753 results about "Quantum key distribution" patented technology

The embodiment of the invention provides a quantum key distribution method based on a cryptographic infrastructure system, relates to the technical field of quantum secret communication, and provides a quantum key distribution method based on fusion of quantum key distribution and post quantum cryptography, which integrates a classical commercial cryptographic algorithm, a PQC post quantum cryptographic algorithm and quantum key distribution. A QKD-based quantum key secure distribution process combining SM2 and PQC mixed signature, SM2 and PQC mixed key packaging, PQC collaborative signature, PQC collaborative decryption, token access and other cryptographic technologies is designed, and anti-quantum cryptographic capability support is provided for voice applications through collaborative signature and collaborative decryption, so that the security of software for realizing a PQC cryptographic algorithm is improved, and the security of the PQC cryptographic algorithm is improved. Moreover, the software implementation mode does not have the inherent security problem of the IP, the dependency on the server is low, and the standardization program is high.

The invention discloses a substation dispatching data network security communication method based on quantum tunnel encryption, relates to the technical field of large-scale power grid security assurance, and aims to solve the problems of endpoint security loss, boundary solidification, weak quantum threat resistance and inflexible deployment of a dispatching data network. According to the method, the establishment of a secure session and the encapsulation, encryption and restoration of data are realized by integrating quantum key distribution and a post quantum cryptographic operation module through quantum secure communication terminals deployed in a dispatching master station and a transformer substation. According to the method, application layer encryption and signature are carried out on telecontrol protocol data, a double-layer encryption tunnel is constructed, and transmission of various physical network media is supported. By means of the scheme, end-to-end protection is achieved, quantum attacks are effectively resisted, double encryption is provided, and networking flexibility and smooth evolution are improved.

The present technology pertains to systems and methods for one-way authentication of quantum channels. A transmitter generates an entangled quantum state comprising a first state and a second state, modulates the second state according to a clock-synchronized pattern, and transmits it through a quantum channel to a receiver. The first state is retained and measured at the transmitter to extract quantum-state information. Authentication is performed based on this information, without requiring feedback from the receiver. The quantum-state information may be derived using quadrature measurements, Gaussian tomography, or other statistical analyses to detect whether the second state underwent irreversible interactions such as eavesdropping or decoherence. The system enables secure unidirectional quantum authentication, reduces protocol complexity, and supports real-time anomaly detection. It is compatible with continuous-variable quantum states, quantum key distribution (QKD), and scalable communication architectures.

The invention provides a power marketing archive intelligent management method, which comprises the steps of receiving archive data through a power data acquisition interface, matching an electricity price feature code in an archive based on a real-time electricity price policy identifier, and injecting a version calibration mark into unmatched data; constructing an electricity consumption abnormity prediction model based on the user historical load mode and the environmental factors; when a query request is responded, dynamic penalty parameters are generated based on the user behavior portrait and the rule base; a quantum key distribution path is generated based on a power grid topological structure, and cascade encryption is implemented along physical connection nodes; dynamically associating user operation authority with a power grid operation risk signal, and automatically disabling core operation in a high-risk state; and analyzing archive data in a security isolation environment to drive line loss optimization, electric charge tracing and fault pre-judgment service flow in real time, and outputting feedback archive update based on the service. According to the invention, the safety, reliability and operation efficiency of power marketing archive management are improved.

The invention discloses an intelligent peak regulation method with optimized combination of energy storage and conventional peak regulation means, and the method comprises the following steps: building a holographic situation awareness layer: capturing the voltage, current phase angle and frequency deviation of a power grid, and monitoring the pressure fluctuation in a diesel engine cylinder; data transmission and preprocessing: encrypting data of the miniature phasor measurement unit and the quantum sensor by using a quantum key distribution technology; the self-adaptive decision engine is used for performing Nash equilibrium calculation by utilizing a federal reinforcement learning architecture, through a local Agent based on a power generation / energy storage unit state autonomous optimization control strategy and in combination with a digital twin platform, solving multi-target conflicts of economy, reliability and carbon emission, and generating a global optimal scheduling instruction; the execution control layer is used for tracking resonance points and dispersing harmonic energy spectrums; dynamic topology reconstruction: a harmonic source is positioned by using a digital twin platform, and the topology of the energy storage system is automatically switched according to the harmonic frequency and position; continuously optimizing the digital twin platform; and full-process closed-loop feedback and self-learning are carried out.

The invention relates to the technical field of power system safety monitoring, in particular to a power transmission line online safety monitoring method, system and device based on quantum communication and a storage medium. The multi-modal fusion sensor synchronously collects multi-parameter electric signal data such as current, voltage and temperature of the power transmission line, and performs quantum encryption instantaneous recording on the data; based on quantum encryption instantaneous record extraction data, a deep learning adaptive Kalman filtering algorithm is combined with a neural network to predict the operation state of the power transmission line; generating a new Manchester code according to the multi-parameter electric signal data and the operation state predicted value, and encrypting by adopting quantum key distribution to generate a ciphertext; and transmitting the ciphertext to a client based on a terahertz communication channel, decrypting and recovering the data through the quantum key, and carrying out safety early warning. Theoretically uncracked data security assurance is realized by using the unclonable characteristic of the quantum state, high-rate data transmission is realized by terahertz communication, and the transformation from passive monitoring to active early warning is realized by a prediction algorithm.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The invention discloses a fusion quantum secure communication method of an NAT gateway, and relates to the technical field of communication network information security and quantum information. Comprising the steps of 1, creating a fusion quantum security communication system of an NAT gateway, 2, adopting a quantum hybrid encryption architecture through a quantum security module, and internally arranging a quantum key distribution unit and an anti-quantum computing acceleration chipset, 3, expanding a quintuple mapping structure of NAT through a dynamic address mapping and quantum encryption module, newly adding a quantum security dimension field QSV, and carrying out quantum encryption on the quantum key distribution unit and the anti-quantum computing acceleration chipset. And 4, developing a protocol non-inductive conversion engine through a hybrid protocol stack cooperation module, supporting an IPv4 / IPv6 dual-stack quantum tunnel and a quantum key inheritance protocol to realize cross-protocol family encryption parameter migration, dynamically adjusting a quantum encapsulation mode in an address conversion process, and dynamically associating an internal network address port with a quantum key parameter and a channel fingerprint feature. And 5, constructing a quantum perception type session state machine through an anti-quantum attack session management module, and performing a joint decision-making mechanism through quantum entanglement state monitoring and classical traffic feature analysis.

The invention discloses a lightweight low-delay quantum key distribution method and system adaptive to an electric power scene, and belongs to the technical field of quantum communication and electric power communication crossing. The method comprises the steps cooperatively executed by a sending end and a receiving end: the sending end determines a basis vector based on a pre-associated quantum fingerprint sequence and a timestamp, sends a key through polarization-phase two-dimensional coding, generates a selection mark and executes privacy amplification; and a receiving end synchronizes a timestamp to determine a basis vector, compares the basis vector with the quantum fingerprint to complete authentication, decodes through an integrated module, performs collaborative error correction and executes privacy amplification. The system comprises functional modules of a sending end and a receiving end, is integrated on a miniaturized board card, and supports common-fiber transmission and protocol conversion. According to the method, the problems of high time delay, high deployment cost and poor adaptability of the traditional QKD are solved, the end-to-end time delay is reduced to 14 microseconds, the deployment cost is reduced by more than 60%, the requirements of high safety, low time delay and lightweight deployment of a power system are met, and the method is suitable for key services such as power dispatching and relay protection.

The invention relates to a key injection method and system and computer equipment. The method comprises the following steps: sending a key request to a key basic system, so that the key basic system requests a quantum key from a quantum key distribution system, and obtains the quantum key generated by the quantum key distribution system; obtaining a quantum key generated by a quantum key distribution system; acquiring encryption key information transmitted by the key basic system; the encryption key information is obtained by encrypting the controller key by the key basic system according to the quantum key; and decrypting the encrypted key information through the quantum key to obtain a controller key, and injecting the controller key into the target controller. The quantum key generated by the quantum key distribution system has the characteristic of quantum attack resistance. In the controller key transmission process, the controller key is encrypted through the quantum key, so that the safety of the controller key is further improved, and the controller key is prevented from being leaked.

The invention provides a method for verifying a key forwarding path of at least one cryptographic key in a quantum key distribution, QKD, network, and a system for the verification of the key forwarding path of at least one cryptographic key, the method comprising at least steps of:selecting (using either a centralized or a decentralized method) a number of QKD nodes of the QKD network, which define a key forwarding path of the at least one cryptographic key;transmitting to each of the selected QKD nodes data indicating at least partial information about the key forwarding path of the at least one cryptographic key;generating, by each selected QKD node, a digital signature, wherein the digital signature contains at least the data indicating at least partial information about the key forwarding path of the at least one cryptographic key;transmitting, by each selected QKD node (N1-N9), the digital signature generated at that selected QKD node (N1-N9); andverifying the key forwarding path of the at least one cryptographic key through a verification of the transmitted digital signatures.

The invention relates to the technical field of network security protection, and discloses a distributed network security protection system fused with a quantum security gateway VPN. The system comprises a quantum key distribution module which obtains network flow data and generates a quantum key sequence through quantum key distribution processing; and a VPN tunnel construction module sorts the quantum keys according to the quantum keys and constructs a VPN tunnel path structure. And the threat detection module extracts a tunnel path node sequence, and obtains a potential threat set by comparing node intersections and counting abnormal node frequencies to screen threat paths. The security policy judgment module collects abnormal node security labels, matches path end point labels after sorting according to frequency, and generates a security policy label group. And the protection output module counts security classification nodes to which the labels belong, divides threat paths, establishes an affiliation relationship and generates a network security protection structure table. According to the system, quantum security and VPN technologies are fused, and network security protection is enhanced.

The invention relates to the field of medical information security, and discloses a medical conjunct data security access control system based on quantum encryption, and the system comprises a data fragmentation module which processes original electronic medical record data according to a patient identifier and a module type to obtain a plurality of scattered data units; the labeling encryption module is accessed to the quantum key distribution network to obtain a dynamically updated encryption key, and performs homomorphic encryption operation on the dispersed data units; the distributed storage module is used for generating a storage topology constraint condition containing a logic adjacency degree and a synchronous delay tolerance threshold value according to a causal sequence and a relative time interval carried in the annotation encryption fragments, and distributing the annotation encryption fragments to different medical institution servers for storage; and the access verification module is used for verifying the access authority and marking the integrity of the encrypted fragment when receiving an access request. The problems that at present, the data semantic relation is split, the storage and access efficiency is low, and the ciphertext utilization capacity is insufficient are solved.

The invention relates to a security gateway setting method and device based on quantum encryption, the method is applied to a data encryption process between a local security gateway and an opposite-end security gateway, and the security gateway setting method based on quantum encryption comprises the following steps: responding to an encryption request of the local security gateway; generating a dynamic key pair through a quantum key distribution system, and establishing an index relationship between the encryption request and the dynamic key pair; after it is determined that the opposite-end security gateway receives the quantum encryption data, a decryption permission submitted by a gateway verification service server is received, the decryption permission is obtained after the relation value of the index relation is released, and meanwhile the encryption value in the index relation is destroyed; and decrypting the quantum encrypted data at the opposite-end security gateway, and isolating and storing the decrypted data in a quantum security storage area independent of the local security gateway and the opposite-end security gateway. According to the invention, the security of end-to-end data transmission is improved.

The invention belongs to the technical field of video secure transmission, and particularly relates to an ultra-high-definition video secure transmission method and system, and the method comprises the steps: carrying out the dynamic partitioning of a video frame based on a CNN, and marking a security level; the key region adopts a quantum key to distribute a dynamic key to carry out AES-256 encryption, and the non-key region implements chaotic stream encryption; distributing a low-delay dedicated channel for the key data through an SDN reinforcement learning model; the receiving end performs layered decryption on the recombined video after verifying the validity of the quantum key; the system correspondingly comprises an intelligent blocking module, a quantum encryption gateway, a self-adaptive transmission controller and a credible decryption terminal, the 8K video encryption delay is smaller than or equal to 9.8 ms, the key data packet loss rate is smaller than or equal to 0.3%, and quantum computing attack is resisted.

The invention discloses an electrical drawing security collaborative management method, system and device based on a cloud computing technology and a medium. The method comprises the steps that an initial key is generated through a quantum key distribution device, the key is divided into a plurality of sub-blocks, and a dynamic session key is generated; encrypting data blocks divided by the electrical drawing file according to the logic structure through the dynamic session key, and transmitting the encrypted data blocks to a cloud computing platform for storage; generating a temporary key to encrypt the modified content, adding a digital signature and position information, and combining the modified content after the cloud verifies the signature to generate a new electrical drawing; synchronizing the new electrical drawing full-text security operation credential update record to the block chain, and verifying the consistency of the data on the chain and the cloud drawing version; and splitting the dynamic session key into a plurality of fragments and storing the fragments in different cloud nodes. According to the invention, safe transmission, efficient collaborative management and accurate data tracing of the electrical drawings are realized, and the safety, reliability and efficiency of full-life-cycle management of the electrical drawings are remarkably improved.

The embodiment of the invention provides a rail transit quantum communication system data transmission method, device and system and a medium, and relates to the technical field of data transmission. The method comprises the following steps: performing quantum key distribution through a first channel; and transmitting the train data encrypted by the quantum key through a second channel. A quantum communication dual-channel isolation architecture is adopted, namely, a first channel is specially used for quantum key distribution, a second channel is specially used for transmitting encrypted data, a key distribution characteristic of information theory security is realized by utilizing a quantum key distribution technology based on a quantum mechanics principle, key distribution and a data transmission channel are physically isolated, and the security of the key distribution is improved. The risk of secret key and data mixed leakage is avoided, so that traditional eavesdropping and quantum computing attacks are effectively resisted, the safety and integrity of train data in the transmission process are guaranteed, quantum-level safety guarantee is provided for train-ground communication, safety accidents and economic losses caused by information leakage are avoided, and the safety and reliability of train-ground communication are improved. And meanwhile, low time delay and high efficiency of the communication system are ensured.

The invention relates to the technical field of data encryption transmission, in particular to an electric power communication resource data encryption method, system and equipment based on multi-algorithm fusion, and the method comprises the steps: dividing data into a core control class, an equipment state class and a resource information class according to the purpose of electric power communication resources, a security label containing data sensitivity, transmission timeliness and storage cycle information is distributed to each type of data; an initial quantum key is generated by adopting a quantum key distribution protocol, an asymmetric key pair is generated in combination with an SM2 algorithm, and the quantum key is signed by using an SM2 private key and then transmitted; the dynamic secret key update is triggered based on the timestamp or the data volume threshold value; encrypting core control type data, dynamically generating confusion layer parameters, and meanwhile, generating a message digest in combination with an SM3 hash algorithm; and the receiver decrypts the confusion layer parameter, decrypts to obtain the plaintext, and verifies the SM3 hash value to confirm the data integrity. And the limitations of a single algorithm on efficiency, strength and aggressiveness resistance are made up.

The invention provides a low-frequency communication anti-interference control method and system based on a multi-layer defense body, and relates to the technical field of communication, and the method comprises the steps: carrying out the preprocessing of a low-frequency communication signal through employing a multi-modular redundancy architecture based on a signal anti-interference compensation coefficient, and generating a signal flow with a time-frequency redundancy characteristic; encrypting the signal flow with the time-frequency redundancy characteristic through a quantum key distribution protocol to generate a quantum encrypted signal flow; and security control is performed on the quantum encryption signal flow by adopting an identity authentication mechanism based on a block chain and a dynamic access control strategy, so that real-time protection and trusted access control of a communication link are realized. According to the invention, the stability and credibility of the communication link are improved.

The invention relates to the technical field of digital information transmission security, and discloses a database data protection device, which comprises five core modules, namely a dynamic encryption transmission module, an intelligent behavior authentication module, a real-time threat sensing module, a hierarchical key management module and a rapid disaster recovery module, and the dynamic encryption transmission module integrates a quantum key distribution (QKD) chip and a software defined encryption (SDE) engine and is used for dynamically adjusting an encryption strategy according to real-time link parameters. According to the database data protection device and method, an encryption strategy is adjusted in real time through the dynamic encryption transmission module according to link parameters, abnormal behaviors of a user are accurately recognized in combination with the intelligent behavior authentication module, the real-time threat sensing module quickly responds to attacks, and the hierarchical key management module guarantees the safety of a key in the whole life cycle; and minute-level fault backtracking is realized by a rapid disaster recovery module, and external attacks and internal risks are comprehensively resisted.

The invention provides an optimization method, device and equipment for a quantum key distribution handshake protocol, and the method comprises the steps: preparing a standard quantum state and building a spinning peak shifting time sequence, and achieving the time division multiplexing and parallel processing of a plurality of quantum channels; constructing a handshake mode with successful pre-matched codebook storage history, and supporting rapid mode matching; the authentication sub-process and the negotiation sub-process are decoupled through a parallel verification architecture and are executed in parallel on different time phases; the quantum signature token and the key negotiation parameters are fused to generate a handshake state matrix, and global representation of the handshake process is achieved; performing success probability pre-judgment based on quantum entanglement association strength analysis, and triggering a pre-generation mechanism of a candidate key pool; performing quantum state weaving and fusion on the key by using local, non-local and mixed entanglement distribution adjustment to generate an enhanced key; and finally, optimal distribution is completed in combination with a spinning peak shifting time sequence, so that parallelization of authentication and negotiation, intellectualization of resource distribution and real-time state monitoring are realized.

The invention provides a series of polarization-independent beam splitters, a decoding end, a quantum key distribution system and a communication method, which can be applied to the technical field of quantum communication. The polarization independent beam splitter comprises an input optical channel, an input adiabatic evolution waveguide, a variable-width multimode waveguide, an output adiabatic evolution waveguide and an output optical channel, the variable-width multimode waveguide is in a strip shape and comprises a first end and a second end opposite to the first end, multiple waveguide sections with different width value changes are arranged between the first end and the second end, and the variable-width multimode waveguide is arranged between the first end and the second end. The signal photons are subjected to light field evolution in multiple waveguide sections with variable width values and then are subjected to beam splitting at a second end, and first beam splitting signal photons and second beam splitting signal photons are obtained; the length of the variable-width multimode waveguide is combined with different width values, so that the value of a target function is smaller than a target threshold value, and any beam splitting ratio can be realized on the premise of ensuring polarization independence through the combined asymmetric design.

The invention discloses an electric power protection measurement and control terminal information security protection method, system and device and a medium, and the method comprises the steps: building an environment fingerprint database through collecting the physical quantity of a power grid, carrying out the threat level evaluation, and adjusting a security strategy; based on the environment fingerprint database and the threat level evaluation result, classifying the transmission data, deploying quantum key distribution nodes in the transformer substation, and providing differentiated secure transmission for different types of transmission data; and in combination with the environment fingerprint database and the differentiated secure transmission data, executing cognitive security analysis, establishing an anomaly detection model, and obtaining threat traceability visual positioning. According to the method, the dynamic environment fingerprint database is constructed by collecting multi-dimensional physical quantities and is bound with the digital certificate to form a dual authentication mechanism, so that the defect that a traditional scheme depends on static cryptography is overcome, real-time perception and adaptive response to a complex and changeable electromagnetic environment are realized, and the security of the system is improved. And the environmental adaptability and the safety protection capability of the system are obviously improved.

The invention discloses a signal encryption method and device based on quantum key distribution, and relates to the technical field of satellite navigation, and the method comprises the steps: building a quantum key distribution system based on a plurality of interconnected quantum key servers, and enabling a user communication terminal to be connected with a nearby quantum key server; the communication relay unit performs basis vector comparison on the quantum state data of the satellite and the ground station through a key distribution protocol to generate a quantum key; the key distribution unit dynamically updates the quantum key and distributes the quantum key to the user communication terminal; the user communication terminal encrypts the satellite navigation data by using the quantum key to obtain an encrypted data packet, and sends the encrypted data packet to the receiving end through the communication relay unit; and the receiving end decrypts the encrypted data packet based on the quantum key to obtain the satellite navigation data. According to the method, the generation rate of the quantum key can be improved, the anti-interference performance of the quantum key distribution system in a complex environment is enhanced, and the stability and reliability of the quantum key distribution system are ensured.

The invention discloses a quantum encryption method and system based on a lightweight end device and a medium, and relates to the technical field of quantum encryption, and the method comprises the steps: obtaining the real-time state of a receiving-transmitting end lightweight device, carrying out the self-adaptive analysis, and determining a key generation strategy; starting a quantum key distribution device to generate an initial key, distributing the initial key through an authentication channel, and performing post-processing; classified storage is carried out through a key management server, key identifiers are generated, and a sender requests a quantum key according to the identifiers before sending data; and encrypting data by using the key and a lightweight symmetric encryption algorithm, generating a ciphertext, and sending the ciphertext to a receiving end for decryption. The technical problems of resource limitation and low key generation and distribution efficiency of lightweight end equipment in quantum key distribution and encryption application are solved, the real-time state of the equipment is matched by dynamically adjusting the key generation rate and length through a self-adaptive key generation strategy, the calculation overhead is reduced, and the key generation efficiency is improved. And the encryption efficiency and the resource adaptability are improved.

The invention relates to the field of cloud computing big data secure storage, in particular to a cloud computing-based big data secure storage method and system. The method comprises the following steps: performing encryption and fragmentation processing on an original data stream to generate a fragmentation sequence with an index; generating a dynamic key sequence and a verification key group based on the fragment information; constructing a secure transmission channel through a quantum key distribution mechanism in combination with a geographic position weight and a load balancing strategy, and realizing encapsulation and transmission of a secure fragment packet; node state monitoring and redundancy management are implemented, and an update mapping table is generated; and finally, a complete data stream is recovered through fragment positioning retrieval, data recombination and dynamic decryption. According to the invention, the security and reliability of data storage and the overall load balancing capability of the system are improved.

The invention relates to the technical field of subkeys and communication, discloses a quantum key distribution and wavelength division multiplexing cooperative scheduling method for a metropolitan optical network, and aims to solve the problems of insufficient key rate and classic service quality reduction caused by mutual interference of quantum signals and classic services in a shared optical fiber. The method comprises the following steps: modeling Raman scattering and crosstalk noise between quantum and classical signals; constructing a joint optimization model which aims at minimizing classic service degradation and ensures that the quantum key rate is not lower than a threshold; solving wavelength, power and routing allocation by combining mixed integer programming and an intelligent algorithm; the key generation window and the reconfiguration wavelength are dynamically scheduled based on the service load prediction; according to the technical scheme, dual optimization of safety performance and network resource utilization efficiency can be realized.

The invention discloses a method for improving the performance of double-independent quantum key distribution of actual reference system measurement equipment, belongs to the technical field of quantum key distribution (QKD), and aims to improve the performance of the double-independent quantum key distribution when non-ideal factors such as a post-pulse effect of a detector and finite sample statistical fluctuation are considered. The invention relates to a method and a system for improving the performance of a reference system measurement device by introducing an advantage extraction technology into a double independent quantum key distribution (RFI-MDI-QKD) protocol of the reference system measurement device. Simulation results show that when the post-pulse effect and the statistical fluctuation effect are considered, the advantage extraction method can effectively improve the security key rate and the security transmission distance of the RFI-MDI-QKD protocol on the premise of not changing optical hardware. According to the invention, a valuable reference technology can be provided for practical research of the RFI-MDI-QKD system.

The embodiment of the invention provides a secure communication network system and method based on a quantum key, and the system comprises a quantum key distribution module which is used for building and updating a symmetric key between communication nodes through a quantum key distribution protocol; the quantum encryption communication module is used for encrypting and decrypting communication data by using the symmetric key; the quantum algorithm acceleration module is used for deploying a quantum algorithm in machine learning and optimization calculation tasks to realize calculation acceleration; the hybrid computing scheduling module is used for coordinating task allocation and resource scheduling between the classical computing resources and the quantum computing resources; and the block chain verification module is used for recording life cycles of key distribution, communication sessions and calculation tasks and ensuring non-tampering and traceability of the data. A key distribution and encryption communication basis of an information theory security level is constructed, and long-term data confidentiality is provided for a network. And the complex service processing capability and efficiency of the whole network system are obviously improved.