Lightweight low-delay quantum key distribution method and system adaptive to electric power scene

Abstract

The invention discloses a lightweight low-delay quantum key distribution method and system adaptive to an electric power scene, and belongs to the technical field of quantum communication and electric power communication crossing. The method comprises the steps cooperatively executed by a sending end and a receiving end: the sending end determines a basis vector based on a pre-associated quantum fingerprint sequence and a timestamp, sends a key through polarization-phase two-dimensional coding, generates a selection mark and executes privacy amplification; and a receiving end synchronizes a timestamp to determine a basis vector, compares the basis vector with the quantum fingerprint to complete authentication, decodes through an integrated module, performs collaborative error correction and executes privacy amplification. The system comprises functional modules of a sending end and a receiving end, is integrated on a miniaturized board card, and supports common-fiber transmission and protocol conversion. According to the method, the problems of high time delay, high deployment cost and poor adaptability of the traditional QKD are solved, the end-to-end time delay is reduced to 14 microseconds, the deployment cost is reduced by more than 60%, the requirements of high safety, low time delay and lightweight deployment of a power system are met, and the method is suitable for key services such as power dispatching and relay protection.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of quantum communication and power communication intersection, and particularly relates to a lightweight low-latency quantum key distribution method and system suitable for the power scene, which is suitable for the communication scene of the power system with high security and low latency requirements. BACKGROUND

[0002] With the deep transformation of smart grid to digitalization and intelligentization, the communication scene of the power system is becoming increasingly complex, and the security and real-time performance of communication are extremely required by key businesses. The transmission security of core information such as power dispatching instructions, relay protection signals and metering data directly determines the stability of the power grid. However, under the impact of the computing power of quantum computing, traditional encryption technology faces the potential risk of "computing power cracking", and quantum key distribution (QKD) as the only technology with "unconditional security" becomes the core choice for the security upgrade of power communication.

[0003] At present, the power system mainly uses traditional public key encryption technology to ensure communication security, but with the development of quantum computing technology, traditional encryption algorithms based on mathematical problems such as large number factorization and discrete logarithm are threatened by cracking. Quantum key distribution (QKD) technology is based on quantum mechanics and can theoretically provide "unconditional security" for key distribution, which is an ideal solution to future quantum computing attacks.

[0004] However, the direct application of traditional QKD technology in the power scene faces three technical bottlenecks: (1) The protocol latency is too high to meet the real-time requirements of the power system Traditional QKD protocols such as BB84 need to frequently exchange basis vector information through a classical channel, perform complex two-way identity authentication and multiple interactive key correction, resulting in an end-to-end latency of tens of milliseconds. However, the end-to-end latency of power relay protection business is required to be less than 10ms, and the real-time dispatching business is required to be less than 50ms, so traditional QKD protocols cannot meet these stringent real-time requirements.

[0005] (2) The device size and power consumption do not meet the deployment conditions of the power scene The space of power stations such as substations and distribution rooms is limited, and there are strict restrictions on device power consumption. Traditional QKD devices are large in size and high in power consumption, which cannot be embedded in existing power communication equipment cabinets, restricting their large-scale deployment in the power system.

[0006] (3) Poor compatibility with existing power communication infrastructure The power system has a complete optical fiber communication network (SDH / OTN), and if a dedicated optical fiber is laid for QKD, the construction cost and operation and maintenance complexity will be greatly increased. Traditional QKD systems lack the ability to adapt to existing power communication protocols, making it difficult to achieve smooth integration.

[0007] These technical bottlenecks seriously restrict the popularization and application of QKD technology in the power system, and it is urgent to develop a quantum key distribution scheme with low latency, light weight and high compatibility. SUMMARY

[0008] The technical problem to be solved by the present application is to provide a lightweight low-latency quantum key distribution method and system adapted to the power scenario, to solve the technical problems of large device volume, high deployment cost, high communication latency and insufficient compatibility with existing power communication networks in the quantum key distribution in the power scenario, to realize lightweight deployment in the power communication network, and to have a quantum key distribution technology with low latency, which is suitable for secure encryption of key services in the power system and efficient fusion and upgrading of existing power communication infrastructure.

[0009] The present application adopts the following technical solutions: The lightweight low-latency quantum key distribution method adapted to the power scenario is executed by the sending end, comprising the following steps: Based on the quantum fingerprint sequence pre-associated to the receiving end, a current timestamp is generated; and based on the timestamp, an authentication basis vector is determined by a hash function; Some quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, and after modulation using the authentication basis vector, they are sent to the receiving end, so that the receiving end can determine the same authentication basis vector based on the synchronized timestamp for measurement and comparison to complete identity authentication; After identity authentication, a key transmission basis vector is determined by a hash function based on the timestamp; The key to be transmitted is obtained, and the key is encoded into a photon sequence in a polarization-phase two-dimensional encoding mode and sent to the receiving end, so that the receiving end can use an integrated polarization-phase joint measurement module for decoding; A key screening marker containing measurement error position information is generated and sent to the receiving end through a classical channel for key screening and error correction; After key screening and error correction, a lightweight hash function is used to amplify the privacy of the key to generate a final secure key.

[0010] Preferably, the quantum fingerprint sequence is composed of a plurality of photons with specific polarization states, and the specific polarization states include horizontal polarization, vertical polarization, 45° polarization and 135° polarization.

[0011] Preferably, the hash function is a simplified version of SM3, and the hash function generates a basis vector switching rule associated with the current timestamp; when the timestamp deviation between the sending end and the receiving end is less than 100ns, the basis vector is determined by both sides synchronously.

[0012] Preferably, the specific mapping of the polarization-phase two-dimensional encoding mode is as follows: Horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

[0013] Preferably, the length of the key screening mark is ≤10 bytes, the key screening and error correction use a simplified version of LDPC error correction code, and the error correction is completed through 2 rounds of classic interaction.

[0014] Preferably, the lightweight hash function is a TruncatedSHA-256 function.

[0015] Preferably, it further comprises: Monitoring the remaining amount of local keys; when the remaining amount of final security keys is lower than a threshold value, multiplexing the basis vector synchronization mechanism and the polarization-phase two-dimensional encoding mode to generate a new photon sequence and send it.

[0016] Preferably, the effective state of the identity authentication is maintained for 1 hour, and the sending end is configured with a key cache pool with a capacity of 10000 bits for storing the generated final security keys.

[0017] In a second aspect, the embodiments of the present application provide a lightweight low-latency quantum key distribution system adapted to a power scenario, arranged at a sending end, comprising: A timestamp module for generating a current timestamp based on a quantum fingerprint sequence pre-associated to a receiving end; A function module connected to the timestamp module, for determining an authentication basis vector and a key transmission basis vector through a hash function according to the timestamp; A quantum module for storing the pre-associated quantum fingerprint sequence; An identity module connected to the quantum module and the function module, for randomly selecting part of the quantum fingerprint photons from the locally stored quantum fingerprint sequence and sending them after modulation using the authentication basis vector; A signal module connected to the function module, for encoding the to-be-transmitted key into a photon sequence using a polarization-phase two-dimensional encoding mode and sending it; A communication module for generating and sending a key screening mark containing measurement error position information, and receiving authentication results and error correction interaction information; A key module connected to the communication module, for amplifying the privacy of the key using a lightweight hash function to generate a final security key.

[0018] Preferably, the quantum fingerprint sequence is composed of a plurality of photons with specific polarization states, and the specific polarization states include horizontal polarization, vertical polarization, 45° polarization, and 135° polarization.

[0019] Preferably, the timestamp module adopts a GPS time-providing module, with a synchronization accuracy of ≤50 ns.

[0020] Preferably, the signal module supports polarization-phase dual-dimension encoding, with the encoding mapping as: horizontal polarization + 0 phase representing "00", vertical polarization + π / 2 phase representing "01", 45° polarization + π phase representing "10", and 135° polarization + 3π / 2 phase representing "11".

[0021] Preferably, a protocol conversion module is further included for realizing protocol conversion between a quantum key distribution protocol and an existing SDH / OTN network.

[0022] Preferably, the system is integrated on a miniaturized board card with a size of 200 mm x 150 mm, and is suitable for being inserted into an existing optical transmission equipment frame.

[0023] In a third aspect, an embodiment of the present application provides a lightweight low-latency quantum key distribution method suitable for a power scenario, which is executed by a receiving end and includes the following steps: generating a current timestamp synchronized with a sending end, and determining an authentication basis vector through a hash function according to the timestamp; receiving quantum fingerprint photons sent by the sending end, and measuring the quantum fingerprint photons using the authentication basis vector; comparing a quantum fingerprint sequence obtained through the measurement with a locally pre-stored quantum fingerprint sequence of the sending end, to complete identity authentication of the sending end; after the identity authentication is passed, determining a key transmission basis vector through a hash function according to the timestamp; receiving a photon sequence encoded through polarization-phase dual-dimension encoding sent by the sending end, and decoding the photon sequence using an integrated polarization-phase joint measurement module to obtain original key bits; receiving a key screening marker sent by the sending end through a classical channel, screening the key according to the key screening marker, and completing key error correction with the sending end using a lightweight concatenated error correction code; after the key screening and error correction are completed, performing privacy amplification on the key using a lightweight hash function to generate a final secure key.

[0024] Preferably, the synchronization accuracy of the timestamp is ≤100 ns, and the receiving end adopts a GPS time-providing to realize synchronization of the timestamp with the sending end, with a synchronization accuracy of ≤50 ns.

[0025] Preferably, the integrated polarization-phase joint measurement module includes a polarization beam splitter and a phase modulator, for one-time completion of dual-dimension information decoding.

[0026] Preferably, the lightweight concatenated error correction code is a simplified version of LDPC error correction code, with an error correction delay ≤ 3 μs and a key screening efficiency ≥ 95%.

[0027] Preferably, the system further comprises a key updating step: when the remaining amount of final secure keys is below a threshold, the base vector synchronization mechanism and the integrated polarization-phase joint measurement module are reused to receive and decode a new sequence of photons sent by the sending end.

[0028] In a fourth aspect, the embodiments of the present application provide a lightweight low-latency quantum key distribution system adapted to a power scenario, which is arranged at a receiving end and comprises: a timestamp module configured to generate a current timestamp synchronized with the sending end; a function module connected to the timestamp module and configured to determine an authentication base vector and a key transmission base vector through a hash function according to the timestamp; a quantum module configured to pre-store a quantum fingerprint sequence of the sending end; an identity module connected to the quantum module and the function module and configured to measure the received quantum fingerprint photons using the authentication base vector and perform sequence comparison; a quantum signal receiving and measuring module connected to the function module, wherein the quantum signal receiving and measuring module comprises an integrated polarization-phase joint measurement module configured to decode the received polarization-phase two-dimensional encoding photon sequence once; a communication module configured to receive a key screening mark and perform key error correction interaction; a key module connected to the communication module and configured to amplify the privacy of the key using a lightweight hash function to generate a final secure key.

[0029] Preferably, the quantum module is a lightweight quantum storage device with a capacity ≤ 10 KB and a power consumption ≤ 5 W.

[0030] Preferably, the decoding mapping rule of the integrated polarization-phase joint measurement module is: horizontal polarization + 0 phase represents “00”, vertical polarization + π / 2 phase represents “01”, 45° polarization + π phase represents “10”, and 135° polarization + 3π / 2 phase represents “11”.

[0031] Preferably, the timestamp module adopts a GPS time service module with a synchronization accuracy ≤ 50 ns.

[0032] Preferably, the system further comprises a protocol conversion module configured to realize protocol conversion between the quantum key distribution protocol and the existing SDH / OTN network of the power.

[0033] Preferably, the system is integrated on a miniaturized board card with a size of 200 mm × 150 mm and is suitable for being inserted into an existing optical transmission equipment frame of the power.

[0034] In a fifth aspect, a computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the steps of the light-weight and low-latency quantum key distribution method in the adaptive power scenario when executing the computer program.

[0035] In a sixth aspect, an embodiment of the present application provides a computer readable storage medium including a computer program, and the computer program implements the steps of the light-weight and low-latency quantum key distribution method in the adaptive power scenario when executed by a processor.

[0036] Compared with the prior art, the present application has at least the following beneficial effects: A light-weight and low-latency quantum key distribution method in an adaptive power scenario is executed by a sending end, and through the cooperative design of quantum fingerprint pre-association + timestamp-hash function basis vector determination + polarization-phase two-dimensional encoding + light-weight screening error correction + privacy amplification, the dual optimization of latency and light weight is realized from the process level. Identity authentication is based on pre-associated quantum fingerprint, and there is no need for real-time negotiation of authentication rules, which greatly shortens the handshake time. The basis vector determination is linked through the timestamp and the hash function to avoid frequent interaction of the classical channel. The two-dimensional encoding improves the key transmission efficiency and reduces the number of photon transmissions. The light-weight screening error correction and privacy amplification reduce the device computing overhead. This scheme solves the problems of redundancy, high latency, and heavy device load of the traditional QKD process as a whole, ensures the security and real-time performance under the resource constraints of the power scenario, and lays a foundation for the optimization of the subsequent dependent claims.

[0037] Further, the specific composition of the quantum fingerprint sequence and the number of authentication photons are limited to ensure the reliability of authentication while minimizing communication overhead. By using a specific polarization state of the photon sequence, the uniqueness and anti-interference ability of the quantum fingerprint are improved. By randomly selecting 10 photons for authentication, the authentication process is controlled within microseconds on the premise of ensuring sufficient security strength, and the improvement amplitude reaches three orders of magnitude compared with the millisecond-level latency of the traditional public key authentication.

[0038] Further, the SM3 simplified hash function and the timestamp synchronization mechanism are used to realize the synchronization of the basis vector without negotiation. When the timestamp deviation is less than 100ns, the basis vectors of both parties can be automatically synchronized, and only in abnormal cases, the basis vector needs to be corrected. This mechanism reduces the communication overhead of the basis vector negotiation to the minimum, and at the same time, the light-weight hash function reduces the computing complexity, and at the same time, meets the dual requirements of low latency and low computing overhead.

[0039] Further, by polarization-phase two-dimensional encoding technology, a single photon can carry 2 bits of information, which is 100% more efficient than traditional single-dimensional encoding. This encoding method fully utilizes the quantum state resources of photons, generating double the length of the key in the same transmission time, or reducing the time required to generate the same length of key by half, effectively reducing the key transmission delay.

[0040] Further, short byte screening markers and simplified LDPC codes are used to complete error correction through only 2 rounds of interaction. The traditional protocol requires 3-5 rounds of interaction, and the screening marker is large. This scheme optimizes the screening marker structure and error correction process, and controls the error correction delay within 3μs, which is more than 80% lower than the traditional scheme of more than 15μs.

[0041] Further, TruncatedSHA-256 is selected as the privacy amplification function, which significantly reduces the computational complexity while ensuring security. This function is optimized to improve processing speed by about 40% compared to standard SHA-256, while maintaining sufficient security strength, suitable for running on resource-constrained power terminal devices.

[0042] Further, a key update multiplexing mechanism is introduced, which can quickly update the key without re-authentication when the key amount is insufficient. The authentication state based on quantum fingerprint can be maintained for 1 hour, and the key update during this period completely avoids the overhead of repeated authentication, and controls the update delay within 20μs, ensuring the continuity of key services.

[0043] Further, a 10000bit key cache pool is configured and a reasonable update threshold is set, which avoids business interruption caused by key depletion and ensures the freshness of the key. Combined with 1-hour authentication state maintenance, an optimal balance between security and efficiency is achieved, suitable for long-term stable operation of power business.

[0044] A lightweight low-latency quantum key distribution method suitable for power scenarios, which fully describes the low-latency QKD processing flow from the receiving end, and emphasizes the key role of the integrated polarization-phase joint measurement module. This module realizes one-time decoding of two-dimensional information through hardware optimization, avoiding the time delay caused by step-by-step measurement in traditional schemes, and is the core technology for realizing low-latency decoding.

[0045] Further, high-precision timestamp synchronization (≤50ns) is used to ensure the reliability of the base vector synchronization. GPS time service technology is used to achieve precise coordination of quantum communication based on the time synchronization widely deployed in the power system, providing technical support for non-negotiation base vector synchronization.

[0046] Further, the integrated measurement module comprises a polarization beam splitter and a phase modulator, parallel processing is realized by hardware integration, the polarization and phase measurement which need to be completed in series in the traditional scheme are combined into a single-step operation, and the time delay is reduced by more than 50% in measurement.

[0047] Further, the simplified LDPC code maintains a high error correction capability (screening efficiency is greater than or equal to 95%) while controlling the error correction time delay to be less than 3 mu s. Through optimization of the codebook design and interaction process, fast and reliable key error correction is realized under limited computing resources.

[0048] Further, the key update mechanism of the receiving end fully utilizes the trust state established in the early stage, and realizes fast and seamless key supplement by multiplexing the basis vector synchronization and measurement module, so that the power service is not affected by the key update.

[0049] It can be understood that the beneficial effects of the above-mentioned second aspect to the sixth aspect can be referred to the related description in the first aspect, which will not be repeated here.

[0050] In summary, the present application significantly reduces the protocol handshake time delay and terminal device overhead under the premise of ensuring the security of quantum key one-time password, and can meet the strict requirements of real-time and lightweight deployment in the power scene.

[0051] The technical solutions of the present application will be further described in detail below with the help of the drawings and examples. BRIEF DESCRIPTION OF DRAWINGS

[0052] Figure 1 The present application is based on quantum fingerprint pre-correlation pre-bi-dimensional encoding time delay optimization system architecture diagram; Figure 2 The present application is based on end-to-end real-time protection flowchart of full-process cooperation and key update multiplexing; Figure 3 The present application is based on the light weight board and the common fiber transmission of the power scene adaptation structure diagram; Figure 4 The present application provides a schematic diagram of a computer device; Figure 5 The present application provides a block diagram of a chip according to an embodiment; Figure 6 The present application provides a flowchart.

[0053] Wherein, 60. Computer device; 61. Processor; 62. Memory; 63. Computer program; 600. Electronic device; 610. Processing module; 620. Storage module; 6201. Random access storage module; 6202. Cache storage module; 6203. Read-only storage module; 6204. Program / utility; 6205. Program module; 630. Bus; 640. Display module; 650. Input / output interface; 660. Network adapter; 700. External device. DETAILED DESCRIPTION

[0054] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of protection of the present application.

[0055] In the description of the present application, it should be understood that the terms "comprise" and "include" indicate the existence of described features, integers, steps, operations, elements, and / or components, but do not exclude one or more other features, integers, steps, operations, elements, components, and / or sets thereof.

[0056] It should also be understood that the terms used in the specification of the present application are only for the purpose of describing specific embodiments and are not intended to limit the present application. As used in the specification and the appended claims of the present application, unless otherwise clearly indicated by the context, the singular forms "a", "an" and "the" are intended to include the plural forms.

[0057] It should be further understood that the term "and / or" used in the specification and the appended claims of the present application means any combination of one or more of the associated listed items and all possible combinations thereof, and includes these combinations, for example, A and / or B can represent three cases of A alone, A and B together, and B alone. In addition, the character " / " in the present application generally represents an "or" relationship between the front and rear associated objects.

[0058] It should be understood that although the terms first, second, third, etc. may be used in the embodiments of the present application to describe the preset ranges, etc., these preset ranges should not be limited to these terms. These terms are only used to distinguish the preset ranges from each other. For example, the first preset range can also be referred to as the second preset range, and similarly, the second preset range can also be referred to as the first preset range without departing from the scope of the embodiments of the present application.

[0059] Depending on the context, the word "if" as used herein can be interpreted to mean "when" or "while" or "in response to determining" or "in response to detecting." Similarly, the phrase "if it is determined" or "if [a stated condition or event] is detected" can be interpreted to mean "upon determining" or "in response to determining" or "upon detecting [the stated condition or event]" or "in response to detecting [the stated condition or event]."

[0060] Various structural diagrams according to the disclosed embodiments of the present application are shown in the drawings. These diagrams are not drawn to scale, in which certain details are exaggerated for clarity and others omitted. The shapes and relative sizes of the various regions, layers, and their relative positions shown in the drawings are merely illustrative and can deviate in actual implementation due to manufacturing tolerances or technical limitations, and regions / layers with different shapes, sizes, and relative positions can be additionally designed according to actual needs by those skilled in the art.

[0061] The present application provides a lightweight low-latency quantum key distribution method adapted to the power scene. By studying the lightweight low-latency quantum key distribution method adapted to the power scene, the "unconditional security" advantage of quantum key distribution is fully utilized and the existing defects in the application of the power scene are overcome, the security and real-time problem of key information transmission of the power system is solved, and reliable communication security is provided for core business such as power dispatching and control. The present application takes lightweight architecture and low-latency transmission as the core target, simplifies the quantum state negotiation process, optimizes the classical channel interaction link, and introduces an adaptive parameter configuration mechanism, reduces the protocol handshake delay by more than 40% under the premise of ensuring the one-time one-mic safety of quantum key, reduces the computing and storage overhead of terminal equipment, and adapts to resource-constrained edge communication scenarios; On this basis, the efficient fusion of quantum key distribution technology and existing power optical fiber communication network is realized to meet the stringent requirements of the power system for secure encryption and real-time response, reduce deployment costs, enhance compatibility with existing power infrastructure, and thus ensure the security of key information transmission of the power system and stable operation of the power grid.

[0062] Referring to Figure 6 The lightweight low-latency quantum key distribution method adapted to the power scene comprises the following steps: S1, simplifying quantum state basis vector negotiation method In view of the problem that the traditional BB84 protocol needs to frequently exchange basis vector information through a classical channel, and the corresponding key bits need to be discarded when the basis vectors are not matched, resulting in an increase in negotiation delay, the method designs a pre-defined dynamic basis vector set mechanism: a) The sender (Alice) and the receiver (Bob) agree on a dynamic set containing four base vectors X, Y, Z, and W (where W is a self-defined composite base) during the protocol initialization phase. The base vector switching rule is generated by a lightweight hash function (such as SM3) associated with the current timestamp, eliminating the need for real-time base vector type negotiation through a classical channel. b) When the timestamp deviation is less than a preset threshold (e.g., 100 ns), Alice and Bob can determine the currently used base vector simultaneously. Only when the timestamp deviation exceeds the threshold, a 1-byte length correction instruction is used to repair the base vector synchronization, significantly reducing the number of classical channel interactions for base vector negotiation.

[0063] S2, Quantum state compression transmission method To reduce the number of quantum state transmissions and transmission delay, this method uses single-photon multi-bit encoding technology: a) Utilizing the "polarization-phase" two-dimensional encoding of photons, a single photon can carry 2-bit key information (traditional BB84 protocol single photon carries only 1-bit). For example: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", etc. b) The receiver can complete two-dimensional information decoding at once through an integrated "polarization-phase" joint measurement module, avoiding the time delay caused by phased measurement.

[0064] S3, Lightweight identity authentication method To address the problem of high latency caused by complex two-way identity authentication through a classical channel before key distribution in traditional QKD protocols, this method designs a quantum fingerprint pre-association mechanism: a) During system deployment, Alice and Bob exchange "quantum fingerprints" (composed of 100 specific polarization state photons, unique and non-reproducible) and store them in local lightweight quantum storage. b) During the protocol handshake phase, Alice only needs to send 10 randomly selected quantum fingerprint photons, and Bob can complete identity authentication by comparing the locally stored quantum fingerprints (authentication success rate ≥ 99.9%). The authentication process only takes 1 μs, which is much lower than the millisecond-level latency of traditional public key authentication.

[0065] Please refer to Figure 1 For the two-way interaction architecture between the substation (Alice side) and the dispatching center (Bob side), it mainly includes six core modules, and the modules and signal flow are as follows: (1) Quantum fingerprint generation and storage module (Alice side / Bob side) The Alice end module generates 100 specific polarization state quantum fingerprint sequences containing horizontal polarization, vertical polarization, 45° polarization and 135° polarization, and transmits the quantum fingerprint sequences to the Bob end in the deployment stage through a secure configuration channel. Both modules are connected to a lightweight quantum memory with a capacity of less than or equal to 10 KB and a power consumption of less than or equal to 5 W, and are used to store quantum fingerprint sequences.

[0066] (2) Identity module (Alice end / Bob end) The Alice end module receives a timestamp t1 from a timestamp module with a synchronization accuracy of less than or equal to 100 ns, determines an authentication basis vector X basis through an SM3 simplified hash function module, randomly selects 10 quantum fingerprint photons from a quantum memory, and sends them to the Bob end after polarization modulation of the X basis through a quantum signal modulation module. The Bob end module synchronously receives a timestamp t2, determines the basis vector through the same hash function, performs polarization measurement on the X basis through a quantum signal measurement module, compares the photon sequences, and transmits a 1-bit authentication signal to the Alice end through a classical control channel after successful matching. (3) Two-dimensional encoding transmission module (Alice end / Bob end) The Alice end module receives a 1024-bit power control key to be transmitted, generates a photon sequence through a polarization-phase two-dimensional encoding module, and sends it to Bob through a quantum channel, with horizontal polarization + 0 phase = 00 and vertical polarization + pi / 2 phase = 01. The Bob end module is connected to an integrated polarization-phase joint measurement module to decode the two-dimensional information once, and outputs the 1024-bit original key after decoding. (4) Key screening and error correction module (Alice end / Bob end) The Alice end module generates a short byte screening marker with a length of less than or equal to 10 bytes, containing error positions, and sends it to Bob through a classical control channel; both modules are integrated with a simplified LDPC error correction module to complete error bit discarding and error correction.

[0067] Please refer to Figure 2 The end-to-end real-time guarantee process based on the whole process collaboration and key update multiplexing includes initialization, key generation and key update, and the left box is the initialization stage, which is executed offline once. It includes three steps of dynamic basis set negotiation, hash function configuration and key cache pool configuration, and the arrow points to the key generation stage. The key generation stage includes identity authentication, two-dimensional encoding transmission, key screening and error correction, and privacy amplification; the key update stage includes multiplexed basis vector synchronization mechanism, multiplexed two-dimensional encoding transmission and multiplexed screening and error correction, and the label indicates that no re-authentication is required, and the update delay is less than or equal to 20 microseconds; the implementation process steps are as follows: 1) Initialization phase (offline, only executed once) a) Alice and Bob negotiate the "dynamic basis set" (containing four basis vectors X, Y, Z, W) and the hash function of basis switching (H(t), t is the timestamp); b) Both exchange the "quantum fingerprint" sequence and store it in the local quantum memory; c) Configure quantum channel parameters (such as photon transmission attenuation threshold, measurement error tolerance).

[0068] 2) Handshake and authentication phase (time delay core optimization) a) Identity authentication (1 μs): Alice generates the current timestamp t1, determines the authentication basis (such as X basis) through the hash function H(t1), and randomly selects 10 quantum fingerprint photons to send to Bob in the X basis polarization state; Bob synchronously generates the timestamp t2 (t2 and t1 deviation ≤100 ns), determines the same basis through H(t2), measures the received photon sequence and compares it with the local quantum fingerprint, and if the match is successful, sends a 1-bit "authentication passed" signal to Alice.

[0069] b) Quantum key transmission (10 μs): Alice determines the key transmission basis (such as W basis) according to H(t1+Δt) (Δt=1 μs, to avoid basis repetition), encodes the to-be-transmitted key into a photon sequence in the "polarization-phase" two-dimensional dimension and sends it to Bob; Bob determines the same basis according to H(t2+Δt), and uses the "polarization-phase" joint measurement module to decode the photon sequence to obtain the original key bits.

[0070] c) Key screening and error correction (5 μs): Both parties exchange "key screening markers" (only containing measurement error position information, length ≤10 bytes) through the classical channel, discard the key bits with measurement errors (screening efficiency ≥95%), and use a lightweight concatenated error correction code (such as a simplified version of LDPC code) to complete error correction (the traditional protocol requires 3-5 rounds) in only 2 rounds of classical interaction, with an error correction time delay ≤3 μs.

[0071] d) Privacy amplification (3 μs): Both parties use the same lightweight hash function (such as TruncatedSHA-256) to amplify the privacy of the screened key, remove potential eavesdropping information, and generate the final secure key.

[0072] 3) Key update phase (triggered on demand, time delay ≤20 μs) When the remaining key quantity is below the threshold (such as 1000 bits), the protocol automatically triggers the key update process, reuses the basis synchronization and measurement mechanism of the handshake phase, and does not need to re-execute the identity authentication (the authentication state based on the quantum fingerprint can be maintained for 1 hour), with an update process time delay ≤20 μs.

[0073] The application shows the whole-link collaborative optimization logic in a flow form, highlights the innovation point of the "key update reuse pre-sequence mechanism", first, integrates identity authentication, key transmission, screening error correction optimization scheme, clearly defines the time threshold of each link, deploys the timestamp synchronization module of GPS time service (accuracy ≤ 50 ns), configures the key cache pool to avoid real-time generation delay; secondly, when the key remaining amount is lower than the threshold, the SM3 simplified hash function and the "polarization-phase" measurement module are reused, without re-executing quantum fingerprint authentication (state maintenance for 1 hour), quickly completing key update; finally, taking 1024bit key as the object, the "authentication-transmission-screening error correction-privacy amplification" process is completely executed, and the TruncatedSHA-256 function is used to process the key. Through the whole process collaboration and update reuse, the end-to-end total time delay is reduced from 35.02ms to 14μs, breaking through the microsecond level response bottleneck of power relay protection, and meeting the real-time demand of power.

[0074] Please refer to Figure 3 The fusion architecture of the existing optical fiber network of power and QKD system includes three core parts: Lightweight QKD terminal deployment (left substation side): The "substation equipment frame" (size marked "width 482.6mm, height 1U") is inserted with the "QKD small-sized board card" (size marked "200mm×150mm") inside, and the board card integrates the "signal module", "function module" and "protocol conversion module"; The "power distribution terminal miniature quantum memory" (size marked "≤50cm³") is deployed beside the frame and connected with the QKD board card through the "internal connection line", and is marked as "adapted to space-limited scenarios".

[0075] Common fiber transmission link (middle part): The "wavelength division multiplexer" (marked "1550nm classical signal / 850nm quantum signal coupling") is deployed at the substation side and the dispatching center side; The link is marked as "existing backbone optical fiber of power (SDH / OTN network)", and the bidirectional arrow is marked as "quantum signal and classical signal co-transmission without interference"; The wavelength division multiplexer at the dispatching center side is connected with the "QKD receiving board card" (consistent with the structure of the board card at the substation side), and the board card is connected with the "polarization-phase joint measurement module".

[0076] Classical service compatible module (right dispatching center side): The "protocol conversion module" (marked "supports SDH / OTN protocol conversion") of the QKD receiving board card is connected with the "power classical optical transmission equipment"; The classical optical transmission equipment is connected with the "service monitoring module", and is marked as "classical service bit error rate ≤10-9 without affecting the transmission of scheduling data Bottom label: "60% reduction in deployment cost, no need to lay special optical fiber".

[0077] Core role of the drawings: Show the integration of the QKD system with the existing power infrastructure, highlight the adaptive innovation of "lightweight board card embedded in existing machine frame" and "co-fiber transmission multiplexing existing optical fiber", the deployment cost can be reduced by 60%, no need to lay special optical fiber, the body scene compatibility and cost advantage.

[0078] Embodiment 1 The application provides a lightweight low-latency quantum key distribution system adapted to a power scene, which can be used to realize the lightweight low-latency quantum key distribution method adapted to the power scene, and specifically, the lightweight low-latency quantum key distribution system adapted to the power scene is arranged at a sending end and comprises a timestamp module, a function module, a quantum module, an identity module, a signal module, a communication module and a key module.

[0079] The timestamp module is configured to generate a current timestamp based on a quantum fingerprint sequence pre-associated with the receiving end. The function module is connected with the timestamp module and is configured to determine an authentication basis vector and a key transmission basis vector through a hash function according to the timestamp. The quantum module is configured to store the pre-associated quantum fingerprint sequence. The identity module is connected with the quantum module and the function module and is configured to randomly select part of quantum fingerprint photons from the locally stored quantum fingerprint sequence and send the quantum fingerprint photons after modulation by using the authentication basis vector. The signal module is connected with the function module and is configured to encode a to-be-transmitted key into a photon sequence in a polarization-phase two-dimensional encoding mode and send the photon sequence. The communication module is configured to generate and send a key screening mark containing measurement error position information and receive authentication results and error correction interaction information. The key module is connected with the communication module and is configured to use a lightweight hash function to amplify the privacy of the key and generate a final secure key.

[0080] The quantum fingerprint sequence is composed of a plurality of photons with specific polarization states, and the specific polarization states include horizontal polarization, vertical polarization, 45° polarization and 135° polarization.

[0081] The timestamp module adopts a GPS time service module, and the synchronization accuracy is less than or equal to 50 ns.

[0082] The signal module supports polarization-phase two-dimensional encoding, and the encoding mapping is: horizontal polarization+0 phase represents "00", vertical polarization+pi / 2 phase represents "01", 45-degree polarization+pi phase represents "10", and 135-degree polarization+3pi / 2 phase represents "11".

[0083] The protocol conversion module is further included to realize protocol conversion between the quantum key distribution protocol and the existing SDH / OTN network.

[0084] The system is integrated on a miniaturized board card with a size of 200mm*150mm, and is suitable for being inserted into an existing optical transmission equipment frame.

[0085] Specifically, the lightweight low-latency quantum key distribution system in the adaptive power scenario is arranged at a sending end and a receiving end, and includes a timestamp module, a function module, a quantum module, an identity module, a quantum signal receiving and measuring module, a communication module, and a key module.

[0086] The timestamp module is configured to generate a current timestamp synchronized with the sending end. The function module is connected with the timestamp module and is configured to determine an authentication basis vector and a key transmission basis vector through a hash function according to the timestamp. The quantum module is configured to pre-store a quantum fingerprint sequence of the sending end. The identity module is connected with the quantum module and the function module, and is configured to measure received quantum fingerprint photons using the authentication basis vector and perform sequence comparison. The quantum signal receiving and measuring module is connected with the function module, and includes an integrated polarization-phase joint measurement module configured to perform one-time decoding on a received polarization-phase two-dimensional encoded photon sequence. The communication module is configured to receive a key screening mark and perform key error correction interaction. The key module is connected with the communication module and is configured to use a lightweight hash function to perform privacy amplification on the key to generate a final secure key.

[0087] The quantum module is a lightweight quantum storage device with a capacity of ≤10KB and a power consumption of ≤5W.

[0088] The decoding mapping rule of the integrated polarization-phase joint measurement module is: horizontal polarization+0 phase represents "00", vertical polarization+pi / 2 phase represents "01", 45-degree polarization+pi phase represents "10", and 135-degree polarization+3pi / 2 phase represents "11".

[0089] The timestamp module adopts a GPS time service module, and the synchronization accuracy is ≤50ns.

[0090] The protocol conversion module is further included to realize protocol conversion between the quantum key distribution protocol and the existing SDH / OTN network.

[0091] The system is integrated on a miniaturized board card with a size of 200mm*150mm, and is suitable for being inserted into an existing optical transmission equipment frame.

[0092] Embodiment 2 The application provides a terminal device, which comprises a processor and a memory, the memory is used for storing a computer program, the computer program comprises program instructions, and the processor is used for executing the program instructions stored in the computer storage medium. The processor can be a central processing module (CPU), and can also be other general-purpose processors, graphics processing units (GPUs), tensor processing units (TPUs), digital signal processors (DSPs), application specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components and the like, which are the computing core and control core of the terminal, and are suitable for implementing one or more instructions, and are specifically suitable for loading and executing one or more instructions to implement a corresponding method flow or a corresponding function. The processor in the embodiment of the application can be used for adapting the operation of the lightweight low-latency quantum key distribution method in the power field, and is executed by a sending end, and comprises the following steps: Based on the quantum fingerprint sequence pre-associated to the receiving end, a current timestamp is generated; based on the timestamp, an authentication basis vector is determined through a hash function; part of quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, and are sent to the receiving end after being modulated using the authentication basis vector, so that the receiving end can determine the same authentication basis vector based on the synchronized timestamp to perform measurement and comparison, so as to complete identity authentication; after the identity authentication is passed, based on the timestamp, a key transmission basis vector is determined through a hash function; a to-be-transmitted key is acquired, and the key is encoded into a photon sequence in a polarization-phase two-dimensional encoding mode and is sent to the receiving end, so that the receiving end can use an integrated polarization-phase joint measurement module to perform decoding; a key screening mark containing measurement error position information is generated and is sent to the receiving end through a classical channel to perform key screening and error correction; after the key screening and error correction are completed, a lightweight hash function is used to perform privacy amplification on the key to generate a final secure key.

[0093] executed by the receiving end, comprising steps of: generating a current timestamp synchronized with the sending end; determining an authentication basis vector by a hash function according to the timestamp; receiving quantum fingerprint photons sent by the sending end and measuring using the authentication basis vector; comparing the measured quantum fingerprint sequence with the locally pre-stored quantum fingerprint sequence of the sending end to complete identity authentication of the sending end; after the identity authentication passes, determining a key transmission basis vector by a hash function according to the timestamp; receiving a polarized-phase dual-dimension encoded photon sequence sent by the sending end and using an integrated polarization-phase joint measurement module to decode to obtain original key bits; receiving a key screening mark sent by the sending end through a classical channel, screening the key according to the mark, and completing key error correction with the sending end using a lightweight concatenated error correction code; after the key screening and error correction are completed, using a lightweight hash function to privacy amplify the key to generate a final secure key.

[0094] Please refer to Figure 4 , the terminal device is a computer device, the computer device 60 of the embodiment includes: a processor 61, a memory 62, and a computer program 63 stored in the memory 62 and executable on the processor 61, when the computer program 63 is executed by the processor 61, the lightweight low-latency quantum key distribution method in the adaptive power scenario in the embodiment is realized, to avoid repetition, not repeated here. Alternatively, when the computer program 63 is executed by the processor 61, the functions of each model / module in the lightweight low-latency quantum key distribution system in the adaptive power scenario of the embodiment are realized, to avoid repetition, not repeated here.

[0095] The computer device 60 can be a desktop computer, a notebook computer, a palm computer, and a cloud server, etc. The computer device 60 can include, but is not limited to, a processor 61 and a memory 62. Those skilled in the art can understand that Figure 4 is only an example of the computer device 60 and does not constitute a limitation on the computer device 60, and can include more or fewer components than those shown, or combine certain components, or different components, for example, the computer device can also include an input / output device, a network access device, a bus, etc.

[0096] The processor 61 can be a central processing module (CPU), and can also be other general-purpose processors, graphics processing units (GPUs), tensor processing units (TPUs), digital signal processors (DSPs), application specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or can also be any conventional processor.

[0097] The memory 62 can be an internal storage module of the computer device 60, such as a hard disk or a memory of the computer device 60. The memory 62 can also be an external storage device of the computer device 60, such as a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the computer device 60.

[0098] Further, the memory 62 can include both the internal storage module and the external storage device of the computer device 60. The memory 62 is used to store computer programs and other programs and data required by the computer device. The memory 62 can also be used to temporarily store data that has been output or will be output.

[0099] Please refer to Figure 5 , the terminal device is an electronic device 600, which is in the form of a general-purpose computing device. The components of the electronic device can include but are not limited to: at least one processing module 610, at least one storage module 620, a bus 630 connecting different platform components (including the storage module 620 and the processing module 610), a display module 640, etc.

[0100] Among them, the storage module stores program codes, which can be executed by the processing module 610, so that the processing module 610 executes the steps of various exemplary embodiments according to the present application described in the method part of the specification. For example, the processing module 610 can execute the steps as shown in Figure 6 .

[0101] Storage module 620 can include a readable medium in the form of volatile storage module, such as random access memory (RAM) 6201 and / or cache memory 6202, and can further include a non-volatile storage module (ROM) 6203.

[0102] Storage module 620 can also include program / utility 6204 having a set of programs / modules 6205, including an operating system, one or more application programs, other program modules, and program data, each of which or a combination thereof, can include implementation of a networking environment.

[0103] Bus 630 can represent one or more of several types of bus structures, including a storage bus or bus controller, a peripheral bus, a graphics acceleration bus, a processor or local bus using any of a variety of bus architectures.

[0104] Electronic device 600 can also communicate with one or more external devices 700 such as a keyboard or pointing device, using one or more communication interfaces 650. Communication interfaces 650 can also enable communication with one or more devices that enable a user to interact with electronic device 600, such as a

[0105] Example 3 The present application further provides a storage medium, specifically a computer readable storage medium, which is a memory device in the terminal device, and is used to store programs and data. It can be understood that the computer readable storage medium herein can include the built-in storage medium in the terminal device, and of course can include the expansion storage medium supported by the terminal device, and can be any tangible medium containing or storing programs, which can be used by or in combination with an instruction execution system, device or apparatus. The computer readable storage medium provides a storage space, which stores the operating system of the terminal. Moreover, one or more instructions suitable for being loaded and executed by the processor are also stored in the storage space, and the instructions can be one or more computer programs (including program codes). It should be noted that more specific examples of the computer readable storage medium include an electrical connection having one or more wires, a portable disk, a hard disk, a random access memory, a read-only memory, an erasable programmable read-only memory, an optical fiber, a portable compact disk read-only memory, an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0106] The computer readable storage medium further includes a data signal carried in baseband or propagated as a carrier wave, in which readable program codes are borne. Such a propagated data signal can take various forms, including but not limited to electro-magnetic signal, optical signal or any suitable combination of the above. The readable storage medium can also be any readable medium other than the readable storage medium, which can send, propagate or transmit programs for use by or in combination with an instruction execution system, device or apparatus. The program codes contained in the readable storage medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, radio frequency, etc., or any suitable combination of the above.

[0107] The program codes for executing the operation of the present application can be written in any combination of one or more programming languages, including object-oriented programming languages such as Java, C++, etc., and conventional procedural programming languages such as "C" language or similar programming languages. The program codes can be executed entirely on the user computing device, partially on the user device, as an independent software package, partially on the user computing device and partially on the remote computing device, or entirely on the remote computing device or server. In the case involving remote computing device, the remote computing device can be connected to the user computing device through any kind of network, including local area network or wide area network, or can be connected to external computing device (for example, connected through the Internet by using an Internet service provider).

[0108] The one or more instructions stored in the computer readable storage medium can be loaded and executed by the processor to implement the corresponding steps of the lightweight low-latency quantum key distribution method in the adaptive power scenario in the above embodiments; the one or more instructions stored in the computer readable storage medium are loaded and executed by the processor to implement the following steps: executed by the sending end, comprising: Based on the quantum fingerprint sequence pre-associated to the receiving end, a current timestamp is generated; based on the timestamp, an authentication basis vector is determined through a hash function; part of the quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, and are modulated using the authentication basis vector and then sent to the receiving end, so that the receiving end can determine the same authentication basis vector based on the synchronized timestamp to perform measurement and comparison, so as to complete identity authentication; after the identity authentication is passed, a key transmission basis vector is determined through a hash function based on the timestamp; the key to be transmitted is obtained, and the key is encoded into a photon sequence in a polarization-phase two-dimensional encoding mode and then sent to the receiving end, so that the receiving end can use an integrated polarization-phase joint measurement module to perform decoding; a key screening mark containing measurement error position information is generated and sent to the receiving end through a classical channel to perform key screening and error correction; after the key screening and error correction are completed, a lightweight hash function is used to amplify the privacy of the key, and a final secure key is generated.

[0109] executed by the receiving end, comprising the steps of: A current timestamp synchronized with the sending end is generated; based on the timestamp, an authentication basis vector is determined through a hash function; the quantum fingerprint photons sent by the sending end are received, and the authentication basis vector is used for measurement; the quantum fingerprint sequence obtained by measurement is compared with the locally pre-stored quantum fingerprint sequence of the sending end, and the identity authentication of the sending end is completed; after the identity authentication is passed, a key transmission basis vector is determined through a hash function based on the timestamp; the photon sequence encoded in a polarization-phase two-dimensional mode sent by the sending end is received, and an integrated polarization-phase joint measurement module is used for decoding to obtain the original key bits; the key screening mark sent by the sending end through the classical channel is received, and the key screening is performed according to the key screening mark, and the key error correction is completed with the sending end using a lightweight concatenated error correction code; after the key screening and error correction are completed, a lightweight hash function is used to amplify the privacy of the key, and a final secure key is generated.

[0110] The database involved in each embodiment provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a blockchain, and the like, without being limited thereto. The processor involved in each embodiment provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, and the like, without being limited thereto.

[0111] In order to make the purposes, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings herein can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work are within the scope of protection of the present application.

[0112] Embodiment 4: Quantum key distribution time delay reduction method based on protocol core link optimization (1) Identity authentication deployment of quantum fingerprint pre-correlation In this embodiment, first, in the deployment stage of the power system substation (Alice end) and the dispatching center (Bob end), the quantum fingerprint pre-correlation configuration is completed: Alice generates a unique quantum fingerprint sequence composed of 100 specific polarization states (such as horizontal polarization, vertical polarization, etc.), which is transmitted to the Bob end through a power dedicated secure channel, and both parties store the sequence in the local lightweight quantum storage (capacity ≤10 KB, power consumption ≤5 W); during the protocol handshake, Alice generates the current timestamp t1, determines the authentication basis vector (such as X basis) through the SM3 simplified version hash function calculation, randomly selects 10 quantum fingerprint photons and sends them to Bob in the X basis polarization state; Bob synchronously generates the timestamp t2 (control t2 and t1 deviation ≤100 ns), determines the X basis through the same hash function, and uses the integrated polarization measurement module to complete the photon sequence measurement, and compares it with the locally stored quantum fingerprint. If the matching is successful, a 1-bit "authentication passed" signal is sent to Alice, and the entire process takes ≤1 μs.

[0113] (2) Key transmission implementation in "polarization-phase" two-dimensional For the transmission requirement of 1024-bit power dispatch key, the single-photon multi-bit encoding technology is adopted in the embodiment: Alice determines the key transmission basis vector (such as W basis, self-defined composite basis) according to the hash function H (t1+1μs), encodes “00” as “horizontal polarization + 0 phase”, “01” as “vertical polarization + π / 2 phase”, “10” as “45° polarization + π phase”, and “11” as “135° polarization + 3π / 2 phase”, generates 512 encoded photons (each photon carries 2-bit information) to form a key sequence, and transmits the key sequence through the existing power fiber channel; Bob completes the decoding of the two-dimensional information of the photon through the “polarization-phase” joint measurement module (integrating a polarization beam splitter and a phase modulator) at one time, directly restores the 1024-bit key, and the transmission time is ≤5μs.

[0114] (3) Lightweight key screening and error correction execution After the key transmission is completed, the lightweight screening and error correction process is started: Alice arranges the measurement error positions (such as the 12th and 35th photon measurement abnormalities) into an 8-byte “key screening marker” and sends it to Bob through the power classical optical channel; Bob discards the corresponding error key bits according to the marker (screening efficiency ≥95%), and then both parties use a simplified LDPC error correction code to complete the remaining key error correction through 2 rounds of classical interaction (the 1st round sends the error correction code index, and the 2nd round feeds back the check result), and the whole process takes ≤5μs.

[0115] Implementation effect: Firstly, in the deployment stage of the power system substation (Alice end) and the dispatching center (Bob end), a quantum fingerprint sequence containing 100 specific polarization states is generated in advance and stored in a lightweight quantum memory. During the protocol handshake, only 10 random photons are needed to complete authentication, replacing the traditional public key authentication. Secondly, the “polarization-phase” two-dimensional encoding is adopted, and each photon carries 2-bit information, which is decoded at one time through the integrated “polarization-phase” joint measurement module. Finally, the measurement error positions are arranged into short byte screening markers, and a simplified LDPC error correction code is used to complete the error correction through only 2 rounds of classical interaction. Through the cooperation of quantum fingerprint pre-association, two-dimensional encoding, and lightweight error correction, the identity authentication time delay is reduced from 5ms to 1μs (reduced by 99.98%), the 1024-bit key transmission time delay is reduced from 20μs to 5μs (reduced by 75%), and the screening and error correction time delay is reduced from 15μs to 5μs (reduced by 66.67%). The efficiency of each link is significantly improved, meeting the low latency requirements of power business.

[0116] Embodiment 5: End-to-end quantum key distribution real-time guarantee method based on whole-process collaborative optimization (1) Building of whole-process time delay control system This embodiment takes the power relay protection service (which requires millisecond-level response) as the target to build an end-to-end time delay control system: first, integrate the identity authentication, key transmission, screening and error correction optimization scheme in embodiment 1, and clearly define the time threshold of each link (authentication ≤ 1 μs, transmission ≤ 5 μs, screening and error correction ≤ 5 μs); second, deploy a timestamp synchronization module (using GPS timing, synchronization accuracy ≤ 50 ns) at the Alice and Bob ends to ensure that the base vector switching is associated with the timestamp generated by the hash function without additional negotiation; finally, configure a key cache pool (capacity 10000 bits) to avoid the time delay of real-time key generation.

[0117] (2) Efficiency optimization in the key update phase When the remaining amount of the key cache pool is lower than the 1000 bit threshold, this embodiment automatically triggers the key update process: reuse the SM3 simplified hash function in the handshake phase and the “polarization-phase” measurement module without re-executing quantum fingerprint authentication (authentication state maintained for 1 hour); Alice directly determines the transmission base vector according to the current timestamp t3, generates a new 1024 bit key encoding sequence, and sends it, and Bob synchronously decodes, screens and corrects errors, and the entire update process only reuses the mechanism of the previous link, with a time consumption ≤ 20 μs.

[0118] (3) 1024 bit key end-to-end transmission verification This embodiment takes the 1024 bit power control signal encryption key as the transmission object and completely executes the “authentication-transmission-screening and error correction-privacy amplification” process: the privacy amplification stage uses the TruncatedSHA-256 lightweight hash function to process the screened and error-corrected key, remove potential eavesdropping information, and generate the final secure key; the entire process is transmitted through the existing optical fiber of the power grid, and the total end-to-end time delay is only 14 μs, which is much lower than the 35.02 ms of the traditional BB84 protocol.

[0119] Implementation effect: This embodiment reduces the 1024 bit key end-to-end total time delay from 35.02 ms to 14 μs (reduction of 99.96%) through full-process collaboration and key update optimization, breaks through the millisecond-level response bottleneck of power relay protection and real-time scheduling, and ensures the real-time performance of control signal encryption transmission.

[0120] Embodiment 6: Power scene adaptation method based on lightweight design and existing network integration (1) Lightweight QKD terminal device deployment This embodiment aims at the power substation space limited (device installation area ≤ 0.5㎡), low power consumption (single device power consumption ≤ 10W) demand, designs the QKD function module as a small-sized board card (size 200mm×150mm): integrates quantum signal transmission / reception module, lightweight function module (supports SM3 simplified version), can be directly inserted into the existing optical transmission equipment frame of the substation, realizes plug and play; At the same time, deploy a miniature quantum memory (volume ≤ 50cm³) at the power distribution terminal (edge device) to store quantum fingerprint sequences, meet the resource constraints of edge scenarios.

[0121] (2) "Polarization-phase" joint measurement module integration To adapt to the existing optical transmission equipment of the power, this embodiment integrates the "polarization-phase" joint measurement module and the classical optical signal receiving module: the module uses wavelength division multiplexing technology, can receive 1550nm band classical optical signal (power dispatching data) and 850nm band quantum signal at the same time, realizes independent processing of the two types of signals through internal signal separation module, avoids mutual interference between quantum signal and classical signal, ensures normal transmission of classical service (bit error rate ≤ 10 -9 ).

[0122] (3) Co-fiber transmission and existing network compatible configuration In the power backbone optical fiber network (such as SDH / OTN network), this embodiment does not need to lay special quantum optical fiber: through deploying wavelength division multiplexer at both ends of the existing optical fiber, coupling and transmitting quantum signal and classical optical signal; At the same time, integrate protocol conversion module in the quantum encryption frame, support automatic conversion of quantum key distribution protocol and SDH / OTN protocol, make QKD system can seamlessly access the existing power communication network, without modifying the existing network architecture.

[0123] Implementation effect: This embodiment first designs the QKD function module as a 200mm×150mm small-sized board card according to the space and power consumption constraints of the substation, integrates quantum signal processing and hash function module, can be inserted into the existing optical transmission frame, and deploys ≤50cm 3 micro quantum memory at the power distribution terminal; secondly, integrates the "polarization-phase" joint measurement module and the classical optical receiving module, uses wavelength division multiplexing technology to process 1550nm classical signal and 850nm quantum signal at the same time, ensures the bit error rate of classical service ≤ 10 -9 ; finally, deploy wavelength division multiplexer at both ends of the existing power optical fiber, integrate protocol conversion module to realize compatibility with SDH / OTN network; through lightweight device design and co-fiber transmission scheme, solve the problems of large volume, high power consumption and poor compatibility of traditional QKD equipment, reduce the deployment cost by more than 60%, at the same time ensure that quantum key distribution does not affect the transmission of classical power service, provide a feasible path for the large-scale application of quantum secure communication in power system.

[0124] Simulation experiment data 1. Experimental environment Test scenario: optical fiber communication link between a provincial power grid substation and a dispatching center, optical fiber length 50km (typical distance in power scenario); Comparison object: traditional BB84 protocol QKD system, the system of the application; Test index: end-to-end delay, identity authentication delay, key transmission delay, error correction delay, device size, power consumption, deployment cost, bit error rate, key generation rate.

[0125] 2. Simulation test results

[0126] The simulation experiment shows that the application is significantly better than the traditional QKD system in various core indicators, the end-to-end delay reaches the microsecond level, the device realizes lightweight deployment, the deployment cost is greatly reduced, while maintaining high security and low bit error rate, fully meeting the stringent requirements of the power scenario.

[0127] The application significantly reduces the protocol handshake delay and the computing and storage burden of the terminal device through the pre-defined dynamic basis vector set mechanism, single-photon multi-bit encoding mode and quantum fingerprint pre-association mechanism. Specifically, the pre-defined dynamic basis vector set mechanism generates basis vector switching rules through a lightweight hash function associated with the current timestamp, reducing the number of classical channel interactions; the single-photon multi-bit encoding mode uses the polarization-phase two-dimensional encoding of photons to improve information carrying efficiency; the quantum fingerprint pre-association mechanism exchanges quantum fingerprint sequences in advance during system deployment, simplifying the identity authentication process in the protocol handshake phase. In addition, lightweight quantum memory, integrated polarization-phase joint measurement module and lightweight concatenated error correction code are used to further optimize device performance and error correction efficiency.

[0128] In summary, the lightweight low-latency quantum key distribution method and system under the adaptive power scenario of the application, aiming at the special needs of the power scenario, optimizes the system from the aspects of protocol, encoding and device, and achieves significant technical effects. In terms of latency, through quantum fingerprint pre-association authentication (1us), double-dimension encoding transmission (5us), lightweight error correction (3us) and other innovations, the end-to-end distribution latency of 1024-bit keys is reduced from 35.02ms of the traditional protocol to 14us, with a reduction of 99.96%, breaking through the microsecond-level latency bottleneck of power relay protection and other businesses. In terms of device lightweight, through integrated design and protocol optimization, the QKD terminal is integrated into a small 200mmx150mm board, and the power consumption is reduced to less than 10W, which can be directly embedded in existing power communication equipment. In terms of compatibility, through protocol conversion and wavelength division multiplexing technology, quantum signals and classical services can be co-transmitted in existing power optical fibers without the need for dedicated optical fibers, reducing deployment costs by more than 60%. The application provides a complete, practical and efficient quantum key distribution solution for the power system, significantly promoting the large-scale application process of QKD technology in the power industry.

[0129] Those skilled in the art can clearly understand that, for the convenience and brevity of description, only the above-mentioned functional modules and module division are exemplified, and in actual application, the above-mentioned functions can be completed by different functional modules or modules according to needs, that is, the internal structure of the device is divided into different functional modules or modules to complete all or part of the functions described above. Each functional module or module in the embodiment can be integrated in one processing module, or each module can be physically present separately, or two or more modules can be integrated in one module. The above-mentioned integrated module can be realized in the form of hardware or software functional module. In addition, the specific name of each functional module or module is only for easy distinction, and does not limit the protection scope of the application. The specific working process of the module in the above-mentioned system can refer to the corresponding process in the foregoing method embodiment, which will not be described here.

[0130] In the above embodiments, the description of each embodiment has its own emphasis, and the parts not described or recorded in detail in a certain embodiment can be referred to the related description of other embodiments.

[0131] Those skilled in the art can realize that the modules and algorithm steps of each example described in combination with the embodiments disclosed in the application can be realized by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are executed in hardware or software depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the application.

[0132] In the embodiments of the present application, it should be understood that the disclosed apparatus / terminal and method can be implemented in other manners. For example, the embodiments of the apparatus / terminal described above are merely schematic, and the modules or the division of the modules can be changed according to the actual needs. For example, a plurality of modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the modules can be indirect coupling or communication connection through some interfaces, and can be electrical, mechanical or in other forms.

[0133] The modules described as separated components can or can not be physically separated, and the components displayed as modules can or can not be physical modules, i.e., can be located in one place, or can be distributed on a plurality of network modules. Some or all of the modules can be selected according to the actual needs to achieve the purposes of the embodiments of the present application.

[0134] In addition, each functional module in each embodiment of the present application can be integrated in a processing module, or each module can exist physically independently, or two or more modules can be integrated in one module. The integrated module can be realized in the form of hardware or in the form of a software functional module.

[0135] The integrated module / module, if implemented in the form of a software function module and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, all or part of the processes in the above-mentioned embodiment methods can also be completed by a computer program instructing related hardware, and the computer program can be stored in a computer readable storage medium. When the processor executes the computer program, the steps of each method embodiment described above can be implemented. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or some intermediate forms. The computer readable medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (Read-Only Memory, ROM), random access memory (Random-Access Memory, RAM), electrical carrier signal, telecommunication signal, and software distribution medium, and the like. It should be noted that the contents included in the computer readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction, for example, in some jurisdictions, according to legislation and patent practice, the computer readable medium does not include electrical carrier signals and telecommunication signals.

[0136] The present application is described with reference to flowcharts and / or block diagrams according to the methods, devices, and computer program products of the embodiments of the present application. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and the combination of the flows and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device that implements the functions specified in the flowcharts and / or block diagrams. Figure 1 The functions specified in one or more flows and / or blocks Figure 1 The functions specified in one or more flows and / or blocks

[0137] These computer program instructions can also be stored in a computer readable storage medium that can guide the computer or other programmable data processing device to work in a specific way, so that the instructions stored in the computer readable storage medium produce a product including instruction devices, which implement the functions specified in the flowcharts and / or block diagrams. Figure 1 The functions specified in one or more flows and / or blocks Figure 1 The functions specified in one or more flows and / or blocks

[0138] These computer program instructions can also be loaded into a computer or other programmable data processing devices, so that a series of operational steps are performed on the computer or other programmable data processing devices to generate a computer implemented process, so that the instructions executed on the computer or other programmable data processing devices provide a process for implementing the functions specified in the flowchart Figure 1 one flow or multiple flows and / or the functions specified in the block Figure 1 one block or multiple blocks.

[0139] The above is only to illustrate the technical idea of the present application, and cannot limit the protection scope of the present application. Any modification made according to the technical idea of the present application on the basis of the technical scheme falls within the protection scope of the claims of the present application.

Claims

1. A lightweight low-latency quantum key distribution method in an adaptive power scenario, executed by a sending end, characterized in that, The method comprises the following steps: generating a current timestamp based on a quantum fingerprint sequence pre-associated with a receiving end; determining an authentication basis vector through a hash function according to the timestamp; randomly selecting part of quantum fingerprint photons from the locally stored quantum fingerprint sequence, modulating and sending them to the receiving end using the authentication basis vector, so that the receiving end can determine the same authentication basis vector for measurement and comparison based on the synchronized timestamp, to complete identity authentication; after the identity authentication is passed, determining a key transmission basis vector through a hash function according to the timestamp; obtaining a to-be-transmitted key, and encoding the key into a photon sequence in a polarization-phase two-dimensional encoding mode and sending it to the receiving end, so that the receiving end can use an integrated polarization-phase joint measurement module for decoding; generating a key screening marker containing measurement error position information and sending it to the receiving end through a classical channel for key screening and error correction; after the key screening and error correction are completed, using a lightweight hash function to amplify the privacy of the key to generate a final secure key.

2. The lightweight low-latency quantum key distribution method in an adaptive power scenario according to claim 1, characterized in that, The quantum fingerprint sequence is composed of a plurality of photons with specific polarization states, and the specific polarization states include horizontal polarization, vertical polarization, 45° polarization and 135° polarization.

3. The lightweight low-latency quantum key distribution method in an adaptive power scenario according to claim 1, characterized in that, The hash function is a simplified version of SM3, and the hash function generates a basis vector switching rule associated with the current timestamp; when the timestamp deviation between the sending end and the receiving end is less than 100ns, the basis vectors of both sides are determined synchronously.

4. The method of claim 1, wherein the method is adapted to a power-constrained scenario. The specific mapping of the polarization-phase two-dimensional encoding mode is as follows: horizontal polarization+0 phase represents "00", vertical polarization+π / 2 phase represents "01", 45° polarization+π phase represents "10", and 135° polarization+3π / 2 phase represents "11".

5. The lightweight low-latency quantum key distribution method in an adaptive power scenario according to claim 1, characterized in that, The length of the key screening marker is less than or equal to 10 bytes, and the key screening and error correction use a simplified version of LDPC error correction code, and the error correction is completed through 2 rounds of classical interaction.

6. The method of claim 1, wherein the method is adapted to a power-constrained scenario. The lightweight hash function is a TruncatedSHA-256 function.

7. The method of claim 1, wherein the method is adapted to a power-constrained scenario. Further comprising: monitoring the remaining amount of local keys; when the remaining amount of final secure keys is lower than a threshold value, generating a new photon sequence using the basis vector synchronization mechanism and the polarization-phase two-dimensional encoding mode and sending it.

8. The lightweight low-latency quantum key distribution method in an adaptive power scenario according to claim 7, characterized in that, The effective state of the identity authentication is maintained for 1 hour, and the sending end is configured with a key buffer pool with a capacity of 10000 bits for storing the generated final secure key.

9. A lightweight low-latency quantum key distribution system adapted to a power scenario, arranged at a sending end, characterized in that, It comprises: a timestamp module for generating a current timestamp based on a quantum fingerprint sequence pre-associated with a receiving end; a function module connected with the timestamp module, for determining authentication basis vectors and key transmission basis vectors through a hash function according to the timestamp; a quantum module for storing the pre-associated quantum fingerprint sequence; an identity module connected with the quantum module and the function module, for randomly selecting part of quantum fingerprint photons from the locally stored quantum fingerprint sequence and modulating and sending them using the authentication basis vector; a signal module connected with the function module, for encoding a to-be-transmitted key into a photon sequence in a polarization-phase two-dimensional encoding mode and sending it; a communication module for generating and sending a key screening marker containing measurement error position information, and receiving authentication results and error correction interaction information; A key module, connected with the communication module, is configured to use a lightweight hash function to amplify privacy of the key to generate a final secure key.

10. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 9, wherein, The quantum fingerprint sequence is composed of a plurality of photons with specific polarizations, and the specific polarizations include horizontal polarization, vertical polarization, 45° polarization and 135° polarization.

11. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 9, wherein, The timestamp module adopts a GPS time service module, and the synchronization accuracy is less than or equal to 50 ns.

12. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 9, wherein, The signal module supports polarization-phase two-dimensional encoding, and the encoding mapping is as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

13. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 9, wherein, The protocol conversion module is further included to realize protocol conversion between the quantum key distribution protocol and the existing SDH / OTN network of the power supply.

14. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 9, wherein, The system is integrated on a miniaturized board with a size of 200 mm*150 mm, and is suitable for being inserted into an optical transmission equipment frame of the existing power supply.

15. A lightweight low-latency quantum key distribution method suitable for a power scenario, executed by a receiving end, characterized in that, The method comprises the following steps: generating a current timestamp synchronized with a sending end; determining an authentication basis vector through a hash function according to the timestamp; receiving quantum fingerprint photons sent by the sending end and measuring the quantum fingerprint photons using the authentication basis vector; comparing the measured quantum fingerprint sequence with a locally pre-stored quantum fingerprint sequence of the sending end to complete identity authentication of the sending end; after the identity authentication is passed, determining a key transmission basis vector through a hash function according to the timestamp; receiving a photon sequence encoded by polarization-phase two dimensions sent by the sending end, and decoding the photon sequence using an integrated polarization-phase joint measurement module to obtain original key bits; receiving a key screening mark sent by the sending end through a classical channel, screening the key according to the key screening mark, and completing key error correction with the sending end using a lightweight concatenated error correction code; after the key screening and error correction are completed, amplifying privacy of the key using a lightweight hash function to generate a final secure key.

16. The method of claim 15, wherein the method is adapted to a power-constrained scenario. The synchronization accuracy of the timestamp is less than or equal to 100 ns, and the receiving end synchronizes the timestamp with the sending end using a GPS time service, and the synchronization accuracy is less than or equal to 50 ns.

17. The lightweight low-latency quantum key distribution method in an adaptive power scenario according to claim 15, characterized in that, The integrated polarization-phase joint measurement module comprises a polarization beam splitter and a phase modulator, and is configured to complete decoding of two-dimensional information at one time.

18. The method of claim 15, wherein the method is adapted to a power-constrained scenario. The lightweight concatenated error correction code is a simplified version of LDPC error correction code, and the error correction delay is less than or equal to 3 μs, and the key screening efficiency is greater than or equal to 95%.

19. The method of claim 15, wherein the method is adapted to a power-constrained scenario. The key updating step is further included: when the amount of the final secure key is less than a threshold value, the basis vector synchronization mechanism and the integrated polarization-phase joint measurement module are multiplexed to receive and decode a new photon sequence sent by the sending end. 20.A light-weighted low-latency quantum key distribution system adapted to a power scenario, configured at a receiving end, characterized in that, The system comprises: a timestamp module configured to generate a current timestamp synchronized with a sending end; a function module, connected with the timestamp module, configured to determine an authentication basis vector and a key transmission basis vector through a hash function according to the timestamp; a quantum module configured to pre-store a quantum fingerprint sequence of the sending end; an identity module, connected with the quantum module and the function module, configured to measure received quantum fingerprint photons using the authentication basis vector and perform sequence comparison. A quantum signal receiving and measuring module is connected with the function module, and the quantum signal receiving and measuring module includes an integrated polarization-phase joint measuring module for one-time decoding of the received polarization-phase two-dimensional encoding photon sequence; A communication module is configured to receive a key screening mark and perform key error correction interaction. A key module is connected with the communication module and configured to use a lightweight hash function to perform privacy amplification on the key to generate a final secure key.

21. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 20, wherein, The quantum module is a lightweight quantum memory with a capacity of ≤10 KB and a power consumption of ≤5 W.

22. The lightweight low-latency quantum key distribution system in an adaptive power scenario according to claim 20, wherein, The decoding mapping rule of the integrated polarization-phase joint measuring module is that horizontal polarization+0 phase represents "00", vertical polarization+π / 2 phase represents "01", 45° polarization+π phase represents "10", and 135° polarization+3π / 2 phase represents "11".

23. The lightweight low-latency quantum key distribution system in adaptive power scenario according to claim 20, characterized in that, The timestamp module adopts a GPS time service module, and the synchronization accuracy is ≤50 ns.

24. The lightweight low-latency quantum key distribution system in an adaptive power scenario of claim 20, wherein, A protocol conversion module is further included to implement protocol conversion between the quantum key distribution protocol and the existing SDH / OTN network of the power grid. 25.The lightweight low-latency quantum key distribution system in adaptive power scenario of claim 20, wherein, The system is integrated on a miniaturized board with a size of 200 mm×150 mm and is suitable for being inserted into the existing optical transmission equipment frame of the power grid.

26. A computer-readable storage medium storing one or more programs, the one or more programs comprising instructions for: The one or more programs include instructions that, when executed by a computing device, cause the computing device to perform the method of any one of claims 1-8 or any one of claims 15-19.

27. A computing device, comprising: Comprise: One or more processors, memories, and one or more programs, wherein the one or more programs are stored in the memories and configured to be executed by the one or more processors, and the one or more programs include steps for performing the method of any one of claims 1-8 or any one of claims 15-19.

Images