Casual quantum transmission method and system, and electronic equipment

Abstract

The invention relates to the field of quantum information communication security, and discloses a quantum inadvertent transmission method and system, and electronic equipment. The method comprises: transmitting first quantum data to a first application end, generating first communication data at the first application end by using the first quantum data based on a QOT protocol, and generating second communication data at a first access node by using second quantum data, the first quantum data and the second quantum data being prepared in the first access node, and the second quantum data being prepared in the second access node. The second quantum data is obtained by measuring the first quantum data; and transmitting the second communication data to a second access node based on the quantum network, thereby enabling the second access node to transmit the second communication data to a second application end, and enabling the first application end and the second application end to achieve the casual transmission of the quantum through employing the first communication data and the second communication data. By means of the method, the two QOT devices have the capacity of providing an inadvertent transmission interface to the outside, and both can initiate bidirectional quantum inadvertent transmission.

Description

Technical Field

[0001] The present application relates to the field of quantum information communication security, and in particular to a quantum oblivious transmission method, system, and electronic device. Background Art

[0002] In the 1980s, renowned Chinese computer scientist and Turing Award winner Yao Qizhi proposed the Yao Millionaire's Problem, marking the beginning of modern secure multi-party computation. This problem involves two millionaires trying to compare their wealth without revealing their specific holdings. The problem was subsequently generalized to the computation of arbitrary functions and multiple parties, a concept known as secure multiparty computation (MPC). This involves computing the overall result of n participants' private inputs without revealing any other information about the private inputs.

[0003] Secure multi-party computation protocols generally consist of oblivious transfer (OT) and garbled circuits (GC). Oblivious transfer protocols in secure multi-party computation have long been believed to rely on assumptions such as discrete logarithms on elliptic curves, encoding, and lattice cryptography, and cannot be constructed solely using one-way hash functions or symmetric encryption. However, recent research has shown that in the quantum world, oblivious transfer can be constructed with only one-way functions. By instantiating the one-way function in the protocol with a hash function, naturally quantum-resistant oblivious transfer can be obtained, making this type of secure multi-party computation using quantum information inherently quantum-resistant. Research on secure multi-party computation / oblivious transfer based on quantum information is not only a cutting-edge topic in cryptography, but also adds a new class of applications to the quantum information industry.

[0004] The inventors have discovered that there are at least the following problems in the relevant technology: the research progress of quantum oblivious transfer (QOT) technology has completed the protocol process between two QOT transmission devices directly connected by optical fiber, but it has a very obvious centralized feature and can only perform one-way QOT transmission, and the QOT transmission device can only provide an oblivious transfer interface to the outside world. Summary of the Invention

[0005] The purpose of the embodiments of the present application is to provide a quantum oblivious transmission method, system, and electronic device to ensure that any two QOT transmission devices have the ability to provide an oblivious transmission interface to the outside world, and support either user to initiate a quantum oblivious transmission operation.

[0006] To solve the above technical problems, an embodiment of the present application provides a quantum oblivious transmission method, which is applied to a first access node. The method includes: transmitting first quantum data to a first application end, generating first communication data using the first quantum data at the first application end based on a QOT protocol, and generating second communication data using second quantum data at the first access node, wherein the first quantum data and the second quantum data are prepared in the first access node, and the second quantum data is obtained by measuring the first quantum data; transmitting the second communication data to the second access node based on a quantum network, so that the second access node transmits the second communication data to the second application end, and the first application end and the second application end respectively use the first communication data and the second communication data to realize quantum oblivious transmission.

[0007] An embodiment of the present application also provides a quantum oblivious transmission method, which is applied to a first application end, the method comprising: obtaining first quantum data sent by a first access node, generating first communication data using the first quantum data at the first application end based on a QOT protocol, and generating second communication data using second quantum data at the first access node, wherein the first quantum data and the second quantum data are prepared in the first access node; the first application end and the second application end respectively implement quantum oblivious transmission using the first communication data and the second communication data, wherein the second communication data is transmitted from the first access node to the second application end.

[0008] An embodiment of the present application also provides a quantum oblivious transmission system, comprising: a first access node, configured to execute the above-mentioned quantum oblivious transmission method; a first application terminal, connected to the first access node, configured to execute the above-mentioned quantum oblivious transmission method; a second access node, connected to the first access node and the second application terminal respectively, configured to transmit second communication data generated by the first access node to the second application terminal; a second application terminal, connected to the second access node, configured to receive second communication data forwarded by the second access node, and to realize quantum oblivious transmission with the first application terminal using the second communication data, wherein the first quantum data and the second quantum data are prepared in the first access node; and a quantum network, connected to the first access node and the second access node at the same time, configured to transmit the second communication data from the first access node to the second access node in a relay manner.

[0009] Compared with the related art, the core logic of the present application is to achieve secure transmission through the preparation and interaction of quantum data. Specifically, the first access node needs to first transmit the first quantum data it has prepared to the first application end, and at the same time, it uses the second quantum data to generate the second communication data. The first application end generates the first communication data based on the QOT protocol and the received first quantum data. In this process, both sets of quantum data are prepared at the first access node, and the two sets of communication data are prepared in different devices, forming a dual-track data processing path, avoiding the risk of information leakage of a single data path; Subsequently, the first access node transmits the second communication data to the second access node through the quantum network, and the latter forwards it to the second application end, so that the two end application ends hold the first communication data and the second communication data respectively, and finally realize quantum inadvertent transmission through these two sets of data. Through the above process, the prepared communication data can be used between the two end application ends for inadvertent transmission, reducing the dependence on quantum resources, so that any application end (i.e., QOT device) can be used as a center to improve the system integration and make it easier to adapt to the access needs of different users. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] One or more embodiments are exemplarily illustrated by pictures in the corresponding drawings. These exemplifications do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings are represented as similar elements. Unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0011] Figure 1 This is a QOT networking framework diagram based on a quantum network provided by an embodiment of the present application;

[0012] Figure 2 1 is a schematic structural diagram of a quantum inadvertent transmission system provided by another embodiment of the present application;

[0013] Figure 3 1 is a schematic diagram of a QOT access node and QOT application access in a quantum oblivious transfer system provided by another embodiment of the present application;

[0014] Figure 4 is a flowchart of a quantum oblivious transfer method applied to a first access node provided by another embodiment of the present application;

[0015] Figure 5 is a flowchart of a communication data generation process involved in a quantum oblivious transfer method provided in another embodiment of the present application;

[0016] Figure 6 This is a flowchart of a quantum key pool generation process involved in a quantum oblivious transfer method provided in another embodiment of the present application;

[0017] Figure 7 This is a flowchart of key generation on the application side involved in the quantum oblivious transfer method provided in another embodiment of the present application;

[0018] Figure 8 is a flowchart of a quantum oblivious transfer method applied to a first application end provided by another embodiment of the present application;

[0019] Figure 9 It is a structural diagram of an electronic device provided in another embodiment of the present application. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, each embodiment of the present application will be described in detail below with reference to the accompanying drawings. However, it will be understood by those skilled in the art that in each embodiment of the present application, many technical details are provided to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical solutions claimed in the present application can be implemented. The division of the following embodiments is for convenience of description and should not constitute any limitation on the specific implementation of the present application. The various embodiments can be combined and referenced with each other under the premise that there is no contradiction.

[0021] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0022] Research progress in quantum oblivious transmission (QOT) technology has completed the protocol process between two QOT transmission devices directly connected by optical fiber, but it has a very obvious centralized characteristic: if any QOT transmission device is to be used as a center, at least one set of hardware equipment for implementing quantum oblivious transmission needs to be redeployed, which is relatively costly. In addition, QOT transmission devices can only provide an oblivious transmission interface to the outside world, and cannot provide a symmetric quantum key acquisition interface. This cannot meet the needs of scenarios where upper-layer services require symmetric keys.

[0023] For the above questions, please refer to Figure 1 , Figure 1The figure shows a QOT (quantum oblivious transmission) networking framework based on a quantum network. The framework includes the quantum oblivious transmission system proposed in the embodiment of the present application, that is, the system is part of the networking framework. The framework includes a QOT application system, which is deployed on the client side. The application is responsible for connecting with the customer's business program and connecting to the QOT access node to access the QOT network. They provide OT service interfaces and symmetric key acquisition interfaces for implementing quantum oblivious transmission services and obtaining symmetric keys, meeting the privacy protection and security encryption requirements of customer services in data interaction. The QOT access node system is a logical node that supports QOT application access and connection with the quantum network. The system acts as a bridge connecting QOT applications and the quantum network, and is responsible for processing key operations such as quantum key generation and data transmission. The quantum network system provides key relay services and quantum channels, and is the basic network infrastructure of the entire QOT two-way networking solution. It and the QOT access nodes together form the infrastructure, ensuring the secure transmission of data and keys between QOT applications and providing a safe and reliable communication environment for QOT applications. The specific functions of these devices and components will be explained in detail in subsequent embodiments and will not be repeated here.

[0024] See also Figure 2 As shown, it can be seen Figure 2 for Figure 1 Interception of some devices in the middle. Figure 2 A structural schematic diagram of a quantum oblivious transmission system related to another embodiment of the present application is given, including the connection relationship between a QOT application, a QOT access node connection, and a quantum network, and the quantum oblivious transmission system at least includes: a first access node, used to execute the quantum oblivious transmission method as described above; a first application end, connected to the first access node, used to execute the quantum oblivious transmission method as described above; a second access node, connected to the first access node and the second application end respectively, used to transmit second communication data generated by the first access node to the second application end; the second application end, connected to the second access node, used to receive the second communication data forwarded by the second access node, and use the second communication data to realize quantum oblivious transmission with the first application end, wherein the first quantum data and the second quantum data are prepared in the first access node; and a quantum network, connected to the first access node and the second access node at the same time, used to transmit the second communication data from the first access node to the second access node in a relay manner.

[0025] Specifically, Figure 2 Two QOT application examples (QOT-1 and QOT-2) are presented in this paper. They are connected to the quantum network through their respective QOT access nodes to realize data interaction and key-related operations. Figure 2QOT-1 and QOT-2 are located at the top of the architecture and are applications deployed on the client side. Each QOT application has two interfaces: OT service interface, which is used to provide quantum oblivious transmission (OT) services to achieve secure data transmission. The receiver can only obtain the information they need, while the sender cannot know the specific content obtained by the receiver; symmetric key acquisition interface: It can be used to provide symmetric keys to external applications. These keys are used to encrypt and decrypt data. QOT access node ( Figure 2 QOT access node 1 and QOT access node 2 serve as bridges between QOT applications and quantum networks. They are logical nodes and are actually composed of multiple devices. Each QOT access node contains the following devices: QOTD-A ( Figure 2 QOTD-A-1, QOTD-A-2) are quantum key and base acquisition devices, whose main function is to prepare and send quantum bits; QOTD-B ( Figure 2 QOTD-B-1 and QOTD-B-2) are also quantum key and base acquisition devices, which are mainly responsible for receiving and measuring quantum bits. By measuring the received quantum bits, relevant key information or quantum state verification can be obtained. KMT ( Figure 2 KMT-1 and KMT-2) are key management terminals with many important functions, including network authentication for QOTD-A and QOTD-B to ensure legal access of devices; receiving connection requests from QOT applications; executing QOT protocols and data processing protocols such as BB84; providing one-time data relay services to ensure the security of data during transmission. The quantum network is at the bottom layer of the architecture and is represented by a cloud-like graphic in the figure. Its main function is to provide key relay services and quantum channels to support data transmission and key exchange between QOT access nodes. It is the basic network facility for the entire system to achieve secure communication. The connection relationship between the components in the system can be: QOT-1 is connected to QOT access node 1, QOT-2 is connected to QOT access node 2, and QOT access node 1 and QOT access node 2 are connected through their respective devices ( Figure 2 The quantum network is composed of two QOT access nodes (QOTD-A, QOTD-B, and KMT) that interact internally and ultimately enable connection and communication between the two QOT access nodes through the quantum network, thereby supporting data interaction and key-related operations between QOT-1 and QOT-2, and realizing functions such as quantum oblivious transmission and the acquisition and use of symmetric keys. Figure 3 The implementation of a single QOT access node and QOT application access is demonstrated. Figure 3 The connection relationship and function of each component in 1. Figure 2 The relevant description has been explained and will not be repeated here.

[0026] Through the above-mentioned method of this application, a QOT (quantum oblivious transmission) networking framework based on a quantum network and a quantum oblivious transmission system are established, thereby enabling a quantum oblivious transmission method to be carried out based on the networking framework or system (this article will elaborate on this in detail later and will not be repeated here), so that any application end (i.e., QOT device) can be used as a center, thereby improving the system integration and making it easier to adapt to the access needs of different users.

[0027] In the current software and hardware operating environment, if any QOT transmission device is to act as a central device, it is necessary to redeploy at least one set of hardware devices that implement quantum oblivious transmission, which makes the implementation cost high. In addition, the QOT transmission device can only provide an oblivious transmission interface to the outside world, and cannot provide a symmetric quantum key acquisition interface, which makes it difficult to meet the application scenarios where upper-layer services require symmetric keys. An embodiment of the present application provides a quantum oblivious transmission method that can be applied to a first access node. The method includes: transmitting first quantum data to a first application end, generating first communication data at the first application end using the first quantum data based on the QOT protocol, and generating second communication data at the first access node using the second quantum data, wherein the first quantum data and the second quantum data are prepared in the first access node, and the second quantum data is obtained by measuring the first quantum data; transmitting the second communication data to the second access node based on the quantum network, so that the second access node transmits the second communication data to the second application end, so that the first application end and the second application end respectively use the first communication data and the second communication data to implement quantum oblivious transmission. The above process at least simplifies the quantum resource dependence of the two application ends, so that any application end (i.e., QOT device) can be used as a center, improving the system integration and making it easier to adapt to the access needs of different users.

[0028] The following is a detailed description of the implementation details of the quantum oblivious transmission method of this embodiment. The following content is only provided for ease of understanding and is not necessary for implementing this solution.

[0029] See also Figure 4 In some embodiments, the quantum inadvertent transmission method of the present application is as follows Figure 4 As shown, the following steps are included:

[0030] In step 401, a first access node transmits first quantum data to a first application terminal, generates first communication data at the first application terminal using the first quantum data based on a QOT protocol, and generates second communication data at the first access node using second quantum data, wherein the first quantum data and the second quantum data are prepared in the first access node, and the second quantum data is obtained by measuring the first quantum data.

[0031] In step 403, the first access node transmits the second communication data to the second access node based on the quantum network, so that the second access node transmits the second communication data to the second application end. The first application end and the second application end respectively use the first communication data and the second communication data to implement quantum oblivious transmission.

[0032] In each step of the above method, the first access node must first transmit the first quantum data it has prepared to the first application end, and at the same time generate the second communication data using the second quantum data. The first application end then generates the first communication data based on the QOT protocol and the received first quantum data. In this process, both sets of quantum data are prepared at the first access node, and the two sets of communication data are prepared in different devices, forming a dual-track data processing path, avoiding the risk of information leakage in a single data path. Subsequently, the first access node transmits the second communication data to the second access node through the quantum network, and the latter forwards it to the second application end, so that the two application ends respectively hold the first communication data and the second communication data, and finally realize quantum inadvertent transmission through these two sets of data. Through the above process, the quantum resource dependence of the two application ends is simplified, so that any application end (i.e., QOT device) can be used as a center, improving the system integration and making it easier to adapt to the access needs of different users.

[0033] Specifically, the first application terminal (hereinafter referred to as QOT-1) in the quantum oblivious transmission method disclosed in the present application is an application deployed on the client side. The number of application terminals is not limited, and it is responsible for connecting with the business programs of external users and connecting with the QOT access node (i.e., the first access node or the second access node of the present application), and accessing the QOT network. The first access node includes two QOTD devices and a KMT device. The QOTD device in the first access node is a transmission device based on a quantum transmission method, a user quantum key and a base acquisition device, and a collaborative participation in the generation process of communication data and quantum keys. One of the QOTD devices can be a quantum oblivious transmission sender hardware device (hereinafter referred to as "QOTD-A-1"), which is used to prepare and send quantum bits, and the other QOTD device corresponds to a quantum oblivious transmission receiver hardware device (hereinafter referred to as "QOTD-B-1"), which is used to receive and measure quantum bits. The KMT device (hereinafter referred to as "KMT-1") is a key management terminal (KMT), which is responsible for authenticating the quantum key and base acquisition devices QOTD-A and QOTD-B, receiving connection requests from QOT device applications, and establishing and maintaining a stable connection with QOT device applications.

[0034] In some embodiments, the generation of first communication data using first quantum data at the first access node based on the QOT protocol in step 401, and the generation of second communication data using second quantum data at the first application end can be achieved as follows: the first QOTD device and the second QOTD device in the first access node prepare the first quantum data and the second quantum data respectively; the first quantum data is sent to the first application end, so that the first application end uses the first quantum data and the KMT device uses the second quantum data to execute the QOT protocol; and after executing the QOT protocol, the first communication data is generated at the first application end, and the second communication data is generated at the KMT device.

[0035] See also Figure 5 , Figure 5 Steps 501 to 508 in FIG. 5 provide a specific process of generating the first communication data at the first application end and generating the second communication data at the KMT device, including the following steps.

[0036] Step 501, QOT-1 applies for rawkey-A: QOT-1 initiates a request to QOTD-A-1 to obtain rawkey-A.

[0037] Step 502, QOTD-A-1 prepares and sends quantum bits: QOTD-A-1 prepares and sends quantum bits, and obtains rawkey-A for itself.

[0038] Step 503, QOTD-B-1 receives and measures the quantum bit: QOTD-B-1 receives the quantum bit and measures it to obtain rawkey-B.

[0039] Step 504: QOTD-B-1 pushes rawkey-B: pushes rawkey-B to KMT-1.

[0040] Step 505, KMT-1 returns the processing result to QOTD-B-1: After processing rawkey-B, KMT-1 returns the processing result to QOTD-B-1.

[0041] Step 506, QOTD-B-1 returns the processing result to QOTD-A-1: QOTD-B-1 forwards the processing result of KMT-1 to QOTD-A-1.

[0042] Step 507, QOTD-A-1 returns rawkey-A to QOT-1: QOTD-A-1 returns rawkey-A to QOT-1.

[0043] Step 508: Execute the QOT protocol: QOT-1 uses rawkey-A and KMT-1 uses rawkey-B to execute the QOT protocol. After execution, QOT-1 obtains Qa data and KMT-1 obtains Qb data.

[0044] Specifically, QOTD-A-1 in the first access node prepares the first quantum data (rawkey-A), QOTD-B-1 synchronously receives and measures the generated second quantum data (rawkey-B), and then QOTD-A-1 sends the first quantum data to the first application end, that is, QOTD-A-1 returns rawkey-A to QOT-1, and QOTD-B-1 pushes the second quantum data (rawkey-B) to KMT. Then, based on the first quantum data (rawkey-A), QOT-1 collaborates with KMT-1 in the first access node through the QOT protocol to generate the first communication data (rawkey-B). Figure 2 The Qa data in the QOT protocol is used to generate the second communication data (such as Figure 2 In this way, since the first quantum data and the second quantum data originate from the same quantum bit preparation process (QOTD-A-1 sending and QOTD-B-1 receiving), the subsequently generated communication data can be used for symmetric encryption or OT services. In addition, through the preparation and collaborative processing of quantum data, communication data generation between the application end and the access node is realized, providing a foundation for OT services (such as quantum key distribution and one-time pad encryption).

[0045] In some embodiments, before executing step 403, since the first application end and the first access node are transmitted through a classical channel, the data may be intercepted by an illegal third party during the transmission process, so it is necessary to generate a consistent quantum key between the first application end and the first access node, which also enables the first application end to provide a key interface to external users or other applications. Therefore, the quantum oblivious transmission method provided in this application also includes step 402: generating a consistent quantum key between the first access node and the first application end, for the first application end to provide the quantum key to the external application or user. The specific implementation process of step 402 can be: based on the quantum key distribution protocol, the first application end uses the first quantum data, and the KMT device of the first access node uses the second quantum data to generate a consistent first quantum key.

[0046] In this way, the QOT application and its corresponding KMT device generate consistent quantum keys, providing a basis for encryption operations, ensuring that the same group of devices use the same key to encrypt / decrypt critical data (such as quantum keys, Qb data), and ensure the confidentiality of data interaction. In this process, "one-time one-key XOR operation" encryption is adopted. Each key is used only once, and the ciphertext has no pattern to follow, preventing eavesdropping and cracking.

[0047] See also Figure 6 , Figure 6 A flow chart of generating a symmetric quantum key pool between a first application terminal and a first access node is given.

[0048] As shown in the figure, the following steps are included:

[0049] Step 601: Apply for rawkey-A: QOT-1 sends a request to QOTD-A-1 to obtain rawkey-A. This is the beginning of the process. QOT-1, as the requester, initiates a request for key-related data.

[0050] Step 602: Prepare and send rawkey-A: After receiving the request, QOTD-A-1 begins preparing qubits and sends the generated rawkey-A to QOT-1. QOTD-A-1 is responsible for preparing and sending the initial key data.

[0051] Step 603: Receive and measure rawkey-B: QOTD-B-1 receives the qubit and performs a measurement operation to obtain rawkey-B. This step is to obtain relevant data information from the qubit.

[0052] Step 604: Push rawkey-B: QOTD-B-1 pushes the obtained rawkey-B to KMT-1, thus realizing data transmission between devices.

[0053] Step 605, receiving and processing rawkey-B: KMT-1 receives rawkey-B from QOTD-B-1, processes it, and then returns the processing result to QOTD-B-1. KMT-1 performs preliminary processing on the data and feeds back the result.

[0054] Step 606, returning the processing result: QOTD-B-1 receives the processing result returned by KMT-1, completing a data interaction feedback.

[0055] Step 607, returning rawkey-A: QOTD-A-1 returns rawkey-A to QOT-1, allowing QOT-1 to obtain complete initial key data.

[0056] Step 608: Generate and store keys: QOT-1 and KMT-1 perform the post-processing portion of the BB84 protocol (including error correction, security enhancement, and other operations) based on rawkey-A and rawkey-B, respectively, to generate the final quantum key and add it to their respective quantum key pools. This step generates and stores usable keys, completing the construction of the symmetric quantum key pool.

[0057] In this way, QOT-1 and KMT-1 in the first access node apply for, prepare, measure, transmit and process key-related data between the QOT application, QOTD device and KMT device through multiple steps, and finally generate a symmetric quantum key pool. It should be noted that QOT-1 and the first access node can also execute the above-mentioned quantum key distribution protocol multiple times to generate multiple pairs of quantum keys to obtain a symmetric quantum key pool. After the above-mentioned symmetric quantum key pool generation process, QOT-1 can obtain keys from the key pool through an interface (such as a "symmetric key acquisition interface" or other forms). QOT or KMT can use the keys in the key pool to encrypt key data (quantum keys, Qb data, etc.), or provide the keys to the user's business programs through the interface. In addition, those skilled in the art can understand that the settings of the first access node, the first application end and the second access node, the second application end in this application are all symmetrically designed in terms of architecture, components, processes, and interactions. Therefore, the above method can be repeated in a similar manner between the second access node and the second application end (also called "QOT-2") to achieve the second access node and QOT-2 each generating a consistent symmetric key pool.

[0058] In some embodiments, after generating a first quantum key between QOT-1 and KMT-1, the first access node also needs to help the first application end (QOT-1) and the second application end (QOT-2) generate a consistent symmetric quantum key for encryption of key data (quantum key, Qb data, etc.). The symmetric quantum key generation process between QOT-1 and QOT-2 can include: the KMT device in the first access node generates a second quantum key; the second quantum key is encrypted using the first quantum key and transmitted to the first application end; and the first access node transmits the second quantum key to the second access node, which then transmits the second quantum key to the second application end. In this way, after KMT-1 generates the quantum key, it relays it to KMT-2 via the quantum network, allowing QOT-1 and QOT-2 to obtain consistent symmetric keys, supporting two-way encrypted communication.

[0059] See 7, Figure 7 The specific implementation process of generating a consistent symmetric quantum key between the first application end (QOT-1) and the second application end (QOT-2) is given, including the following steps:

[0060] Step 701: Application Initiation: QOT-1 submits a quantum key application to KMT-1. This is the starting point of the process, with QOT-1 initiating the request as the requester.

[0061] Step 702: Key Generation and Relay: KMT-1 generates a quantum key and relays it to KMT-2 via the quantum network. KMT-1 is responsible for key generation and uses the quantum network to transfer the key between different nodes.

[0062] Step 703, KMT-2 receives the key: KMT-2 receives the quantum key relayed by KMT-1, completing the key transmission relay in the network.

[0063] Step 704: KMT-2 encrypts the received quantum key using a quantum key from the symmetric key pool that comes with QOT-2. This step ensures the security of the key during subsequent transmission, using the existing symmetric key for encryption.

[0064] Step 705, QOT-2 receives the encryption key: QOT-2 receives the encrypted quantum key sent by KMT-2.

[0065] Step 706: QOT-2 decrypts the key: QOT-2 uses the quantum key from the symmetric key pool paired with KMT-2 to decrypt and obtain the required quantum key. Through the decryption operation, QOT-2 obtains a usable quantum key.

[0066] Step 707, QOT-2 returns the result: QOT-2 returns the decryption processing result to KMT-2 to feedback information such as whether the decryption is successful, so as to facilitate confirmation of subsequent processes.

[0067] Step 708: KMT-2 returns the encryption result. KMT-2 uses the quantum key from the symmetric key pool that matches KMT-1 to encrypt the returned result to ensure the security of the returned information.

[0068] Step 709, KMT-1 receives the encryption result: KMT-1 receives the encrypted result sent by KMT-2.

[0069] Step 7010, KMT-1 decrypts the result: KMT-1 uses the quantum key in the symmetric key pool paired with itself to decrypt and obtain the processing result of QOT-2, thus completing the entire interaction process and ensuring that both parties obtain the same key.

[0070] The entire process involves multiple steps, including key generation, transmission, encryption, decryption, and result feedback between the QOT application and the KMT device. Secure quantum key sharing is achieved with the help of a symmetric key pool to meet the requirements of QOT-1 and QOT-2 for consistent symmetric quantum keys.

[0071] In this application, the first access node and the second access node are interconnected via a quantum network. At least one pair of quantum keys is generated between the two access nodes. Each intervening node in the quantum network transmits data via a secure relay, i.e., the data to be transmitted is encrypted using the symmetric quantum key shared by the two access nodes, ensuring that the data always exists in ciphertext form during transmission to prevent leakage. Therefore, step 703 can be implemented as follows: generating a third quantum key with the second access node; encrypting the second communication data using the third quantum key, and then transmitting the encrypted second communication data to the second access node, where the second access node uses the third quantum key to decrypt the encrypted second communication data, and then transmits the decrypted second communication data to the second application terminal.

[0072] In this process, the first access node (KMT-1) and the second access node (KMT-2) generate a consistent third quantum key (symmetric key) via the quantum network (based on quantum bits prepared by QOTD-A / B). As described above, KMT-1 and KMT-2 perform BB84 post-processing (error correction and confidentiality enhancement) to generate a shared third quantum key. After obtaining the third quantum key, KMT-1 encrypts the second communication data (such as Qb data) with the third quantum key and transmits the encrypted second communication data to the second access node (KMT-2) via the quantum network, ensuring that the ciphertext is unbreakable during transmission. KMT-2 then decrypts the encrypted second communication data using the third quantum key (XOR inverse operation) to recover the original data (Qb data). The decrypted second communication data is then transmitted to the second application (QOT-2) for participation in quantum oblivious transfer (OT) or symmetric encryption. Since the generated third quantum key is generated based on the principles of quantum mechanics (BB84 protocol), it has the characteristics of "non-eavesdropping and non-forgeable", and the encryption adopts the "one-time one-pad" XOR operation. The ciphertext length is the same as the key length, ensuring that even if the ciphertext is intercepted, it cannot be cracked; KMT-1 and KMT-2, as access nodes of the quantum network, realize two-way key sharing by "generating the third quantum key", supporting the secure transmission of data across nodes.

[0073] Furthermore, in some embodiments, because KMT-2 and QOT-2 are transmitted over classical channels, data may be intercepted by unauthorized third parties during transmission. If not encrypted, sensitive information (such as quantum keys and critical business data) will be directly exposed. KMT-2 transmits the decrypted second communication data to the second application terminal. This data must be encrypted using a key from a key pool shared between KMT-2 and QOT-2 before transmission. QOT-2 then decrypts the resulting second communication data, ensuring that the application layer (QOT-2) receives original, secure data that meets the input requirements of the OT protocol or symmetric encryption.

[0074] Please continue reading Figure 5 ,like Figure 5 Steps 9 to 16 in FIG. 1 show the process of transmitting Qb data to QOT-2 (the second application end) via the KMT relay, including the following steps:

[0075] Step 509, QOT-1 applies to relay Qb data: QOT-1 applies to KMT-1 to relay Qb data to QOT-2 (the second application end), triggering cross-node data transmission.

[0076] Step 5010: KMT-1 relays Qb data to KMT-2: KMT-1 relays Qb data to KMT-2 (the second access node) via the quantum network (a secure link based on quantum key distribution) to ensure transmission security. In this step, KMT-1 encrypts Qb data using a third quantum key shared with KMT-2 before relaying it to KMT-2, ensuring that the ciphertext is unbreakable during transmission.

[0077] In step 5011, KMT-2 obtains the Qb data and encrypts it again. KMT-2 uses the symmetric key pool key associated with QOT-2 to perform a one-time, one-time, XOR encryption on the Qb data to prevent leakage during transmission. The Qb data obtained by KMT-2 is encrypted by KMT-1, so KMT-2 needs to decrypt the Qb data using the third quantum key to obtain the original data.

[0078] Step 5012, KMT-2 sends the encrypted Qb data to QOT-2: Send the encrypted Qb data to QOT-2.

[0079] Step 5013, QOT-2 decrypts the Qb data: QOT-2 receives the encrypted Qb data, decrypts it using the symmetric key pool key paired with KMT-2, and obtains the original Qb data.

[0080] Finally, QOT-2 returns the processing result to KMT-2 ( Figure 2In step 5014), KMT-2 returns the relay result to KMT-1 ( Figure 2 In step 5015), KMT-1 returns the application result to QOT-1 ( Figure 2 Step 5016) ensures a closed-loop process and detects data consistency and transmission errors.

[0081] In this way, through the above-mentioned steps of key generation, relay, data interaction, etc., a complete chain of "quantum key security generation, cross-node encrypted transmission, and OT business data support" is constructed, and key security, transmission reliability and business compatibility are achieved from a technical level, so that any application end (i.e. QOT device) can be used as a center to improve system integration, make it easier to adapt to the access needs of different users, and provide a symmetric quantum key acquisition interface to the outside world.

[0082] Another embodiment of the present application relates to a quantum oblivious transmission method, applied to a first application end, comprising: obtaining first quantum data, generating first communication data using the first quantum data at the first application end based on a QOT protocol, and generating second communication data using second quantum data at a first access node, wherein the first quantum data and the second quantum data are prepared in the first access node; and implementing quantum oblivious transmission with the second application end using the first communication data, wherein the second communication data is transmitted from the first access node to the second application end. Thus, the above method enables oblivious transmission between the two application ends using the prepared communication data, reducing reliance on quantum resources and enabling any application end (i.e., the QOT device) to be used as a center, thereby improving system integration and making it easier to adapt to the access needs of different users.

[0083] The following is a detailed description of the implementation details of the quantum oblivious transmission method of this embodiment. The following content is only provided for ease of understanding and is not necessary for implementing this solution.

[0084] See also Figure 8 In some embodiments, the quantum oblivious transmission method of the present application applied to the first application end is as follows: Figure 8 As shown, the following steps are included:

[0085] In step 801, a first application terminal obtains first quantum data sent by a first access node, generates first communication data using the first quantum data at the first application terminal based on a QOT protocol, and generates second communication data using the second quantum data at the first access node, wherein the first quantum data and the second quantum data are prepared in the first access node.

[0086] In step 802, the first application end and the second application end implement quantum oblivious transmission using the first communication data and the second communication data respectively, wherein the second communication data is transmitted from the first access node to the second application end.

[0087] Specifically, the first access node must first transmit the first quantum data it has prepared to the first application end, while at the same time using the second quantum data to generate the second communication data. The first application end, based on the QOT protocol, uses the received first quantum data to generate the first communication data. In this process, both sets of quantum data are prepared at the first access node, while the two sets of communication data are produced in different devices, forming a dual-track data processing path, avoiding the risk of information leakage in a single data path. Subsequently, the first access node transmits the second communication data to the second access node through the quantum network, which then forwards it to the second application end, so that the two application ends respectively hold the first communication data and the second communication data, and finally realize quantum inadvertent transmission through these two sets of data. Through the above process, the quantum resource dependence of the two application ends is simplified, and the goal of "any two QOTs provide OT interfaces" is achieved. Moreover, the first application end and the second application end can act as senders and receivers at the same time.

[0088] In some embodiments, before step 802, the following steps are also included: based on the quantum key distribution protocol, the first application end uses the first quantum data, and the KMT device of the first access node uses the second quantum data to generate a consistent first symmetric quantum key; obtain the second quantum key encrypted by the first access node using the first symmetric quantum key, and decrypt using the first symmetric quantum key to obtain the second quantum key.

[0089] The above process is a specific implementation of the generation of a symmetric quantum key pool and a key application process. Its core goal is to achieve consistent generation and secure transmission of symmetric keys between the application end and the access node. Specifically, keys are generated between QOT-1 and KMT-1 based on the quantum key distribution protocol (such as the BB84 protocol mentioned in the document). In this process, the preparation and measurement characteristics of quantum bits are used to ensure that the keys generated at both ends are random and consistent, and have the security of quantum physics (cannot be eavesdropped or cloned). It should be noted that the KMT device of the first access node not only sends the generated second quantum key to the first application end, but also sends the second quantum key to the second application end, so that QOT-1 and QOT-2 have the same quantum key. This process has been described in detail above and will not be repeated here.

[0090] For step 802, in some embodiments, quantum oblivious transmission between the first application end (QOT-1) and the second application end (QOT-2) can be achieved in the following manner, including: encrypting the first communication data using the second quantum key and transmitting it to the second application end, and decrypting the second communication data from the second application end using the second quantum key to achieve quantum oblivious transmission.

[0091] Specifically, this process is the specific implementation of the QOT application applying for Qa and Qb data, and the combination of Qa and Qb data to achieve oblivious transmission. Its core lies in encrypting the communication data through symmetric quantum keys (second quantum keys) to achieve OT interaction between the two ends. Specifically, the first application end only knows the first communication data (such as Qa), and the second application end only knows the second communication data (such as Qb). The two parties complete the interaction through encrypted transmission and key sharing without knowing the complete data of the other party, which is in line with the OT characteristic that "the receiver only obtains the required information, and the sender does not know what the receiver obtains". The second quantum key possessed by QOT-1 and QOT-2 is generated by a quantum key distribution protocol (such as BB84), which has the non-eavesdropping property at the quantum physics level, ensuring the security of the encryption key; one-time encryption ensures that the ciphertext cannot be cracked. The combination of the two realizes the unconditional security of OT.

[0092] In this way, the above steps realize the two-way interaction of "second quantum key encrypting first communication data + decrypting second communication data". Combining quantum key distribution with one-time pad encryption, the inadvertent transmission is completed under the premise of ensuring data privacy, simplifying the quantum resource dependence of the application ends at both ends, so that any application end (ie QOT device) can be used as a center, improving the system integration, making it easier to adapt to the access needs of different users, and realizing the provision of a symmetric quantum key acquisition interface to the outside world.

[0093] The steps of the various methods above are divided only for the purpose of clear description. During implementation, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent. Adding insignificant modifications or introducing insignificant designs to the algorithm or process without changing the core design of the algorithm and process are all within the scope of protection of this patent.

[0094] Another embodiment of the present application relates to an electronic device, such as Figure 9 As shown, it includes a memory communicatively connected to at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the above-mentioned quantum inadvertent transmission method.

[0095] The memory and processor are connected using a bus, which can include any number of interconnected buses and bridges. The bus connects various circuits of one or more processors and memories. The bus can also connect various other circuits such as peripheral devices, voltage regulators, and power management circuits. These are all well known in the art and are therefore not described further herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be a single component or multiple components, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by the processor is transmitted over a wireless medium via an antenna. Furthermore, the antenna receives data and transmits it to the processor.

[0096] The processor is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. Memory can be used to store data used by the processor when performing operations.

[0097] Those skilled in the art will appreciate that the above embodiments are specific embodiments for implementing the present application, and that in actual applications, various changes may be made thereto in form and detail without departing from the spirit and scope of the present application.

Claims

1. A quantum oblivious transmission method, characterized in that: Applied to a first access node, the method includes: Transmitting first quantum data to a first application end, generating first communication data at the first application end using the first quantum data based on a QOT protocol, and generating second communication data at the first access node using second quantum data, wherein the first quantum data and the second quantum data are prepared in the first access node, and the second quantum data is obtained by measuring the first quantum data; The second communication data is transmitted to a second access node based on a quantum network, so that the second access node transmits the second communication data to a second application end, and the first application end and the second application end respectively use the first communication data and the second communication data to realize quantum oblivious transmission.

2. The quantum oblivious transmission method according to claim 1, characterized in that The first access node includes at least a first QOTD device, a second QOTD device, and a KMT device; The generating first communication data by using the first quantum data at the first application end based on the QOT protocol, and generating second communication data by using the second quantum data at the first access node, include: The first QOTD device and the second QOTD device prepare first quantum data and second quantum data respectively; The first QOTD device sends the first quantum data to the first application end, so that the first application end and the KMT device respectively execute the QOT protocol using the first quantum data and the second quantum data.

3. The quantum oblivious transmission method according to claim 2, characterized in that Before transmitting the second communication data to the second access node based on the quantum network, the method further includes: Based on a quantum key distribution protocol, the first application terminal uses the first quantum data, and the KMT device of the first access node uses the second quantum data to respectively generate a consistent first quantum key.

4. The quantum oblivious transmission method according to claim 3, wherein: After generating a first quantum key with the first application, the method further includes: generating a second quantum key; The second quantum key is encrypted using the first quantum key and transmitted to the first application end, and the second quantum key is transmitted to the second access node so that the second access node transmits the second quantum key to the second application end.

5. The quantum oblivious transmission method according to claim 1, wherein: The transmitting the second communication data to the second access node based on the quantum network, so that the second access node transmits the second communication data to the second application end, includes: generating a third quantum key with the second access node; The second communication data is encrypted using the third quantum key, and the encrypted second communication data is transmitted to the second access node, so that the second access node can decrypt the encrypted second communication data using the third quantum key, and transmit the decrypted second communication data to the second application end.

6. A quantum oblivious transmission method, characterized in that: Applied to the first application end, the method includes: Obtaining first quantum data sent by a first access node, generating first communication data at the first application end using the first quantum data based on a QOT protocol, and generating second communication data at the first access node using second quantum data, wherein the first quantum data and the second quantum data are prepared in the first access node; The first application end and the second application end respectively use the first communication data and the second communication data to implement quantum oblivious transmission, wherein the second communication data is transmitted from the first access node to the second application end.

7. The quantum oblivious transmission method according to claim 6, characterized in that Before implementing quantum oblivious transmission with the second application terminal using the first communication data, the method further includes: Based on a quantum key distribution protocol, the first application terminal uses the first quantum data, and the KMT device of the first access node uses the second quantum data to generate a consistent first symmetric quantum key; as well as, Obtain a second quantum key encrypted by the first access node using the first symmetric quantum key, and decrypt the key using the first symmetric quantum key to obtain the second quantum key.

8. The quantum oblivious transmission method according to claim 7, wherein: The first application end and the second application end respectively use the first communication data and the second communication data to implement quantum oblivious transmission, including: The first communication data is encrypted using the second quantum key and transmitted to the second application end, and the second communication data from the second application end is decrypted using the second quantum key to achieve quantum oblivious transmission.

9. A quantum oblivious transmission system, characterized in that: include: A first access node, configured to perform the quantum oblivious transfer method according to any one of claims 1 to 5; A first application terminal, connected to the first access node, configured to execute the quantum oblivious transfer method according to any one of claims 6 to 8; a second access node, connected to the first access node and the second application terminal respectively, and configured to transmit second communication data generated by the first access node to the second application terminal; a second application end, connected to the second access node, configured to receive second communication data forwarded by the second access node, and implement quantum oblivious transfer with the first application end using the second communication data, wherein the first quantum data and the second quantum data are prepared in the first access node; A quantum network is connected to the first access node and the second access node at the same time, and is used to transmit the second communication data from the first access node to the second access node in a relay manner.

10. An electronic device, characterized in that: include: at least one processor; as well as, A memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the quantum oblivious transmission method according to any one of claims 1 to 5, and / or the quantum oblivious transmission method according to any one of claims 6 to 8.

Images