Satellite Quantum Key Exchange With an Untrusted Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing quantum key distribution (QKD) protocols, such as BB84, rely on an intermediary device that must be fully trusted by both communicating parties, which is insecure if the intermediary has access to the shared cryptographic keys and is not in a secure location.
Innovation Solution
Implement a method where an intermediary device receives and transmits quantum symbols using random basis sets while withholding basis information, generating intermediate symbols, and combining them with the communicating devices to determine a shared key without revealing the basis information, ensuring only the communicating devices know the final key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an intermediary device is used to distribute cryptographic keys between two devices, then key distribution capability is improved, but security deteriorates because the intermediary device must be fully trusted and has access to the shared cryptographic keys
Solution Approach 1:
The cryptographic key is segmented into two separate components: a first partial key held by the first device and a second partial key held by the second device. The intermediary device only handles intermediate representations (first intermediate set of symbols and second intermediate set of symbols) that individually do not reveal the complete key. This segmentation ensures that even if the intermediary is compromised, the complete cryptographic key remains secure as it is never fully present at any single location.
Solution Approach 2:
The invention extracts and removes the sensitive basis information (first transmitting basis information and second receiving basis information) from the intermediary device's knowledge. These basis information elements are withheld by the endpoint devices and used exclusively by them to combine the intermediate symbol sets into the final shared key. This extraction ensures the intermediary device cannot reconstruct the complete key even with full access to transmitted data.
2Ease of operation
If the intermediary device has access to the complete cryptographic key for distribution, then key exchange functionality is improved, but trust requirements worsen because the intermediary must be in a secure location and fully trusted
Solution Approach 1:
The invention introduces a new type of intermediary device that acts as a mediator but does not require full trust. This intermediary only handles intermediate symbol sets and basis information that are mathematically designed to be useless for key reconstruction without the endpoint devices' secret inputs. The intermediary facilitates key exchange functionality while reducing trust requirements by design, as it physically cannot obtain the complete key even if malicious.
3Productivity
If basis information is revealed to the intermediary device during key distribution, then processing capability is improved, but information security worsens because the intermediary gains access to key derivation materials
Solution Approach 1:
The invention applies local quality by giving different devices different types of information with different security requirements. The intermediary device receives intermediate symbol sets that are public or semi-public, while the endpoint devices retain the sensitive basis information locally. This local retention of critical security parameters (basis information) ensures that even if the intermediary processes大量 data, it cannot derive the key without the locally-held secret inputs at the endpoint devices.
Data Source
AI summary
A method for performing a key exchange using a quantum key distribution protocol between a first device (D1), a second device (D2), and an intermediary device (ID), wherein: ID receives first symbol set (SS1) over first quantum channel (QC1) transmitted from D1 and sends first receiving basis information (RBI1) to D1 which withholds from ID first transmitting basis information (TBI1); ID transmits second symbol set (SS2) over second quantum channel (QC2) and second transmitting basis information (TBI2) to D2 which withholds from ID second receiving basis information (RBI2); ID generates first (IS1) and second intermediate symbol (IS2) sets based on valid SS1 and SS2; wherein ID generates third intermediate symbol (IS3) set by combining IS1 and IS2 and sends IS3 set to D1 and/or D2; wherein D1 and D2 exchange TBI1 and RBI2 and/or RBI1 and TBI2 to determine a final shared key based on SS1, SS2, and IS3 sets.