Power grid security communication method based on multi-resource hybrid quantum key distribution

Abstract

Disclosed in the present invention is a power grid security communication method based on multi-resource hybrid quantum key distribution, comprising the following steps: 1, analyzing communication processes of a satellite quantum key distribution mode, an optical fiber quantum key distribution mode and a wireless quantum key distribution mode; 2, establishing a power secure communication network architecture based on satellite-optical fiber-wireless hybrid quantum key distribution; 3, on the basis of the power secure communication network architecture, establishing a quantum resource optimization deployment model; 4, establishing an objective function of the model to be a minimum information risk index; 5, establishing constraint conditions of the model: comprising a single quantum key distribution constraint, a hybrid quantum key distribution constraint, a deployment cost constraint, a communication demand constraint and a quantum information flow constraint; and 6, converting the established model into a mixed-integer linear programming form, and solving same to obtain a quantum resource optimization deployment and scheduling solution. The present invention relates to a power communication method for improving information security by considering the synergistic effect of hybrid quantum key distribution (QKD) and power service demand features, and fusing satellite, optical fiber and wireless QKD.

Description

A secure communication method for power grid based on multi-resource hybrid quantum key distribution Technical Field

[0001] The present invention relates to the technical field of power grid security communication, and in particular to a power grid security communication method based on multi-resource hybrid quantum key distribution. Background Art

[0002] The rapid development of information and communications technology (ICT) has driven the modernization of smart grids, in which power systems and communications networks are closely integrated. As an indispensable support for smart grids, power communication systems face an urgent need to improve security. On the one hand, the integration of a large number of devices and terminals has dramatically increased the risk of cyberattacks. On the other hand, failures in communication systems can not only have serious consequences but can also trigger cascading failures at the information and physical layers.

[0003] With the rapid development of highly efficient decryption algorithms (such as the Grove algorithm, Shor's algorithm, and quantum algorithms for linear equations) and high-computing-power quantum computers, the security of encryption algorithms currently used in power systems that rely on computational complexity has been significantly reduced. Therefore, there is an urgent need to develop defensive measures against these potential threats. Quantum communication, which combines the principles of quantum mechanics with cryptographic methods, is considered a potential solution, ensuring unconditional information security at the physical level. Quantum Key Distribution (QKD), currently the most mature and widely used quantum communication technology, can generate and distribute absolutely secure key pairs between senders and receivers, making information security breaches impossible to detect.

[0004] Despite its enormous potential in power information security, QKD's practical application in my country's power system still faces a number of challenges. my country's power system is large-scale and operates in a complex environment. Quantum communication networks relying solely on optical fiber structures are unable to meet the operational needs of all aspects of the power supply, grid, load, and storage chain. Therefore, there is an urgent need to develop a quantum communication network architecture tailored to the actual needs of the power system and to rationally plan a quantum power communication network to maximize security while maintaining economic efficiency. Summary of the Invention

[0005] To solve the above problems, the purpose of the present invention is to provide a power grid security communication method based on multi-resource hybrid quantum key distribution. It is a power communication method that considers the synergistic effect of hybrid quantum key distribution QKD and the characteristics of power business needs, integrates three QKD methods of satellite, optical fiber and wireless, and improves information security.

[0006] In order to achieve the above object, the present invention adopts the following technical solutions:

[0007] A power grid security communication method based on multi-resource hybrid quantum key distribution. First, a power secure communication network architecture based on multi-resource hybrid quantum key distribution is proposed. By integrating three quantum key generation and distribution methods: satellite, optical fiber, and wireless, a quantum secure communication system compatible with the existing power communication network is proposed; secondly, a quantum resource optimization deployment model is constructed with the goal of minimizing the system information risk index. By deploying quantum devices on communication nodes or channels, a quantum resource optimization deployment and scheduling scheme is proposed that considers the synergistic effect of hybrid quantum key distribution and power business needs, providing a decision-making reference for the large-scale construction of quantum power communication networks in future power systems.

[0008] The following steps are included:

[0009] Step 1: Considering the business needs and existing communication forms in the power system, analyze the communication process of three quantum key distribution methods: satellite, optical fiber, and wireless;

[0010] Step 2: Based on the thorough analysis of quantum communication technology in step 1, build a power secure communication network architecture based on satellite-fiber-wireless hybrid quantum key distribution;

[0011] Step 3: Based on the power secure communication network architecture built in Step 2, a quantum resource optimization deployment model is established considering the key generation stage and information transmission stage;

[0012] Step 4: Establish the objective function of the quantum resource optimization deployment model in step 3 to minimize the information risk index;

[0013] Step 5: Establish the constraints of the quantum resource optimization deployment model in step 3: Model the three quantum key distribution methods of satellite, optical fiber, and wireless in the key generation stage to form single quantum key distribution constraints and hybrid quantum key distribution constraints; model the deployment and operation costs of quantum equipment involved in different quantum key distribution methods in the key generation stage to form deployment cost constraints; model the communication requirements of power system services in the information transmission stage to form communication demand constraints; model the quantum information flow in the information transmission stage to form quantum information flow constraints.

[0014] Step 6: Convert the established quantum resource optimization deployment model into a hybrid linear integer programming form and use a commercial solver to obtain the quantum resource optimization deployment and scheduling solution.

[0015] Compared with the prior art, the present invention has the following advantages:

[0016] This paper proposes a multi-resource hybrid QKD-based power grid security communication solution that meets the communication needs of power business through the synergy of multiple QKD resources. First, the advantages and disadvantages of three QKD methods (satellite, optical fiber, and wireless) and their applicable scenarios in power systems are analyzed, and a hybrid QKD-based power secure communication network architecture is constructed. Then, considering the synergistic effects of hybrid QKD and the needs of power business, a quantum resource optimization deployment model is established with the goal of minimizing the system's information risk index. The model is converted into an easily solvable mixed integer linear programming form, providing a decision-making reference for the future large-scale construction of quantum power communication networks. It has the following advantages:

[0017] First: Expand the coverage of quantum communication in the power system and introduce QKD technology on the basis of existing power communication networks to achieve quantum secure communication, thereby meeting the communication needs of multi-scale power business.

[0018] Second: Improve the utilization of quantum devices and quantum key resources. Through the unified scheduling and allocation of multiple QKD methods, the utilization of quantum resources can be improved, balancing security and economy.

[0019] Third: Improve the security of the power communication system and reduce the risk of information leakage in the power system;

[0020] Furthermore, the method is used to verify the solution to ensure the effectiveness of the design. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 is a diagram of the quantum secure communication process based on QKD;

[0022] Figure 2 is a schematic diagram of satellite quantum key generation and distribution methods;

[0023] FIG3 is a schematic diagram of a method for generating and distributing optical fiber quantum keys;

[0024] FIG4 is a schematic diagram of a wireless quantum key generation and distribution method;

[0025] Figure 5 is an architecture diagram of the power secure communication network based on satellite-fiber-wireless hybrid QKD. Modes for Carrying Out the Invention

[0026] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0027] The implementation process of the power grid secure communication method based on multi-resource hybrid quantum key distribution described in the present invention is as follows:

[0028] Step 1. This invention analyzes the specific processes and applicable scenarios for three QKD methods: fiber-optic, satellite-based, and wireless. Figure 1 illustrates the QKD-based quantum secure communication process, while Figures 2, 3, and 4 provide detailed schematic diagrams of different QKD (quantum key generation and distribution) methods. Fiber-optic QKD relies on the power system's existing fiber-optic infrastructure, eliminating the need for separate quantum fiber deployment. Fiber-optic QKD offers excellent pre-existing conditions and relatively stable code generation, making it suitable for direct upgrades within existing power transmission networks. It encrypts services carried by power communication fibers, including critical power production control services such as high-voltage line protection and provincial-level dispatching. Satellite QKD, with its wide coverage and low loss, offers unique advantages in key generation over thousands of kilometers. It is suitable for meeting the large-scale, wide-coverage communication requirements of emerging power systems, such as emergency power supply command, data center disaster recovery, and cross-regional information transmission. Wireless QKD matches the increased flexibility required by the terminal side of emerging power systems and is suitable for services such as distribution system automation, distributed renewable energy access, and grid status awareness. It provides effective centralized protection for a large number of terminal devices that require open deployment and lack encryption.

[0029] Step 2. Integrate these three methods to build a power grid secure communication network architecture based on satellite-fiber-wireless hybrid QKD, as shown in Figure 5. This architecture consists of three layers: the quantum encryption layer, the information transmission layer, and the power grid service layer. The quantum encryption layer is responsible for the generation, distribution, and management of quantum keys and includes both satellite and ground components, with the ground component comprised of both fiber and wireless. The information transmission layer is responsible for transmitting quantum-key-encrypted power grid service data and, based on the existing power grid communication system architecture, includes both fiber and wireless components. The power grid service layer encompasses all types of services within the power grid system. This architecture integrates three QKD methods to meet the diverse needs of secure power grid communication across multiple categories, multiple entities, and large geographic spans. This architecture introduces multiple quantum key distribution methods into the existing power grid communication architecture, taking into account the synergy between fiber, satellite, and wireless QKD. It comprehensively plans and uniformly dispatches multiple quantum resources to distribute quantum keys among communication entities at different levels, providing a more comprehensive quantum secure communication solution to meet the multi-scale secure communication requirements of the new power grid system. This architecture can not only integrate the applicable scenarios of multiple QKD methods, avoid the drawbacks of a single QKD network, and expand the security scope of quantum communication, but also solve the waste of equipment and resources caused by the lack of collaborative work between multiple single QKD networks, greatly enhancing the availability and flexibility of quantum networks.

[0030] Step 3. Establish a quantum resource optimization deployment model considering the key generation phase and information transmission phase. The specific optimization objective function and constraints are described in Steps 4 and 5.

[0031] Step 4. Establish the objective function. The goal of the quantum resource optimization deployment model of the present invention is to meet the quantum secure communication requirements of the power business in the network as much as possible and improve the security of information. The information risk index represents the product of the amount of unencrypted information in the network and its corresponding business importance, and is used to measure the risk level of information security in the network. Therefore, the objective function can be expressed as minimizing the information risk index:

[0032] (1)

[0033] (2)

[0034] Where: is the information risk index; definition For communication needs The amount of non-quantum secure information, analogous to the amount of lost load, is used to describe the situation where power services are quantum-secured; The total amount of information required for communication; The amount of information encrypted by quantum keys in communication needs to achieve quantum secure communication; For communication needs The weight coefficient of the business.

[0035] Step 5. Establish constraints. The quantum resource optimization deployment model proposed in this invention includes the following constraints: single quantum key distribution constraints and hybrid quantum key distribution constraints, deployment cost constraints, communication demand constraints, and quantum information flow constraints.

[0036] 1) Single quantum key distribution constraints

[0037] The quantum key generated between two nodes using satellite QKD can be expressed as:

[0038] (3)

[0039] (4)

[0040] (5)

[0041] Where: Communication needs at a certain moment The number of keys generated by quantum satellites between and Represents the communication starting point and end point The decision variable for whether a satellite quantum device is installed. A value of 1 indicates that the node has a satellite quantum device installed, and a value of 0 indicates that the node has not a satellite quantum device installed. and Represents the communication starting point and end point Satellite coverage status, a value of 1 indicates that the node is covered by a satellite, and a value of 0 indicates that the node is not covered by a satellite; Including time slots Inner satellite coverage node; Represents nodes covered by satellite Decision variables for whether to deploy satellite quantum devices; is the number of transmitters on the satellite; is the maximum value; For demand The number of existing satellite keys between them; is the rate of satellite quantum key generation; The duration of the satellite-to-ground link that can be established when the satellite passes through the node.

[0042] Formula (3) represents the communication demand The satellite QKD generation condition is: the communication start and end nodes are both covered by the satellite and both are equipped with satellite quantum devices; Equation (4) is the satellite-to-ground connection constraint, which means that the number of nodes that can establish a satellite-to-ground link with the satellite in the same time slot is limited by the number of transmitters on the satellite. ; Formula (5) represents the key restriction that each pair of nodes can obtain after establishing the satellite-ground connection.

[0043] Fiber QKD is based on the fiber foundation of the original communication network, so it is necessary to generate reachable paths between node pairs based on the fiber topology of the original communication network. Each path contains multiple links, so a 0-1 decision variable is introduced. The quantum key generated between two nodes based on optical fiber can be expressed as:

[0044] (6)

[0045] (7)

[0046] (8)

[0047] (9)

[0048] (10)

[0049] Where: For communication needs The number of keys generated by quantum satellites; is a size of A vector of , representing a reachable path between two nodes, For path Whether it passes through the link A 0-1 variable, where a value of 1 indicates a path Through the link , a value of 0 indicates a path Not through the link; is a node pair in the topology The set of reachable paths between them; Indicates the quantum feasibility of a feasible optical fiber path between any node pair. When the optical fiber path is reachable and all links on the path are equipped with quantum devices, the path meets the basic conditions for quantum key generation. A value of 1 indicates that the path Able to generate quantum keys, a value of 0 indicates a path Cannot generate quantum keys; Indicates whether the link The decision variable for deploying fiber quantum devices is 1, indicating that fiber quantum devices are deployed, and 0, indicating that fiber quantum devices are not deployed. For Link The original key generation rate and distance related; is the threshold of the link key generation rate, which is the critical value before the key rate drops rapidly with distance; is the quantum key generation rate of the line after the relay equipment is installed; Indicates the various sections of relay links after a relay is installed on a link; Relay link The corresponding quantum key generation rate; For this moment link The number of quantum keys available on Link at time 0 The number of quantum keys on ; The duration of generating the quantum key from time 0 to this time.

[0050] Equations (6) and (7) represent the communication requirements The fiber QKD generation condition is that all links on at least one path between node pairs are equipped with QKD devices; Equation (8) is the link relay constraint, which means that when the key rate is lower than the threshold, relays need to be installed to meet the real-time quantum communication requirements; Equation (9) represents the key generation rate of the link after the relay is installed, which is equal to the minimum value of the key generation rate of each relay segment; Equation (10) indicates that the number of available keys between node pairs is equal to the sum of the number of keys on all feasible installed paths, and the number of keys on each path is the minimum value of the links it contains.

[0051] The quantum key generated between two nodes using wireless QKD can be expressed as:

[0052] (11)

[0053] (12)

[0054] (13)

[0055] (14)

[0056] (15)

[0057] (16)

[0058] 17)

[0059] Where: and Communication nodes and communication nodes The location coordinates of is the relationship between the distance between the two points and the coverage radius of the wireless base station; Indicates the range that a wireless node can cover, which is a constant; For communication nodes and The mutual coverage between nodes. When the value is 1, it means that if one of the nodes is equipped with a wireless base station, the other point will be covered. When the value is 0, it means that the two nodes cannot cover each other. For communication needs The number of keys generated by quantum wireless base stations; is a maximum value; Indicates whether the node The decision variable for deploying wireless quantum devices, where a value of 1 indicates that wireless quantum devices are deployed, and a value of 0 indicates that wireless quantum devices are not deployed; Representation node and communication starting point situations where they overlap with each other; Representation node and communication endpoints situations where they overlap with each other; Indicates the wireless base station at this moment The number of quantum keys; Indicates a wireless base station The number of quantum keys at time 0; The rate of quantum key generation for wireless base stations; The duration of generating wireless quantum key from time 0 to this time; is the upper limit of the number of node quantum keys; and The lower and upper limits of the number of quantum keys assigned to any node by the wireless base station are respectively given.

[0060] Equations (11) and (12) describe the variables and parameters in the wireless QKD network; Equation (13) expresses the communication requirements The wireless quantum key generation condition is that both the starting and ending nodes are covered by nodes equipped with wireless base stations; Equations (14) and (15) indicate that the number of quantum keys generated in the wireless base station must not exceed the upper limit of the key pool capacity; Equations (16) and (17) are the constraints for the wireless base station to distribute quantum keys to nodes, indicating that all communication requirements The sum of the number of keys distributed is less than the number of existing keys of the wireless base station, and the upper and lower limits of the number of keys distributed to a single pair of start and end nodes are constrained by the carrying capacity of the mobile device.

[0061] 2) Hybrid Quantum Key Distribution Constraints

[0062] definition For the line A 0-1 decision variable for whether quantum communication is possible. Satellites and wireless networks establish quantum connections between nodes that were previously unconnected, forming a new set of links. The combined consideration of these links is hybrid quantum key distribution.

[0063] (18)

[0064] (19)

[0065] (20)

[0066] (twenty one)

[0067] (twenty two)

[0068] (twenty three)

[0069] Where: For communication needs The number of keys generated by the hybrid QKD network; is a node pair in the topology The set of hybrid QKD reachable paths between them; is the set of all links; is the satellite link set; is a set of wireless links.

[0070] Equations (18), (19), and (20) are the state constraints of the hybrid QKD quantum channel, indicating that the hybrid QKD network contains available quantum channels of satellite, optical fiber, and wireless sub-networks; Equations (21) and (22) represent the communication requirements The hybrid QKD generation condition is that all links on at least one path between the node pairs are available quantum channels; Equation (23) is expressed as the minimum value of the number of resource keys on all its paths.

[0071] The final number of available keys between each pair of nodes It is equal to the sum of the keys generated by the three sub-networks and the mixing network:

[0072] (twenty four)

[0073] 3) Deployment cost constraints

[0074] The cost of deploying various quantum resources consists of two parts: fixed equipment cost and operating costs :

[0075] (25)

[0076] (26)

[0077] (27)

[0078] (28)

[0079] (29)

[0080] (30)

[0081] Where, The total cost of deploying quantum devices; is the fixed equipment cost; For operating costs; 、 、 The fixed equipment costs required to generate quantum keys in the three modes of satellite, optical fiber, and wireless are equal to the unit price multiplied by the total number of nodes and links deployed; Representative Node A collection of Representative link A collection of Representative Node The decision variables for whether to deploy quantum devices; Representative link The decision variables for whether to deploy quantum devices; Representative Node The decision variables for whether to deploy quantum devices; 、 、 At a certain node or link the unit price of deploying quantum devices; For communication needs The number of satellite-generated quantum keys that are called; The unit price for calling the satellite is "yuan per bit".

[0082] 4) Communication demand constraints

[0083] The communication process of carrying power business information can be described by information flow. The basic requirement of communication is to Before transmitting to the destination node, whether there are enough quantum keys on the link to encrypt the information is a further option. Therefore, the transmission of the information flow must first meet the constraints of communication delay and link bandwidth:

[0084] (31)

[0085] (32)

[0086] (33)

[0087] (34)

[0088] Where: For communication needs Information flows through the path End-to-end delay; is the link length; is the rate at which information is transmitted after taking into account the data processing time at the node; For communication needs Minimum latency requirement; and The bandwidth used by the communication link and its bandwidth upper limit; For communication needs bandwidth; For communication needs A collection of and Describes whether the information flow passes through the link and A state variable, a value of 1 indicates that it has passed, and a value of 0 indicates that it has not passed.

[0089] Formula (31) and Formula (32) are communication requirements Communication delay constraint, if the starting node Information through the path Flow into the end node , then the end-to-end delay is the path All links in The data transmission delay on the link has been included in the data processing time at both ends, and is only inversely proportional to the transmission distance. Equations (33) and (34) are the bandwidth constraints of the communication link, indicating that the bandwidth occupied by the communication link is equal to the sum of the bandwidth consumed by the data flowing through the link, and cannot exceed the bandwidth upper limit of the link.

[0090] Since the bandwidth occupied in the generation stage is extremely small compared to the total bandwidth of the power optical fiber and will not become a limitation, the bandwidth occupied by the quantum channel and the classical channel in the key generation stage is not considered.

[0091] 5) Quantum information flow constraints

[0092] Information encrypted using quantum keys must also meet the flow and capacity constraints of the information flow:

[0093] (35)

[0094] Equation (35) is the coupling relationship constraint between the quantum device deployment and information transmission stages.

[0095] (36)

[0096] (37)

[0097] (38)

[0098] (39)

[0099] (40)

[0100] Where: for Real-time communication needs The number of all available quantum keys; For communication needs that require quantum key encryption The total amount of information; The amount of information encrypted by quantum keys in communication needs to achieve quantum secure communication; For businesses that require quantum encryption gather; For nodes The difference between the quantum information flow flowing in and out of the location; for all links connected to it , Representative link ,like If it is 1, it means that the information flows out of the node ,like If it is 1, it means that information flows into the node ; For nodes The set of all connected links; It is the relay node in the communication process, that is, the set of nodes excluding the starting and ending nodes of the communication pair. ; For Link The sum of the quantum information flows flowing through is the upper limit of the quantum key pool of the link; Represents all links A collection of Represents all communication needs A collection of .

[0101] Equation (36) is the encryption requirement constraint for the core business, indicating that the core business must use quantum secure communication. Equations (37) and (38) are the relay node flow constraints for the quantum information flow, indicating that the amount of quantum information flowing in and out of the relay nodes through which the information flow passes is equal. Equations (39) and (40) are the link-path capacity constraints for the quantum information flow, indicating that the number of quantum keys used for encryption on the link is equal to the sum of the number of quantum keys consumed by the information flowing through the link, and cannot exceed the upper limit of the quantum key pool capacity of the link. The above two constraints are used to ensure that the quantum information flow circulates between the starting and ending node pairs in the quantum network.

[0102] Step 6. The quantum resource optimization deployment model proposed in the present invention is a nonlinear mixed-integer programming (MIP) model. Traditional methods are difficult to solve, so the nonlinear part of the model is linearized.

[0103] Introducing new 0-1 variables Linearize Equation (3) and Equation (19). 0-1 variables are used to describe the start and end node pairs of communication requirements. Are satellite ground stations installed? The linear equivalent formula is as follows:

[0104] (41)

[0105] (42)

[0106] (43)

[0107] The above objective function (Formulas 1-2) and constraints (Formulas 4-18, 20-40, 41-43) together form a linearized, comprehensive optimization model for quantum resource deployment and service scheduling in a wide-area power secure communication network based on satellite-fiber-wireless hybrid QKD. This model is a mixed-integer linear programming (MILP) model that can be solved using commercial solvers such as CPLEX and Gurobi.

Claims

1. A power grid secure communication method based on multi-resource hybrid quantum key distribution, characterized in that: It includes the following steps: Step 1: Considering the service requirements and existing communication forms in the power system, analyze the communication processes of three quantum key distribution methods: satellite, optical fiber, and wireless. Step 2: On the basis of fully analyzing quantum communication technology in Step 1, build an electric power secure communication network architecture based on satellite-fiber-wireless hybrid quantum key distribution. Step 3: Based on the electric power secure communication network architecture built in Step 2, consider the key generation stage and the information transmission stage to establish a quantum resource optimization deployment model. Step 4: Establish the objective function of the quantum resource optimization deployment model in Step 3 as minimizing the information risk index. Step 5: Establish the constraint conditions of the quantum resource optimization deployment model in Step 3: Model the three quantum key distribution methods of satellite, optical fiber, and wireless in the key generation stage to form single quantum key distribution constraints and hybrid quantum key distribution constraints; Model the deployment and operation costs of quantum devices involved in different quantum key distribution methods in the key generation stage to form deployment cost constraints. Model the communication requirements of the power system services in the information transmission stage to form communication requirement constraints; Model the quantum information flow in the information transmission stage to form quantum information flow constraints. Step 6: Transform the established quantum resource optimization deployment model into the form of mixed linear integer programming, and use a commercial solver to solve it to obtain the quantum resource optimization deployment and scheduling scheme.

2. The grid security communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In Step 2, the electric power secure communication network architecture consists of three layers: the quantum encryption layer, the information transmission layer, and the power service layer. The quantum encryption layer is responsible for the generation, distribution, and management of quantum keys, including satellite and ground parts, and the ground part is composed of optical fiber and wireless forms; The information transmission layer is responsible for transmitting the power service data encrypted by quantum keys, including optical fiber and wireless parts; The power service layer includes various services in the power system.

3. [Incorporated by reference (Rule 20.6) 02.04.2025] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 4, the objective function of the quantum resource optimization deployment model is to minimize the information risk index, which is expressed as follows: Where: δ is the information risk index; The non-quantum secure information volume for communication requirement r, analogous to the loss of load volume, is used to describe the situation where power services are quantum-secured; The total amount of information for communication requirements; is the amount of information encrypted by quantum keys in communication requirements to achieve quantum secure communication; w r is the weight coefficient of the service to which the communication requirement r belongs.

4. [Incorporation by reference (Rule 20.6), 02.04.2025] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the single quantum key distribution is constrained as follows: The quantum key generated between two nodes by satellite quantum key distribution is represented as: Wherein: The number of keys generated by the quantum satellite for communication requirements r at a certain moment; and Decision variables representing whether satellite quantum devices are installed at the communication starting point s and the ending point d respectively. A value of 1 indicates that the satellite quantum device is installed at the node, and a value of 0 indicates that the satellite quantum device is not installed at the node; and Respectively represent the states of the communication starting point s and the ending point d covered by the satellite. The value of 1 indicates that the node is covered by the satellite, and the value of 0 indicates that the node is not covered by the satellite; set Include satellite coverage nodes within time slot T; The decision variable representing whether the satellite-covered node i' deploys a satellite quantum device; N satellite is the number of transmitters on the satellite; M is the maximum value; is the original number of satellite keys among requirements r; R satellite is the rate of satellite quantum key generation; is the duration during which a satellite-ground link can be established during the satellite skipping node process; The generation condition of satellite quantum key distribution for communication requirement r in Equation (3) is that the start and end nodes of communication are simultaneously covered by the satellite and both are equipped with satellite quantum devices; Equation (4) is the space-ground connection constraint, indicating that the number of nodes that can establish a space-ground link with the satellite in the same time slot is limited by the number of transmitters N on the satellite satellite ; Equation (5) represents the key limit that each pair of nodes can obtain after establishing a space-ground connection; The quantum key generated based on the optical fiber between two nodes is expressed as: In the formula: The number of keys generated by the quantum satellite for communication requirement r; p = {x p,1 ,..., x p,l ,..., x p,m} is a vector of size m×1 representing an accessible path between two nodes, where x p,l is a 0-1 variable indicating whether path p passes through link l. A value of 1 means path p passes through link l, and a value of 0 means path p does not pass through the link; P r is the set of accessible paths between node pairs r in the topology; Indicates the quantum feasibility of a feasible optical fiber path between any pair of nodes. When the optical fiber path is reachable and quantum devices are installed on all links of the path, this path meets the basic conditions for quantum key generation. A value of 1 indicates that path p can generate quantum keys, and a value of 0 indicates that path p cannot generate quantum keys; The decision variable indicating whether to deploy a fiber-optic quantum device on link l. A value of 1 indicates the deployment of a fiber-optic quantum device, and a value of 0 indicates no deployment of a fiber-optic quantum device; R l The original key generation rate of link l, which is related to the distance d; R min The threshold of the link key generation rate, taking the critical value before the key rate drops rapidly with distance; is the quantum key generation rate of the line after installing the relay device; l″ represents each section of the relay link after installing the relay on a link; Denote the quantum key generation rate corresponding to the relay link l″; is the number of quantum keys available on link l at this moment; is the number of quantum keys on link l at time 0; Δt is the duration of generating quantum keys from time 0 to this moment; Equations (6) and (7) indicate that the optical fiber QKD generation condition for communication requirement r is that all links on at least one path between node pairs are equipped with QKD devices; Equation (8) is the link relay constraint, indicating that when the key rate is lower than the threshold, a relay needs to be installed to meet the real-time quantum communication requirement; Equation (9) indicates that the key generation rate of the link after installing the relay is equal to the minimum of the key generation rates of each section of the relay; Equation (10) indicates that the available number of keys between node pairs is equal to the sum of the keys on all feasible installation paths, and the number of keys on each path is the minimum of the links it contains; The quantum key generated between two nodes using wireless quantum key distribution is represented as: Where: (x i , y i ) and (x j , y j ) are the position coordinates of communication node i and communication node j respectively, d (i,j) is the relationship between the distance between these two points and the coverage radius of the wireless base station; d cover represents the coverage range that the wireless node can cover and is a constant; It represents the mutual coverage situation between communication nodes i and j. When the value is 1, it means that if a wireless base station is installed at one of the nodes, the other node will be covered. When the value is 0, it means that the two nodes cannot cover each other. The number of keys generated by the quantum wireless base station among communication requirements r; M is a maximum value; The decision variable indicating whether to deploy a wireless quantum device at node i, with a value of 1 indicating the deployment of a wireless quantum device and a value of 0 indicating the non - deployment of a wireless quantum device; Indicates the situation of mutual coverage between node i and the communication starting point s; Indicates the mutual coverage situation between node i and communication end point d; Indicates the number of quantum keys of radio base station i at this moment; Denote the number of quantum keys of radio base station i at time 0; R wireless is the rate of quantum key generation of the radio base station; Δt is the duration from time 0 to the current time for generating wireless quantum keys; is the upper limit of the number of node quantum keys; And are respectively the lower and upper limits of the number of quantum keys allocated by a wireless base station to any node; Equations (11) and (12) are expressions of variables and parameters in a wireless quantum key distribution network; Equation (13) indicates that the condition for generating wireless quantum keys for communication requirement r is that both the start and end nodes are covered by nodes equipped with wireless base stations; Equations (14) and (15) indicate that the number of quantum keys generated in a wireless base station shall not exceed the upper limit of the key pool capacity; Equations (16) and (17) are constraints for a wireless base station to distribute quantum keys to nodes, indicating that the sum of the number of keys allocated to all communication requirements r is less than the existing number of keys in the wireless base station, and the upper and lower limits of the number of keys allocated to a single pair of start and end nodes are constrained by the carrying capacity of mobile devices.

5. [Incorporation by reference (Rule 20.6), 02.04.2025] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the constraints for hybrid quantum key distribution are as follows: Definition It is a 0-1 decision variable indicating whether the line l has quantum communication capabilities; satellites and wireless establish quantum connections between nodes that were originally not connected by lines, forming a new set of links. After adding them, the overall consideration is hybrid quantum key distribution; In the formula: is the number of keys generated by the hybrid QKD network for communication demand r; is the set of reachable paths for hybrid QKD between node pairs r in the topology; E is the set of all links; E satellite is the set of satellite links; E wireless is the set of wireless links; Equations (18), (19), and (20) are state constraints for the hybrid QKD quantum channels, indicating the available quantum channels in the hybrid QKD network including satellite, optical fiber, and wireless sub-networks; Equations (21) and (22) indicate that the condition for generating hybrid QKD for communication requirement r is that all links on at least one path between node pairs are available quantum channels; Equation (23) represents the minimum value of all resource key numbers on all its paths.

6. [Incorporation by reference (Rule 20.6), 02.04.2025] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the deployment cost constraint is as follows: The cost of various quantum resources consists of two parts: the fixed equipment cost C device and the operating cost C operation ; C all = C device + C operation (25)C device = C sgs + C fiber + C wireless (26) Where C all is the total cost of deploying quantum devices; C device is the fixed device cost; C operation is the operating cost; C sgs , C fiber , C wireless respectively represent the fixed device costs required for generating quantum keys in the three forms of satellite, optical fiber, and wireless, which are equal to the unit price multiplied by the total number of deployed nodes and links; V represents the set of nodes i; E represents the set of links l; Decision variable representing whether a quantum device is deployed at node i; A decision variable representing whether a quantum device is deployed on link l; Decision variable representing whether a quantum device is deployed at node i; They are the unit prices for deploying quantum devices at a certain node i or link l, respectively; The number of quantum keys generated by satellites called for communication demand r; C rent The unit price of the called satellite, in "yuan per bit".

7. [Incorporation by reference (Rule 20.6) 02.04.2025] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the constraints for communication requirements are as follows: The transmission of the information flow must first satisfy the constraints of communication delay and link bandwidth: D r,p = ∑ l∈p d l / v (31)D r,p ≤ D r,min (32)B l = ∑ r∈R B r ·(x r,l + x r,l′ ) (33)B l ≤ B l.max (34) Where: D r,p is the end-to-end delay of the information flow of communication requirement r passing through path p; d l is the link length; v is the information transmission rate after considering the data processing time at the node; D r,min is the minimum delay requirement of communication requirement r; B l and B l,max are the used bandwidth of the communication link and its bandwidth upper limit; B r is the bandwidth for communication requirement r; R is the set of communication requirements r; x r,l and x r,l′ respectively describe the state variables indicating whether the information flow passes through links l and l′. A value of 1 indicates passing through, and a value of 0 indicates not passing through; Equations (31) and (32) are communication delay constraints for communication requirement r. If the information of the start node s flows into the end node d through path p, then the end-to-end delay is the sum of the data transmission delays of all links l in path p. Here, the data delay on the link has included the time for data processing at both ends and is only inversely proportional to the transmission distance; Equations (33) and (34) are communication link bandwidth constraints, indicating that the occupied bandwidth of the communication link is equal to the sum of the bandwidths consumed by the data flowing through the link and shall not exceed the upper limit of the link bandwidth.

8. [Incorporation by reference (Rule 20.6), 02.04.2025] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the constraints for quantum information flow are as follows: The information encrypted using quantum keys should satisfy the flow and capacity constraints of the information flow: Equation (35) is the coupling relationship constraint in the quantum device deployment and information transmission phases; In the formula: The number of all available quantum keys for communication requirement r at time t; The total amount of information of the communication requirement r′ that must use quantum key encryption; The amount of information encrypted by quantum keys for communication requirements to achieve quantum secure communication; R′ is the set of services r′ that must complete quantum encryption; K i,t is the difference between the incoming and outgoing quantum information flows at node i; for all connected links l(ij), l′ represents the link l(ji), if x r,l is 1, it means the information flows out of node i, if x r,l′ is 1, it means the information flows into node i; L i is the set of all links connected to node i; V relay is the relay node in the communication process, that is, the set of the remaining nodes V\V excluding the start and end nodes of the communication pair (s,d) ; K l,t is the sum of the quantum information flows passing through link l; is the upper limit of the quantum key pool for the link; E represents the set of all links l; R represents the set of all communication requirements r; Equation (36) is the encryption requirement constraint for core services, indicating that core services must adopt quantum secure communication; Equations (37) and (38) are relay node traffic constraints for quantum information flow, indicating that for the relay nodes through which the information flow passes, the incoming and outgoing quantum information amounts are equal; Equations (39) and (40) are link-path capacity constraints for quantum information flow, indicating that the number of quantum keys used for encryption on the link is equal to the sum of the quantum key numbers consumed by the information flowing through the link and shall not exceed the upper limit of the quantum key pool capacity of the link. The above two constraints are used to ensure the circulation of quantum information flow between start and end node pairs in the quantum network.

3. [Submission of Errors (Rule 20.5 bis)] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 4, the objective function of the quantum resource optimization deployment model is to minimize the information risk index, which is expressed as follows: （1） （2） In the formula: is the information risk index; For communication requirements The non-quantum secure information volume, analogous to the loss of load volume, is used to describe the situation where power services are quantum-secured; The total amount of information for communication requirements; The amount of information that is encrypted by a quantum key in communication requirements to achieve quantum secure communication; For communication requirements The weight coefficient of the affiliated service.

4. [Error Submission (Rule 20.5 bis)] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the constraints for single quantum key distribution are as follows: The quantum key generated between two nodes using satellite quantum key distribution is expressed as: （3） （4） （5） Wherein: Communication requirements at a certain moment The number of keys generated by the quantum satellite; and respectively represent the communication starting point and the end point Decision variable indicating whether a satellite quantum device is installed. A value of 1 indicates that the satellite quantum device is installed at this node, and a value of 0 indicates that the satellite quantum device is not installed at this node; and respectively represent the communication starting point and the end point The state of being covered by a satellite, where a value of 1 indicates that the node is covered by the satellite and a value of 0 indicates that the node is not covered by the satellite; set Containing time slots Inner satellite coverage node; Represents the nodes covered by the satellite Decision variable for whether to deploy satellite quantum devices; is the number of transmitters on the satellite; is a maximum value; For requirements The original number of satellite keys; is the rate of satellite quantum key generation; is the duration during which a satellite-ground link can be established during the satellite passing over the node; Equation (3) represents the communication requirement The generation conditions for satellite quantum key distribution are as follows: the start and end nodes of communication are simultaneously covered by the satellite and both are equipped with satellite quantum devices; Equation (4) is the space-ground connection constraint, indicating that the number of nodes that can establish a space-ground link with the satellite within the same time slot is limited by the number of transmitters on the satellite. ; Equation (5) represents the key limit that each pair of nodes can obtain after establishing a satellite-ground connection; The quantum key generated between two nodes based on optical fiber is expressed as: （6） （7） （8） （9） （10） Wherein: For communication requirements The number of keys generated by the quantum satellite; is a size of The vector represents a reachable path between two nodes. is the path Whether through the link The 0-1 variable, with a value of 1 indicating a path After the link , a value of 0 indicates a path Without passing through the link; For node pairs in a topology Set of reachable paths therebetween; Indicates the quantum feasibility of a feasible optical fiber path between any pair of nodes. When the optical fiber path is reachable and quantum devices are installed on all links of the path, this path meets the basic conditions for quantum key generation. A value of 1 indicates the path Capable of generating quantum keys. A value of 0 indicates the path Unable to generate quantum keys; Indicates whether on the link The decision variable for deploying fiber optic quantum devices. A value of 1 indicates the deployment of fiber optic quantum devices, and a value of 0 indicates no deployment of fiber optic quantum devices; For the link Original key generation rate, and distance relate to; is the threshold of the link key generation rate, taking the critical value before the key rate drops rapidly with distance; is the quantum key generation rate of the line after installing the relay device; Indicates each section of the relay link after adding a relay on a link; Indicates a relay link The corresponding quantum key generation rate; For the link at this moment The number of quantum keys available on; Link at time 0 The number of quantum keys on; is the duration from time 0 to the current time when quantum keys are generated; Equations (6) and (7) represent communication requirements The generation condition of fiber-optic QKD is that QKD devices are installed on all links on at least one path between node pairs; Equation (8) is the link relay constraint, indicating that a relay needs to be installed to meet the requirements of real-time quantum communication when the key rate is lower than the threshold; Equation (9) represents the key generation rate of the link after installing the relay, which is equal to the minimum value of the key generation rates of each section of the relay; Equation (10) represents that the available number of keys between node pairs is equal to the sum of the keys on all feasible installation paths, and the number of keys on each path is the minimum value of the links it contains; The quantum key generated between two nodes using wireless quantum key distribution is expressed as: （11） （12） （13） （14） （15） （16） （17） Where: and They are communication nodes respectively And communication node The position coordinates, is the relationship between the distance before these two points and the coverage radius of the radio base station; Represents the coverage range of a wireless node, which is a constant; For a communication node And The mutual coverage situation. When the value is 1, it means that if a wireless base station is installed at one of the nodes, the other node will be covered. When the value is 0, it means that there is no mutual coverage between these two nodes; For communication requirements The number of keys generated by the quantum wireless base station; is a maximum value; Indicates whether at the node Decision variable for deploying a wireless quantum device, with a value of 1 indicating the deployment of a wireless quantum device and a value of 0 indicating no deployment of a wireless quantum device; Indicates a node And communication starting point The situation of mutual coverage; Indicates a node And communication endpoint The situation of mutual coverage; Indicates the radio base station at this moment The number of quantum keys; Indicates a radio base station The number of quantum keys at time 0; Rate for quantum key generation in a radio base station; The duration for generating a wireless quantum key from the 0th moment to this moment; is the upper limit of the number of node quantum keys; And They are respectively the lower and upper limits of the number of quantum keys allocated by the wireless base station to any node; Equations (11) and (12) are expressions of variables and parameters in a wireless quantum key distribution network; Equation (13) represents communication requirements The conditions for wireless quantum key generation are that both the starting and ending nodes are covered by nodes equipped with wireless base stations; Equations (14) and (15) indicate that the number of quantum keys generated in the wireless base station shall not exceed the upper limit of the key pool capacity; Equations (16) and (17) are the constraints for the wireless base station to allocate quantum keys to nodes, representing all communication requirements The sum of the obtained keys is less than the existing number of keys of the wireless base station, and the upper and lower limits of the number of keys obtained by a single pair of start and end nodes are restricted by the carrying capacity of the mobile device.

5. [Submission of Errors (Rule 20.5 bis)] The method for secure power grid communication based on multi-resource hybrid quantum key distribution according to claim 1, wherein: In step 5, the constraints of hybrid quantum key distribution are as follows: Definition For the circuit A 0-1 decision variable indicating whether it has the ability of quantum communication; Satellites and wireless have established quantum connections between nodes that were not originally connected by lines, forming a new set of links. After adding them, the comprehensive consideration is hybrid quantum key distribution; （18） （19） （20） （21） （22） （23） In the formula: For communication requirements The number of keys generated by the hybrid QKD network; For node pairs in a topology The set of achievable paths for hybrid QKD among them; is the set of all links; is a set of satellite links; Is the set of wireless links; Equations (18), (19), and (20) are the state constraints of the hybrid QKD quantum channel, indicating the available quantum channels of the hybrid QKD network that include three sub-networks: satellite, optical fiber, and wireless; equations (21) and (22) represent the communication requirements. The generation condition of hybrid QKD is that all links on at least one path between node pairs are available quantum channels; Equation (23) represents the minimum value of all resource key numbers on all its paths.

6. [Incorrect Submission (Rule 20.5-2)] A method for secure communication in a power grid based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In step 5, the deployment cost constraint is as follows: The cost of various quantum resources consists of two parts Composition: Fixed equipment cost and operating cost ; (25) (26) (27) (28) (29) (30) In the formula, is the total cost for deploying the quantum device; It is the fixed equipment cost; For the operating cost; 、 、 Respectively represent the fixed equipment costs required for generating quantum keys in three forms: satellite, optical fiber, and wireless, which are equal to the unit price multiplied by the total number of deployed nodes and links; Representative node set; Representative link set; Representative node Decision variable for whether to deploy quantum devices; Representative link Decision variable for whether to deploy quantum devices; Representative node Decision variable for whether to deploy quantum devices; 、 、 respectively at a certain node Or link Unit price of deploying quantum devices; For communication requirements The number of quantum keys generated by invoking satellites; Is the unit price of calling a satellite, in "yuan per bit".

7. [Error Submission (Rule 20.5 bis)] The method for secure power grid communication based on multi-resource hybrid quantum key distribution according to claim 1, wherein: In step 5, the communication requirement constraint is as follows: The transmission of information flow must first meet the constraints of communication delay and link bandwidth: (31) (32) (33) (34) Wherein: For communication requirements The information flow passes through the path End-to-end delay; is the link length; is the rate of information transmission after considering the data processing time at the node; For communication requirements The lowest latency requirement; And The bandwidth already used by the communication link and its bandwidth upper limit; For communication requirements bandwidth; For communication requirements set; And Describe whether the information flow passes through the link respectively and Is the state variable, with a value of 1 indicating passing through and a value of 0 indicating not passing through; Equations (31) and (32) are communication requirements Communication delay constraint. If the starting node The information passes through the path Inflow end node , then the end-to-end delay is the path All links in The sum of the data transmission delays. Here, the data delay on the link has already included the time for data processing at both ends and is only inversely proportional to the transmission distance; Equations (33) and (34) are the communication link bandwidth constraints, indicating that the occupied bandwidth of the communication link is equal to the sum of the bandwidths consumed by the data flowing through the link and cannot exceed the bandwidth upper limit of the link.

8. [Error Submission (Rule 20.5 bis)] A power grid secure communication method based on multi-resource hybrid quantum key distribution according to claim 1, characterized in that: In Step 5, the quantum information flow is constrained as follows: The information encrypted with the quantum key should satisfy the flow and capacity constraints of the information flow: Equation (35) is the coupling relation constraint in the quantum device deployment and information transmission phases; (36) (37) (38) (39) In Equation (40): is the communication demand at time the total number of all available quantum keys; is the communication demand that must be encrypted with the quantum key the total amount of information; is the amount of information encrypted with the quantum key in the communication demand to achieve quantum secure communication; is the service that must complete quantum encryption set; is the node the difference between the incoming and outgoing quantum information flows at ; for all connected links , represents the link if is 1, it means the information flows out of the node if is 1, it means the information flows into the node ; is the set of all links connected to the node ; is the relay node in the communication process, that is, the set of the remaining nodes except the start and end nodes of the communication ; is the sum of the quantum information flows passing through at the link ; is the upper limit of the quantum key pool of the link; represents all links set; represents all communication demands The set; Equation (36) is the encryption requirement constraint for the core business, indicating that quantum secure communication must be adopted for the core business; Equations (37) and (38) are the relay node traffic constraints for the quantum information flow, indicating that for the relay nodes through which the information flow passes, the amount of quantum information flowing in is equal to the amount of quantum information flowing out; Equations (39) and (40) are the link-path capacity constraints for the quantum information flow, indicating that the number of quantum keys used for encryption on the link is equal to the sum of the quantum keys consumed by the information flowing through the link, and cannot exceed the upper limit of the quantum key pool capacity of the link. The above two constraints are used to ensure the circulation of the quantum information flow between the start and end node pairs in the quantum network.

Images