Forwarding Node QKD Key Preloading for Mobile Packet Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques face challenges in performing quantum key distribution (QKD) encryption and decryption without degrading the communication performance of mobile phone networks.
Innovation Solution
A communication system comprising routers and key management server devices that utilize quantum key distribution to securely encrypt and decrypt packets while maintaining network performance by pre-sharing bit strings and generating keys independently of real-time requests, allowing for selective encryption and decryption of packets based on instructions from a mobile phone network management server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If QKD encryption and decryption are performed using conventional API-based key acquisition methods, then security is improved, but communication performance degrades
Solution Approach 1:
The system performs preliminary actions by pre-distributing bit strings through QKD and pre-generating decryption keys at the forwarding device before packets arrive. The key management server device stores multiple decryption keys in advance, and the forwarding device holds both bit strings and decryption keys ready before any encryption/decryption operation is needed. This eliminates real-time key generation delays and maintains high communication performance while ensuring security.
Solution Approach 2:
The invention extracts the computationally intensive QKD key generation process from the real-time packet forwarding path. By separating key generation (performed in advance by the key management server device) from packet decryption (performed quickly by the forwarding device using pre-generated keys), the system removes the performance-degrading element from the critical communication path while maintaining security through the extracted QKD-generated bit strings.
2Reliability
If decryption keys are generated in real-time through QKD, then security is improved, but processing time increases
Solution Approach 1:
The system performs preliminary key generation by distributing bit strings through QKD in advance and generating decryption keys before packets need to be decrypted. The key management server device generates decryption keys from pre-distributed bit strings and stores them ready for use, eliminating the need for real-time QKD processing during packet decryption operations.
Solution Approach 2:
The invention segments the key management process into distinct phases: (1) QKD bit string distribution phase, (2) decryption key generation phase, and (3) packet decryption phase. By separating these functions across different devices and time periods, the system achieves both security through QKD and low processing time through pre-generated keys available during packet decryption.
3Reliability
If QKD key management is implemented, then encryption security is improved, but system complexity increases
Solution Approach 1:
The invention introduces a key management server device as an intermediary that handles the complex QKD key management operations. This intermediary device manages bit string distribution, generates decryption keys, and stores them securely, thereby simplifying the forwarding device's role to basic packet forwarding and decryption operations. The complexity is centralized in the key management server while the forwarding device maintains simplicity.
Solution Approach 2:
The forwarding device is configured to autonomously perform decryption operations using pre-stored bit strings and decryption keys without requiring real-time communication with the key management server during packet processing. The device self-serves by having all necessary cryptographic materials locally available, reducing system complexity by eliminating ongoing coordination overhead while maintaining strong encryption security.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The system enables QKD encryption and decryption without degrading communication performance, ensuring secure and efficient data transmission in mobile phone networks.
Implementation Method 1
a key management server device configured to generate a decryption key by using quantum key distribution
Data Source
AI summary
According to an embodiment, a forwarding device, which is connected to a key management server device configured to generate a decryption key by using quantum key distribution, includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: receive information specifying a decryption target packet from a mobile phone network management server device; receive a reception packet; decrypt the reception packet when the reception packet is the decryption target packet specified from the mobile phone network management server device; and forward the decrypted reception packet or the undecrypted reception packet.