QKD Key Forwarding Path Verification Using Node Digital Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing quantum key distribution networks lack a comprehensive method for verifying the path taken by cryptographic keys, especially in larger networks, which is crucial for identifying compromised nodes and ensuring compliance with geographic and security restrictions.
Innovation Solution
A method and system for verifying the key forwarding path in a quantum key distribution network involving QKD nodes that generate digital signatures containing path information, which can be verified by end applications to ensure the intended path was taken, using centralized or decentralized selection methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signature verification is implemented in QKD networks, then path verification capability is improved, but device complexity increases
Solution Approach 1:
The path verification function is segmented and distributed to individual QKD nodes. Each node independently generates and verifies digital signatures for its local path segment, rather than requiring a centralized verification system. This segmentation enables path verification while distributing system complexity across multiple nodes.
Solution Approach 2:
Digital signatures are generated and attached to path information in advance during key distribution, before verification is needed. The path verification data is prepared and embedded in the key distribution process itself, eliminating the need for separate verification infrastructure.
2Reliability
If comprehensive path verification is implemented across large QKD networks, then security against malicious attacks is improved, but loss of information increases due to verification overhead
Solution Approach 1:
The essential path verification information is extracted from the complete path data. Instead of verifying all path details, the system extracts and verifies only the critical digital signature components that confirm path integrity, reducing verification overhead while maintaining security.
Solution Approach 2:
The system performs partial verification by checking only the necessary digital signature elements rather than complete path information. This partial action approach provides sufficient security verification without the overhead of comprehensive verification of all path details.
3Reliability
If digital signatures are generated by each QKD node, then path integrity is improved, but use of energy increases due to computational requirements
Solution Approach 1:
Each QKD node performs self-service by generating its own digital signature for path verification. Nodes independently create and verify their own path authentication data without requiring energy-intensive centralized verification, distributing computational load efficiently.
Data Source
AI summary
The invention provides a method for verifying a key forwarding path of at least one cryptographic key in a quantum key distribution, QKD, network, and a system for the verification of the key forwarding path of at least one cryptographic key, the method comprising at least steps of:selecting (using either a centralized or a decentralized method) a number of QKD nodes of the QKD network, which define a key forwarding path of the at least one cryptographic key;transmitting to each of the selected QKD nodes data indicating at least partial information about the key forwarding path of the at least one cryptographic key;generating, by each selected QKD node, a digital signature, wherein the digital signature contains at least the data indicating at least partial information about the key forwarding path of the at least one cryptographic key;transmitting, by each selected QKD node (N1-N9), the digital signature generated at that selected QKD node (N1-N9); andverifying the key forwarding path of the at least one cryptographic key through a verification of the transmitted digital signatures.