system is proposed, characterized in that the quantum communication system includes a first communication terminal and a second communication terminal, wherein the first communication terminal is configured with a first communication terminal security key, the first communication terminal security key includes a first communication terminal encryption key and a first communication terminal mask key, and the communication method is used for the first communication terminal, and the communication method includes:
[0008] Encrypting the information to be transmitted using the first communication end encryption key to obtain an encrypted ciphertext;
[0009] forward encoding the encrypted ciphertext using the first communication end mask key to obtain a codeword to be transmitted;
[0010] The codeword to be transmitted is encoded into a quantum state, so as to send the codeword to be transmitted to the second communication end through the quantum state.
[0011] According to some embodiments, before encrypting the information to be transmitted using the first communication end encryption key to obtain the encrypted ciphertext, the method further includes:
[0012] The first communication end and the second communication end establish a security key for bidirectional authentication through a post-quantum cryptographic key encapsulation mechanism.
[0013] According to some embodiments, the first communication end and the second communication end establish a mutually authenticated security key through a post-quantum cryptographic key encapsulation mechanism, including:
[0014] Generating a first communication end quantum random number using a first communication end quantum random number generator, wherein the first communication end quantum random number includes a first communication end first quantum random number;
[0015] Generate a first communication terminal static public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism, where the first communication terminal static public-private key pair includes a first communication terminal static public key and a first communication terminal static private key;
[0016] Sending the static public key of the first communication end to the second communication end;
[0017] receiving a second communication peer static public key from the second communication peer;
[0018] Generate a first communication terminal dynamic public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism, wherein the first communication terminal dynamic public-private key pair includes a first communication terminal dynamic public key and a first communication terminal dynamic private key;
[0019] Generate a first ciphertext and a first key using the first quantum random number of the first communication end and the static public key of the second communication end;
[0020] Sending the first ciphertext and the first communication end dynamic public key to the second communication end;
[0021] receiving a second ciphertext and a third ciphertext from a second communication end;
[0022] Decapsulating the second ciphertext using the first communication end dynamic private key to obtain a second decapsulation key;
[0023] Decapsulating the third ciphertext using the static private key of the first communication end to obtain a third decapsulation key;
[0024] Perform a hash calculation on the second decapsulation key, the third decapsulation key, and the first key to obtain the first communication end security key.
[0025] According to some embodiments, forward encoding the encrypted ciphertext using the first communication end mask key to obtain a codeword to be transmitted includes:
[0026] performing an error correction and loss-resistant encoding operation on the encrypted ciphertext to obtain an encoded ciphertext;
[0027] The encoded ciphertext is masked using the first communication end mask key to obtain the codeword to be transmitted.
[0028] According to some embodiments, the first communication end security key further includes a first communication end control key,
[0029] Before encoding the codeword to be transmitted into a quantum state to send the codeword to be transmitted to the second communication end through the quantum state, the communication method further includes:
[0030] The bit type to be transmitted is determined according to the first communication terminal control key, where the bit type includes an information bit and a detection bit.
[0031] According to some embodiments, the first communication end security key further includes a basis vector modulation key, wherein encoding the codeword to be transmitted onto a quantum state so as to send the codeword to be transmitted to the second communication end via the quantum state comprises:
[0032] When it is determined according to the first communication terminal control key that the type of bit currently to be transmitted is the information bit, generating a transmission coded information quantum state according to the basis vector modulation key;
[0033] The codeword to be transmitted is encoded into the transmission coding information quantum state, so as to send the codeword to be transmitted to the second communication end through the transmission coding information quantum state.
[0034] According to some embodiments, the first communication end quantum random number further includes a first communication end second quantum random number and a first communication end third quantum random number, and the communication method further includes:
[0035] When it is determined according to the control key of the first communication terminal that the type of the bit to be transmitted is a detection bit, using the second quantum random number of the first communication terminal to generate a quantum state of transmission detection information;
[0036] Generating and sending a detection bit using a third quantum random number of the first communication end;
[0037] The sending detection bit is encoded into the transmission detection information quantum state, so as to send the sending detection bit to the second communication end through the transmission detection information quantum state.
[0038] According to some embodiments, when it is determined based on the first communication end control key that the type of bit currently to be transmitted is a detection bit, using the first communication end second quantum random number to generate a transmission detection information quantum state includes:
[0039] Determining a transmission code basis vector using the second quantum random number of the first communication end;
[0040] The transmission detection information quantum state is generated using the transmission code basis vector.
[0041] According to some embodiments, performing a masking operation on the encoded ciphertext using the first communication end masking key to obtain a codeword to be transmitted includes:
[0042] Generate a masked random number sequence according to the first communication terminal mask key;
[0043] An exclusive OR operation is performed on the encoded ciphertext using the masked random number sequence to obtain the codeword to be transmitted.
[0044] According to one aspect of the present application, a communication method for a quantum communication system is proposed, characterized in that the quantum communication system includes a first communication terminal and a second communication terminal, wherein the second communication terminal is configured with a second communication terminal security key, and the second communication terminal security key includes a second communication terminal basis vector modulation key, a second communication terminal encryption key, and a second communication terminal mask key. The communication method is used for the second communication terminal, and the communication method includes:
[0045] receiving the quantum state sent by the first communication end;
[0046] Measuring the quantum state using the second communication end basis vector modulation key to obtain a transmission codeword and a corresponding timing position;
[0047] Decoding the transmission codeword using the second communication end mask key according to the timing position to obtain a ciphertext codeword;
[0048] The ciphertext codeword is decrypted using the second communication end encryption key to obtain transmission information.
[0049] According to some embodiments, decoding the transmission codeword using the second communication end mask key according to the timing position to obtain a ciphertext codeword includes:
[0050] performing a demasking operation on the transmission codeword using the second communication end masking key according to the timing position to obtain a demasked codeword;
[0051] An error correction and loss-resistant decoding operation is performed on the demasked codeword to obtain a ciphertext codeword.
[0052] According to some embodiments, the second communication end security key further includes a second communication end control key, and before measuring the quantum state using the second communication end basis vector modulation key to obtain a transmission codeword and a corresponding timing position, the method further includes:
[0053] The bit type of the quantum state transmission is determined according to the second communication terminal control key, and the bit type includes an information bit and a detection bit.
[0054] According to some embodiments, before measuring the quantum state using the second communication end basis vector modulation key to obtain a transmission codeword and a corresponding timing position, the communication method further includes:
[0055] The second communication end and the first communication end exchange security keys through a two-way authentication method.
[0056] According to some embodiments, the second communication end and the first communication end establish the security key for the two-way authentication through a post-quantum cryptographic key encapsulation mechanism, including:
[0057] Generating a second communication end quantum random number using a second communication end quantum random number generator, wherein the second communication end quantum random number includes the second communication end first quantum random number;
[0058] Generate a second communication terminal static public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism, where the second communication terminal static public-private key pair includes the second communication terminal static public key and the second communication terminal static private key;
[0059] Sending the second communication end static public key to the first communication end;
[0060] Receiving a static public key of the first communication end sent by the first communication end;
[0061] Receiving a first ciphertext and a first communication terminal dynamic public key sent by the first communication terminal;
[0062] Generate a second ciphertext and a second key using the first quantum random number of the second communication end and the dynamic public key of the first communication end;
[0063] Generate a third ciphertext and a third key using the first quantum random number of the second communication end and the static public key of the first communication end;
[0064] Decapsulating the first ciphertext using the second communication end static private key to obtain a first decapsulation key;
[0065] Sending the second ciphertext and the third ciphertext to the first communication end;
[0066] Perform a hash calculation on the second key, the third key, and the first decapsulation key to obtain the second communication terminal security key.
[0067] According to some embodiments, the second communication end quantum random number includes a second communication end second quantum random number, the quantum state includes a transmission detection information quantum state, and the communication method further includes:
[0068] When it is determined according to the second communication terminal control key that the type of the bit currently to be transmitted is a detection bit, detecting the quantum state of the transmission detection information to obtain a received detection bit and a corresponding timing position;
[0069] receiving a second quantum random number of the first communication end and sending a detection bit sent by the first communication end;
[0070] Performing a basis vector comparison on the second quantum random number of the first communication end and the second quantum random number of the second communication end using the time sequence position to obtain bit positions with the same basis vector;
[0071] The received detection bit and the transmitted detection bit are compared according to the same bit position of the basis vector to perform parameter evaluation on the quantum information channel between the first communication end and the second communication end.
[0072] According to one aspect of the present application, an electronic device is proposed, comprising: a processor; and a memory storing a computer program, wherein when the computer program is executed by the processor, the processor executes the communication method as described in any of the previous embodiments.
[0073] According to one aspect of the present application, a non-transitory computer-readable storage medium is proposed, on which computer-readable instructions are stored. When the instructions are executed by a processor, the processor executes a method according to one aspect of the present application as described in any of the previous embodiments.
[0074] According to some embodiments of the present application, the first communication end obtains the codeword to be transmitted by encrypting and forward encoding the message to be transmitted, thereby improving the security of quantum communication.
[0075] In the embodiment of the present application, since the entire process does not require the announcement of the mask sequence through the classical channel, classical channel resources are saved.
[0076] It should be understood that the foregoing general description and the following detailed description are merely illustrative and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS
[0077] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for describing the embodiments. By describing the exemplary embodiments in detail with reference to the accompanying drawings, the above and other objects, features and advantages of the present application will become more apparent.
[0078] Figure 1 A schematic diagram of the system architecture of a quantum communication system according to an exemplary embodiment of the present application is shown.
[0079] Figure 2 A flow chart of a communication method for a quantum communication system according to an exemplary embodiment of the present application is shown.
[0080] Figure 3 A flow chart of another communication method for a quantum communication system according to an exemplary embodiment of the present application is shown.
[0081] Figure 4a A schematic diagram of a communication process for a quantum communication system according to an exemplary embodiment of the present application is shown.
[0082] Figure 4b A flow chart of a communication process for a quantum communication system according to an exemplary embodiment of the present application is shown.
[0083] Figure 5 An electronic device according to an exemplary embodiment of the present application is shown. DETAILED DESCRIPTION
[0084] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be embodied in many forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete and will fully convey the concepts of the example embodiments to those skilled in the art. Like reference numerals in the drawings represent like or similar parts, and thus repetitive description thereof will be omitted.
[0085] The described features, structures or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced without one or more of these specific details, or other modes, components, materials, devices or operations may be employed. In these cases, well-known structures, methods, devices, implementations, materials or operations will not be shown or described in detail.
[0086] The flowcharts shown in the accompanying drawings are for illustrative purposes only and do not necessarily include all contents and operations / steps, nor must they be executed in the order described. For example, some operations / steps may be decomposed, while others may be combined or partially combined. Therefore, the actual execution order may vary depending on the actual situation.
[0087] The terms "first," "second," and the like in the specification and claims of this application and the accompanying drawings are used to distinguish between different objects, not to describe a particular order. Furthermore, the terms "including," "having," and any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus comprising a series of steps or elements is not limited to the listed steps or elements but may optionally include steps or elements not listed, or may optionally include other steps or elements inherent to the process, method, product, or apparatus.
[0088] With the continuous breakthroughs in quantum computing technology, the parallel computing capabilities of quantum computing will pose a significant threat to the information security of classical cryptographic systems, particularly public key cryptography. Practical quantum computers have the potential to break currently widely used public key cryptographic algorithms. To mitigate the potential impact of quantum computers, global research on post-quantum cryptography is intensifying. Post-quantum cryptography, also known as quantum-resistant cryptography, is a public key cryptographic algorithm designed based on mathematically difficult problems that cannot be effectively solved by quantum computers. It primarily includes digital signature algorithms, public key encryption, and key encapsulation mechanisms. Furthermore, the development of quantum mechanics has provided a new tool for secure information transmission: quantum communication. Quantum communication utilizes quantum states for key negotiation or information transmission. Quantum communication primarily includes quantum key distribution (QKD), quantum teleportation, and quantum secure direct communication. Quantum key distribution leverages the unclonability of non-orthogonal single quantum states to achieve secure key negotiation. The negotiated key is then used to encrypt the transmitted information using classical encryption, and the encrypted ciphertext is then transmitted using classical communication. Quantum teleportation utilizes pre-established quantum entanglement to achieve deterministic transmission of quantum states. Quantum secure direct communication is the process of encoding information into quantum states to directly transmit confidential information without establishing a key in advance.
[0089] To improve communication security, currently, existing technologies mainly include the following two quantum communication methods that use quantum states to transmit confidential information:
[0090] One is quantum secure direct communication, which encodes information into quantum states and transmits confidential information directly without the need for establishing a key in advance. However, single-photon quantum secure direct communication protocols, such as the DL04-QSDC (Quantum Secure Direct Communication) protocol, require bidirectional transmission of quantum states. The transmission of quantum states in optical fibers decays exponentially with distance, so the single-photon DL04-QSDC protocol suffers from significant losses, making it unsuitable for long-distance transmission.
[0091] Another quasi-quantum secure direct communication protocol based on one-way transmission of quantum states requires establishing keys in advance through quantum key distribution (QKD) and extracting new keys from communication data for subsequent communications, which poses security risks.
[0092] In order to solve the above-mentioned technical problems and improve the security and communication efficiency of quantum communication, this application proposes a quantum communication system, such as Figure 1 2 is a schematic diagram of the system architecture of a quantum communication system according to an exemplary embodiment of the present application.
[0093] like Figure 1 As shown in the figure, Alice and Bob first establish a mutually authenticated security key using quantum random numbers and a post-quantum cryptographic key encapsulation mechanism. Alice then uses the encryption key to encrypt the transmitted information to obtain ciphertext, forward-encodes the ciphertext to obtain a ciphertext codeword, and transmits the ciphertext codeword to Bob via quantum state transmission of information bits, randomly modulating the quantum state of the detection bits. Bob decodes the received information bits to obtain ciphertext, and decrypts it using the encryption key to obtain the plaintext information. To test the channel quality of the quantum information channel, Bob compares the qubit error rate of the detection bits to assess the channel parameters.
[0094] According to the embodiments of the present application, quantum random numbers and a post-quantum cryptographic key encapsulation mechanism are used to implement mutually authenticated key exchange between legitimate communicating parties, establish a secure key, and then use a one-time pad mechanism to encrypt information to obtain ciphertext, which is encoded into a quantum state for secure transmission. This application utilizes a post-quantum cryptographic key encapsulation mechanism to improve key establishment efficiency, eliminating the need to reuse one-time pad encryption key resources and eliminating the security risks associated with key resource reuse. In addition, a masking mechanism is used to encode and decode information bit ciphertexts, eliminating the need for Alice and Bob to publish masked random sequences over classical channels, saving classical communication channel resource overhead.
[0095] The specific embodiments of the present application are described in detail below with reference to the accompanying drawings.
[0096] Figure 2 A flow chart of a communication method for a quantum communication system according to an exemplary embodiment of the present application is shown. According to an embodiment of the present application, Figure 2 The method shown includes steps S201, S203 and S205. Figure 2 , a communication method for a quantum communication system according to an exemplary embodiment of the present application is described in detail.
[0097] According to the embodiments of the present application, Figure 2 The quantum communication system includes a first communication end and a second communication end, wherein the communication method is used for the first communication end.
[0098] In some embodiments, the first communication end is configured with a first communication end security key, and the first communication end security key includes a first communication end encryption key and a first communication end mask key.
[0099] like Figure 2 As shown, in step S201, the information to be transmitted is encrypted using the first communication end encryption key to obtain an encrypted ciphertext.
[0100] According to an embodiment of the present application, before step S201, the first communication end and the second communication end establish a mutually authenticated security key through a post-quantum cryptographic key encapsulation mechanism.
[0101] In some embodiments, the first communication end generates a first communication end quantum random number using a first communication end quantum random number generator, wherein the first communication end quantum random number includes a first communication end first quantum random number. The first communication end uses the first communication end first quantum random number to establish a mutually authenticated security key with the second communication end based on a post-quantum cryptographic key encapsulation mechanism.
[0102] In step S203, the encrypted ciphertext is forward encoded using the first communication end mask key to obtain a codeword to be transmitted.
[0103] According to an embodiment of the present application, in step S203, first, an error correction and loss-resistant encoding operation is performed on the encrypted ciphertext to obtain an encoded ciphertext; then, a mask operation is performed on the encoded ciphertext using the mask key of the first communication end to obtain a codeword to be transmitted.
[0104] According to an embodiment of the present application, when a mask operation is performed on an encoded ciphertext using the mask key of the first communication end, first, a mask random number sequence is generated based on the mask key of the first communication end; then, an exclusive OR operation is performed on the encoded ciphertext using the mask random number sequence to obtain the codeword to be transmitted.
[0105] In step S205, the codeword to be transmitted is encoded into the quantum state, so as to send the codeword to be transmitted to the second communication end through the quantum state.
[0106] According to an embodiment of the present application, the first communication terminal security key also includes a first communication terminal control key, and before step S205, the bit type to be transmitted needs to be determined based on the first communication terminal control key, wherein the bit type includes information bits and detection bits.
[0107] In some embodiments, the first communication end security key also includes a first communication end basis vector modulation key.
[0108] In a specific embodiment, when the bit type to be transmitted is determined to be the information bit according to the control key of the first communication end, in step S205, first, a transmission coding information quantum state is generated according to the basis vector modulation key of the first communication end; then, the codeword to be transmitted is encoded into the transmission coding information quantum state, so as to send the codeword to be transmitted to the second communication end through the transmission coding information quantum state.
[0109] In some embodiments, the first communication end quantum random number also includes the first communication end second quantum random number and the first communication end third quantum random number.
[0110] It should be noted here that the first quantum random number of the first communication end, the second quantum random number of the first communication end, and the third quantum random number of the first communication end can be generated simultaneously by the quantum random number generator of the first communication end, or can be generated in batches, and no specific limitation is made here.
[0111] In some other embodiments, when it is determined according to the first communication terminal control key that the bit type currently to be transmitted is a detection bit, Figure 2 The illustrated method further includes:
[0112] Generating a transmission detection information quantum state using a second quantum random number of the first communication end;
[0113] Generating and sending a detection bit using a third quantum random number at the first communication end;
[0114] The sending detection bit is encoded into the transmission detection information quantum state, so as to send the sending detection bit to the second communication end through the transmission detection information quantum state.
[0115] In some embodiments, when using the second quantum random number of the first communication end to generate a transmission detection information quantum state, first, the second quantum random number of the first communication end is used to determine a transmission code basis vector; then, the transmission detection information quantum state is generated using the transmission code basis vector.
[0116] according to Figure 2In the illustrated embodiment, the first communication end encrypts and forward encodes the message to be transmitted to obtain the codeword, thereby improving the security of quantum communication. Because the entire process does not require the publication of the mask sequence over the classical channel, classical channel resources are conserved.
[0117] Figure 3 A flow chart of another communication method for a quantum communication system according to an exemplary embodiment of the present application is shown. According to an embodiment of the present application, the quantum communication system includes a first communication end and a second communication end, wherein the communication method is used for the second communication end.
[0118] In some embodiments, the second communication end is configured with a second communication end security key, and the second communication end security key includes a second communication end basis vector modulation key, a second communication end encryption key and a second communication end mask key.
[0119] like Figure 3 The communication method shown includes steps S301 , S303 , S305 and S309 .
[0120] In step S301, a quantum state sent by a first communication terminal is received.
[0121] In step S303, the quantum state is measured using the second communication terminal basis vector modulation key to obtain a transmission codeword and a corresponding timing position.
[0122] In a specific embodiment, the timing position is determined according to a trigger position when the quantum state is measured.
[0123] According to an embodiment of the present application, the second communication terminal security key also includes a second communication terminal control key.
[0124] In some embodiments, before step S305, Figure 3 The communication method shown also requires determining the bit type of quantum state transmission based on the second communication end control key. Wherein, the bit type includes information bit and detection bit. In the case where the bit type of quantum state transmission is information bit, step S305 is executed.
[0125] In some other embodiments, before step S305, the second communication end and the first communication end also need to establish a mutually authenticated security key through a post-quantum cryptographic key encapsulation mechanism.
[0126] In some embodiments, the second communication end generates a second communication end quantum random number using a second communication end quantum random number generator, wherein the second communication end quantum random number includes the second communication end first quantum random number. The second communication end uses the second communication end first quantum random number to establish a mutually authenticated security key with the first communication end based on a post-quantum cryptographic key encapsulation mechanism.
[0127] In step S305, the transmission codeword is decoded using the second communication end mask key according to the timing position to obtain the ciphertext codeword.
[0128] According to an embodiment of the present application, in step S307, the second communication end first performs a demasking operation on the transmission codeword using the second communication end mask key according to the timing position to obtain a demasked codeword; then, an error correction and loss-resistant decoding operation is performed on the demasked codeword to obtain a ciphertext codeword.
[0129] In step S307, the second communication end encryption key is used to decrypt the ciphertext codeword to obtain the transmission information.
[0130] According to an embodiment of the present application, the second communication end quantum random number includes a second communication end second quantum random number, the quantum state includes a transmission detection information quantum state, and when the bit type of the quantum state transmission is a detection bit, Figure 3 The communication method shown also requires the following steps:
[0131] First, the quantum state of the transmitted detection information is detected to obtain the received detection bit and the corresponding timing position;
[0132] Then, receiving the second quantum random number of the first communication end sent by the first communication end and sending a detection bit;
[0133] Then, using the time sequence position, a basis vector comparison is performed on the second quantum random number of the first communication end and the second quantum random number of the second communication end to obtain the same bit position of the basis vector;
[0134] Finally, the received detection bit and the transmitted detection bit are compared according to the same bit position of the basis vector to evaluate the quantum information channel between the first communication end and the second communication end, for example, to calculate the quantum bit error rate and / or reception rate.
[0135] according to Figure 3 In the illustrated embodiment, the second communication end obtains a transmission message by performing operations such as detection, decoding, and decryption on the quantum state sent by the first communication end, thereby achieving secure information transmission in the quantum channel.
[0136] Figure 4a A schematic diagram of a communication process for a quantum communication system according to an exemplary embodiment of the present application is shown. Figure 4b A flow chart of a communication process for a quantum communication system according to an exemplary embodiment of the present application is shown. Figure 4a ,right Figure 4b The implementation process is described in detail.
[0137] like Figure 4aThe quantum communication system shown includes a first communication terminal Alice and a second communication terminal Bob.
[0138] like Figure 4b The method shown includes steps S401 , S403 , S405 , S407 and S409 .
[0139] In step S401, Alice and Bob establish a mutually authenticated security key through quantum random numbers and post-quantum cryptographic key encapsulation mechanism.
[0140] According to an embodiment of the present application, the first communication end Alice generates a first communication end quantum random number using the first communication end quantum random number generator R qa (including the first quantum random number of the first communication end R qa1, the second quantum random number of the first communication end R qa2 and the third quantum random number of the first communication end R qa3). The second communication end Bob uses the second communication end quantum random number generator to generate the second communication end quantum random number R qb (including the first quantum random number of the second communication end R qb1 and the second quantum random number of the second communication end R qb2).
[0141] like Figure 4a As shown, Alice and Bob each use their own quantum random number generator to generate the first communication end quantum random number R qa = ( R qa1|| R qa2|| R qa3) and the second communication end quantum random number R qb = ( R qb1|| R qb2); where R qa1 and R qb1 is used for post-quantum cryptographic key encapsulation, such as the NIST standard algorithm ML-KEM (FIPS 203).
[0142] It should be noted here that the first quantum random number of the first communication terminal R qa1, the second quantum random number of the first communication end R qa2 and the third quantum random number of the first communication end R Qa3 can be generated simultaneously, can be generated multiple times, or can generate new random numbers when needed, which is not specifically limited here. The first quantum random number of the second communication end R qb1 and the second quantum random number of the second communication end R The generation method of qb2 is as follows: the first quantum random number of the first communication endR qa1, the second quantum random number of the first communication end R qa2 and the third quantum random number of the first communication end R qa3, no more details.
[0143] According to an embodiment of the present application, the first communication end Alice generates a first communication end static public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism. The first communication end static public-private key pair ( pk 1, sk 1) including the first communication end static public key and the first communication end static private key; the second communication end Bob uses the key generation algorithm of the post-quantum cryptographic key encapsulation mechanism to generate the second communication end static public and private key pair ( pk 2, sk 2) Afterwards, the first communication end Alice will use the first communication end static public key pk 1 is sent to the second communication end, and the static public key of the second communication end sent by the second communication end is received pk 2. The second communication end Bob receives the first communication end static public key sent by the first communication end pk 1.
[0144] like Figure 4a As shown, Alice and Bob respectively use the ML-KEM (Lattice Based Key Encapsulation Mechanism, called the lattice-based key encapsulation mechanism) key generation algorithm KeyGen() to generate the first communication end static public and private key pair ( pk 1, sk 1) Static public-private key pair of the second communication end ( pk 2, sk 2) Both parties send the static public key of the first communication end through the classic channel pk 1 and the static public key of the second communication end pk 2. Make both parties know each other's public key in the static key;
[0145] According to an embodiment of the present application, the first communication end Alice generates a first communication end dynamic public-private key pair ( pk , sk ), the first communication end dynamic public-private key pair ( pk , sk ) includes the first communication end dynamic public key pk and the first communication end dynamic private key sk Alice at the first communication end uses the static public key of the second communication end pk 2 and the first quantum random number of the first communication end are key-encapsulated to generate the first ciphertext c 2 and the first key K 2, and the first ciphertextc 2 and the first communication end dynamic public key pk Send to the second communication end Bob.
[0146] As shown in Figure 4, Alice uses the ML-KEM key generation algorithm KeyGen() to dynamically generate the first communication end dynamic public and private key pair ( pk , sk ), using the static public key of the second communication end sent by Bob pk 2 and the first quantum random number of the first communication end R qa1 uses the key encapsulation algorithm Encaps( pk 2) Perform key encapsulation to generate the corresponding first ciphertext c 2 and the first key K 2, recorded as ( c 2, K 2) Then the first communication end dynamic public key pk and the first ciphertext c 2 is sent to Bob.
[0147] According to an embodiment of the present application, the second communication end Bob receives the first ciphertext sent by the first communication end c 2 and the first communication end dynamic public key pk , using the dynamic public key of the first communication end pk Perform key encapsulation with the first quantum random number of the second communication end to generate a second ciphertext c and the second key K , using the static public key of the first communication end pk 1 and the first quantum random number of the second communication end are key encapsulated to generate the third ciphertext c 1 and the third key K 1. Use the static private key of the second communication end sk 2 pairs of first ciphertext c 2. Decapsulate and obtain the first decapsulation key K 2', and the second ciphertext c and the third ciphertext c 1 is sent to the first communication end.
[0148] like Figure 4a As shown, Bob uses the dynamic public key of Alice's first communication end received pk and the first quantum random number of the second communication end R qb1 uses the key encapsulation algorithm Encaps( pk ) Perform key encapsulation to generate the corresponding second ciphertext c and the second key K , recorded as ( c , K ); using Alice's first communication end static public key pk 1 and the first quantum random number of the second communication end R qb1 uses the key encapsulation algorithm Encaps( pk 1) Generate the corresponding third ciphertext c 1 and the third key K 1, recorded as ( c 1, K 1); Using the static private key of the second communication end sk 2 pairs of first ciphertext received c 2Decaps( sk 2, c 2) Get the first decapsulation key K 2'; then the second ciphertext c and the third ciphertext c 1 is sent to Alice.
[0149] According to an embodiment of the present application, the first communication terminal Alice receives the second ciphertext sent from the second communication terminal c and the third ciphertext c 1. Alice, the first communication end, uses the first communication end dynamic private key sk For the second ciphertext c Decapsulate and obtain the second decapsulation key K’ Alice, the first communication end, uses the static private key of the first communication end sk 1 pair of third ciphertext c 1 Decapsulate to obtain the third decapsulation key K 1'.
[0150] like Figure 4a As shown, Alice uses the dynamic private key of the first communication terminal sk For the second ciphertext received c Decaps( sk , c ), get the second decapsulation key K’ ; Using the static private key of the first communication terminal sk 1 pair of received third ciphertext c 1Decaps( sk 1, c 1) Get the third decapsulation key K 1'.
[0151] Finally, the first communication end Alice decapsulates the second key K’ , the third decapsulation key K 1' and the first key K 2 performs hash calculation to obtain the first communication end security key. The second communication end Bob calculates the second key K , the third key K1 and the first decapsulation key K 2' performs hash calculation to obtain the second communication terminal security key.
[0152] like Figure 4a As shown, the first communication end Alice performs hash calculation on the key in her hand to obtain the first communication end security key key1:= H( K’ , K 1 ’ , K 2); Similarly, Bob obtains the second communication end security key key2:= H( K , K 1, K 2 ’ ).
[0153] At this point, both parties have completed the establishment of a two-way authentication security key, and have added the first communication end security key and the second communication end security key to their respective key pools. k e Control Key k c , basis vector modulation key k i and mask key k s .
[0154] In step S403, Alice uses the encryption key to encrypt the information to obtain ciphertext.
[0155] like Figure 4a As shown, Alice extracts the plaintext to be transmitted from her key pool m Equal-length encryption keys k e , and uses a one-time pad mechanism to use encryption keys k e Treating plain text m Encrypt to obtain the transmission ciphertext c m .
[0156] In step S405, Alice forward encodes the ciphertext to obtain a ciphertext codeword.
[0157] like Figure 4a As shown, Alice transmits the ciphertext c m Perform forward error correction coding and spread spectrum to obtain the ciphertext codeword c m1 , then Alice and Bob extract the mask key of a specific length, such as 256 bits, from the corresponding position in their respective key pools k s, as a seed for a pseudo-random function such as SHAKE256 (FIPS PUB 202), which generates a random number sequence through a pseudo-random function , and with the ciphertext codeword c m1 XOR ( r ⊕ c m1 ) , after masking, the codeword to be transmitted is obtained c m2 .
[0158] In step S407, Alice and Bob use quantum states to transmit information bits as ciphertext codewords and randomly modulate the detection bits as quantum states.
[0159] like Figure 4a As shown, Alice and Bob extract the corresponding control key from their respective key pools. k c , and agreed to k c The value determines whether the current bit is an information bit or a detection bit, such as k c = 1 is the information bit, k c = 0 is the detection bit.
[0160] For information bits ( k c = 1), Alice and Bob extract the corresponding basis vector modulation key from their respective key pools k i , and agreed to k i The value determines the preparation / measurement basis of the current information bit, such as k i = 0 selects Z basis Prepare / measure quantum states, k i = 1 selects X basis Prepare / measure quantum states; Alice selects a coding method, such as polarization coding, phase coding, or timestamp coding, to encode the codeword to be transmitted onto the information bit quantum state. For example, horizontal polarization states and +45° polarization states encode bit 0, while vertical polarization states and -45° polarization states encode bit 1.
[0161] For the detection bit ( k c = 0), Alice uses its quantum random number sequence (the second quantum random number of the first communication end R qa2|| The third quantum random number of the first communication end Rqa3) Randomly select and prepare basis vectors and generate quantum states, that is, according to the second quantum random number of the first communication end R qa2 selects the preparation basis vector, such as R When qa2=0, choose Z basis to prepare quantum state. R When qa2=1, select X basis to generate quantum state; according to the third quantum random number of the first communication end R qa3 randomly generates bits 0 or 1.
[0162] Alice uses quantum state transmission technology to transmit all bits to be transmitted, including information bits and detection bits.
[0163] In step S409, Bob decodes the received information bit ciphertext codeword to obtain the ciphertext, and compares the detection bit quantum bit error rate to evaluate the channel parameters.
[0164] like Figure 4a As shown, Bob controls the key according to the rules agreed upon with Alice. k c The value determines whether the corresponding bit is an information bit or a detection bit;
[0165] For the information bit, Bob modulates the key according to the basis vector k i Select the measurement basis (Z basis or X basis), measure the quantum state received from Alice, and record the measurement results c’ m2 When there is a measurement result, it is recorded as a trigger bit; when no photon is detected, it is recorded as a non-trigger bit. The non-trigger bit is due to channel loss, the photon does not reach Bob's end or the detector at Bob's end does not respond to the received photon. Bob determines the timing position based on the trigger result of the information bit, and the random number sequence generated in step S405 is generated. r Extract the corresponding random number r’ , and the information bit quantum state measurement results c’ m2 XOR ( r’ ⊕ c’ m2 ), after demasking, the ciphertext codeword is obtained c’ m1 ; For ciphertext codewords c’ m1 Perform despread spectrum and forward error correction decoding to obtain the decoded ciphertext c m .
[0166] For the detection bit, Bob uses his quantum random number sequence R qb2 Randomly select a measurement basis (Z basis or X basis), measure the quantum state received from Alice, and record the measurement results Rb3 .
[0167] Bob announces the timing position of the detection bit with the trigger result, and Alice and Bob compare the basis vectors of the triggered detection bit ( R’ qa2 , R’ qb2 ),in, R’ qa2 That is, the second quantum random number from the first communication end is obtained according to the detection bit timing position R The corresponding position in qa2 is screened and obtained. R’ qb2 That is, the second quantum random number from the second communication end is obtained according to the timing position of the detection bit. R qb2 Then, according to ( R’ qa2 , R’ qb2 ) The preparation basis vector and the measurement basis vector are determined to be the same in the comparison time sequence position, and the comparison R’ qa3 and R’ b3 , statistics of quantum bit error rate, reception rate and other parameters. Parameter evaluation is used to dynamically and accurately adjust error correction and loss-resistant coding parameters, improve coding efficiency, and monitor quantum channel security in real time. R’ qa3 That is, according to the timing position of the comparison detection bit, R qa3 The corresponding position in is filtered and obtained. R’ b3 That is, according to the timing position of the comparison detection bit, R b3 The corresponding position in is filtered out.
[0168] It should be noted that when evaluating the channel, Figure 4a Taking Bob's end as an example, in a specific embodiment, it can be completed on Alice's end, or on Bob's end, or on another third end. Figure 4a The implementation shown should not be considered as a limitation of the present application.
[0169] In step S411, Bob uses the key to decrypt and obtain the plaintext information.
[0170] like Figure 4a As shown, Bob extracts the encryption key corresponding to Alice's encryption key from his key pool k e , to decode the ciphertext c mDecrypt to get plaintext information m .
[0171] According to the embodiments of the present application, quantum random numbers and a post-quantum cryptographic key encapsulation mechanism are used to implement mutually authenticated key exchange between legitimate communicating parties, establish a secure key, and then use a one-time pad mechanism to encrypt information to obtain ciphertext, which is encoded into a quantum state for secure transmission. This application utilizes a post-quantum cryptographic key encapsulation mechanism to improve key establishment efficiency, eliminating the need to reuse one-time pad encryption key resources and eliminating the security risks associated with key resource reuse. In addition, a masking mechanism is used to encode and decode information bit ciphertexts, eliminating the need for Alice and Bob to publish masked random sequences over classical channels, saving classical communication channel resource overhead.
[0172] Compared to classical communication, this application achieves reliable communication through quantum state transmission combined with error-correcting and loss-resistant coding. The post-quantum cryptographic key encapsulation mechanism provides computational security. The method of generating and measuring quantum states can monitor the channel's quantum bit error rate in real time online, evaluate channel parameter changes in real time, and have eavesdropping perception capabilities. In addition, this application transmits ciphertext encrypted by a one-time pad mechanism, which can reduce the requirements for channel quantum bit error rate in secure communication compared to transmitting plaintext, thereby improving the channel's security capacity. It is also highly compatible with the classical secure relay network architecture and does not require additional source encryption.
[0173] Figure 5 An electronic device according to an exemplary embodiment of the present application is shown. Figure 5 hereinafter, an electronic device 200 according to this embodiment of the present application is described. Figure 5 The electronic device 200 shown is merely an example and should not limit the functions and scope of use of the embodiments of the present application.
[0174] like Figure 5 As shown, electronic device 200 is implemented as a general-purpose computing device. Components of electronic device 200 may include, but are not limited to, at least one processing unit 210, at least one storage unit 220, a bus 230 connecting various system components (including storage unit 220 and processing unit 210), and a display unit 240.
[0175] The storage unit stores program codes, which can be executed by the processing unit 210, so that the processing unit 210 executes the methods described in this specification according to various exemplary embodiments of the present application. For example, the processing unit 210 can execute the following Figure 1 The method shown in .
[0176] The storage unit 220 may include a readable medium in the form of a volatile storage unit, such as a random access memory unit (RAM) 2201 and / or a cache memory unit 2202 , and may further include a read-only memory unit (ROM) 2203 .
[0177] The storage unit 220 may also include a program / utility 2204 having a set (at least one) of program modules 2205, such program modules 2205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.
[0178] Bus 230 may represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.
[0179] The electronic device 200 can also communicate with one or more external devices 300 (e.g., a keyboard, pointing device, Bluetooth device, etc.), one or more devices that enable a user to interact with the electronic device 200, and / or any device that enables the electronic device 200 to communicate with one or more other computing devices (e.g., a router, modem, etc.). This communication can occur via an input / output (I / O) interface 250. Furthermore, the electronic device 200 can communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network such as the Internet) via a network adapter 260. The network adapter 260 can communicate with other modules of the electronic device 200 via the bus 230. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with the electronic device 200, including but not limited to microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.
[0180] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the example embodiments described herein can be implemented by software or by combining software with necessary hardware. The technical solution according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, or a network device, etc.) to execute the above-mentioned method according to the embodiments of the present application.
[0181] The software product may utilize any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or component, or any combination thereof. More specific examples (a non-exhaustive list) of readable storage media include: an electrical connection having one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.
[0182] Computer-readable storage media may include a data signal propagated in baseband or as part of a carrier wave, which carries readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. The readable storage medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device. The program code contained on the readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.
[0183] The program code used to perform the operations of the present application can be written in any combination of one or more programming languages, including object-oriented programming languages such as Java, C++, and conventional procedural programming languages such as "C" or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, as a stand-alone software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (e.g., via the Internet using an Internet service provider).
[0184] The computer-readable medium carries one or more programs. When the one or more programs are executed by the device, the computer-readable medium implements the aforementioned functions.
[0185] Those skilled in the art will appreciate that the modules described above can be distributed in the device according to the description of the embodiment, or can be modified accordingly to be used in one or more devices that are different from the embodiment. The modules of the above embodiment can be combined into one module or further divided into multiple submodules.
[0186] According to an embodiment of the present application, a computer program is provided, including a computer program or instructions. When the computer program or instructions are executed by a processor, the method described above can be executed.
[0187] The embodiments of the present application are described in detail above. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only intended to help understand the method and core ideas of the present application. At the same time, changes or modifications made by those skilled in the art based on the ideas of the present application, the specific implementation methods, and the scope of application of the present application, all fall within the scope of protection of the present application. In summary, the contents of this specification should not be construed as limiting the present application.
Claims
1. A communication method for a quantum communication system, characterized in that: The quantum communication system includes a first communication terminal and a second communication terminal, wherein the first communication terminal is configured with a first communication terminal security key, the first communication terminal security key includes a first communication terminal encryption key and a first communication terminal mask key, and the communication method is used for the first communication terminal, and the communication method includes: Encrypting the information to be transmitted using the first communication end encryption key to obtain an encrypted ciphertext; forward encoding the encrypted ciphertext using the first communication end mask key to obtain a codeword to be transmitted; encoding the codeword to be transmitted into a quantum state, so as to send the codeword to be transmitted to the second communication end through the quantum state; Before encrypting the information to be transmitted using the first communication end encryption key to obtain the encrypted ciphertext, the method further includes: Generating a first communication end quantum random number using a first communication end quantum random number generator, wherein the first communication end quantum random number includes a first communication end first quantum random number; Generate a first communication terminal static public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism, where the first communication terminal static public-private key pair includes a first communication terminal static public key and a first communication terminal static private key; Sending the static public key of the first communication end to the second communication end; receiving a second communication peer static public key from the second communication peer; Generate a first communication terminal dynamic public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism, wherein the first communication terminal dynamic public-private key pair includes a first communication terminal dynamic public key and a first communication terminal dynamic private key; Performing key encapsulation using the first quantum random number of the first communication end and the static public key of the second communication end to generate a first ciphertext and a first key; Sending the first ciphertext and the first communication end dynamic public key to the second communication end; receiving a second ciphertext and a third ciphertext from the second communication end; Decapsulating the second ciphertext using the first communication end dynamic private key to obtain a second decapsulation key; Decapsulating the third ciphertext using the static private key of the first communication end to obtain a third decapsulation key; Perform a hash calculation on the second decapsulation key, the third decapsulation key, and the first key to obtain the first communication end security key.
2. The communication method according to claim 1, wherein: Forward encoding the encrypted ciphertext using the first communication end mask key to obtain a codeword to be transmitted, including: performing an error correction and loss-resistant encoding operation on the encrypted ciphertext to obtain an encoded ciphertext; The encoded ciphertext is masked using the first communication end mask key to obtain the codeword to be transmitted.
3. The communication method according to claim 2, wherein: The first communication terminal security key also includes a first communication terminal control key, Before encoding the codeword to be transmitted into a quantum state to send the codeword to be transmitted to the second communication end through the quantum state, the communication method further includes: The bit type to be transmitted is determined according to the first communication terminal control key, where the bit type includes an information bit and a detection bit.
4. The communication method according to claim 3, wherein: The first communication end security key further includes a first communication end basis vector modulation key, wherein encoding the codeword to be transmitted onto a quantum state so as to send the codeword to be transmitted to the second communication end via the quantum state comprises: When it is determined according to the first communication end control key that the bit type currently to be transmitted is the information bit, generating a transmission coded information quantum state according to the first communication end basis vector modulation key; The codeword to be transmitted is encoded into the transmission coding information quantum state, so as to send the codeword to be transmitted to the second communication end through the transmission coding information quantum state.
5. The communication method according to claim 3, wherein: The first communication end quantum random number further includes a first communication end second quantum random number and a first communication end third quantum random number, and the communication method further includes: When it is determined according to the control key of the first communication terminal that the type of the bit to be transmitted is a detection bit, using the second quantum random number of the first communication terminal to generate a quantum state of transmission detection information; Generating and sending a detection bit using a third quantum random number of the first communication end; The sending detection bit is encoded into the transmission detection information quantum state, so as to send the sending detection bit to the second communication end through the transmission detection information quantum state. The communication method according to claim 5 , wherein: When it is determined according to the first communication end control key that the type of the bit to be transmitted is a detection bit, using the first communication end second quantum random number to generate a transmission detection information quantum state includes: Determining a transmission code basis vector using the second quantum random number of the first communication end; The transmission detection information quantum state is generated using the transmission code basis vector.
7. The communication method according to claim 2, wherein: Performing a masking operation on the encoded ciphertext using the first communication end masking key to obtain a codeword to be transmitted, comprising: Generate a masked random number sequence according to the first communication terminal mask key; An exclusive OR operation is performed on the encoded ciphertext using the masked random number sequence to obtain the codeword to be transmitted.
8. A communication method for a quantum communication system, characterized in that: The quantum communication system includes a first communication terminal and a second communication terminal, wherein the second communication terminal is configured with a second communication terminal security key, the second communication terminal security key includes a second communication terminal basis vector modulation key, a second communication terminal encryption key, and a second communication terminal mask key, and the communication method is used for the second communication terminal, and the communication method includes: receiving the quantum state sent by the first communication end; Measuring the quantum state using the second communication end basis vector modulation key to obtain a transmission codeword and a corresponding timing position; Decoding the transmission codeword using the second communication end mask key according to the timing position to obtain a ciphertext codeword; Decrypting the ciphertext codeword using the second communication end encryption key to obtain transmission information; Before measuring the quantum state using the second communication end basis vector modulation key to obtain a transmission codeword and a corresponding timing position, the communication method further includes: Generating a second communication end quantum random number using a second communication end quantum random number generator, wherein the second communication end quantum random number includes the second communication end first quantum random number; Generate a second communication terminal static public-private key pair using a key generation algorithm of a post-quantum cryptographic key encapsulation mechanism, where the second communication terminal static public-private key pair includes the second communication terminal static public key and the second communication terminal static private key; Sending the second communication end static public key to the first communication end; Receiving a static public key of the first communication end sent by the first communication end; Receiving a first ciphertext and a first communication terminal dynamic public key sent by the first communication terminal; Performing key encapsulation using the first quantum random number of the second communication end and the dynamic public key of the first communication end to generate a second ciphertext and a second key; Performing key encapsulation using the first quantum random number of the second communication end and the static public key of the first communication end to generate a third ciphertext and a third key; Decapsulating the first ciphertext using the second communication end static private key to obtain a first decapsulation key; Sending the second ciphertext and the third ciphertext to the first communication end; Perform a hash calculation on the second key, the third key, and the first decapsulation key to obtain the second communication terminal security key.
9. The communication method according to claim 8, wherein: Decoding the transmission codeword using the second communication end mask key according to the timing position to obtain a ciphertext codeword includes: performing a demasking operation on the transmission codeword using the second communication end masking key according to the timing position to obtain a demasked codeword; An error correction and loss-resistant decoding operation is performed on the demasked codeword to obtain a ciphertext codeword.
10. The communication method according to claim 9, wherein: The second communication end security key also includes a second communication end control key, and before using the second communication end basis vector modulation key to measure the quantum state to obtain the transmission codeword and the corresponding timing position, it also includes: The bit type of the quantum state transmission is determined according to the second communication terminal control key, and the bit type includes an information bit and a detection bit.
11. The communication method according to claim 10, wherein: The second communication end quantum random number includes a second communication end second quantum random number, the quantum state includes a transmission detection information quantum state, and the communication method further includes: When it is determined according to the second communication terminal control key that the type of the bit currently to be transmitted is a detection bit, detecting the quantum state of the transmission detection information to obtain a received detection bit and a corresponding timing position; receiving a second quantum random number of the first communication end and sending a detection bit sent by the first communication end; Performing a basis vector comparison on the second quantum random number of the first communication end and the second quantum random number of the second communication end using the time sequence position to obtain bit positions with the same basis vector; The received detection bit and the transmitted detection bit are compared according to the same bit position of the basis vector to perform parameter evaluation on the quantum information channel between the first communication end and the second communication end.
12. An electronic device, characterized in that: The invention comprises a memory and a processor; wherein the memory stores one or more computer instructions, wherein the one or more computer instructions, when executed by the processor, implement the communication method according to any one of claims 1 to 11.
13. A computer-readable storage medium, characterized in that A computer program is stored thereon, and when the computer program is executed, the communication method according to any one of claims 1 to 11 is implemented.
Citation Information
Patent Citations
Quantum direct communication method, device, equipment and system based on single-path transmission
CN114244507A