Quantum key distribution management device and QKD equipment

Abstract

The utility model provides a quantum key distribution management device and a QKD device, the device comprises an encryption chip, a solid state disk, a first fully programmable system-on-chip and a second fully programmable system-on-chip, the solid state disk and the encryption chip are respectively connected with a processor system in the first fully programmable system-on-chip through an SATA interface and a QSPI interface, and the first fully programmable system-on-chip and the second fully programmable system-on-chip are respectively connected with the processor system in the second fully programmable system-on-chip. The programmable logic in the first all-programmable system-on-chip is connected with the programmable logic in the second all-programmable system-on-chip through a GTX interface, and the processor system in the second all-programmable system-on-chip is connected with an external network. According to the utility model, the control of the quantum key distribution process of the QKD equipment and the management of the quantum key can be realized, and illegal access and hostile attack to the QKD equipment from an external network can be effectively prevented.

Description

Technical Field

[0001] The utility model relates to the technical field of quantum communication, in particular to a quantum key distribution management device and a QKD device comprising the quantum key distribution management device. Background Art

[0002] Quantum Key Distribution (QKD) equipment is a key technology device that uses quantum physics principles to achieve secure communications. This device can use the quantum properties of light to generate secure random keys with the QKD device at the other end, which can then be used for data encryption and decryption.

[0003] Generally, the generation of quantum keys requires the participation of the transmitter's QKD device (Alice) and the receiver's QKD device (Bob). Specifically, Alice uses a specific quantum state (such as the polarization of a photon) to encode information and randomly generates a series of quantum bits, which are sent to Bob through a quantum channel. Bob also randomly selects a basis for measurement to obtain information about the quantum bits. Subsequently, Alice and Bob exchange their basis selection information through a secure public channel, but do not share specific quantum bit values. By comparing the basis information, they can identify those quantum bits measured on the same basis, which constitute their shared key. This process is usually called the quantum key distribution process. Since this process does not require a secure channel in the traditional sense, the security of the key is ensured, which means that any unauthorized eavesdropper (Eve) who attempts to intercept or measure the quantum bits in transmission will inevitably introduce detectable errors, thereby ensuring the confidentiality of the key.

[0004] In related technologies, the quantum key distribution process consists of two parts: optical communication and classical communication. Optical communication is used to securely distribute quantum bits, while classical communication is used to assist in generating the final key, including key verification, error correction, and privacy amplification. Therefore, the QKD device needs to be connected to an external network to achieve classical communication. Direct access to an external network may expose the QKD device to potential network attacks and undermine the stability of quantum key distribution.

[0005] In addition, as time goes by, more and more quantum keys will be generated, and the safe storage and use of these keys is also an urgent problem to be solved. Summary of the invention

[0006] The purpose of the utility model is to provide a quantum key distribution management device for a QKD device and a QKD device including the quantum key distribution management device to solve the above-mentioned technical problems.

[0007] According to one aspect of the utility model, a quantum key distribution management device is provided, the device comprising: an encryption chip for encrypting or decrypting quantum keys; a solid state drive for storing encrypted quantum keys; a first fully programmable system-on-chip for controlling the quantum key distribution of QKD equipment and managing the life cycle of quantum keys; a second fully programmable system-on-chip for filtering external network data, wherein the solid state drive and the encryption chip are connected to the processor system in the first fully programmable system-on-chip via a SATA interface and a QSPI interface respectively, the programmable logic in the first fully programmable system-on-chip is connected to the programmable logic in the second fully programmable system-on-chip via a GTX interface, and the processor system in the second fully programmable system-on-chip is connected to an external network.

[0008] Preferably, the processor system in the first fully programmable system on chip is connected to an external terminal.

[0009] Preferably, the external terminal obtains the quantum key from the solid state drive via the processor system in the first fully programmable system on chip.

[0010] Preferably, the QKD device performs quantum communication with another QKD device at the opposite end via free space and / or optical fiber, and the QKD device performs classical communication with another QKD device at the opposite end via the second fully programmable system on chip. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] The above-mentioned objects and features of the present invention will become more clear through the following description in conjunction with the accompanying drawings.

[0012] Figure 1 The invention shows a quantum key distribution management device. DETAILED DESCRIPTION

[0013] Hereinafter, embodiments of the present utility model will be described in detail with reference to the accompanying drawings.

[0014] Reference Figure 1 The quantum key distribution management device provided by the utility model may at least include an encryption chip 101, a solid-state drive 102, a first fully programmable system on chip 103 (such as, but not limited to, a ZYNQ chip) and a second fully programmable system on chip 104 (such as, but not limited to, a ZYNQ chip).

[0015] The encryption chip 101 can be used to encrypt or decrypt quantum keys; the solid-state drive 102 can be used to store encrypted quantum keys; the first fully programmable system-on-chip 103 can be used to control the quantum key distribution of the QKD device and manage the life cycle of the quantum key; the second fully programmable system-on-chip 104 can be used to filter external network data to prevent external networks from attacking the quantum key distribution of the QKD device, wherein the solid-state drive 102 and the encryption chip 101 can be connected to the processor system in the first fully programmable system-on-chip 103 via the SATA interface and the QSPI interface respectively, the programmable logic in the first fully programmable system-on-chip 103 can be connected to the programmable logic in the second fully programmable system-on-chip 104 via the GTX interface, and the processor system in the second fully programmable system-on-chip 104 is connected to an external network (not shown in the figure).

[0016] exist Figure 1 In the illustrated apparatus, the management of the life cycle of the quantum key by the first fully programmable system on chip 103 may include, for example, but not limited to, encryption and decryption of the quantum key and synchronous storage and synchronous destruction of the quantum key between the QKD device and another QKD device at the other end.

[0017] exist Figure 1 In the illustrated device, the processor system in the first fully programmable system on chip 103 may be connected to an external terminal (not shown in the figure).

[0018] exist Figure 1 In the device shown, an external terminal can obtain a quantum key from the solid-state drive 102 via a processor system in the first fully programmable system on chip 103 .

[0019] exist Figure 1 In the apparatus shown, the QKD device can perform quantum communication with another QKD device at the opposite end via free space and / or optical fiber, and the QKD device can perform classical communication with another QKD device at the opposite end via the second fully programmable on-chip system 104.

[0020] The quantum key distribution management device provided by the utility model can be set in a QKD setting, which can not only control the quantum key distribution process of the QKD device and manage the quantum keys generated during the quantum key distribution, but also effectively prevent illegal access to the QKD device from external networks, data leakage and other security threats.

[0021] While the present application has been shown and described with reference to preferred embodiments, it will be understood by those skilled in the art that various modifications and variations may be made to these embodiments without departing from the spirit and scope of the present application as defined by the appended claims.

Claims

1. A quantum key distribution management device, characterized in that: include: Cryptographic chips, used to encrypt or decrypt quantum keys; Solid-state drives, used to store encrypted quantum keys; The first fully programmable system-on-chip for controlling quantum key distribution in QKD devices and managing the lifecycle of quantum keys; The second fully programmable system-on-chip is used to filter external network data. Among them, the solid-state drive and the encryption chip are connected to the processor system in the first fully programmable system-on-chip via the SATA interface and the QSPI interface respectively, the programmable logic in the first fully programmable system-on-chip is connected to the programmable logic in the second fully programmable system-on-chip via the GTX interface, and the processor system in the second fully programmable system-on-chip is connected to the external network.

2. The device according to claim 1, characterized in that The processor system in the first fully programmable system on chip is connected to an external terminal.

3. The device according to claim 2, characterized in that The external terminal obtains the quantum key from the solid-state drive via the processor system in the first fully programmable system-on-chip.

4. The device according to claim 1, characterized in that The QKD device performs quantum communication with another QKD device at the opposite end via free space and / or optical fiber, and the QKD device performs classical communication with another QKD device at the opposite end via the second fully programmable on-chip system.

5. A QKD device, characterized in that: include: A quantum key distribution management device as described in any one of claims 1 to 4.

Images