Lightweight low-latency quantum key distribution method and system in adaptive power scenario

Abstract

The application discloses a kind of light weight low latency quantum key distribution method and system under the adaptation electric power scene, belong to quantum communication and electric power communication cross technical field.The method includes the steps of cooperative execution of sending end and receiving end: sending end is based on pre-association quantum fingerprint sequence and time stamp determines base vector, sends key by polarization-phase two-dimensional encoding, generates screening mark and executes privacy amplification;The base vector of receiving end is determined by synchronizing time stamp, authentication is completed by comparing quantum fingerprint, is decoded by integrated module, cooperates error correction and executes privacy amplification.System includes the function module of sending end and receiving end, integrated in miniaturization board card, support common fiber transmission and protocol conversion.The application solves the problem of high delay, high deployment cost, poor adaptability of traditional QKD, end-to-end delay is reduced to 14us, deployment cost is reduced by more than 60%, meet the demand of high security, low latency, light weight deployment of electric power system, suitable for electric power dispatching, relay protection and other key businesses.

Description

Technical Field

[0001] This invention belongs to the interdisciplinary field of quantum communication and power communication, specifically relating to a lightweight, low-latency quantum key distribution method and system adapted to power scenarios, suitable for communication scenarios with high security and low latency requirements in power systems. Background Technology

[0002] As the smart grid undergoes a profound transformation towards digitalization and intelligence, the communication scenarios of the power system are becoming increasingly complex, and critical services are placing extreme demands on the security and real-time performance of communications. The security of the transmission of core information such as power dispatch instructions, relay protection signals, and metering data directly determines the stability of the power grid. However, traditional encryption technologies face the potential risk of being "cracked by computing power" under the impact of quantum computing's computing power. Quantum key distribution (QKD), as the only technology with "unconditional security" characteristics, has become the core choice for upgrading power communication security.

[0003] Currently, power systems primarily rely on traditional public-key encryption to ensure communication security. However, with the development of quantum computing technology, traditional encryption algorithms based on mathematical problems such as large number factorization and discrete logarithms face the threat of being cracked. Quantum key distribution (QKD) technology, based on the principles of quantum mechanics, can theoretically provide "unconditionally secure" key distribution, making it an ideal solution to counter future quantum computing attacks.

[0004] However, directly applying traditional QKD technology to power applications faces three major technical bottlenecks: (1) The protocol delay is too high and cannot meet the real-time requirements of power. Traditional QKD protocols such as BB84 require frequent exchange of basis vector information over classic channels, complex two-way authentication, and multiple key error correction interactions, resulting in end-to-end latency of tens of milliseconds. Power relay protection services require end-to-end latency of less than 10ms, and real-time dispatch services require less than 50ms. Traditional QKD protocols struggle to meet these stringent real-time requirements.

[0005] (2) The size and power consumption of the equipment do not meet the deployment requirements of the power scenario. Substations, distribution rooms, and other power facilities have limited space and strict restrictions on equipment power consumption. Traditional QKD equipment is bulky and consumes a lot of power, making it difficult to embed in existing power communication equipment cabinets, which restricts its large-scale deployment in power systems.

[0006] (3) Poor compatibility with existing power communication infrastructure The power system already has a well-established fiber optic communication network (SDH / OTN). Laying dedicated fiber optic cables separately for QKD would significantly increase construction costs and operational complexity. Traditional QKD systems lack compatibility with existing power communication protocols, making smooth integration difficult.

[0007] These technical bottlenecks severely restrict the widespread application of QKD technology in power systems, and there is an urgent need to develop a quantum key distribution scheme that combines low latency, lightweight design, and high compatibility. Summary of the Invention

[0008] The technical problem to be solved by this invention is to address the shortcomings of the prior art by providing a lightweight, low-latency quantum key distribution method and system adapted to the power scenario. This method and system solve the technical problems of large equipment size, high deployment cost, high communication latency, and insufficient compatibility with existing power communication networks in the power scenario. It enables lightweight deployment of quantum key distribution technology in power communication networks and has low latency characteristics. This technology is suitable for the security encryption of critical power system services and the efficient integration and upgrading of existing power communication infrastructure.

[0009] The present invention adopts the following technical solution: A lightweight, low-latency quantum key distribution method adapted for power scenarios, executed by the sending end, includes the following steps: Based on the quantum fingerprint sequence pre-associated to the receiver, a current timestamp is generated; and based on the timestamp, an authentication basis vector is determined using a hash function. A portion of quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, modulated using the authentication basis vector, and sent to the receiving end. This enables the receiving end to determine the same authentication basis vector based on the synchronized timestamp for measurement and comparison, thereby completing identity authentication. After successful identity authentication, the key transmission basis vector is determined using a hash function based on the timestamp. The key to be transmitted is obtained and encoded into a photon sequence using a polarization-phase dual-dimensional encoding method, and then sent to the receiving end, so that the receiving end can use an integrated polarization-phase joint measurement module for decoding. A key filtering tag containing measurement error location information is generated and sent to the receiving end through a classic channel for key filtering and error correction. After key screening and error correction are completed, a lightweight hash function is used to amplify the privacy of the key and generate the final secure key.

[0010] Preferably, the quantum fingerprint sequence is composed of multiple photons in specific polarization states, including horizontal polarization, vertical polarization, 45° polarization, and 135° polarization.

[0011] Preferably, the hash function is a simplified version of SM3, and the hash function is associated with the current timestamp to generate a basis vector switching rule; when the timestamp difference between the sending end and the receiving end is less than 100ns, the two parties synchronously determine the basis vector.

[0012] Preferably, the specific mapping using the polarization-phase dual-dimensional encoding method is as follows: Horizontal polarization +0 phase represents "00", vertical polarization +π / 2 phase represents "01", 45° polarization +π phase represents "10", and 135° polarization +3π / 2 phase represents "11".

[0013] Preferably, the length of the key screening mark is ≤10 bytes, and the key screening and error correction adopts a simplified version of LDPC error correction code, and error correction is completed through two rounds of classic interaction.

[0014] Preferably, the lightweight hash function is the TruncatedSHA-256 function.

[0015] Preferably, it further includes: Monitor the remaining amount of local key; when the final remaining amount of security key is lower than the threshold, reuse the basis synchronization mechanism and polarization-phase dual-dimensional encoding method to generate a new photon sequence and send it.

[0016] Preferably, the identity authentication is valid for 1 hour, and the sending end is configured with a key cache pool with a capacity of 10,000 bits to store the generated final security key.

[0017] Secondly, embodiments of the present invention provide a lightweight, low-latency quantum key distribution system adapted to power scenarios, configured at the transmitting end, comprising: The timestamp module is used to generate the current timestamp based on the quantum fingerprint sequence pre-associated to the receiver. A function module, connected to the timestamp module, is used to determine the authentication basis vector and the key transmission basis vector based on the timestamp using a hash function; A quantum module for storing pre-correlated quantum fingerprint sequences; The identity module, connected to the quantum module and the function module, is used to randomly select a portion of quantum fingerprint photons from the locally stored quantum fingerprint sequence and transmit them after modulation using authentication basis vectors; The signal module, connected to the function module, is used to encode the key to be transmitted into a photon sequence using a polarization-phase dual-dimensional encoding method and then transmit it. The communication module is used to generate and send key filtering tags containing measurement error location information, and to receive authentication results and error correction interaction information; A key module, connected to the communication module, is used to perform privacy amplification on the key using a lightweight hash function to generate a final secure key.

[0018] Preferably, the quantum fingerprint sequence is composed of multiple photons in specific polarization states, including horizontal polarization, vertical polarization, 45° polarization, and 135° polarization.

[0019] Preferably, the timestamp module uses a GPS timing module with a synchronization accuracy of ≤50ns.

[0020] Preferably, the signal module supports polarization-phase dual-dimensional encoding, with the encoding mapping as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

[0021] Preferably, it also includes a protocol conversion module for converting the quantum key distribution protocol to the existing SDH / OTN network in the power industry.

[0022] Preferably, the system is integrated onto a miniaturized board measuring 200mm × 150mm, suitable for insertion into the chassis of existing power optical transmission equipment.

[0023] Thirdly, embodiments of the present invention provide a lightweight, low-latency quantum key distribution method adapted to power scenarios, executed by the receiving end, including the following steps: Generate a current timestamp synchronized with the sender; determine the authentication basis vector using a hash function based on the timestamp; Receive quantum fingerprint photons sent by the transmitter and perform measurements using the authentication basis vectors; The measured quantum fingerprint sequence is compared with the locally pre-stored quantum fingerprint sequence of the transmitter to complete the authentication of the transmitter. After successful identity authentication, the key transmission basis vector is determined using a hash function based on the timestamp. The receiver sends a photon sequence encoded in both polarization and phase dimensions, and decodes it using an integrated polarization-phase joint measurement module to obtain the original key bits. The receiving end receives a key filtering tag sent through a classic channel, performs key filtering based on it, and completes key error correction with the sending end using a lightweight concatenated error correction code. After key screening and error correction are completed, a lightweight hash function is used to amplify the privacy of the key and generate the final secure key.

[0024] Preferably, the synchronization accuracy of the timestamp is ≤100ns, and the receiving end uses GPS timing to synchronize with the sending end's timestamp, with a synchronization accuracy of ≤50ns.

[0025] Preferably, the integrated polarization-phase joint measurement module includes a polarization beam splitter and a phase modulator, which are used to complete the decoding of two-dimensional information in one go.

[0026] Preferably, the lightweight concatenated error correction code is a simplified version of the LDPC error correction code, with an error correction delay of ≤3μs and a key screening efficiency of ≥95%.

[0027] Preferably, the method further includes a key update step: when the remaining amount of the final security key is lower than a threshold, the basis vector synchronization mechanism and the integrated polarization-phase joint measurement module are reused to receive and decode the new photon sequence sent by the transmitter.

[0028] Fourthly, embodiments of the present invention provide a lightweight, low-latency quantum key distribution system adapted to power scenarios, configured at the receiving end, comprising: The timestamp module is used to generate the current timestamp that is synchronized with the sending end; A function module, connected to the timestamp module, is used to determine the authentication basis vector and the key transmission basis vector based on the timestamp using a hash function; A quantum module for pre-storing the quantum fingerprint sequence of the transmitter; An identity module, connected to the quantum module and the function module, is used to measure the received quantum fingerprint photons using authentication basis vectors and perform sequence alignment; A quantum signal receiving and measurement module is connected to the function module. The quantum signal receiving and measurement module includes an integrated polarization-phase joint measurement module, which is used to decode the received polarization-phase dual-dimensional encoded photon sequence in one go. The communication module is used to receive key filtering tags and perform key error correction interaction; A key module, connected to the communication module, is used to perform privacy amplification on the key using a lightweight hash function to generate a final secure key.

[0029] Preferably, the quantum module is a lightweight quantum memory with a capacity of ≤10KB and a power consumption of ≤5W.

[0030] Preferably, the decoding mapping rule of the integrated polarization-phase joint measurement module is as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

[0031] Preferably, the timestamp module uses a GPS timing module with a synchronization accuracy of ≤50ns.

[0032] Preferably, it also includes a protocol conversion module for converting the quantum key distribution protocol to the existing SDH / OTN network in the power industry.

[0033] Preferably, the system is integrated onto a miniaturized board measuring 200mm × 150mm, suitable for insertion into the chassis of existing power optical transmission equipment.

[0034] Fifthly, a computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the lightweight, low-latency quantum key distribution method for adapting to power scenarios described above.

[0035] In a sixth aspect, embodiments of the present invention provide a computer-readable storage medium including a computer program, which, when executed by a processor, implements the steps of the above-described lightweight, low-latency quantum key distribution method adapted to power scenarios.

[0036] Compared with the prior art, the present invention has at least the following beneficial effects: A lightweight, low-latency quantum key distribution (QKD) method adapted for power scenarios is proposed. Executed by the transmitter, it achieves dual optimization of latency and lightweight design at the process level through a collaborative design of quantum fingerprint pre-association, timestamp-hash function basis vector determination, polarization-phase dual-dimensional encoding, lightweight filtering and error correction, and privacy amplification. Identity authentication is based on pre-associated quantum fingerprints, eliminating the need for real-time negotiation of authentication rules and significantly shortening handshake time. Basis vector determination, through the linkage of timestamps and hash functions, avoids frequent interactions in classical channels. Dual-dimensional encoding improves key transmission efficiency and reduces the number of photons transmitted. Lightweight filtering and error correction, along with privacy amplification, reduce device computational overhead. This scheme comprehensively solves the problems of redundancy, high latency, and heavy device load in traditional QKD processes, ensuring a balance between security and real-time performance under the resource constraints of power scenarios, laying the foundation for subsequent optimization of dependent claims.

[0037] Furthermore, the specific composition of the quantum fingerprint sequence and the number of authentication photons were limited, ensuring the reliability of authentication while minimizing communication overhead. By employing a photon sequence with a specific polarization state, the uniqueness and anti-interference capability of the quantum fingerprint were improved. Randomly selecting 10 photons for authentication, while ensuring sufficient security strength, the authentication process was controlled at the microsecond level, representing a three-order-of-magnitude improvement compared to the millisecond-level latency of traditional public-key authentication.

[0038] Furthermore, a simplified version of the SM3 hash function and a timestamp synchronization mechanism are employed to achieve negotiation-free basis vector synchronization. When the timestamp deviation is less than 100ns, both parties can automatically synchronize the basis vectors, requiring correction only in abnormal situations. This mechanism minimizes the communication overhead of basis vector negotiation while reducing computational complexity through a lightweight hash function, thus satisfying both the requirements of low latency and low computational overhead.

[0039] Furthermore, by employing polarization-phase dual-dimensional encoding technology, a single photon can carry 2 bits of information, improving transmission efficiency by 100% compared to traditional single-dimensional encoding. This encoding method fully utilizes the quantum state resources of photons, generating keys of twice the length within the same transmission time, or halving the time required to generate keys of the same length, effectively reducing key transmission latency.

[0040] Furthermore, by employing short-byte filtering tags and simplified LDPC codes, error correction is completed in just two rounds of interaction. Traditional protocols require 3-5 rounds of interaction, and the filtering tags are relatively large. This scheme optimizes the filtering tag structure and error correction process, controlling the error correction latency to within 3μs, a reduction of over 80% compared to the traditional scheme's latency of over 15μs.

[0041] Furthermore, TruncatedSHA-256 was chosen as the privacy amplification function, significantly reducing computational complexity while ensuring security. This optimized function offers approximately 40% faster processing speed than standard SHA-256, while maintaining sufficient security strength, making it suitable for operation on resource-constrained power terminal equipment.

[0042] Furthermore, a key update reuse mechanism is introduced, allowing for rapid key updates without re-authentication when the key quantity is insufficient. The authentication status based on quantum fingerprinting can be maintained for one hour, during which key updates completely avoid the overhead of repeated authentication, keeping update latency within 20μs and ensuring the continuity of key services.

[0043] Furthermore, configuring a 10,000-bit key cache pool and setting reasonable update thresholds avoids business interruptions caused by key exhaustion while ensuring key freshness. Combined with a 1-hour authentication status maintenance, an optimal balance is achieved between security and efficiency, making it suitable for the long-term stable operation of power services.

[0044] A lightweight, low-latency quantum key distribution (QKD) method adapted to power scenarios is presented. The low-latency QKD processing flow is fully described from the receiver's perspective, emphasizing the crucial role of the integrated polarization-phase joint measurement module. This module achieves one-time decoding of two-dimensional information through hardware optimization, avoiding the latency accumulation caused by step-by-step measurements in traditional schemes, and is the core technology for realizing low-latency decoding.

[0045] Furthermore, high-precision timestamp synchronization (≤50ns) ensures the reliability of basis vector synchronization. Utilizing GPS time synchronization technology, precise coordination of quantum communication is achieved based on the widely deployed time synchronization in the power system, providing technical assurance for negotiation-free basis vector synchronization.

[0046] Furthermore, the integrated measurement module includes a polarization beam splitter and a phase modulator, which achieve parallel processing through hardware integration. This combines the polarization and phase measurements that need to be completed serially in the traditional solution into a single-step operation, reducing the measurement delay by more than 50%.

[0047] Furthermore, the simplified LDPC code maintains high error correction capability (filtering efficiency ≥95%) while keeping the error correction latency within 3μs. By optimizing the codebook design and interaction process, fast and reliable key error correction is achieved with limited computing resources.

[0048] Furthermore, the key update mechanism at the receiving end makes full use of the previously established trust state. By reusing the basis vector synchronization and measurement modules, it achieves fast and seamless key replenishment, ensuring that power services are not affected by key updates.

[0049] It is understood that the beneficial effects of the second to sixth aspects mentioned above can be found in the relevant descriptions in the first aspect mentioned above, and will not be repeated here.

[0050] In summary, this invention significantly reduces protocol handshake latency and terminal device overhead while ensuring the security of quantum key distribution using a one-time pad, thus meeting the stringent requirements of real-time performance and lightweight deployment in power applications.

[0051] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. Attached Figure Description

[0052] Figure 1 This is a system architecture diagram of the latency optimization system based on quantum fingerprint pre-association and pre-dual-dimensional encoding of the present invention; Figure 2 This is a flowchart illustrating the end-to-end real-time performance guarantee of the present invention based on full-process collaboration and key update reuse. Figure 3 This is a structural diagram illustrating the power scenario adaptation of the present invention based on lightweight boards and co-fiber transmission. Figure 4 A schematic diagram of a computer device provided in an embodiment of the present invention; Figure 5 This is a block diagram of a chip according to an embodiment of the present invention; Figure 6 This is a schematic diagram of the process of the present invention.

[0053] Among them, 60. Computer equipment; 61. Processor; 62. Memory; 63. Computer program; 600. Electronic device; 610. Processing module; 620. Storage module; 6201. Random access memory module; 6202. Cache memory module; 6203. Read-only memory module; 6204. Program / utility; 6205. Program module; 630. Bus; 640. Display module; 650. Input / output interface; 660. Network adapter; 700. External device. Detailed Implementation

[0054] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0055] In the description of this invention, it should be understood that the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0056] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the invention. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0057] It should also be further understood that the term "and / or" as used in this specification and the appended claims refers to any combination and all possible combinations of one or more of the associated listed items, and includes such combinations. For example, A and / or B can represent three cases: A alone, A and B simultaneously, and B alone. Additionally, the character " / " in this invention generally indicates that the preceding and following objects have an "or" relationship.

[0058] It should be understood that although terms such as first, second, third, etc., may be used in the embodiments of the present invention to describe the preset range, these preset ranges should not be limited to these terms. These terms are only used to distinguish the preset ranges from one another. For example, without departing from the scope of the embodiments of the present invention, the first preset range may also be referred to as the second preset range, and similarly, the second preset range may also be referred to as the first preset range.

[0059] Depending on the context, the word "if" as used here can be interpreted as "when," "when," "in response to determination," or "in response to detection." Similarly, depending on the context, the phrase "if determination" or "if detection (of the stated condition or event)" can be interpreted as "when determination," "in response to determination," "when detection (of the stated condition or event)," or "in response to detection (of the stated condition or event)."

[0060] The accompanying drawings illustrate various structural schematic diagrams according to embodiments disclosed in this invention. These drawings are not to scale, and some details have been enlarged for clarity, and some details may have been omitted. The shapes of the various regions and layers shown in the drawings, as well as their relative sizes and positional relationships, are merely exemplary and may deviate from reality due to manufacturing tolerances or technical limitations. Furthermore, those skilled in the art can design regions / layers with different shapes, sizes, and relative positions as needed.

[0061] This invention provides a lightweight, low-latency quantum key distribution method adapted to power scenarios. By studying a lightweight, low-latency quantum key distribution method adapted to power scenarios, it fully leverages the "unconditional security" advantage of quantum key distribution while overcoming its existing shortcomings in power applications. This solves the security and real-time issues of critical information transmission in power systems, providing a solid security guarantee for reliable communication in core business operations such as power dispatching and control. With lightweight architecture and low-latency transmission as its core objectives, this invention simplifies the quantum state negotiation process, optimizes the classical channel interaction process, and introduces an adaptive parameter configuration mechanism. While ensuring the one-time pad security of quantum keys, it reduces protocol handshake latency by more than 40%, while simultaneously reducing the computational and storage overhead of terminal devices, adapting to resource-constrained edge communication scenarios. Based on this, it achieves efficient integration of quantum key distribution technology with existing power fiber optic communication networks to meet the stringent requirements of power systems for security encryption and real-time response, reducing deployment costs, enhancing compatibility with existing power infrastructure, and ultimately ensuring the security of critical information transmission and stable operation of the power grid.

[0062] Please see Figure 6 The present invention provides a lightweight, low-latency quantum key distribution method adapted to power scenarios, comprising the following steps: S1. Simplified Quantum State Basis Negotiation Method To address the issues of increased negotiation latency caused by the traditional BB84 protocol requiring frequent exchange of basis vector information via a classic channel and the need to discard corresponding key bits when basis vectors mismatched, this method designs a predefined dynamic basis vector set mechanism: a) During the protocol initialization phase, the sender (Alice) and receiver (Bob) pre-agree on a dynamic set containing four basis vectors: X, Y, Z, and W (where W is a custom composite basis). The basis vector switching rules are generated by associating the current timestamp with a lightweight hash function (such as a simplified version of SM3), without the need to negotiate the basis vector type in real time through the classic channel. b) When the timestamp deviation is less than a preset threshold (e.g., 100ns), Alice and Bob can synchronously determine the basis vector currently in use. Only when the timestamp deviation exceeds the limit can the basis vector synchronization be repaired through a 1-byte correction instruction, which greatly reduces the number of classic channel interactions for basis vector negotiation.

[0063] S2, Quantum State Compressed Transmission Method To reduce the number of quantum states transmitted and lower the transmission delay, this method employs single-photon multi-bit coding technology: a) By using the "polarization-phase" dual-dimensional encoding of photons, a single photon can carry 2 bits of key information (the traditional BB84 protocol only carries 1 bit per photon). For example, horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", etc. b) The receiver can complete the decoding of two-dimensional information in one go through the integrated polarization-phase joint measurement module, avoiding the time delay superposition caused by staged measurement.

[0064] S3, Lightweight Identity Authentication Method To address the issues of high latency and complex two-way authentication via classical channels required by traditional QKD protocols before key distribution, this method designs a quantum fingerprint pre-association mechanism: a) During the system deployment phase, Alice and Bob exchange "quantum fingerprints" (composed of a sequence of 100 photons with specific polarization states, which are unique and cannot be copied) in advance and store them in a local lightweight quantum memory; b) During the protocol handshake phase, Alice only needs to send 10 randomly selected quantum fingerprint photons. Bob can complete the identity authentication by comparing the quantum fingerprint stored locally (authentication success rate ≥99.9%). The authentication process only takes 1μs, which is far lower than the millisecond latency of traditional public key authentication.

[0065] Please see Figure 1 This is a two-way interactive architecture between the substation (Alice end) and the dispatch center (Bob end), mainly consisting of 6 core modules. The modules and signal flow are as follows: (1) Quantum fingerprint generation and storage module (Alice end / Bob end) Alice's module generates 100 specific polarization state quantum fingerprint sequences containing horizontal polarization, vertical polarization, 45° polarization, and 135° polarization. During the deployment phase, the quantum fingerprint sequences are transmitted offline to Bob's module through a secure configuration channel. Both modules are connected to a lightweight quantum memory with a capacity of ≤10KB and a power consumption of ≤5W, used to store quantum fingerprint sequences.

[0066] (2) Identity Module (Alice / Bob) Alice's module receives the timestamp t1 from the timestamp module with a synchronization accuracy ≤100ns, determines the authentication basis vector X through the SM3 simplified hash function module, randomly selects 10 quantum fingerprint photons from the quantum memory, and sends them to Bob's module after polarization modulation of the X basis by the quantum signal modulation module. The Bob module synchronously receives the timestamp t2, determines the basis vector using the same hash function, performs polarization measurement on the X basis using the quantum signal measurement module, compares the photon sequence, and after successful matching, transmits a 1-bit authentication signal through the classical control channel and feeds it back to the Alice end. (3) Dual-dimensional encoding transmission module (Alice end / Bob end) Alice's module receives the 1024-bit power control key to be transmitted, generates a photon sequence through the polarization-phase dual-dimensional encoding module, with horizontal polarization +0 phase = 00 and vertical polarization +π / 2 phase = 01, and sends it to Bob through the quantum channel; The Bob module connects to the integrated polarization-phase joint measurement module to decode the two-dimensional information in one go, and outputs a 1024-bit raw key after decoding. (4) Key filtering and error correction module (Alice end / Bob end) Alice's module generates a short byte filter mark of ≤10 bytes, including the error position, and sends it to Bob through the classic control channel; both modules integrate a simplified version of the LDPC error correction module to complete the discarding and correction of error bits.

[0067] Please see Figure 2 This invention, based on an end-to-end real-time guarantee process for end-to-end collaboration and key update reuse, comprises three stages: initialization, key generation, and key update. The initialization stage (left box) is executed offline once. It includes three steps: dynamic basis set negotiation, hash function configuration, and key cache pool configuration. The arrow points to the key generation stage. The key generation stage consists of authentication, two-dimensional encoded transmission, key filtering and error correction, and privacy amplification. The key update stage consists of a reused basis set synchronization mechanism, reused two-dimensional encoded transmission, and reused filtering and error correction. The "No re-authentication required" indicates an update latency ≤20μs. The implementation steps are as follows: 1) Initialization phase (completed offline, executed only once) a) Alice and Bob negotiate the "dynamic basis set" (containing four basis vectors: X, Y, Z, and W) and the hash function for basis switching (H(t), where t is a timestamp). b) Both parties exchange "quantum fingerprint" sequences and store them in a local quantum memory; c) Configure quantum channel parameters (such as photon transmission attenuation threshold and measurement error tolerance).

[0068] 2) Handshake and authentication phase (core latency optimization step) a) Identity Authentication (1μs): Alice generates the current timestamp t1, determines the authentication basis (such as X basis) through the hash function H(t1), and randomly selects 10 quantum fingerprint photons and sends them to Bob according to the X basis polarization state; Bob synchronously generates timestamp t2 (t2 deviates from t1 by ≤100ns), determines the same basis through H(t2), measures the received photon sequence and compares it with the local quantum fingerprint. If the match is successful, he sends a 1-bit "authentication passed" signal to Alice.

[0069] b) Quantum key transmission (10μs): Alice determines the key transmission basis vector (such as W basis) according to H(t1+Δt) (Δt=1μs, to avoid basis vector repetition), and encodes the key to be transmitted into a photon sequence according to the "polarization-phase" dual dimension and sends it to Bob; Bob determines the same basis vector according to H(t2+Δt), and uses the "polarization-phase" joint measurement module to decode the photon sequence to obtain the original key bits.

[0070] c) Key filtering and error correction (5μs): Both parties exchange "key filtering tokens" (containing only measurement error location information, length ≤10 bytes) through the classic channel, discarding key bits with measurement errors (filtering efficiency ≥95%); using lightweight concatenated error correction codes (such as simplified LDPC codes), error correction can be completed in only 2 rounds of classic interaction (traditional protocols require 3-5 rounds), with error correction latency ≤3μs.

[0071] d) Privacy amplification (3μs): Both parties use the same lightweight hash function (such as TruncatedSHA-256) to amplify the privacy of the filtered key, remove potential eavesdropping information, and generate the final secure key.

[0072] 3) Key update phase (triggered on demand, latency ≤20μs) When the remaining key amount is below the threshold (e.g., 1000 bits), the protocol automatically triggers the key update process, reusing the basis vector synchronization and measurement mechanism of the handshake phase, without the need to re-execute identity authentication (the authentication state based on quantum fingerprint can be maintained for 1 hour), and the update process latency is ≤20μs.

[0073] This invention presents a streamlined, end-to-end collaborative optimization logic, highlighting the innovation of a "key update reuse pre-process mechanism." First, it integrates optimization schemes for identity authentication, key transmission, and filtering / error correction, clearly defining time thresholds for each stage, deploying a GPS-synchronized timestamp module (accuracy ≤50ns), and configuring a key cache pool to avoid real-time generation latency. Second, when the remaining key quantity falls below the threshold, it reuses a simplified SM3 hash function and a "polarization-phase" measurement module, eliminating the need to re-execute quantum fingerprint authentication (state maintained for 1 hour) and quickly completing the key update. Finally, using a 1024-bit key as the object, it fully executes the "authentication-transmission-filtering / error correction-privacy amplification" process, employing the TruncatedSHA-256 function to process the key. Through end-to-end collaboration and update reuse, the total end-to-end latency is reduced from 35.02ms to 14μs, breaking through the microsecond-level response bottleneck of power relay protection and demonstrating its ability to meet the real-time requirements of power systems.

[0074] Please see Figure 3 This is a convergence architecture for the power industry's existing fiber optic network and the QKD system, comprising three core components: Lightweight QKD terminal deployment (left side of substation): The frame is labeled "Substation Equipment Frame" (482.6mm wide, 1U high), and contains a "QKD Miniaturized Board" (200mm x 150mm). The board integrates a "Signal Module", "Function Module", and "Protocol Conversion Module". A "power distribution terminal micro quantum memory" (size marked "≤50cm³") is deployed next to the chassis and connected to the QKD board via an "internal connection cable", marked "suitable for space-constrained scenarios".

[0075] Common fiber transmission link (middle section): Wavelength division multiplexers (labeled "1550nm classical signal / 850nm quantum signal coupling") are deployed on both the substation side and the dispatch center side. The link is labeled "existing backbone fiber optic cable for power (SDH / OTN network)", and the bidirectional arrow indicates "quantum signals and classical signals are transmitted together without interference". The dispatch center side wavelength division multiplexer is connected to the "QKD receiver board" (with the same structure as the substation side board), and the board is connected to the "polarization-phase joint measurement module".

[0076] Classic business compatibility module (right-hand dispatch center side): The "protocol conversion module" (labeled "Supports SDH / OTN protocol conversion") of the QKD receiver board is connected to the "power classic optical transmission equipment"; The classic optical transmission equipment is connected to the "Service Monitoring Module" and marked "Classic Service Bit Error Rate ≤ 10".-9 "It does not affect the data transmission of the scheduling system"; The bottom label reads, "Deployment costs are reduced by 60%, and no dedicated fiber optic cables need to be laid."

[0077] The core function of the attached diagram: The demonstration showcases how the QKD system integrates with existing power infrastructure, highlighting innovative adaptations such as "lightweight boards embedded in existing chassis" and "shared fiber transmission using existing optical fibers." Deployment costs can be reduced by 60%, eliminating the need for laying dedicated optical fibers, demonstrating scenario compatibility and cost advantages.

[0078] Example 1 This invention provides a lightweight, low-latency quantum key distribution system adapted to power scenarios. This system can be used to implement the aforementioned lightweight, low-latency quantum key distribution method adapted to power scenarios. Specifically, the lightweight, low-latency quantum key distribution system adapted to power scenarios is set at the transmitting end and includes a timestamp module, a function module, a quantum module, an identity module, a signal module, a communication module, and a key module.

[0079] The timestamp module is used to generate the current timestamp based on the quantum fingerprint sequence pre-associated to the receiver. A function module, connected to the timestamp module, is used to determine the authentication basis vector and the key transmission basis vector based on the timestamp using a hash function; A quantum module for storing pre-correlated quantum fingerprint sequences; The identity module, connected to the quantum module and the function module, is used to randomly select a portion of quantum fingerprint photons from the locally stored quantum fingerprint sequence and transmit them after modulation using authentication basis vectors; The signal module, connected to the function module, is used to encode the key to be transmitted into a photon sequence using a polarization-phase dual-dimensional encoding method and then transmit it. The communication module is used to generate and send key filtering tags containing measurement error location information, and to receive authentication results and error correction interaction information; A key module, connected to the communication module, is used to perform privacy amplification on the key using a lightweight hash function to generate a final secure key.

[0080] The quantum fingerprint sequence is composed of photons in multiple specific polarization states, including horizontal polarization, vertical polarization, 45° polarization, and 135° polarization.

[0081] The timestamp module uses a GPS timing module with a synchronization accuracy of ≤50ns.

[0082] The signal module supports polarization-phase dual-dimensional encoding, with the encoding mapping as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

[0083] It also includes a protocol conversion module for converting the quantum key distribution protocol to the existing SDH / OTN network in the power industry.

[0084] The system is integrated onto a miniaturized board measuring 200mm × 150mm, suitable for insertion into the chassis of existing power optical transmission equipment.

[0085] Specifically, this lightweight, low-latency quantum key distribution system adapted for power scenarios is set up at the transmitting end and at the receiving end, including a timestamp module, a function module, a quantum module, an identity module, a quantum signal receiving and measurement module, a communication module, and a key module.

[0086] The timestamp module is used to generate the current timestamp that is synchronized with the sending end; A function module, connected to the timestamp module, is used to determine the authentication basis vector and the key transmission basis vector based on the timestamp using a hash function; A quantum module for pre-storing the quantum fingerprint sequence of the transmitter; An identity module, connected to the quantum module and the function module, is used to measure the received quantum fingerprint photons using authentication basis vectors and perform sequence alignment; A quantum signal receiving and measurement module is connected to the function module. The quantum signal receiving and measurement module includes an integrated polarization-phase joint measurement module, which is used to decode the received polarization-phase dual-dimensional encoded photon sequence in one go. The communication module is used to receive key filtering tags and perform key error correction interaction; A key module, connected to the communication module, is used to perform privacy amplification on the key using a lightweight hash function to generate a final secure key.

[0087] The quantum module is a lightweight quantum memory with a capacity of ≤10KB and a power consumption of ≤5W.

[0088] The decoding mapping rule of the integrated polarization-phase joint measurement module is as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

[0089] The timestamp module uses a GPS timing module with a synchronization accuracy of ≤50ns.

[0090] It also includes a protocol conversion module for converting the quantum key distribution protocol to the existing SDH / OTN network in the power industry.

[0091] The system is integrated onto a miniaturized board measuring 200mm × 150mm, suitable for insertion into the chassis of existing power optical transmission equipment.

[0092] Example 2 This invention provides a terminal device comprising a processor and a memory. The memory stores a computer program, which includes program instructions. The processor executes the program instructions stored in the computer storage medium. The processor may be a Central Processing Unit (CPU), or other general-purpose processors, graphics processing units (GPUs), tensor processing units (TPUs), digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. It is the computing and control core of the terminal, suitable for implementing one or more instructions, specifically suitable for loading and executing one or more instructions to achieve a corresponding method flow or function. The processor described in this embodiment can be used to adapt to the operation of a lightweight, low-latency quantum key distribution method in power scenarios, executed by the transmitting end, including: Based on the quantum fingerprint sequence pre-associated to the receiver, a current timestamp is generated. According to the timestamp, an authentication basis vector is determined using a hash function. A portion of quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, modulated using the authentication basis vector, and sent to the receiver. This allows the receiver to determine the same authentication basis vector based on the synchronized timestamp for measurement and comparison, thus completing identity authentication. After successful authentication, the key transmission basis vector is determined using a hash function based on the timestamp. The key to be transmitted is obtained and encoded into a photon sequence using a polarization-phase dual-dimensional encoding method, then sent to the receiver. This allows the receiver to decode using an integrated polarization-phase joint measurement module. A key filtering marker containing measurement error location information is generated and sent to the receiver via a classical channel for key filtering and error correction. After key filtering and error correction, a lightweight hash function is used to amplify the key for privacy, generating the final secure key.

[0093] Executed by the receiving end, including the following steps: Generate a current timestamp synchronized with the sender; determine the authentication basis vector using a hash function based on the timestamp; receive the quantum fingerprint photons sent by the sender and perform measurement using the authentication basis vector; compare the measured quantum fingerprint sequence with the locally pre-stored quantum fingerprint sequence of the sender to complete the authentication of the sender; after successful authentication, determine the key transmission basis vector using a hash function based on the timestamp; receive the polarization-phase dual-dimensional encoded photon sequence sent by the sender and decode it using an integrated polarization-phase joint measurement module to obtain the original key bits; receive the key filtering marker sent by the sender through a classical channel, perform key filtering based on it, and complete key error correction with the sender using a lightweight concatenated error correction code; after key filtering and error correction are completed, use a lightweight hash function to amplify the privacy of the key to generate the final security key.

[0094] Please see Figure 4 The terminal device is a computer device. In this embodiment, the computer device 60 includes a processor 61, a memory 62, and a computer program 63 stored in the memory 62 and executable on the processor 61. When executed by the processor 61, the computer program 63 implements the lightweight, low-latency quantum key distribution method adapted to power scenarios in this embodiment. To avoid repetition, these details are not elaborated here. Alternatively, when executed by the processor 61, the computer program 63 implements the functions of each model / module in the lightweight, low-latency quantum key distribution system adapted to power scenarios in this embodiment. To avoid repetition, these details are not elaborated here.

[0095] Computer device 60 can be a desktop computer, laptop, handheld computer, cloud server, or other computing device. Computer device 60 may include, but is not limited to, a processor 61 and a memory 62. Those skilled in the art will understand that... Figure 4 This is merely an example of computer device 60 and does not constitute a limitation on computer device 60. It may include more or fewer components than shown, or combine certain components, or different components. For example, computer device may also include input / output devices, network access devices, buses, etc.

[0096] The processor 61 may be a central processing unit (CPU), or other general-purpose processors, graphics processing units (GPUs), tensor processing units (TPUs), digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor.

[0097] The memory 62 can be an internal storage module of the computer device 60, such as a hard disk or memory of the computer device 60. The memory 62 can also be an external storage device of the computer device 60, such as a plug-in hard disk, smart media card (SMC), secure digital (SD) card, flash card, etc. equipped on the computer device 60.

[0098] Furthermore, the memory 62 may include both internal storage modules and external storage devices of the computer device 60. The memory 62 is used to store computer programs and other programs and data required by the computer device. The memory 62 can also be used to temporarily store data that has been output or will be output.

[0099] Please see Figure 5 The terminal device is an electronic device 600, which is manifested in the form of a general-purpose computing device. The components of the electronic device may include, but are not limited to: at least one processing module 610, at least one storage module 620, a bus 630 connecting different platform components (including storage module 620 and processing module 610), a display module 640, etc.

[0100] The storage module stores program code, which can be executed by the processing module 610 to perform the steps described in the method section of this specification according to various exemplary embodiments of the present invention. For example, the processing module 610 can perform actions such as... Figure 6 The steps are shown in the figure.

[0101] Storage module 620 may include readable media in the form of volatile storage modules, such as random access memory module (RAM) 6201 and / or cache memory module 6202, and may further include read-only memory module (ROM) 6203.

[0102] The storage module 620 may also include a program / utility 6204 having a set (at least one) of program modules 6205, such program modules 6205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each or some combination of these examples may include an implementation of a network environment.

[0103] Bus 630 can represent one or more of several types of bus structures, including a memory module bus or memory module controller, a peripheral bus, a graphics acceleration port, a processing module, or a local bus using any of the multiple bus structures.

[0104] Electronic device 600 can also communicate with one or more external devices 700 (e.g., keyboard, pointing device, Bluetooth device, etc.), and with one or more devices that enable a user to interact with electronic device 600, and / or with any device that enables electronic device 600 to communicate with one or more other computing devices (e.g., router, modem). This communication can be performed via input / output interface 650. Furthermore, electronic device 600 can also communicate with one or more networks (e.g., local area network, wide area network, and / or public network, such as the Internet) via network adapter 660. Network adapter 660 can communicate with other modules of electronic device 600 via bus 630. It should be understood that, although not shown in the figures, other hardware and / or software modules can be used in conjunction with electronic device 600, including but not limited to: microcode, device drivers, redundancy processing modules, external disk drive arrays, RAID systems, tape drives, and data backup storage platforms.

[0105] Example 3 This invention also provides a storage medium, specifically a computer-readable storage medium, which is a memory device in a terminal device for storing programs and data. It is understood that the computer-readable storage medium here can include both built-in storage media in the terminal device and extended storage media supported by the terminal device; it can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. The computer-readable storage medium provides storage space that stores the terminal's operating system. Furthermore, the storage space also stores one or more instructions suitable for loading and execution by a processor, which can be one or more computer programs (including program code). More specific examples of the computer-readable storage medium include: an electrical connection with one or more wires, a portable disk, a hard disk, random access memory, read-only memory, erasable programmable read-only memory, optical fiber, portable compact disk read-only memory, optical storage device, magnetic storage device, or any suitable combination thereof.

[0106] Computer-readable storage media also include data signals propagated in baseband or as part of a carrier wave, carrying readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable storage medium can also be any readable medium other than a readable storage medium that can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the readable storage medium can be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, radio frequency, etc., or any suitable combination thereof.

[0107] Program code for performing the operations of this invention can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The program code can execute entirely on the user's computing device, partially on the user's computing device, as a standalone software package, partially on the user's computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving remote computing devices, the remote computing device can be connected to the user's computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0108] One or more instructions stored in a computer-readable storage medium can be loaded and executed by a processor to implement the corresponding steps of the lightweight, low-latency quantum key distribution method for power-adaptive scenarios in the above embodiments; one or more instructions in the computer-readable storage medium are loaded and executed by the processor to perform the following steps: Executed by the sender, including: Based on the quantum fingerprint sequence pre-associated to the receiver, a current timestamp is generated. According to the timestamp, an authentication basis vector is determined using a hash function. A portion of quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, modulated using the authentication basis vector, and sent to the receiver. This allows the receiver to determine the same authentication basis vector based on the synchronized timestamp for measurement and comparison, thus completing identity authentication. After successful authentication, the key transmission basis vector is determined using a hash function based on the timestamp. The key to be transmitted is obtained and encoded into a photon sequence using a polarization-phase dual-dimensional encoding method, then sent to the receiver. This allows the receiver to decode using an integrated polarization-phase joint measurement module. A key filtering marker containing measurement error location information is generated and sent to the receiver via a classical channel for key filtering and error correction. After key filtering and error correction, a lightweight hash function is used to amplify the key for privacy, generating the final secure key.

[0109] Executed by the receiving end, including the following steps: Generate a current timestamp synchronized with the sender; determine the authentication basis vector using a hash function based on the timestamp; receive the quantum fingerprint photons sent by the sender and perform measurement using the authentication basis vector; compare the measured quantum fingerprint sequence with the locally pre-stored quantum fingerprint sequence of the sender to complete the authentication of the sender; after successful authentication, determine the key transmission basis vector using a hash function based on the timestamp; receive the polarization-phase dual-dimensional encoded photon sequence sent by the sender and decode it using an integrated polarization-phase joint measurement module to obtain the original key bits; receive the key filtering marker sent by the sender through a classical channel, perform key filtering based on it, and complete key error correction with the sender using a lightweight concatenated error correction code; after key filtering and error correction are completed, use a lightweight hash function to amplify the privacy of the key to generate the final security key.

[0110] The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, distributed databases based on blockchain. The processors involved in the embodiments provided in this application may be, but are not limited to, general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc.

[0111] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but merely to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0112] Example 4: A method for reducing quantum key distribution latency based on optimization of core protocol components (1) Deployment of quantum fingerprint pre-association identity authentication In this embodiment, the pre-association configuration of quantum fingerprints is first completed during the deployment phase between the power system substation (Alice end) and the dispatch center (Bob end): Alice generates a unique quantum fingerprint sequence consisting of 100 specific polarization states (such as horizontal polarization, vertical polarization, etc.), which is transmitted to Bob end through a dedicated power security channel. Both parties store this sequence in a local lightweight quantum memory (capacity ≤10KB, power consumption ≤5W); during the protocol handshake, Alice generates the current timestamp t1, calculates the authentication basis vector (such as X basis) using a simplified version of the SM3 hash function, and randomly selects 10 quantum fingerprint photons according to the X basis polarization state and sends them to Bob; Bob synchronously generates a timestamp t2 (controlling the deviation between t2 and t1 to ≤100ns), determines the X basis using the same hash function, uses an integrated polarization measurement module to complete the photon sequence measurement, compares it with the locally stored quantum fingerprint, and if the match is successful, sends a 1-bit "authentication passed" signal to Alice. The entire process takes ≤1μs.

[0113] (2) Implementation of "polarization-phase" two-dimensional key transmission To address the requirement of transmitting 1024-bit power dispatch keys, this embodiment employs single-photon multi-bit encoding technology: Alice determines the key transmission basis vector (such as W basis, a custom composite basis) based on the hash function H(t1+1μs), encoding "00" as "horizontal polarization + 0 phase", "01" as "vertical polarization + π / 2 phase", "10" as "45° polarization + π phase", and "11" as "135° polarization + 3π / 2 phase", generating 512 encoded photons (each photon carrying 2 bits of information) to form a key sequence, which is transmitted through the existing power fiber optic channel; Bob's end uses a "polarization-phase" joint measurement module (integrating a polarization beam splitter and a phase modulator) to complete the decoding of the photon's two-dimensional information in one go, directly restoring the 1024-bit key, with a transmission time ≤5μs.

[0114] (3) Lightweight key screening and error correction execution In this embodiment, after the key transmission is completed, a lightweight screening and error correction process is initiated: Alice organizes the measurement error positions (such as the abnormal measurement of photons at the 12th and 35th bits) into 8-byte "key screening markers" and sends them to Bob through the power classical optical channel; Bob discards the corresponding erroneous key bits according to the markers (screening efficiency ≥95%). Subsequently, both parties use a simplified version of the LDPC error correction code and complete the remaining key error correction in only 2 rounds of classical interaction (the first round sends the error correction codebook index, and the second round provides feedback on the verification result). The entire process takes ≤5μs.

[0115] Implementation results: This embodiment first pre-generates a quantum fingerprint sequence containing 100 specific polarization states during the deployment phase at the power system substation (Alice end) and dispatch center (Bob end), storing it in a lightweight quantum memory. During the protocol handshake, only 10 random photons are needed to complete authentication, replacing traditional public key authentication. Second, a dual-dimensional "polarization-phase" encoding method is adopted, with each photon carrying 2 bits of information, decoded in one go through an integrated "polarization-phase" joint measurement module. Finally, the measurement error positions are organized into short-byte filtering markers, and a simplified version of LDPC error correction code is used, completing error correction in only two rounds of classical interaction. Through the synergy of quantum fingerprint pre-association, dual-dimensional encoding, and lightweight error correction, the identity authentication latency is reduced from the traditional 5ms to 1μs (a reduction of 99.98%), the 1024-bit key transmission latency is reduced from 20μs to 5μs (a reduction of 75%), and the filtering and error correction latency is reduced from 15μs to 5μs (a reduction of 66.67%). The efficiency of each step is significantly improved, meeting the low-latency requirements of power services.

[0116] Example 5: A Real-Time Guarantee Method for End-to-End Quantum Key Distribution Based on End-to-End Collaborative Optimization (1) Establishment of a full-process time delay control system This embodiment targets power relay protection services (requiring millisecond-level response) and establishes an end-to-end latency control system: First, it integrates the identity authentication, key transmission, and filtering / error correction optimization schemes from Embodiment 1, clarifying the time thresholds for each stage (authentication ≤ 1μs, transmission ≤ 5μs, filtering / error correction ≤ 5μs); second, it deploys a timestamp synchronization module (using GPS timing, with synchronization accuracy ≤ 50ns) on Alice and Bob's ends to ensure that basis vector switching is generated by associating timestamps with hash functions, without the need for additional negotiation; finally, it configures a key cache pool (capacity 10000 bits) to avoid the cumulative latency of real-time key generation.

[0117] (2) Efficiency optimization of the key update phase When the remaining amount in the key cache pool is lower than the 1000-bit threshold, this embodiment automatically triggers the key update process: the simplified SM3 hash function and the "polarization-phase" measurement module of the handshake phase are reused, and there is no need to re-execute quantum fingerprint authentication (the authentication status is maintained for 1 hour); Alice directly determines the transmission basis vector according to the current timestamp t3, generates a new 1024-bit key encoding sequence and sends it, Bob synchronously decodes, filters and corrects errors, and the entire update process only reuses the previous step mechanism, taking ≤20μs.

[0118] (3) 1024-bit key end-to-end transmission verification This embodiment uses a 1024-bit power control signal encryption key as the transmission object and fully executes the "authentication-transmission-screening and error correction-privacy amplification" process: In the privacy amplification stage, the TruncatedSHA-256 lightweight hash function is used to process the key after screening and error correction, remove potential eavesdropping information, and generate the final security key; the entire process is transmitted through the existing power fiber optic cable, and the total end-to-end latency is only 14μs, which is far lower than the 35.02ms of the traditional BB84 protocol.

[0119] Implementation results: This embodiment reduces the total end-to-end latency of the 1024-bit key from 35.02ms to 14μs (a reduction of 99.96%) through end-to-end collaboration and key update optimization, breaking through the microsecond-level response bottleneck of power relay protection and real-time scheduling, and ensuring the real-time performance of encrypted transmission of control signals.

[0120] Example 6: A Power Scenarios Adaptation Method Based on Lightweight Design and Integration with Existing Networks (1) Deployment of lightweight QKD terminal equipment This embodiment addresses the space-constrained (equipment installation area ≤ 0.5㎡) and low-power (single device power consumption ≤ 10W) ​​requirements of power substations. The QKD functional module is designed as a miniaturized board (size 200mm×150mm): integrating a quantum signal transmission / reception module and a lightweight function module (supporting SM3 simplified version), which can be directly inserted into the existing optical transmission equipment chassis of the substation for plug-and-play functionality; at the same time, a micro quantum memory (volume ≤ 50cm³) is deployed in the power distribution terminal (edge ​​device) to store quantum fingerprint sequences, meeting the resource constraints of edge scenarios.

[0121] (2) Integration of "polarization-phase" joint measurement module To adapt to existing power optical transmission equipment, this embodiment integrates a polarization-phase joint measurement module with a classical optical signal receiving module. The module employs wavelength division multiplexing (WDM) technology, enabling simultaneous reception of 1550nm classical optical signals (power dispatch data) and 850nm quantum signals. An internal signal separation module allows for independent processing of the two types of signals, preventing interference between the quantum and classical signals and ensuring normal transmission of classical services (bit error rate ≤ 10%). -9 ).

[0122] (3) Configuration for co-fiber transmission compatible with existing networks In this embodiment, in power backbone optical fiber networks (such as SDH / OTN networks), there is no need to lay dedicated quantum optical fibers: by deploying wavelength division multiplexers at both ends of existing optical fibers, quantum signals and classical optical signals are coupled and transmitted; at the same time, a protocol conversion module is integrated into the quantum encryption chassis to support automatic conversion between quantum key distribution protocols and SDH / OTN protocols, so that the QKD system can be seamlessly connected to the existing power communication network without modifying the existing network architecture.

[0123] Implementation results: This embodiment first addresses the space and power consumption constraints of substations by designing the QKD functional module as a miniaturized 200mm×150mm board, integrating quantum signal processing and hash function modules. It can be inserted into existing optical transmission racks, and the power distribution terminal deployment is ≤50cm. 3 The system utilizes a miniature quantum memory. Secondly, it integrates a polarization-phase joint measurement module with a classical optical receiving module, employing wavelength division multiplexing (WDM) technology to simultaneously process 1550nm classical signals and 850nm quantum signals, ensuring a classical service bit error rate ≤10%. -9 Finally, wavelength division multiplexers are deployed at both ends of the existing power optical fiber, and a protocol conversion module is integrated to achieve compatibility with SDH / OTN networks. Through lightweight equipment design and co-fiber transmission scheme, the problems of large size, high power consumption and poor compatibility of traditional QKD equipment are solved, and the deployment cost is reduced by more than 60%. At the same time, it is ensured that quantum key distribution does not affect the transmission of classical power services, providing a feasible path for the large-scale application of quantum secure communication in power systems.

[0124] Simulation experimental data 1. Experimental Environment Test scenario: Fiber optic communication link between a provincial power grid substation and the dispatch center, with a fiber optic length of 50km (typical distance in a power scenario). Comparison objects: Traditional BB84 protocol QKD system, the system of this invention; Test metrics: end-to-end latency, authentication latency, key transmission latency, error correction latency, device size, power consumption, deployment cost, bit error rate, and key generation rate.

[0125] 2. Simulation test results

[0126] Simulation experiments show that the present invention is significantly superior to the traditional QKD system in all core indicators. The end-to-end latency reaches the microsecond level, the device can be deployed in a lightweight manner, the deployment cost is greatly reduced, and at the same time, it maintains high security and low bit error rate, fully meeting the stringent requirements of the power scenario.

[0127] This invention significantly reduces protocol handshake latency and the computational and storage burden on terminal devices through a predefined dynamic basis set mechanism, a single-photon multi-bit encoding method, and a quantum fingerprint pre-association mechanism. Specifically, the predefined dynamic basis set mechanism generates basis switching rules by associating the current timestamp with a lightweight hash function, reducing the number of classical channel interactions; the single-photon multi-bit encoding method utilizes polarization-phase dual-dimensional encoding of photons to improve information carrying efficiency; and the quantum fingerprint pre-association mechanism pre-exchanges quantum fingerprint sequences during system deployment, simplifying the identity authentication process during the protocol handshake phase. Furthermore, lightweight quantum memory, an integrated polarization-phase joint measurement module, and lightweight concatenated error correction codes further optimize device performance and error correction efficiency.

[0128] In summary, this invention presents a lightweight, low-latency quantum key distribution method and system adapted for power scenarios. Addressing the specific needs of power applications, it systematically optimizes the protocol, encoding, and device aspects, achieving significant technical results. Regarding latency, innovations such as quantum fingerprint pre-association authentication (1μs), dual-dimensional encoded transmission (5μs), and lightweight error correction (3μs) reduce the end-to-end distribution latency of a 1024-bit key from 35.02ms in traditional protocols to 14μs, a reduction of 99.96%, overcoming the microsecond-level latency bottleneck in power relay protection and other services. In terms of device lightweighting, through integrated design and protocol optimization, the QKD terminal is integrated into a small 200mm×150mm board, reducing power consumption to below 10W, allowing direct embedding into existing power communication equipment. Regarding compatibility, through protocol conversion and wavelength division multiplexing (WDM) technology, quantum signals and classical services can be co-transmitted in existing power optical fibers without the need for dedicated optical fibers, reducing deployment costs by more than 60%. This invention provides a complete, practical, and efficient quantum key distribution solution for power systems, significantly advancing the large-scale application of QKD technology in the power industry.

[0129] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described functional modules are used as examples. In practical applications, the functions described above can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. The functional modules in the embodiments can be integrated into one processing module, or each module can exist physically separately, or two or more modules can be integrated into one module. The integrated modules can be implemented in hardware or as software functional modules. Furthermore, the specific names of the functional modules are only for easy differentiation and are not intended to limit the scope of protection of this application. The specific working process of the modules in the above system can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0130] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail or recorded in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0131] Those skilled in the art will recognize that the modules and algorithm steps of the various examples described in conjunction with the embodiments disclosed in this invention can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0132] In the embodiments provided by this invention, it should be understood that the disclosed devices / terminals and methods can be implemented in other ways. For example, the device / terminal embodiments described above are merely illustrative. For instance, the division of modules or modules is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple modules or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or modules may be electrical, mechanical, or other forms.

[0133] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical modules; that is, they may be located in one place or distributed across multiple network modules. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0134] Furthermore, the functional modules in the various embodiments of the present invention can be integrated into one processing module, or each module can exist physically separately, or two or more modules can be integrated into one module. The integrated modules described above can be implemented in hardware or as software functional modules.

[0135] If the integrated module / module is implemented as a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying the computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random-access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc. It should be noted that the content included in the computer-readable medium can be appropriately added or removed according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electrical carrier signals and telecommunication signals.

[0136] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus, and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0137] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0138] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0139] The above content is only for illustrating the technical concept of the present invention and should not be construed as limiting the scope of protection of the present invention. Any modifications made to the technical solution based on the technical concept proposed in this invention shall fall within the scope of protection of the claims of this invention.

Claims

1. A lightweight, low-latency quantum key distribution method adapted to power scenarios, executed by the sending end, characterized in that... Includes the following steps: Generate the current timestamp based on the quantum fingerprint sequence pre-correlated to the receiver; The authentication basis vector is determined using a hash function based on the timestamp. A portion of quantum fingerprint photons are randomly selected from the locally stored quantum fingerprint sequence, modulated using the authentication basis vector, and sent to the receiving end. This enables the receiving end to determine the same authentication basis vector based on the synchronized timestamp for measurement and comparison, thereby completing identity authentication. After successful identity authentication, the key transmission basis vector is determined using a hash function based on the timestamp. The key to be transmitted is obtained and encoded into a photon sequence using a polarization-phase dual-dimensional encoding method, and then sent to the receiving end, so that the receiving end can use an integrated polarization-phase joint measurement module for decoding. A key filtering tag containing measurement error location information is generated and sent to the receiving end through a classic channel for key filtering and error correction. After key screening and error correction are completed, a lightweight hash function is used to amplify the privacy of the key and generate the final secure key.

2. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 1, characterized in that, The quantum fingerprint sequence is composed of photons in multiple specific polarization states, including horizontal polarization, vertical polarization, 45° polarization, and 135° polarization.

3. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 1, characterized in that, The hash function is a simplified version of SM3. The hash function is associated with the current timestamp to generate the basis vector switching rule. When the timestamp difference between the sending end and the receiving end is less than 100ns, the two parties synchronously determine the basis vector.

4. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 1, characterized in that, The specific mapping using the polarization-phase dual-dimensional encoding method is as follows: Horizontal polarization +0 phase represents "00", vertical polarization +π / 2 phase represents "01", 45° polarization +π phase represents "10", and 135° polarization +3π / 2 phase represents "11".

5. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 1, characterized in that, The length of the key filtering mark is ≤10 bytes. The key filtering and error correction adopts a simplified version of LDPC error correction code and completes error correction through two rounds of classic interaction.

6. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 1, characterized in that, The lightweight hash function is the TruncatedSHA-256 function.

7. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 1, characterized in that, Also includes: Monitor the remaining amount of local key; when the final remaining amount of security key is lower than the threshold, reuse the basis synchronization mechanism and polarization-phase dual-dimensional encoding method to generate a new photon sequence and send it.

8. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 7, characterized in that, The identity authentication is valid for 1 hour, and the sending end is configured with a key cache pool with a capacity of 10,000 bits to store the generated final security key.

9. A lightweight, low-latency quantum key distribution system adapted to power scenarios, located at the transmitting end, characterized in that, include: The timestamp module is used to generate the current timestamp based on the quantum fingerprint sequence pre-associated to the receiver. A function module, connected to the timestamp module, is used to determine the authentication basis vector and the key transmission basis vector based on the timestamp using a hash function; A quantum module for storing pre-correlated quantum fingerprint sequences; The identity module, connected to the quantum module and the function module, is used to randomly select a portion of quantum fingerprint photons from the locally stored quantum fingerprint sequence and transmit them after modulation using authentication basis vectors; The signal module, connected to the function module, is used to encode the key to be transmitted into a photon sequence using a polarization-phase dual-dimensional encoding method and then transmit it. The communication module is used to generate and send key filtering tags containing measurement error location information, and to receive authentication results and error correction interaction information; A key module, connected to the communication module, is used to perform privacy amplification on the key using a lightweight hash function to generate a final secure key.

10. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 9, characterized in that, The quantum fingerprint sequence is composed of photons in multiple specific polarization states, including horizontal polarization, vertical polarization, 45° polarization, and 135° polarization.

11. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 9, characterized in that, The timestamp module uses a GPS timing module with a synchronization accuracy of ≤50ns.

12. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 9, characterized in that, The signal module supports polarization-phase dual-dimensional encoding, with the encoding mapping as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

13. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 9, characterized in that, It also includes a protocol conversion module for converting the quantum key distribution protocol to the existing SDH / OTN network in the power industry.

14. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 9, characterized in that, The system is integrated onto a miniaturized board measuring 200mm × 150mm, suitable for insertion into the chassis of existing power optical transmission equipment.

15. A lightweight, low-latency quantum key distribution method adapted to power scenarios, executed by the receiving end, characterized in that... Includes the following steps: Generate a current timestamp that is synchronized with the sending end; The authentication basis vector is determined using a hash function based on the timestamp. Receive quantum fingerprint photons sent by the transmitter and measure them using the authentication basis vectors; The measured quantum fingerprint sequence is compared with the locally pre-stored quantum fingerprint sequence of the transmitter to complete the authentication of the transmitter. After successful identity authentication, the key transmission basis vector is determined using a hash function based on the timestamp. The receiver sends a photon sequence encoded in both polarization and phase dimensions, and decodes it using an integrated polarization-phase joint measurement module to obtain the original key bits. The receiving end receives a key filtering tag sent through a classic channel, performs key filtering based on it, and completes key error correction with the sending end using a lightweight concatenated error correction code. After key screening and error correction are completed, a lightweight hash function is used to amplify the privacy of the key and generate the final secure key.

16. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 15, characterized in that, The synchronization accuracy of the timestamp is ≤100ns, and the receiving end uses GPS time synchronization to achieve synchronization with the sending end's timestamp, with a synchronization accuracy of ≤50ns.

17. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 15, characterized in that, The integrated polarization-phase joint measurement module includes a polarization beam splitter and a phase modulator, which are used to complete the decoding of two-dimensional information in one go.

18. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 15, characterized in that, The lightweight concatenated error correction code is a simplified version of the LDPC error correction code, with an error correction delay of ≤3μs and a key filtering efficiency of ≥95%.

19. The lightweight, low-latency quantum key distribution method adapted to power scenarios according to claim 15, characterized in that, It also includes a key update step: when the remaining amount of the final security key is lower than the threshold, the basis vector synchronization mechanism and the integrated polarization-phase joint measurement module are reused to receive and decode the new photon sequence sent by the transmitter.

20. A lightweight, low-latency quantum key distribution system adapted to power scenarios, located at the receiving end, characterized in that, include: The timestamp module is used to generate the current timestamp that is synchronized with the sending end; A function module, connected to the timestamp module, is used to determine the authentication basis vector and the key transmission basis vector based on the timestamp using a hash function; A quantum module for pre-storing the quantum fingerprint sequence of the transmitter; An identity module, connected to the quantum module and the function module, is used to measure the received quantum fingerprint photons using authentication basis vectors and perform sequence alignment; A quantum signal receiving and measurement module is connected to the function module. The quantum signal receiving and measurement module includes an integrated polarization-phase joint measurement module, which is used to decode the received polarization-phase dual-dimensional encoded photon sequence in one go. The communication module is used to receive key filtering tags and perform key error correction interaction; A key module, connected to the communication module, is used to perform privacy amplification on the key using a lightweight hash function to generate a final secure key.

21. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 20, characterized in that, The quantum module is a lightweight quantum memory with a capacity of ≤10KB and a power consumption of ≤5W.

22. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 20, characterized in that, The decoding mapping rule of the integrated polarization-phase joint measurement module is as follows: horizontal polarization + 0 phase represents "00", vertical polarization + π / 2 phase represents "01", 45° polarization + π phase represents "10", and 135° polarization + 3π / 2 phase represents "11".

23. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 20, characterized in that, The timestamp module uses a GPS timing module with a synchronization accuracy of ≤50ns.

24. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 20, characterized in that, It also includes a protocol conversion module for converting the quantum key distribution protocol to the existing SDH / OTN network in the power industry.

25. The lightweight, low-latency quantum key distribution system adapted to power scenarios according to claim 20, characterized in that, The system is integrated onto a miniaturized board measuring 200mm × 150mm, suitable for insertion into the chassis of existing power optical transmission equipment.

26. A computer-readable storage medium for storing one or more programs, characterized in that, The one or more programs include instructions that, when executed by a computing device, cause the computing device to perform the method of any one of claims 1 to 8, or any one of claims 15 to 19.

27. A computing device, characterized in that, include: One or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including steps for performing the method of any one of claims 1 to 8, or any one of claims 15 to 19.

Images