Quantum key output method and system with enhanced security

Abstract

The invention discloses a security-enhanced quantum key output method and system, and the method comprises the steps: distributing an anti-quantum digital certificate which comprises an anti-quantum signature public key and an anti-quantum packaging public key of equipment to each piece of equipment through a digital certificate authentication center; therefore, the quantum key distribution device and the quantum key management device can realize identity verification, quantum key encryption output, data signature verification and the like only by means of the anti-quantum digital certificate, and integrity and non-repudiation guarantee is provided for data transmission. Therefore, the problems that in the prior art, due to the fact that a shared quantum key needs to be preset to achieve identity authentication, quantum key secure transmission and the like, repudiation resistance is not achieved, operation is complex, the system is unstable, and safety is low are solved.

Description

Technical Field

[0001] This invention relates to the field of quantum communication, and specifically to a quantum key output method and system with enhanced security. Background Technology

[0002] In existing quantum secure communication systems, after quantum key distribution devices complete quantum key distribution based on a quantum key distribution protocol, the quantum key must first be output from the quantum key distribution device to the quantum key management device during its use. This output process requires security protection such as authentication and encryption / decryption to ensure the secure transmission of the quantum key from the quantum key distribution device to the quantum key management device.

[0003] In existing technical solutions, the main approach is to pre-set a shared key between the quantum key distribution device and the quantum key management device, and use the shared key for authentication and encryption / decryption to ensure the security of quantum key transmission. Since the shared key is a symmetric key, authentication based on the shared key mainly uses MAC algorithms based on symmetric keys, such as SM4_CBCMAC, for identity verification. This approach has two main drawbacks: (1) Since both parties have the same key, the receiver can forge a MAC message from the sender, and the sender can deny that they sent the message. Therefore, this approach does not support non-repudiation. (2) Since the shared key lacks a credible third-party endorsement, it is essentially a mutual verification of a shared secret rather than an authoritative statement of identity. Therefore, it has no credibility and cannot establish a unique, credible, and non-repudiable identity certificate. Thus, it lacks authority, and the key may be shared by multiple people or stolen, which will greatly reduce the security of identity authentication.

[0004] Since pre-configured shared keys are primarily done manually, requiring point-to-point configuration, the operation is quite complex. Especially as the number of network nodes increases, the number of point-to-point combinations requiring key pre-configuration increases exponentially, consuming significant manpower and resources. In complex multi-node networks, manual pre-configuration can lead to operational errors, causing system malfunctions. Furthermore, when a pre-configured key reaches the end of its lifecycle and needs updating, it must be reconfigured. Because the pre-configured key is a point-to-point shared key, both ends need to be updated synchronously, potentially causing service interruptions and other related issues, thus affecting system stability. Simultaneously, the pre-configured shared key is also used for quantum key encryption between devices; failure to periodically update the shared key will reduce the security of quantum key transmission, posing a risk of leakage. Summary of the Invention

[0005] To address the aforementioned problems in existing technologies, this invention proposes a quantum key output method and system with enhanced security. This method distributes quantum-resistant digital certificates, containing a quantum-resistant signature public key and a quantum-resistant encapsulation public key, to each device through a digital certificate authentication center. This enables quantum key distribution devices and quantum key management devices to achieve identity verification, quantum key encryption output, and data signature verification solely through the quantum-resistant digital certificates. This provides integrity and non-repudiation guarantees for data transmission, thereby avoiding the problems of non-repudiation, operational complexity, system instability, and low security inherent in existing technologies that require pre-configured shared quantum keys for authentication and secure quantum key transmission.

[0006] Specifically, a first aspect of the present invention relates to a security-enhanced quantum key output method, comprising a certificate distribution step, an authentication step, and a quantum key output step, wherein: The certificate distribution step is used by the digital certificate authentication center to issue a first quantum-resistant digital certificate to the quantum key distribution device in response to a first certificate request submitted by the quantum key distribution device, and to issue a second quantum-resistant digital certificate to the quantum key management device in response to a second certificate request submitted by the quantum key management device. The first quantum-resistant digital certificate contains the quantum-resistant signature public key QPK1 and the quantum-resistant encapsulation public key QPK2 of the quantum key distribution device, and the second quantum-resistant digital certificate contains the quantum-resistant signature public key UPK1 and the quantum-resistant encapsulation public key UPK2 of the quantum key management device. The authentication step is used for the quantum key distribution device and the quantum key management device to send their respective quantum-resistant digital certificates to each other, and to verify the identity of the other party based on the received quantum-resistant digital certificates; The quantum key output step is used to, after authentication by the quantum key distribution device and the quantum key management device, in the quantum key distribution device, select a quantum key QKey in response to a quantum key request submitted by the quantum key management device, obtain a shared key SK and its ciphertext SK' based on the quantum-resistant public key UPK2 through a key encapsulation operation, obtain the quantum key data ciphertext ResQKey based on the quantum key QKey through encryption operation of the shared key SK, and send the quantum key data ciphertext ResQKey and the ciphertext SK' to the quantum key management device; and in the quantum key management device, obtain the shared key SK based on the quantum-resistant private key USK2 and the ciphertext SK' through a key decapsulation operation, and obtain the quantum key QKey based on the quantum key data ciphertext ResQKey through decryption operation of the shared key SK.

[0007] Furthermore, in the certificate distribution step, the quantum key distribution device generates a first certificate request based on its quantum-resistant signature public key QPK1 and quantum-resistant encapsulation public key QPK2 and sends it to the digital certificate authentication center, and the digital certificate authentication center generates a first quantum-resistant digital certificate based on the first certificate request using a quantum-resistant signature algorithm; and the quantum key management device generates a second certificate request based on its quantum-resistant signature public key UPK1 and quantum-resistant encapsulation public key UPK2 and sends it to the digital certificate authentication center, and the digital certificate authentication center generates a second quantum-resistant digital certificate based on the second certificate request using a quantum-resistant signature algorithm.

[0008] Furthermore, in the authentication step, the quantum key management device sends its second quantum-resistant digital certificate to the quantum key distribution device; the quantum key distribution device verifies the validity of the second quantum-resistant digital certificate using the root certificate and certificate revocation list of the digital certificate authentication center to verify the identity of the quantum key management device, and sends its first quantum-resistant digital certificate to the quantum key management device after successful authentication; and the quantum key management device verifies the validity of the first quantum-resistant digital certificate using the root certificate and certificate revocation list of the digital certificate authentication center to verify the identity of the quantum key distribution device.

[0009] Furthermore, in the quantum key output step, the quantum key management device generates a quantum key application QKeyObt, uses its quantum-resistant signature private key USK1 to sign the hash value of the quantum key application QKeyObt to obtain the signature value Sign_U1, and sends the quantum key request containing the quantum key application QKeyObt and the signature value Sign_U1 to the quantum key distribution device.

[0010] Furthermore, in the quantum key output step, when the quantum key distribution device receives a quantum key request, it verifies the received signature value Sign_U1 using the quantum-resistant signature public key UPK1.

[0011] Preferably, the quantum key data ciphertext ResQKey is obtained by encrypting the quantum key QKey, its identifier QKeyID, and its length QKeyLen using the shared key SK.

[0012] Furthermore, in the quantum key output step, the quantum key distribution device also uses its quantum-resistant signature private key QSK1 to sign the hash values ​​of the quantum key data ciphertext ResQKey and ciphertext SK' to obtain the signature value Sign_Q1, and sends the quantum key data ciphertext ResQKey, ciphertext SK' and signature value Sign_Q1 together to the quantum key management device.

[0013] Furthermore, in the quantum key output step, when the quantum key management device receives the quantum key data ciphertext ResQKey, ciphertext SK' and its signature value Sign_Q1, it verifies the received signature value Sign_Q1 using the quantum-resistant signature public key QPK1.

[0014] Preferably, in the quantum key output step, after obtaining the quantum key Qkey, the quantum key management device generates a successful acquisition response ResQKM, signs the hash value of the successful acquisition response ResQKM with the quantum-resistant signature private key USK1 to obtain a signature value Sign_Q2, and sends the successful acquisition response ResQKM and its signature value Sign_Q2 together to the quantum key distribution device; and the quantum key distribution device verifies the received signature value Sign_Q2 with the quantum-resistant signature public key UPK1 to determine whether the current quantum key output is complete.

[0015] A second aspect of the present invention relates to a security-enhanced quantum key output system, comprising a digital certificate authentication center, a quantum key distribution device, and a quantum key management device, and configured to achieve quantum key output from the quantum key distribution device to the quantum key management device by means of the above-described quantum key output method. Attached Figure Description

[0016] The specific embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

[0017] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0018] Figure 1 A schematic diagram of the security-enhanced quantum key output system according to the present invention is shown by way of example; Figure 2 A flowchart of the security-enhanced quantum key output method according to the present invention is shown by way of example; Figure 3 The quantum key output steps of the security-enhanced quantum key output method according to the present invention are illustrated by way of example. Detailed Implementation

[0019] In the following description, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments are provided by way of example in order to fully convey the spirit of the invention to those skilled in the art. Therefore, the invention is not limited to the embodiments disclosed herein.

[0020] Figure 1 A schematic diagram of a security-enhanced quantum key output system according to the present invention is shown by way of example.

[0021] As shown in the figure, the quantum key output system of the present invention mainly includes a digital certificate authentication center, a quantum key distribution device, and a quantum key management device. The number of quantum key distribution devices and quantum key management devices is only exemplary, and in fact, any number can be set as needed.

[0022] According to the present invention, in addition to its basic functions, such as distributing quantum keys based on a quantum key distribution protocol and outputting quantum keys according to quantum key requests from a quantum key management device, a quantum key distribution device can also generate quantum-resistant signature public-private key pairs (QPK1, QSK1) and quantum-resistant encapsulation public-private key pairs (QPK2, QSK2) based on quantum-resistant signature algorithms such as the Dilithium algorithm and quantum-resistant encapsulation algorithms such as the Kyber algorithm, and can use its public key to submit a certificate request to a digital certificate authentication center.

[0023] Similarly, in addition to its basic functions, such as quantum key output management for user terminals, quantum key management devices can also generate quantum-resistant signature public-private key pairs (UPK1, USK1) and quantum-resistant encapsulation public-private key pairs (UPK2, USK2) based on quantum-resistant signature algorithms such as the Dilithium algorithm and quantum-resistant encapsulation algorithms such as the Kyber algorithm, and use their public keys to submit certificate requests to digital certificate authentication centers.

[0024] The digital certificate authentication center is configured to generate quantum-resistant digital certificates corresponding to the device that made the certificate request based on certificate requests from quantum key distribution devices, quantum key management devices, etc., and then issue them to that device.

[0025] In this invention, the quantum-resistant digital certificate generated by the digital certificate authentication center in response to a certificate request from a device may contain the device's quantum-resistant signature public key and quantum-resistant encapsulation public key, enabling subsequent authentication and encrypted transmission of quantum keys through this digital certificate, such as authentication between a quantum key distribution device and a quantum key management device, and encrypted transmission of quantum keys from the quantum key distribution device to the quantum key management device.

[0026] In the following text, Figure 1 Based on the quantum key output system shown, combined with Figure 2 and Figure 3 The present invention provides a detailed description of the security-enhanced quantum key output method to better understand the technical concept of the invention and the structure, configuration, or function of each module of the hardware system.

[0027] According to the present invention, the quantum key output method may mainly include a certificate distribution step, an authentication step, and a quantum key output step.

[0028] like Figure 2 As shown, the certificate distribution step involves the quantum key distribution device and the quantum key management device submitting a certificate request to the digital certificate authentication center to apply for a quantum-resistant digital certificate. The digital certificate authentication center then responds to the certificate request by generating a certificate request using a quantum-resistant algorithm and sending it to the corresponding device.

[0029] Specifically, the quantum key distribution device can first generate quantum-resistant signature public-private key pairs QPK1 and QSK1 and quantum-resistant encapsulation public-private key pairs QPK2 and QSK2, and the quantum key management device can generate quantum-resistant signature public-private key pairs UPK1 and USK1 and quantum-resistant encapsulation public-private key pairs UPK2 and USK2.

[0030] Furthermore, the quantum key distribution device uses its quantum-resistant signature public key QPK1 and quantum-resistant encapsulation public key QPK2 to generate a certificate request (hereinafter referred to as the "first certificate request") to apply for a quantum-resistant digital certificate from the digital certificate authority.

[0031] When a digital certificate authentication center receives a first certificate request, it can obtain the quantum-resistant signature public key QPK1 and the quantum-resistant encapsulation public key QPK2 of the quantum key distribution device from the first certificate request. It can then use the quantum-resistant signature algorithm to generate a quantum-resistant digital certificate (hereinafter referred to as the "first quantum-resistant digital certificate") containing the quantum-resistant signature public key QPK1 and the quantum-resistant encapsulation public key QPK2 of the quantum key distribution device, and issue the first quantum-resistant digital certificate to the corresponding quantum key distribution device.

[0032] Similarly, a quantum key management device can use its quantum-resistant signature public key UPK1 and quantum-resistant encapsulation public key UPK2 to generate a certificate request (hereinafter referred to as the "second certificate request") to apply for a quantum-resistant digital certificate from a digital certificate authority.

[0033] When a digital certificate authentication center receives a second certificate request, it can also obtain the quantum-resistant signature public key UPK1 and the quantum-resistant encapsulation public key UPK2 of the quantum key management device from the second certificate request. It can then use the quantum-resistant signature algorithm to generate a quantum-resistant digital certificate (hereinafter referred to as the "second quantum-resistant digital certificate") containing the quantum-resistant signature public key UPK1 and the quantum-resistant encapsulation public key UPK2 of the quantum key management device, and issue the second quantum-resistant digital certificate to the corresponding quantum key management device.

[0034] See also Figure 2 After issuing corresponding quantum-resistant digital certificates to the quantum key distribution device and the quantum key management device through the certificate distribution step, the quantum key distribution device and the quantum key management device can send their respective quantum-resistant digital certificates (obtained through the certificate distribution step) to each other in the identity verification step, and verify the identity of the other party based on the received quantum-resistant digital certificates.

[0035] Specifically, in the authentication step of this invention, the quantum key management device may first send a second quantum-resistant digital certificate to the quantum key distribution device.

[0036] After receiving the second quantum-resistant digital certificate, the quantum key distribution device can verify the validity of the second quantum-resistant digital certificate using, for example, the root certificate and certificate revocation list of a digital certificate authority, thereby performing the authentication of the quantum key management device.

[0037] When the quantum key distribution device verifies the second quantum-resistant digital certificate sent by the quantum key management device, it sends the first quantum-resistant digital certificate obtained from the digital certificate authentication center to the quantum key management device.

[0038] Similarly, after receiving the first quantum-resistant digital certificate, the quantum key management device can also use, for example, the root certificate and certificate revocation list of a digital certificate authority to verify the validity of the first quantum-resistant digital certificate, thereby performing the authentication of the quantum key distribution device.

[0039] After both devices have been authenticated, the quantum key output step can be performed between the quantum key distribution device and the quantum key management device to achieve secure output of the quantum key.

[0040] By utilizing the certificate distribution and authentication steps described above, the quantum key output step of this invention does not require a pre-set shared key between the quantum key distribution device and the quantum key management device, as is the case in the prior art, thus enabling secure encryption of the quantum key output.

[0041] Specifically, in the quantum key output step, the quantum key management device first generates a quantum key application QKeyObt, which may include, for example, the required quantum key length information QkeyLen.

[0042] Subsequently, the quantum key management device can calculate the hash value of the quantum key application QKeyObt, sign the hash value using the quantum-resistant signature private key USK1 to obtain the signature value Sign_U1, and generate a quantum key request based on the quantum key application QKeyObt and the signature value Sign_U1 to send to the quantum key distribution device.

[0043] As an example, the quantum key request QKeyObt and the signature value Sign_U1 can be sent to the quantum key distribution device in the form of QKeyObt||Sign_U1.

[0044] When a quantum key distribution device receives a quantum key request, it can first use the quantum-resistant signature public key UPK1 obtained from the second quantum-resistant digital certificate to verify the quantum key request.

[0045] As an example, a quantum key distribution device can obtain a quantum key application QKeyObt and a signature value Sign_U1 from a quantum key request, and verify the signature value Sign_U1 using a quantum-resistant signature public key UPK1 and the quantum key application QKeyObt, so as to allow the next step to be performed only after the verification is successful.

[0046] See also Figure 3 When the signature value Sign_U1 is verified, the quantum key distribution device can use the quantum-resistant encapsulation public key UPK2 of the quantum key management device to perform key encapsulation operation to obtain the shared key SK and the ciphertext SK' of the shared key SK.

[0047] In addition, the quantum key distribution device can also select a quantum key QKey, for example, with a key identifier of QKeyID and a length of QKeyLen, based on the quantum key application QKeyObt.

[0048] At this point, the quantum key distribution device can use the shared key SK to output the corresponding quantum key to the quantum key management device in an encrypted manner.

[0049] For example, a quantum key distribution device can use a shared key SK to encrypt data containing the quantum key QKey, key identification information QKeyID, and key length information QKeyLen, to obtain the quantum key data ciphertext ResQKey for sending to the quantum key management device.

[0050] As an example, the quantum key data ciphertext ResQKey can be generated by performing encryption operations with the shared key SK in the form of QKeyID||QKeyLen||QKey.

[0051] To allow the quantum key management device to obtain the plaintext of the quantum key QKey, the quantum key distribution device also needs to send the ciphertext SK' of the shared key SK used for the quantum key data ciphertext ResQKey to the quantum key management device. Simultaneously, to ensure data transmission is tamper-proof, the quantum key distribution device also uses its quantum-resistant signature private key QSK1 to sign the hash values ​​of the quantum key data ciphertext ResQKey and the corresponding ciphertext SK' to obtain a signature value Sign_Q1. Finally, the quantum key data ciphertext ResQKey, the ciphertext SK', and the signature value Sign_Q1 are sent together to the quantum key management device, for example, in the form of ResQKey||SK'||Sign_Q1.

[0052] Therefore, when the quantum key management device receives the above data from the quantum key distribution device, it can first obtain the quantum key data ciphertext ResQKey, ciphertext SK', and signature value Sign_Q1 from it. Then, using the quantum-resistant signature public key QPK1 (obtained from the first quantum-resistant digital certificate) and the received quantum key data ciphertext ResQKey and ciphertext SK', it verifies the received signature value Sign_Q1, for example, allowing the next step to be performed only after the verification is successful.

[0053] In the next step, the quantum key management device can use its quantum-resistant private key USK2 to decapsulate the ciphertext SK', obtaining the plaintext of the shared key SK. Then, the quantum key management device can use the shared key SK to decrypt the quantum key data ciphertext ResQKey, ultimately obtaining the plaintext of the quantum key QKey.

[0054] In response, the quantum key management device can generate a success response ResQKM after obtaining the quantum key QKey, which is sent to the quantum key distribution device to indicate the successful output of the current quantum key.

[0055] Specifically, after generating the successful acquisition response ResQKM, the quantum key management device can use its quantum-resistant signature private key USK1 to sign the hash value of the successful acquisition response ResQKM to obtain the signature value Sign_Q2. The successful acquisition response ResQKM and the signature value Sign_Q2 are then sent to the quantum key distribution device together, for example, in the form of ResQKM||Sign_Q2.

[0056] After receiving the successful acquisition response ResQKM and the signature value Sign_Q2, the quantum key distribution device can use the quantum-resistant signature public key UPK1 and the received successful acquisition response ResQKM to verify the signature value Sign_Q2, and determine that the current quantum key output has been successfully completed when the verification is successful.

[0057] In summary, the quantum key output system and method of this invention, by setting up a digital certificate authentication center to distribute quantum-resistant digital certificates based on the X.509 format and including a quantum-resistant signature public key and a quantum-resistant encapsulation public key, allows the quantum key distribution device and the quantum key management device to achieve identity verification, quantum key encryption output, and data signature verification solely through the quantum-resistant digital certificate, thereby providing integrity and non-repudiation guarantees for data transmission. Unlike existing technologies that rely on pre-set shared quantum keys for identity authentication without non-repudiation, this invention utilizes a quantum-resistant signature key for signature verification to ensure the non-repudiation of data transmission during the quantum key output process. Furthermore, the endorsement by a trusted third party provides credibility and authority, improving the security of the key output process. The use of this specific digital certificate eliminates the need for pre-setting shared keys between all point-to-point devices, significantly reducing operational complexity, improving work efficiency, and lowering maintenance costs. Simultaneously, it avoids instability factors such as business interruptions or anomalies caused by asynchronous operations during the shared key update process, improving system stability. Furthermore, compared to the potential reduction in quantum key output security caused by the failure to update the pre-set key in a timely manner in existing technologies, this invention uses a quantum key encapsulation and decapsulation resistant method, negotiating a new shared key before each transmission, thereby making the quantum key output more secure.

[0058] Although the present invention has been described above with reference to the accompanying drawings and specific embodiments, those skilled in the art will readily recognize that the above embodiments are merely exemplary and used to illustrate the principles of the present invention. They do not limit the scope of the present invention. Those skilled in the art can make various combinations, modifications and equivalent substitutions to the above embodiments without departing from the spirit and scope of the present invention.

Claims

1. A security-enhanced quantum key output method, comprising a certificate distribution step, an authentication step, and a quantum key output step, wherein: The certificate distribution step is used by the digital certificate authentication center to issue a first quantum-resistant digital certificate to the quantum key distribution device in response to a first certificate request submitted by the quantum key distribution device, and to issue a second quantum-resistant digital certificate to the quantum key management device in response to a second certificate request submitted by the quantum key management device. The first quantum-resistant digital certificate contains the quantum-resistant signature public key QPK1 and the quantum-resistant encapsulation public key QPK2 of the quantum key distribution device, and the second quantum-resistant digital certificate contains the quantum-resistant signature public key UPK1 and the quantum-resistant encapsulation public key UPK2 of the quantum key management device. The authentication step is used for the quantum key distribution device and the quantum key management device to send their respective quantum-resistant digital certificates to each other, and to verify the identity of the other party based on the received quantum-resistant digital certificates; The quantum key output step is used to, after authentication by the quantum key distribution device and the quantum key management device, in the quantum key distribution device, select a quantum key QKey in response to a quantum key request submitted by the quantum key management device, obtain a shared key SK and its ciphertext SK' based on the quantum-resistant public key UPK2 through a key encapsulation operation, obtain the quantum key data ciphertext ResQKey based on the quantum key QKey through encryption operation of the shared key SK, and send the quantum key data ciphertext ResQKey and the ciphertext SK' to the quantum key management device; and in the quantum key management device, obtain the shared key SK based on the quantum-resistant private key USK2 and the ciphertext SK' through a key decapsulation operation, and obtain the quantum key QKey based on the quantum key data ciphertext ResQKey through decryption operation of the shared key SK.

2. The quantum key output method of claim 1, wherein, In the certificate distribution step, the quantum key distribution device generates a first certificate request based on its quantum-resistant signature public key QPK1 and quantum-resistant encapsulation public key QPK2 and sends it to the digital certificate authentication center. The digital certificate authentication center then generates a first quantum-resistant digital certificate based on the first certificate request using a quantum-resistant signature algorithm. Furthermore, the quantum key management device generates a second certificate request based on its quantum-resistant signature public key UPK1 and quantum-resistant encapsulation public key UPK2 and sends it to the digital certificate authentication center, which then generates a second quantum-resistant digital certificate based on the second certificate request using a quantum-resistant signature algorithm.

3. The quantum key output method of claim 1, wherein, In the authentication process: The quantum key management device sends its second quantum-resistant digital certificate to the quantum key distribution device; The quantum key distribution device verifies the validity of the second quantum-resistant digital certificate by using the root certificate and certificate revocation list of the digital certificate authentication center to verify the identity of the quantum key management device, and sends its first quantum-resistant digital certificate to the quantum key management device after the identity verification is successful; Additionally, the quantum key management device verifies the validity of the first quantum-resistant digital certificate using the root certificate and certificate revocation list of the digital certificate authority to verify the identity of the quantum key distribution device.

4. The quantum key output method of claim 1, wherein, In the quantum key output step, the quantum key management device generates a quantum key application QKeyObt, uses its quantum-resistant signature private key USK1 to sign the hash value of the quantum key application QKeyObt to obtain the signature value Sign_U1, and sends the quantum key request containing the quantum key application QKeyObt and the signature value Sign_U1 to the quantum key distribution device.

5. The quantum key output method of claim 4, wherein, In the quantum key output step, when the quantum key distribution device receives a quantum key request, it verifies the received signature value Sign_U1 using the quantum-resistant signature public key UPK1.

6. The quantum key output method according to claim 1, 4 or 5, wherein, The quantum key data ciphertext ResQKey is obtained by encrypting the quantum key QKey, its identifier QKeyID, and its length QKeyLen using the shared key SK.

7. The quantum key output method according to claim 1 or 6, wherein In the quantum key output step, the quantum key distribution device also uses its quantum-resistant signature private key QSK1 to sign the hash values ​​of the quantum key data ciphertext ResQKey and ciphertext SK' to obtain the signature value Sign_Q1, and sends the quantum key data ciphertext ResQKey, ciphertext SK' and signature value Sign_Q1 together to the quantum key management device.

8. The quantum key output method of claim 7, wherein, In the quantum key output step, when the quantum key management device receives the quantum key data ciphertext ResQKey, ciphertext SK' and its signature value Sign_Q1, it verifies the received signature value Sign_Q1 using the quantum-resistant signature public key QPK1.

9. The quantum key output method of claim 8, wherein, In the quantum key output step, after obtaining the quantum key Qkey, the quantum key management device generates a successful acquisition response ResQKM. It then uses the quantum-resistant signature private key USK1 to sign the hash value of the successful acquisition response ResQKM to obtain the signature value Sign_Q2. Finally, it sends the successful acquisition response ResQKM and its signature value Sign_Q2 together to the quantum key distribution device. Furthermore, the quantum key distribution device uses the quantum-resistant signature public key UPK1 to verify the received signature value Sign_Q2 to determine whether the current quantum key output is complete.

10. A security-enhanced quantum key output system, comprising a digital certificate authentication center, a quantum key distribution device, and a quantum key management device, and configured to output quantum keys from the quantum key distribution device to the quantum key management device using the quantum key output method as described in any one of claims 1-9.

Images