Information processing device, information processing method, and program

Abstract

To allow the status of quantum cryptography communication using an encryption key shared through quantum key distribution to be confirmed.SOLUTION: An information processing device is connected to at least a first communication device of the first communication device and a second communication device, and includes a processing unit. The first communication device acquires an encryption key shared between a first key management device and a second key management device by quantum key distribution from the first key management device. The second communication device acquires the encryption key from the second key management device. The processing unit acquires first attribute information indicating an attribute of the encryption key from the first communication device, or acquires the first attribute information from a message transmitted and received in communication. The processing unit acquires second attribute information indicating an attribute of the encryption key based on the information acquired from the first key management device. The processing unit outputs output information based on the first attribute information and the second attribute information.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] An embodiment of the present invention relates to an information processing device, an information processing method, and a program. [Background technology]

[0002] Quantum Key Distribution (QKD) is a technology that securely shares an encryption key between a QKD device that continuously transmits single photons and a QKD device that receives single photons, which are connected by an optical fiber link. The encryption key shared by QKD is guaranteed not to have been intercepted based on the principles of quantum mechanics. Data encrypted and transmitted using a shared encryption key and an encryption communication method called One Time Pad (OTP) is guaranteed by information theory to be undecipherable by any knowledgeable eavesdropper. [Prior art documents] [Non-patent literature]

[0003] [Non-Patent Document 1] RFC9110, “HTTP Semantics”, Section 4.2.2. https URI Schemes, Section 4.3. Authoritative Access, June 2022. [Non-Patent Document 2] ETSI GS QKD 014 V1.1.1,“Quantum Key Distribution (QKD); Protocol and data format of REST-based key delivery API”,Section 6.1 Status data format,(2019-02). Summary of the Invention [Problem to be solved by the invention]

[0004] An object of the present invention is to provide an information processing device, an information processing method, and a program that make it possible to check the state of quantum cryptography communication using a cryptographic key shared by quantum key distribution. [Means for solving the problem]

[0005] An information processing device according to an embodiment is connected to at least the first communication device of a first communication device and a second communication device, and includes a processing unit. The first communication device acquires an encryption key shared between the first key management device and the second key management device by quantum key distribution from the first key management device. The second communication device acquires the encryption key from the second key management device. The processing unit acquires first attribute information indicating an attribute of the encryption key from the first communication device, or acquires the first attribute information from a message transmitted and received in communication. The processing unit acquires second attribute information indicating an attribute of the encryption key based on the information acquired from the first key management device. The processing unit outputs output information based on the first attribute information and the second attribute information. [Brief description of the drawings]

[0006] [Figure 1] FIG. 1 is a block diagram of an information processing system according to an embodiment. [Diagram 2] FIG. 13 is a block diagram showing another example of the configuration of the information processing system. [Diagram 3] FIG. 2 is a block diagram of a communication management device. [Figure 4] FIG. 4 is a diagram showing an example of a data structure of management information managed by a key management device. [Diagram 5] 5 is a flowchart of a state confirmation process according to the embodiment. [Figure 6] 13 is a flowchart of a state confirmation process in the first modified example. [Figure 7] 11 is a flowchart of a state confirmation process in Modification 2. [Figure 8] 13 is a flowchart of a state confirmation process in Modification 3. [Figure 9] FIG. 2 is a hardware configuration diagram of the apparatus according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0007] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of an information processing apparatus according to the present invention will be described in detail with reference to the accompanying drawings.

[0008] Fig. 1 is a block diagram showing an example of a configuration of an information processing system according to an embodiment. As shown in Fig. 1, an information processing system 10 according to the embodiment includes a communication management device 100 as an information processing device, communication devices 200a and 200b, key management devices 300a and 300b, and QKD devices 400a and 400b.

[0009] Since the communication devices 200a and 200b have the same configuration, when there is no need to distinguish between them, they may be simply referred to as the communication devices 200. Similarly, the key management devices 300a and 300b may be simply referred to as the key management device 300. Furthermore, the QKD devices 400a and 400b may be simply referred to as the QKD device 400.

[0010] In FIG. 1, two each of the communication devices 200, the key management devices 300, and the QKD devices 400 are illustrated, but the information processing system 10 may include three or more of each device.

[0011] The communication devices 200a and 200b are connected by a network 501 and perform some kind of communication through the network 501. The QKD devices 400a and 400b are connected by a network 502. The communication management device 100 is connected to the communication device 200a and the key management device 300a by a network 503.

[0012] The network 501 may be of any type, for example a local network such as a LAN (Local Area Network) or a wider area network such as a WAN (Wide Area Network). The network 501 may be a wireless communication network such as a fifth generation mobile communication system (5G).

[0013] Network 502 is, for example, an optical fiber link, and is used to generate and share encryption keys by QKD between QKD device 400a and QKD device 400b.

[0014] The network 503 may be any type of network, such as a LAN or a WAN. The network 503 may be integrated with the network 501.

[0015] The communication management device 100 is a device that manages at least the communication by the communication device 200a. The QKD device 400 shares an encryption key with other QKD devices 400 by QKD. The key management device 300 is a device that manages an encryption key shared by the QKD device 400. For example, the key management device 300a manages an encryption key shared by the QKD device 400a with the QKD device 400b. The key management device 300b also manages an encryption key shared by the QKD device 400b with the QKD device 400a. This allows the key management device 300a to share and manage the same encryption key as the key management device 300b connected to the QKD device 400b. The dotted line in FIG. 1 indicates that the key management device 300a and the key management device 300b have such a corresponding relationship.

[0016] It should be noted that the key management device 300 and the QKD device 400 may be integrated into one device. Fig. 2 is a block diagram showing an example of the configuration of an information processing system 10-2 in such a case.

[0017] As shown in Fig. 2, the information processing system 10-2 includes a communication management device 100, communication devices 200a and 200b, and key management and QKD devices 300-2a and 300-2b. When there is no need to distinguish between the key management and QKD devices 300-2a and 300-2b, they may be simply referred to as key management and QKD devices 300-2. The key management and QKD device 300-2 corresponds to a device having the functions of both the key management device 300 and the QKD device 400 in Fig. 1. The multiple key management and QKD devices 300-2 are connected by a network 502-2. The network 502-2 is, for example, an optical fiber link.

[0018] Returning to Fig. 1, each communication device 200 obtains an encryption key used for communication from the connected key management device 300. For example, the communication device 200a (first communication device) obtains an encryption key (decryption key) used for communication with the communication device 200b from the key management device 300a, which is an encryption key shared by the key management device 300a (first key management device) and the key management device 300b (second key management device) by QKD. Also, the communication device 200b obtains an encryption key used for communication with the communication device 200a from the key management device 300b.

[0019] Although one communication management device 100 is illustrated in FIG. 1 (FIG. 2), the information processing system 10 may include two or more communication management devices 100. For example, when the communication device 200a and the communication device 200b are provided at different bases (locations), one communication device 200 may be provided for each base. The communication management device 100 at each base may be connected to one or more communication devices 200 and one or more key management devices 300 installed at the base. One communication management device 100 may be connected to multiple communication devices 200 installed at multiple bases and manage the communications at each base.

[0020] The communication management device 100 may be incorporated into the key management device 300a. In other words, the communication management device 100 may have the functions of the key management device 300a.

[0021] In the following, a case will be described as an example in which the communication management device 100 is connected to a communication device 200a and manages quantum cryptography communication by the communication device 200a.

[0022] Assume a situation in which data is transmitted from communication device 200a to communication device 200b or in the opposite direction through network 501. For example, communication device 200a transmits ciphertext, which is obtained by encrypting plaintext using an encryption key obtained from key management device 300a, to communication device 200b through network 501. In such a situation, in order to perform secure communication between communication devices 200a and 200b, mutual authentication, encryption of data to be transmitted and received, confirmation of validity of data, etc. are performed.

[0023] Of these functions, this embodiment is mainly related to data encryption. In conventional technologies such as HTTPS (Hypertext Transfer Protocol Secure), a common key cryptosystem is used for the data itself to be transmitted and received (a public key cryptosystem is used to share a common key). The common key cryptosystem is based on security in terms of computational complexity, and when technologies with much faster computation speeds than the current technology, such as quantum computers, are commercialized, the security cannot be guaranteed. This is called computational complexity security.

[0024] On the other hand, there is the OTP encryption method, which is an encryption method based on information-theoretic security. In OTP, encryption and decryption are performed for 1 bit of data using a 1-bit encryption key. As long as the encryption key is generated correctly and is not leaked, it cannot be decrypted even by high-speed computers such as quantum computers.

[0025] In this case, the problem is how to securely share the encryption key. In other words, the encryption key must be shared in advance between the two parties communicating without being intercepted by others. QKD is used as a method to solve this problem.

[0026] In QKD, an encryption key is shared among multiple QKD devices 400 via an optical fiber link. If a third party intercepts the encryption key along the optical fiber link, the intercepted encryption key can be detected and discarded. This makes it possible for the encryption key that has not been discarded, i.e., the encryption key that has not been intercepted, to be shared among QKD devices 400 that are geographically separated.

[0027] A technology that combines OTP and QKD to perform secure communication based on information-theoretic security is called quantum cryptography communication. In order to realize secure communication using quantum cryptography communication, the communication device 200a obtains an encryption key that is shared in advance by QKD between the key management device 300b connected to the communication device 200b and the key management device 300a connected to the communication device 200a from the key management device 300a. The communication device 200a encrypts data using the encryption key obtained from the key management device 300a, and sends the encrypted data to the communication device 200b. The communication device 200b decrypts the encrypted data using the encryption key obtained from the key management device 300b. This enables quantum cryptography communication.

[0028] From the viewpoint of a user who uses quantum cryptography communication, it is desirable to be able to recognize, for example, whether quantum cryptography communication is currently available. In conventional cryptography communication that is not quantum cryptography communication, there are known technologies for checking the status of whether cryptography communication is possible or not. For example, there is a technology that, when communicating using a web browser, displays a lock symbol in the web browser when cryptography communication is being performed, and does not display the lock symbol in the web browser when cryptography communication is not being performed.

[0029] On the other hand, in quantum cryptography communication, no technology is known that allows the state of quantum cryptography communication to be confirmed. It is expected that quantum cryptography communication will be used for transmitting and receiving more important data (e.g., genome data). Therefore, it is desirable for a user to be able to confirm whether data can be transmitted and received safely. For example, it is desirable for a user to be able to transmit data when it is confirmed that an encryption key can be shared between a communication device (e.g., communication device 200a) used by the user and a destination communication device (e.g., communication device 200b) using QKD, and that data to be transmitted (e.g., uploaded) to the destination communication device can be encrypted using the shared encryption key.

[0030] Therefore, in this embodiment, a technique for checking the state of quantum cryptography communication is realized. Note that checking the state of quantum cryptography communication is not limited to checking whether the communication is secure as described above, and may be performed for any other purpose. For example, the consumption of encryption keys may be checked as the state of quantum cryptography communication for the purpose of collecting a fee according to the consumption (amount of use).

[0031] In order to realize such a technique, the information processing system 10 of this embodiment includes a communication management device 100. Fig. 3 is a block diagram showing an example of the configuration of the communication management device 100. As shown in Fig. 3, the communication management device 100 includes an acquisition unit 101 (first acquisition unit), an acquisition unit 102 (second acquisition unit), a determination unit 103, an output control unit 104, and a storage unit 121.

[0032] The acquiring unit 101 acquires, from the communication device 200a, attribute information IA (first attribute information) indicating an attribute of an encryption key used for communication between the connected communication device 200a and the communication device 200b that is the destination of the communication by the communication device 200a. The attribute may be any information, and is, for example, key identification information (hereinafter, key ID) that identifies the encryption key.

[0033] For example, the acquiring unit 101 requests the communication device 200a to transmit a key ID of an encryption key to be used in the next quantum cryptography communication. The communication device 200a stores and manages information on the encryption key to be used in the next quantum cryptography communication, for example, in a storage unit within the communication device 200a. In response to the request, the communication device 200a returns the key ID to the acquiring unit 101. The acquiring unit 101 acquires the key ID returned by the communication device 200a.

[0034] The acquiring unit 102 acquires attribute information IB indicating attributes of an encryption key used for communication between the communication device 200a and the communication device 200b based on information acquired from the key management device 300a. In this embodiment, the acquiring unit 102 acquires the attribute information IB itself from the key management device 300a. For example, the acquiring unit 102 transmits device identification information for identifying the destination communication device 200b to the key management device 300a, and acquires the attribute information IB, which is a key ID returned from the key management device 300a in response to the device identification information.

[0035] For example, the key management device 300a stores information on an encryption key to be used in the next quantum cryptography communication for each communication device 200 in a storage unit in the device itself and manages it. FIG. 4 is a diagram showing an example of a data structure of management information managed by the key management device 300a. As shown in FIG. 4, the management information is information in which an SAE ID (Secure Application Entity ID) corresponding to device identification information is associated with a key ID. The SAE is an element that requests a key from the key management device 300, as defined in Non-Patent Document 2, for example, and corresponds to the communication device 200 in this embodiment. One key ID or multiple key IDs may be associated with one SAE ID.

[0036] The key management device 300a refers to the management information as shown in FIG. 4, identifies the key ID corresponding to the device identification information (SAE ID) transmitted from the acquisition unit 102, and returns the identified key ID to the acquisition unit 102.

[0037] The determination unit 103 determines whether or not an attribute indicated by the attribute information IA acquired by the acquisition unit 101 matches an attribute indicated by the attribute information IB acquired by the acquisition unit 102. For example, the determination unit 103 determines whether or not a key ID acquired as the attribute information IA matches a key ID acquired as the attribute information IB. Matching of the two corresponds to a consistency between an encryption key managed by the communication device 200a and an encryption key managed by the key management device 300a. In other words, it corresponds to a normal state of the quantum cryptography communication. The determination unit 103 may output information indicating whether or not the information indicated by the attribute information matches as a determination result, or may output information indicating a state of the quantum cryptography communication (normal, abnormal, etc.).

[0038] In addition, if some abnormality occurs in the quantum cryptography communication, the attribute information may not match. For example, an example of such a situation is when the communication device 200a manages an encryption key as one that is within its validity period, but the key management device 300a manages an encryption key as one that is beyond its validity period.

[0039] The output control unit 104 controls the output of various information used in the communication management device 100. For example, the output control unit 104 outputs output information based on the attribute information IA and the attribute information IB. The output information may be in any format, for example, information indicating the determination result by the determination unit 103. This enables, for example, the output destination device to execute processing according to the determination result. The processing according to the determination result may be any processing, for example, processing to output information (such as a lock mark) indicating that quantum cryptography communication is being performed when the determination result indicates that the attribute indicated by the attribute information IA matches the attribute indicated by the attribute information IB.

[0040] The output control unit 104 may output output information including the attribute information IA and the attribute information IB. By outputting such output information, for example, the output destination device can execute confirmation of the state of the quantum cryptography communication using the output information. Such a configuration can be interpreted as a configuration in which the output destination device confirms (determines) the state of the quantum cryptography communication. In the case of this configuration, the communication management device 100 does not need to include the determination unit 103.

[0041] At least a part of each of the above units (acquisition unit 101, acquisition unit 102, judgment unit 103, and output control unit 104) may be realized by one or more processing units. Each of the above units is realized, for example, by one or more processors. For example, each of the above units may be realized by having a processor such as a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit) execute a program, that is, by software. Each of the above units may be realized by a processor such as a dedicated IC (Integrated Circuit), that is, by hardware. Each of the above units may be realized by using a combination of software and hardware. When multiple processors are used, each processor may realize one of the units, or two or more of the units.

[0042] The storage unit 121 stores various information used in the communication management device 100. For example, the storage unit 121 stores the acquired attribute information IA, attribute information IB, and the determination result by the determination unit 103. The storage unit 121 can be configured with any commonly used storage medium such as a flash memory, a memory card, a RAM (Random Access Memory), a HDD (Hard Disk Drive), and an optical disk.

[0043] The communication management device 100 may be physically configured as one device, or may be physically configured as multiple devices. For example, the communication management device 100 may be built on a cloud environment.

[0044] When constructed in a cloud environment, the communication management device 100 may be configured to acquire the attribute information IA and IB via a data collection function provided in a network at the same base as the communication device 200a, for example.

[0045] Next, a description will be given of a status confirmation process performed by the communication management device 100 according to the embodiment. The status confirmation process is a process for confirming the status of the quantum cryptography communication used by the communication device 200. The status confirmation process may be performed at any timing, but is, for example, performed as follows. - It is executed when execution is instructed by a user, etc. It is executed when a function (such as an application) that performs quantum cryptography communication is started. For example, in the case of an application that transmits data using a web browser, it is executed when a specific page used for transmitting data is displayed. It is executed at regular intervals (periodically). The regular intervals may be managed by the communication management device 100 or an external device. In the latter case, the external device may instruct the communication management device 100 to execute the status confirmation process at regular intervals.

[0046] 5 is a flowchart showing an example of a state confirmation process in the embodiment. In the following, a case where the communication device 200a performs quantum cryptography communication with the communication device 200b will be described as an example.

[0047] The acquiring unit 101 acquires, from the communication device 200a, the key ID of an encryption key to be used for communication with the communication device 200b (step S101). For example, the acquiring unit 101 passes device identification information (SAE ID) of the destination communication device 200b to the communication device 200a. The communication device 200a returns the key ID of an encryption key to be used for communication with the communication device 200b to the communication management device 100. This enables the acquiring unit 101 to acquire the key ID. This key ID corresponds to the attribute information IA.

[0048] The acquiring unit 102 acquires, from the key management device 300a, the key ID of the encryption key used by the communication device 200a for communication with the communication device 200b (step S102). For example, the acquiring unit 102 passes device identification information (SAE ID) of the communication device 200b to the key management device 300a. The key management device 300a returns the key ID of the encryption key passed to the communication device 200a for communication with the communication device 200b to the communication management device 100. This enables the acquiring unit 102 to acquire the key ID. This key ID corresponds to the attribute information IB.

[0049] The determination unit 103 compares the key ID acquired in step S101 with the key ID acquired in step S102, and determines whether or not the two match (step S103).

[0050] If the two match (step S103: Yes), the output control unit 104 outputs output information indicating that they match (step S104) and ends the status confirmation process. If the two do not match (step S103: No), the output control unit 104 outputs output information indicating that they do not match (step S105) and ends the status confirmation process.

[0051] (Variation 1) In the above embodiment, the attribute information IA is acquired from the communication device 200a. The attribute information IA may be acquired from information obtained by monitoring communication. In the first modification, the acquisition unit 101 acquires the attribute information IA from messages transmitted and received between the communication device 200a and the communication device 200b. The monitoring of communication is, for example, a process of collecting (acquiring) messages (packets, etc.) transmitted and received by communication and analyzing the collected messages. For example, it is possible to analyze that a message is transmitted and received between the communication device 200a and the communication device 200b by referring to the source address and destination address specified in a header, etc., in the collected message.

[0052] For example, when communication device 200a sends data to communication device 200b, it encrypts the data itself and places it in the payload of a packet (an example of a message to be sent), and places the key ID of the encryption key used for encryption in plain text in the header of the packet.

[0053] The acquiring unit 101 can acquire, as attribute information IA, a key ID included in the header of a packet obtained by monitoring communication on the network 501. Note that the communication device 200a may communicate with a plurality of other communication devices 200. In such a case, the acquiring unit 101 may monitor packets whose headers include identification information (device identification information, address, etc.) of the destination communication device 200 among the plurality of communication devices 200.

[0054] FIG. 6 is a flowchart showing an example of a state confirmation process in the first modification.

[0055] The acquiring unit 101 monitors the communication between the communication device 200a and the communication device 200b, and acquires the key ID in the packet obtained by the monitoring (step S201).

[0056] The subsequent processes (steps S202 to S205) are similar to steps S102 to S105 in FIG. 5, and therefore will not be described.

[0057] (Variation 2) The attribute of the encryption key is not limited to the key ID, and may be any other information. In the second modification, the size of data transmitted and received using the encryption key is used as the attribute of the encryption key.

[0058] In this modified example, the acquisition unit 101 monitors communications on the network 501, calculates the size of data encrypted using an encryption key and transmitted in communications between the communication device 200a and the communication device 200b, and acquires the calculated size as attribute information IA.

[0059] In this modified example, the acquisition unit 102 acquires the remaining amount of the encryption key at multiple times from the key management device 300a, calculates the consumption amount of the encryption key based on the acquired remaining amount, and acquires the size corresponding to the consumption amount as attribute information IB.

[0060] For example, the acquisition unit 102 passes the SAE ID of the communication device 200b to the key management device 300a as device identification information of the communication device 200b. The key management device 300a returns the remaining amount of encryption key used for communication with the communication device 200b to the communication management device 100. The acquisition unit 102 repeats such remaining amount acquisition processing to calculate the consumption amount of encryption key in the key management device 300a.

[0061] The acquiring unit 102 can also calculate the size of the transmitted and received data from the consumption of the encryption key. For example, when an encryption method is used in which the size of the encryption key matches the size of the data to be encrypted, such as OTP, the acquiring unit 102 can obtain the value of the consumption as the value of the data size. When an encryption method is used in which the size of the encryption key and the size of the data are expressed by a specific relationship (for example, a relational expression), the acquiring unit 102 can obtain the value of the data size from the value of the consumption in accordance with the specific relationship.

[0062] In this modification, the determining unit 103 determines whether or not the size of the data acquired by the acquiring unit 101 and the size of the data acquired by the acquiring unit 102 match.

[0063] In a configuration in which the size of encrypted transmitted and received data is obtained as attribute information, as in this modified example, the attribute information (size of data) can be used, for example, for a function of collecting fees according to the amount of encryption key consumed (size of data).

[0064] The status confirmation process according to this modification may be executed when transmitting dummy data before transmitting desired data (e.g., genome data). This allows the desired data to be transmitted when it is determined that quantum cryptography communication is possible.

[0065] In addition, in the key management device 300, there are cases where a new encryption key is generated. In such a case, the acquisition unit 102 acquires not only the remaining amount of encryption key but also the generated amount of encryption key (the amount of encryption key newly shared by the key management device 300a and the key management device 300b) from the key management device 300a. The acquisition unit 102 can calculate the amount of encryption key consumption by calculating the amount of change in the encryption key from the remaining amount of encryption key and subtracting the generated amount from the amount of change.

[0066] FIG. 7 is a flowchart showing an example of a state confirmation process in the second modification.

[0067] The acquisition unit 101 monitors the communication between the communication device 200a and the communication device 200b, calculates the size of the data encrypted and transmitted in the communication between the communication device 200a and the communication device 200b, and acquires the calculated size as attribute information IA (step S301).

[0068] The acquiring unit 102 acquires the remaining amount of encryption key used by the communication device 200a for communication with the communication device 200b from the key management device 300a (step S302). For example, the acquiring unit 102 passes device identification information (SAE ID) of the communication device 200b to the key management device 300a. The key management device 300a returns to the communication management device 100 the remaining amount of encryption key to be passed to the communication device 200a for communication with the communication device 200b. This enables the acquiring unit 102 to acquire the remaining amount of encryption key.

[0069] Furthermore, the acquiring unit 102 calculates the consumption amount of the encryption key by using the remaining amount acquired at the multiple points (times), and calculates the size of the data corresponding to the consumption amount (step S303). The calculated size corresponds to the attribute information IB.

[0070] The determination unit 103 compares the size (attribute information IA) acquired in step S301 with the size (attribute information IB) acquired in step S303, and determines whether or not the two match (step S304).

[0071] If the two match (step S304: Yes), the output control unit 104 outputs output information indicating that they match (step S305) and ends the status confirmation process. If the two do not match (step S304: No), the output control unit 104 outputs output information indicating that they do not match (step S306) and ends the status confirmation process.

[0072] In this modification, the output control unit 104 may output output information indicating the consumption of encryption keys. Such output information can be used, for example, for a function of collecting a fee according to the consumption of encryption keys.

[0073] (Variation 3) In the second modification, the remaining amount of the encryption key is obtained from the key management device 300a, and the consumed amount of the encryption key is calculated from the obtained remaining amount. In the third modification, the consumed amount of the encryption key is obtained from the key management device 300a.

[0074] As in variant example 2, the acquisition unit 101 in this variant example monitors communications on the network 501, calculates the size of the data encrypted and transmitted in communications between the communication device 200a and the communication device 200b, and acquires the calculated size as attribute information IA.

[0075] In this modification, the acquiring unit 102 acquires the consumption amount of the encryption key from the key management device 300a, and acquires the size corresponding to the acquired consumption amount as the attribute information IB. The consumption amount is, for example, the amount of the encryption key consumed in a predetermined period. The predetermined period is, for example, a certain time in the past (for example, 10 seconds).

[0076] FIG. 8 is a flowchart showing an example of a state confirmation process in the third modification.

[0077] Step S401 is similar to step S301 in FIG. 7 (Modification 2).

[0078] The acquiring unit 102 acquires from the key management device 300a the consumption amount of the encryption key used by the communication device 200a for communication with the communication device 200b (step S402). For example, the acquiring unit 102 passes device identification information (SAE ID) of the communication device 200b to the key management device 300a. The key management device 300a returns to the communication management device 100 the consumption amount of the encryption key passed to the communication device 200a for communication with the communication device 200b (for example, the amount consumed in the past 10 seconds). This enables the acquiring unit 102 to acquire the consumption amount of the encryption key.

[0079] Furthermore, the acquiring unit 102 calculates the size of the data corresponding to the acquired consumption amount (step S403). The calculated size corresponds to the attribute information IB.

[0080] The subsequent processes (steps S404 to S406) are similar to steps S304 to S306 in FIG. 7, and therefore will not be described.

[0081] In this modification, similarly to modification 2, the output control unit 104 may output output information indicating the consumption amount of the encryption key. Such output information can be used, for example, for a function of collecting a fee according to the consumption amount of the encryption key.

[0082] In this way, the information processing system of the embodiment and each modification includes an information processing device (communication management device) that checks the state of quantum cryptography communication using attribute information of the encryption key. This makes it possible to check the state of quantum cryptography communication using the encryption key shared by quantum key distribution.

[0083] Next, the hardware configuration of each device (communication management device, communication device, key management device) of the embodiment will be described with reference to Fig. 9. Fig. 9 is an explanatory diagram showing an example of the hardware configuration of the devices of the embodiment.

[0084] The device of the embodiment includes a control device such as a CPU 51, storage devices such as a ROM (Read Only Memory) 52 and a RAM 53, a communication I / F 54 that connects to a network and performs communication, and a bus 61 that connects each unit.

[0085] The programs executed by the device of the embodiment are provided in a state that they are pre-installed in the ROM 52 or the like.

[0086] The programs executed by the devices of the embodiments may be configured to be provided as a computer program product by being recorded in an installable or executable format on a computer-readable recording medium such as a CD-ROM (Compact Disk Read Only Memory), a flexible disk (FD), a CD-R (Compact Disk Recordable), or a DVD (Digital Versatile Disk).

[0087] Furthermore, the program executed by the device of the embodiment may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. Also, the program executed by the device of the embodiment may be provided or distributed via a network such as the Internet.

[0088] The programs executed by the apparatus of the embodiment can cause a computer to function as each unit of the apparatus described above. In this computer, the CPU 51 can read the programs from a computer-readable storage medium onto a main storage device and execute the programs.

[0089] A configuration example of the embodiment will be described below. (Configuration example 1) An information processing device connected to at least the first communication device among the first communication device and the second communication device, the first communication device acquires from the first key management device an encryption key shared between a first key management device and a second key management device by quantum key distribution, the encryption key being used for communication with the second communication device; the second communication device acquires the encryption key used for communication with the first communication device from the second key management device; acquiring first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device from the first communication device, or acquiring the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; acquiring second attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device based on the information acquired from the first key management device; outputting output information based on the first attribute information and the second attribute information; Processing section An information processing device comprising: (Configuration example 2) the attribute is key identification information that identifies the encryption key; The information processing device according to configuration example 1. (Configuration example 3) the processing unit transmits device identification information for identifying the second communication device to the first communication device, and acquires from the first communication device the first attribute information, which is the key identification information returned by the first communication device in response to the device identification information. The information processing device according to configuration example 2. (Configuration Example 4) The processing unit acquires the first attribute information, which is the key identification information, from a message transmitted and received in communication between the first communication device and the second communication device. The information processing device according to configuration example 2. (Configuration Example 5) the attribute is a size of data to be transmitted or received using the encryption key; The information processing device according to configuration example 1. (Configuration Example 6) the processing unit acquires from the first key management device a remaining amount of the encryption key at a plurality of times, calculates a consumption amount of the encryption key based on the acquired remaining amount, and acquires the size corresponding to the consumption amount. The information processing device according to configuration example 5. (Configuration Example 7) the processing unit acquires the consumption amount of the encryption key from the first key management device, and acquires the size corresponding to the consumption amount. The information processing device according to configuration example 5. (Configuration Example 8) the processing unit determines whether or not an attribute indicated by the first attribute information and an attribute indicated by the second attribute information match, and outputs the output information which is a result of the determination. The information processing device according to any one of configuration examples 1 to 7. (Configuration Example 9) The first key management device is provided. The information processing device according to any one of configuration examples 1 to 8. (Configuration Example 10) An information processing method executed by an information processing device connected to at least a first communication device out of a first communication device and a second communication device, comprising: the first communication device acquires from the first key management device an encryption key shared between a first key management device and a second key management device by quantum key distribution, the encryption key being used for communication with the second communication device; the second communication device acquires the encryption key used for communication with the first communication device from the second key management device; the information processing device acquires, from the first communication device, first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device, or acquires the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; the information processing device acquires second attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device based on the information acquired from the first key management device; the information processing device outputs output information based on the first attribute information and the second attribute information. Information processing methods. (Configuration Example 11) A program to be executed by a computer included in an information processing device connected to at least the first communication device among a first communication device and a second communication device, the first communication device causes an encryption key shared between a first key management device and a second key management device by quantum key distribution, the encryption key being used for communication with the second communication device, to be acquired from the first key management device; the second communication device causes the encryption key used for communication with the first communication device to be obtained from the second key management device; acquiring first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device from the first communication device, or acquiring the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; acquiring second attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device based on the information acquired from the first key management device; outputting output information based on the first attribute information and the second attribute information; program. (Configuration Example 12) An information processing system including an information processing device and a first key management device, the information processing device is connected to at least the first communication device among a first communication device and a second communication device; The first key management device Sharing an encryption key with a second key management device by quantum key distribution; outputting the encryption key used for communication between the first communication device and the second communication device to the first communication device; the second communication device acquires the encryption key used for communication with the first communication device from the second key management device; The information processing device includes: acquiring first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device from the first communication device, or acquiring the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; acquiring second attribute information indicating an attribute of the encryption key used for communication between the first communication device and the second communication device from the first key management device; outputting output information based on the first attribute information and the second attribute information; A processing unit is provided. Information processing system.

[0090] Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included in the scope and spirit of the invention, and are included in the scope of the invention and its equivalents described in the claims. [Explanation of symbols]

[0091] 10, 10-2 Information Processing Systems 100 Communication management device 101 Acquisition Department 102 Acquisition Department 103 Judgment section 104 Output control section 121 Storage section 200a, 200b Communication equipment 300a, 300b Key management device 300-2a, 300-2b Key management / QKD device 400a, 400b QKD equipment

Claims

1. An information processing device connected to at least the first communication device among the first communication device and the second communication device, the first communication device acquires from the first key management device an encryption key shared between a first key management device and a second key management device by quantum key distribution, the encryption key being used for communication with the second communication device; the second communication device acquires the encryption key used for communication with the first communication device from the second key management device; acquiring first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device from the first communication device, or acquiring the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; acquiring second attribute information indicating an attribute of the encryption key used for communication between the first communication device and the second communication device based on the information acquired from the first key management device; outputting output information based on the first attribute information and the second attribute information; Processing section An information processing device comprising:

2. the attribute is key identification information that identifies the encryption key; The information processing device according to claim 1 .

3. the processing unit transmits device identification information for identifying the second communication device to the first communication device, and acquires from the first communication device the first attribute information, which is the key identification information returned by the first communication device in response to the device identification information. The information processing device according to claim 2 .

4. the processing unit acquires the first attribute information, which is the key identification information, from a message transmitted and received in communication between the first communication device and the second communication device. The information processing device according to claim 2 .

5. the attribute is a size of data to be transmitted or received using the encryption key; The information processing device according to claim 1 .

6. the processing unit acquires from the first key management device a remaining amount of the encryption key at a plurality of times, calculates a consumption amount of the encryption key based on the acquired remaining amount, and acquires the size corresponding to the consumption amount. The information processing device according to claim 5 .

7. the processing unit acquires a consumption amount of the encryption key from the first key management device, and acquires the size corresponding to the consumption amount. The information processing device according to claim 5 .

8. the processing unit determines whether or not an attribute indicated by the first attribute information and an attribute indicated by the second attribute information match, and outputs the output information which is a result of the determination. The information processing device according to claim 1 .

9. The first key management device is provided. The information processing device according to claim 1 .

10. An information processing method executed by an information processing device connected to at least a first communication device out of a first communication device and a second communication device, comprising: the first communication device acquires from the first key management device an encryption key shared between a first key management device and a second key management device by quantum key distribution, the encryption key being used for communication with the second communication device; the second communication device acquires the encryption key used for communication with the first communication device from the second key management device; the information processing device acquires, from the first communication device, first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device, or acquires the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; the information processing device acquires second attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device based on the information acquired from the first key management device; the information processing device outputs output information based on the first attribute information and the second attribute information. Information processing methods.

11. A program to be executed by a computer included in an information processing device connected to at least the first communication device out of a first communication device and a second communication device, the first communication device causes an encryption key shared between a first key management device and a second key management device by quantum key distribution, the encryption key being used for communication with the second communication device, to be acquired from the first key management device; the second communication device causes the encryption key used for communication with the first communication device to be obtained from the second key management device; acquiring first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device from the first communication device, or acquiring the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; acquiring second attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device based on the information acquired from the first key management device; outputting output information based on the first attribute information and the second attribute information; program.

12. An information processing system including an information processing device and a first key management device, the information processing device is connected to at least the first communication device among a first communication device and a second communication device; The first key management device Sharing an encryption key with a second key management device by quantum key distribution; outputting the encryption key used for communication between the first communication device and the second communication device to the first communication device; the second communication device acquires the encryption key used for communication with the first communication device from the second key management device; The information processing device includes: acquiring first attribute information indicating an attribute of the encryption key used in communication between the first communication device and the second communication device from the first communication device, or acquiring the first attribute information from a message transmitted and received in communication between the first communication device and the second communication device; acquiring second attribute information indicating an attribute of the encryption key used for communication between the first communication device and the second communication device from the first key management device; outputting output information based on the first attribute information and the second attribute information; A processing unit is provided. Information processing system.

Images