Protocol Conversion for QKD-Compatible Encrypted Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing quantum key distribution (QKD) systems require separate devices for key sharing and data transmission, and their key delivery specifications differ from conventional protocols like TLS and IPsec, preventing seamless integration with existing encryption methods.
Innovation Solution
A communication system with protocol conversion units, state management units, and protocol drivers that facilitate the use of arbitrary key sharing protocols, including QKD, by managing execution states and generating shared keys through a unified procedure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If QKD protocol is used for key sharing, then security of communication is improved, but device complexity increases due to separate key sharing device and data transmission device
Solution Approach 1:
The patent combines the key sharing function and data transmission function into a single communication device. The communication device includes both a key sharing unit that executes key sharing protocols (including QKD) and a data transmission unit that uses the shared keys for encrypted communication, eliminating the need for separate devices while maintaining security benefits.
Solution Approach 2:
The communication device is designed with multi-functionality to support both key sharing operations and data transmission operations. The device can dynamically switch between different key sharing protocols (QKD, classical key exchange) and perform both key management and data communication functions through integrated processing units and communication interfaces.
2Reliability
If QKD protocol is used for key sharing, then security is improved, but ease of operation deteriorates due to different key delivery specification from conventional protocols
Solution Approach 1:
The patent introduces a protocol conversion unit that acts as an intermediary between applications and different key sharing protocols. This unit translates protocol-specific operations into standardized interfaces, allowing applications to use QKD or other protocols without needing to understand protocol-specific procedures. The protocol conversion unit handles the complexity of different key delivery specifications while presenting a unified interface to users.
Solution Approach 2:
The patent segments the key sharing system into independent functional modules: a key sharing unit that handles protocol-specific operations, a protocol conversion unit that manages interface translation, and a data transmission unit that uses the shared keys. This modular architecture allows each component to be optimized independently while maintaining ease of operation through standardized interfaces.
3Reliability
If protocol-specific procedures are followed for each key sharing protocol, then protocol compatibility is maintained, but adaptability deteriorates as applications cannot use arbitrary key sharing protocols
Solution Approach 1:
The communication device incorporates a universal interface design that supports multiple key sharing protocols including QKD and classical key exchange protocols. The protocol conversion unit can dynamically adapt to different protocols while maintaining a consistent application interface, enabling applications to use any supported protocol without modification.
Solution Approach 2:
The patent implements dynamic protocol selection and conversion capabilities. The protocol conversion unit can dynamically switch between different key sharing protocols based on availability and requirements, and can adapt its conversion rules in real-time. This dynamic approach maintains protocol compatibility while providing flexibility for using arbitrary key sharing protocols.
Data Source
AI summary
A communication system according to one embodiment is a communication system including a plurality of communication apparatuses, in which each communication apparatus includes: an application program configured to perform encrypted communication with another communication apparatus; a protocol conversion unit configured to transmit a message representing a predetermined procedure when a key request for a shared key to be used in the encrypted communication is received from the application program; a state management unit configured to receive a message from the protocol conversion unit to manage an execution state of the procedure, and to transmit the message to a protocol driver supporting a predetermined key sharing protocol; and a protocol driver configured to request a key sharing system that executes the key sharing protocol, to generate the shared key, when the message is received from the state management unit.