96 results about "Quantum key distribution" patented technology

The application discloses a Stokes parameter encoder, which comprises a fiber optical circulator and an optical path round trip path; a polarization maintaining fiber Faraday rotator is arranged on the optical path round trip path to rotate the polarization of light by 45 degrees; the fiber optical circulator is a polarization maintaining fiber optical circulator; the fiber optical polarization beam splitter is a polarization maintaining fiber optical polarization beam splitter; the delay fiber is a polarization maintaining delay fiber; and the fiber optical phase modulator is a polarization maintaining fiber optical phase modulator. The application further discloses a parameter encoding method of the encoder. The above technical scheme can perfectly offset the rotation angle deviation problem caused by the device, can guarantee the stability of the rotation angle regardless of the angle deviation of the device, is easy to realize the driving circuit, is easy to integrate and small in size due to the pure fiber structure, and can realize the continuous variable quantum key distribution of the complete GG02 protocol based on the Stokes encoder.

This invention provides an optical system and method for free-space quantum key distribution. The optical telescope employs a transmission-type telescope and a simplified rear optical path terminal, effectively avoiding secondary mirror obstruction and vignetting. The optical telescope system has a smaller axial dimension and is lighter than a Cassette-type reflecting telescope of the same aperture, making it more suitable for large-scale use in short-range free-space quantum communication. It can be carried and deployed by a single person and has all-day quantum key distribution capabilities. Furthermore, the transmitting and receiving telescopes are interchangeable, meaning the system can function as both a transmitter and a receiver, extending quantum communication coverage to areas inaccessible by fiber optics and satellites, and enabling rapid deployment in various emergency and unforeseen circumstances.

The application discloses a bit data transmission scheduling method based on 6G space-ground integrated quantum network, a storage medium and equipment, and comprises the following steps: constructing a 6G space-ground integrated quantum communication network; searching for nodes meeting network scheduling task requirements in the quantum communication network, constructing a candidate node set, and screening out a determined best emission node; sending a quantum state to a receiving end through a quantum key distribution protocol at the best emission node, calculating a quantum bit error rate, selecting a candidate relay node from the candidate node set with the minimum quantum bit error rate as the target, and forming a quantum transmission channel; and the quantum transmission channel prepares a quantum key by using an entangled state, generates a random matrix density, generates a ciphertext through the random matrix density, and transmits the ciphertext to the receiving end. The application can reasonably schedule network resources, ensure data security through quantum communication, and the like.

The application relates to the technical field of quantum secure communication, and discloses a multi-carrier continuous variable quantum key distribution system and method, which comprises a multi-carrier quantum key generation module, a multi-carrier quantum state preparation module, an optical fiber channel, a multi-carrier quantum state detection module and a multi-carrier quantum key processing module. The application effectively avoids the influence of the dispersion effect of the optical fiber channel on the wideband CV-QKD system, improves the data processing performance of the wideband and long-distance CV-QKD system under an ultra-low signal-to-noise ratio, realizes an N-way CV-QKD system with different modulation protocols, and guarantees high-flexibility, high-practicability and high-code-rate quantum secure communication.

The embodiment of the application provides an anti-quantum mixing password gateway and a data transmission method, and belongs to the technical field of network security. The gateway comprises: a quantum key management module, which is used for acquiring quantum keys generated by a quantum key distribution network and quantum random numbers; an entity authentication module, which is used for performing challenge-response authentication on a communication terminal; a mixed certificate management module, which is used for performing mixed certificate authentication processing; a mixed key negotiation module, which is used for performing mixed key negotiation processing to generate a communication session key; and an encrypted tunnel module, which is used for establishing an anti-quantum encrypted communication tunnel based on the communication session key and performing encrypted transmission processing of communication data through the anti-quantum encrypted communication tunnel. The anti-quantum encrypted communication tunnel with the key derivation and quantum key dynamic refreshing mechanism is constructed, and the transmission security and stability of communication data in an anti-quantum attack environment are improved.

This application discloses a method, apparatus, and storage medium for disaster recovery data synchronization verification based on quantum key distribution. The method includes: establishing an initial quantum session key shared by the source and disaster recovery ends through a quantum key distribution channel, and generating a byte offset table; processing the data to be synchronized using a content-driven variable-length block and quantum random mask algorithm to obtain a quantum fingerprint data block and a data digest; performing quantum signature on the data digest using the quantum session key, and embedding the signature value into the data block according to the byte offset table to form a watermarked data block; generating a semantic fingerprint and a two-factor binding credential; constructing a synchronization data packet containing the watermarked data block, semantic fingerprint, binding credential, and historical chain node values, and sending it to the disaster recovery end for verification; and updating the disaster recovery end data, synchronization log chain, and quantum key chain after successful verification. This application ensures the immutability and traceability of the data synchronization process through watermark embedding, semantic fingerprinting, and a two-chain structure, achieving secure transmission of disaster recovery data.

Out-of-band quantum key distribution using cellular SMS can include receiving, from a user device, a client identifier that identifies the user device and a first key identifier that identifies a first key having a first key value that is a first quantumly generated random bit string. A second key that includes a second key value can be requested and received from the key service, the second key value including a second quantumly generated random bit string. The second key value can be provided to a short message service center for delivery to the user device. An operation can be performed on the first key value and the second key value to obtain a copy of a pre-shared key, which can be used when exchanging encrypted communications with the user device.

An optical transmitter for quantum key distribution. The transmitter comprises a first and a second. Each laser is configured to emit phase-randomised pulses. The transmitter further comprises an optical combiner configured to combine the pulses emitted from the first and second laser into a combined stream of pulses based on an adjustable combining ratio. The transmitter further comprises a Mach-Zehnder interferometer with a short and a long arm. The interferometer has an input port configured to receive the combined stream of pulses and an output port configured to provide an output of the interferometer. At least one of the arms comprises a phase controlling element to control a phase between the short and long arm.

The application discloses a rural travel data right confirmation and sharing method based on quantum encryption, and particularly relates to the technical field of data right confirmation and sharing. The method quantitatively expresses the circulating amplification effect of frequent changes in the right confirmation state and unstable coupling of income distribution by generating a right confirmation to complete an uncirculating analysis index, and uses the index as a basis for dynamically adjusting the quantum key distribution sequence and optimizing the data transmission path, so that the right confirmation safety and sharing efficiency are synergistically improved, and the continuity, safety and stability of the right confirmation and sharing of travel big data are enhanced.

This invention discloses a quantum key distribution (QKD)-based trusted communication method, computer device, and storage medium, relating to the field of trusted communication. The method includes: constructing a QKD network layer among multiple service nodes in a trusted communication system; deploying a key management service on each service node to construct a QKD key management layer; deploying a service layer containing multiple business subsystems on top of the QKD key management layer; when a first business subsystem needs to communicate with a second business subsystem, the first business subsystem requests a quantum key from the local key management service; the key management service distributes the quantum key; the first business subsystem uses the quantum key to encrypt communication data and sends it; the second business subsystem obtains the same quantum key through the local key management service and decrypts the encrypted data. By replacing the traditional session key distribution mechanism based on mathematical problems with a quantum key, secure communication resistant to quantum attacks between service nodes is achieved, improving the long-term security of the system.

This invention discloses a bidirectional continuous-variable quantum key distribution method and system based on frequency division duplexing in a single-transceiver ring network. The method is based on a monolithically integrated silicon photonics transceiver chip. By pre-setting optical carrier frequency offsets for the forward and reverse links, it isolates the quantum signal from Rayleigh backscattering noise in the fiber in the frequency domain. The transmitting end generates a broadband waveform containing quantum signals and pilot signals, which is transmitted bidirectionally through a single optical fiber. The receiving end uses a laser source from the same chip as the local oscillator for coherent heterodyne detection. A digital signal processing module performs orthogonalization correction, phase recovery, and matched filtering to suppress noise and extract the quantum signal to generate a secure key. This invention solves the problems of inflexible networking, low fiber utilization, and severe scattering noise interference in bidirectional transmission over a single fiber caused by the separation of the transmitting and receiving ends in integrated continuous-variable quantum key distribution systems. It provides a low-cost and highly flexible solution for metropolitan quantum ring networks.

This invention proposes a hybrid quantum-resistant security enhancement method for IPSec VPNs. The method includes: intercepting Internet Key Exchange (ITE) packets and adding a proxy header between the transport layer header and the ISE payload of the packets; obtaining a quantum key from a key pool using quantum key distribution technology and generating a first-stage session key based on the quantum key; protecting the ISE key negotiation process using a quantum-resistant cryptographic algorithm to generate a second-stage session key; and using the first-stage and second-stage session keys as input parameters for a key derivation function to generate a final session key for encrypted data transmission. This invention, without modifying the original IPSec negotiation process, supports dynamic key combinations of different security levels, enhancing the quantum security protection capability of VPN data transmission while maintaining system flexibility and performance.

The application provides a quantum key distribution system and method for on-demand adaptation of output quantum keys, wherein the original quantum keys are allowed to be expanded on demand, so as to meet the end-to-end key demand in various scenes on the basis of balancing the key security level; meanwhile, by monitoring the key output in real time, the imbalance between the key output and the key rate requirement is comprehensively considered, and the key output rate is dynamically adjusted to guarantee the stability of the production and consumption of the whole key network. In addition, the application supports both the active pushing mode of single quantitative distribution to the network distribution device and the request mode of requesting the specified single key amount from the network distribution device, and can output the key to the network distribution device in a more flexible way.

The present application relates to quantum key distribution, in particular to a satellite-ground continuous variable quantum key distribution system and method based on deep learning, a signal receiving and branching module receives multiplexed optical signals containing quantum signals and classical reference pulses from a satellite, and separates the quantum signals and classical reference pulses corresponding to a coherent detection and key generation module and an intensity measurement module; the intensity measurement module obtains a two-dimensional intensity distribution image of the classical reference pulses; a deep learning phase estimation module has a pre-trained deep learning model, takes the two-dimensional intensity distribution image as input, and outputs a two-dimensional phase correction value matrix with the same resolution as the input image; a phase modulation module performs real-time phase correction on the locally generated optical wavefront according to the two-dimensional phase correction value matrix to compensate for the phase distortion caused by atmospheric turbulence; the present application can effectively overcome the defect that it is difficult to accurately and real-time correct the phase distortion caused by atmospheric turbulence in the satellite-ground link.

This invention provides a hybrid signature method and system based on quantum key distribution and PUF, belonging to the field of information security technology. The method includes: generating a quantum key through a quantum key distribution protocol and generating a derived key seed based on a physically non-cloning function, while simultaneously configuring a trusted region for location and timing; acquiring location and timing information and generating location and timing data; generating a dynamic root key and deriving classical signature key pairs and post-quantum signature key pairs; preprocessing the message to be signed and the location and timing data, matching hierarchical security policies, and selecting the corresponding signature method to generate a signature data packet; during the signature verification process, verifying the location and timing data for signature validity and legality, and verifying the signature result using the corresponding verification method selected according to the hierarchical security policy. This invention achieves dynamic generation of signature keys and hierarchical security policy scheduling, balancing digital signatures in terms of quantum attack resistance, device binding capability, and computational efficiency.

The application relates to the technical field of quantum communication and discloses a B92 polarization encoding quantum communication and sensing integrated system, which comprises a quantum state preparation and sending module, a quantum communication / sensing channel, a quantum state receiving and measuring module and a time synchronization and data post-processing module. The application realizes deep integration and synchronous execution of quantum key distribution and environmental physical quantity sensing functions without introducing additional special reference optical signals and damaging the security of quantum communication. Key information and sensing environmental disturbance are simultaneously transmitted through the quantum channel, and disturbance information is extracted by utilizing the high sensitivity of optical quantum states to environmental disturbance, combining communication error rate or single-photon counting statistical characteristics. The application integrates phase sensing function in the free space quantum communication and sensing channel, realizes resource sharing of signal carriers, transmission channels and processing devices, significantly saves quantum resources and improves the resource utilization efficiency of the overall system.

The application discloses a large code length private key amplification data access method suitable for a quantum key distribution system. Through the combination of DDR and on-chip memory BRAM, the reading of the error-corrected key and the random seed is no longer required to be synchronous, so that the requirement for the external memory can be reduced, the subsequent hardware integration processing is facilitated, the influence of the limitation of the IO speed of the external memory on the PA processing speed is reduced, and under the condition of resource permission, multi-path synchronous calculation can be performed, and the implementation performance of the PA is effectively improved.

The application discloses a substation relay protection communication authentication method based on continuous variable quantum key distribution, and belongs to the technical field of wireless communication; the method is: evaluating the physical channel quality of each link, screening a safe link; generating quantum keys by using the safe link, and cutting the generated quantum keys according to the key block granularity; adopting a GQA handshake protocol to establish a complete mapping relationship between the key block and the frame sequence number; performing GQA quantum authentication encapsulation on a GOOSE message; and completing the authentication of a receiving end by adopting a three-layer verification mode. The application establishes the mapping relationship between the key block and the frame sequence number by the handshake protocol, the sending end and the receiving end independently calculate the corresponding key block index according to the frame sequence number, any additional key negotiation or synchronous communication is not needed in the message authentication process, the communication of the key block between the sending end and the receiving end is guaranteed, the communication response time is reduced, and the security is improved.

The application relates to the field of quantum key distribution and network security technology, in particular to a zero-trust encryption tunnel construction method and system based on quantum security enhancement. In the system, a QKD key management unit binds a global timestamp to a pre-distributed key by using the natural synchronization characteristics of quantum key generation, realizing high-precision time synchronization at both ends of communication; a local AI risk inference unit deploys a lightweight model optimized by quantitative distillation, completing real-time inference of local security risks at the edge; a double-rail encryption tunnel unit constructs parallel double tunnels and realizes adaptive scheduling of encryption resources through dynamic bandwidth allocation; a dynamic switching control unit realizes seamless switching of the encryption tunnel through handshake-free tunnel switching and state verification rollback; and a mobile adaptation processing unit completes high-probability link key pre-distribution based on trajectory prediction, realizing efficient adaptation of the key of the mobile terminal, so that the real-time performance, stability, bandwidth utilization and key resource use efficiency of the encryption communication are improved.

This invention belongs to the field of wireless communication technology. It provides a quantum-secure intercom device, system, and method based on quantum key distribution. This invention adds a quantum-secure module and connects to a quantum-secure service platform for quantum key injection, completing the security management of key generation, storage, and use. Simultaneously, this invention uses the quantum key as the injection key, injected into the quantum-secure module as one of the encryption key sources, and couples it with the identity information of the quantum-secure intercom device for secondary encryption, significantly improving communication security. Furthermore, this invention supports multiple dynamic key updates through multiple key injections, solving the risks of relatively fixed keys being easily leaked and cracked, and adapting to rapidly changing environments.

A pilot tone-assisted demodulation method is provided for coherent optical communication systems, particularly continuous-quantum quantum key distribution (CV-QKD) systems, which enables post-signal acquisition compensation for random phase fluctuations of the laser used by these systems, thereby easily, efficiently, and cost-effectively solving the frequency lock problem.

The embodiment of the application relates to the technical field of quantum information, and discloses a novel narrow-line-width entangled light source, a working method and a quantum information processing system. In the application, a pump light source with independently adjustable power and line width is directly combined with an entanglement generation module based on a beam splitter, single-polarization pump light with independently and continuously adjustable power and line width can be generated, and high-quality entangled states are stably generated by using the pump light through a polarization crosstalk-free splitting scheme based on a beam splitter. Therefore, the adaptation capability of the entangled light source to different application scenarios (such as quantum key distribution and entanglement exchange) and the purity of the entangled states are significantly improved.

This invention discloses a cerium-doped InP-based single-photon avalanche detector for space communication and its fabrication method. The detector's epitaxial structure, from bottom to top, includes a substrate, an N-type buffer layer, an absorption layer, a band transition layer, an N-type charge layer, an intrinsic multiplication layer, an intrinsic InP layer, and a cerium-doped P-type contact layer. The core innovation lies in the dual radiation-resistant design of the Ce-doped P-type contact layer and the Ce-doped modified stacked passivation film. The fabrication method involves MOCVD epitaxial growth, spin-coating source diffusion to prepare the P-type contact layer, ICP etching and wet repair, magnetron sputtering doping, and electrode fabrication. This invention utilizes Ce's unique electronic structure to suppress radiation-induced defects and combines this with an SACM structure to optimize the electric field distribution, achieving low dark count rate, high detection sensitivity, and excellent neutron radiation resistance. The process is compatible with existing semiconductor production lines and is suitable for wafer-level mass production, meeting the high-reliability single-photon detection requirements of aerospace missions such as space laser communication and quantum key distribution.

The embodiment of the application provides a hybrid signature method and system based on quantum keys and PUF, and belongs to the technical field of information security. The method comprises the following steps: generating quantum keys through a quantum key distribution protocol, and generating a derived key seed based on a physically unclonable function, while completing the configuration of a trusted area of positioning and timing; acquiring positioning and timing information and generating positioning and timing data; generating a dynamic root key, and deriving a classical signature key pair and a post-quantum signature key pair; preprocessing the to-be-signed message and the positioning and timing data, matching a hierarchical security strategy, selecting a corresponding signature mode to generate a signature data packet; in the signature verification process, verifying the signature and the legality of the positioning and timing data, and verifying the signature result according to the corresponding signature mode selected according to the hierarchical security strategy. The application realizes dynamic generation of signature keys and scheduling of a hierarchical security strategy, and balances the anti-quantum attack ability, device binding ability and calculation efficiency of digital signature.

The present application relates to the technical field of edge video analysis, and more particularly to an edge video analysis dynamic negotiation authentication method and device fusing quantum keys, which acquires multi-dimensional data of edge nodes, constructs a dynamic negotiation key pool through identity coding and key synchronization, performs quantum entropy source inspection and integrity analysis on the key pool, constructs a trust degree coupling model and a cross-node association network, generates an identity trust mapping network, verifies the legality of the network and evaluates the security level by using a dynamic trust updating model, forms a security authentication graph, establishes an evaluation index system to comprehensively quantitatively evaluate the graph, outputs a dynamic negotiation authentication report, generates an early warning decision according to the report, and realizes real-time identity authentication and dynamic adjustment of access rights in combination with quantum key distribution, thereby solving the problems of insufficient randomness of traditional edge authentication keys and lagging trust evaluation, and significantly improving the anti-attack capability, real-time response speed and active defense level of the system in a complex environment.

The present application relates to a quantum key distribution (QKD) and quantum secure direct communication method. The method is applied to a sender, and comprises: processing plaintext information to be sent, so as to obtain a codeword; encrypting the codeword by means of an encryption key in a key pool, so as to obtain ciphertext; performing encoding processing involving increasing the channel capacity by means of masking on the ciphertext, so as to obtain a codeword which has been subjected to encoding involving increasing the channel capacity by means of masking; using a QKD protocol to process the codeword which has been subjected to encoding involving increasing the channel capacity by means of masking, so as to obtain processing result information, wherein the processing result information enables a receiver to acquire a measurement result on the basis of the QKD protocol; on the basis of the QKD protocol, performing QKD post-processing to acquire a QKD post-processing result; and on the basis of the QKD post-processing result, generating a new key, and storing the new key in the key pool. The present solution can not only complete QKD, but also directly transmit a secret message on a quantum channel, and significantly increases the communication distance and communication speed of quantum secure direct communication.

This invention discloses a method and system for implementing a completely reference-frame-independent quantum key distribution protocol, belonging to the field of quantum information technology. Alice and Bob, the communicating parties, randomly select mutually unbiased basis vectors to prepare quantum states and send them to a third party, Charlie. Charlie performs Bell state projection measurements and announces the success. Both parties publish the basis vector information, divide the dataset, and calculate the gain and bit error rate. A 3×3 correlation tensor matrix is ​​constructed and singular value decomposition is performed to obtain three reference-frame-independent singular values. The secure key rate is calculated based on the bit error rate. Finally, key negotiation and security enhancement are performed to extract the secure key. This invention does not require basis vector alignment, completely eliminating the dependence on reference frame calibration. It can still stably generate keys even with basis vector drift, and the amount of information required by eavesdroppers is lower, significantly improving the practicality and security of the quantum key distribution system.

The application discloses a cross-domain quantum key distribution method of an optical transport network, an OTN device and a system. The method comprises the following steps: sending cross-domain session key application information to a corresponding first quantum cryptography service platform; receiving session key information returned by the first quantum cryptography service platform, wherein the session key information comprises a working key KeyValue and a cross-platform key request field, the cross-platform key request field comprises a working key identifier KeyID, a key identifier key_tag and a cross-platform session key application value Keyblock; and delivering the cross-platform key request field to a peer OTN device through an overhead byte of an ODUk, so that the peer OTN device requests a corresponding second quantum cryptography service platform to acquire the working key KeyValue based on the cross-platform key request field. The application realizes cross-domain distribution of quantum keys of an OTN transmission network.

A CV-QKD system comprising a plurality of transmitters, one or more splitters, and a plurality of receivers is provided. Each transmitter modulates a quantum signal according to a discrete or continuous distribution in phase and amplitude. Each splitter distributes N modulated quantum signals, received from a respective transmitter or from another splitter, into M modulated quantum sub-signals. Each receiver is configured to: receive, via a respective quantum channel, a modulated quantum sub-signal associated to one or more of the transmitters from the one or more splitters; detect one or more quadrature components of the received modulated quantum sub-signal; and perform a respective post-processing protocol with one or more of the plurality of transmitters to generate one or more individual final secret keys between the one or more transmitters and the receiver and / or one or more common secret keys between the one or more transmitters and the plurality of receivers.