Forwarding Router With Pre-Stored QKD Keys for Fast Packet Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques face challenges in performing quantum key distribution (QKD) encryption and decryption without degrading the communication performance of wide-area IP networks.
Innovation Solution
A communication system comprising routers and key management server devices that utilize quantum key distribution to generate and distribute encryption and decryption keys, allowing for selective encryption and decryption of packets without degrading network performance by using shared bit strings and pre-generated keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If QKD encryption and decryption are performed using conventional API-based key acquisition methods, then security is improved, but communication performance of wide-area IP network deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-acquiring and storing multiple decryption keys in the forwarding device before they are needed. The key management server device sends decryption keys in advance (S1-S3), and the forwarding device stores them in memory (S4). When a encrypted packet arrives, the forwarding device can immediately use the pre-stored key to decrypt it without making real-time API requests to the key management server, thus eliminating communication delays and maintaining high network performance while ensuring security through QKD-based key generation.
2Measurement precision
If real-time key acquisition via API is used for each encrypted packet, then decryption accuracy is improved, but communication performance deteriorates due to repeated server requests
Solution Approach 1:
The system performs preliminary key acquisition by having the key management server device send decryption keys to the forwarding device in advance (S1-S3) before any encrypted packets need to be decrypted. The forwarding device stores these keys in its memory (S4). When an encrypted packet arrives, the forwarding device can immediately use the appropriate pre-stored key for decryption without making real-time API requests to the key management server, thus eliminating communication delays while ensuring accurate decryption with the correct key.
Solution Approach 2:
The patent applies copying by creating local copies of decryption keys in the forwarding device's memory. Instead of repeatedly querying the key management server for the same key, the forwarding device stores multiple key copies locally (S4). Each encrypted packet can be decrypted using the corresponding copied key from local memory, eliminating the need for repeated server communications while ensuring accurate decryption with the correct key version.
3Speed
If multiple decryption keys are pre-stored in the forwarding device, then processing speed is improved, but device complexity increases
Solution Approach 1:
The patent applies copying by creating local copies of decryption keys in the forwarding device's memory. The key management server device sends multiple decryption keys in advance (S1-S3), and the forwarding device stores these key copies locally (S4). When encrypted packets arrive, the forwarding device can quickly select and use the appropriate copied key from local memory without complex real-time key generation or retrieval processes, thus improving processing speed while the complexity increase is minimal and manageable.
Data Source
AI summary
According to an embodiment, a forwarding device, which is connected to a key management server device configured to generate a decryption key by using quantum key distribution, includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: receive a reception packet; decrypt the reception packet when the reception packet is a decryption target packet; and forward the decrypted reception packet or the undecrypted reception packet.