Shared Key Generation Using Pre-Stored Seed Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Quantum key distribution protocols face challenges in large-scale enterprise scenarios due to insufficient key distribution and high bit error rates, which are affected by external interference and lack effective bit error rate estimation methods.

Innovation Solution

A method and apparatus for generating a shared key using a sender and receiver that establish a key negotiation connection, determine an algorithm code, and calculate a shared key using a pre-stored seed key and algorithm, with optional random number integration for enhanced security, avoiding leakage and bit error rate issues.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If quantum key distribution protocols use a shared key based on bit error rate, then security is provided based on quantum mechanics principles, but key distribution is insufficient in large-scale enterprise scenarios and yield of actual quantum keys is limited

Engineering Contradiction:
ImprovesecurityVSAvoidkey distribution yield
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent changes the fundamental parameter for key generation from bit error rate to pre-shared secrets. Instead of relying on quantum channel quality (bit error rate) to determine key yield, the system uses classical pre-shared secrets as the basis for generating quantum keys, thereby decoupling key distribution yield from quantum channel conditions and enabling scalable deployment in large-scale enterprise scenarios.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If quantum key distribution relies on bit error rate to determine output, then security is ensured through quantum mechanics, but the shared key negotiation process is greatly affected by external interference

Engineering Contradiction:
ImprovesecurityVSAvoidexternal interference
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces pre-shared secrets as an intermediary element that mediates between the quantum key distribution process and external interference. The pre-shared secrets serve as a stable reference point that is not affected by quantum channel conditions or external interference, allowing the system to generate secure keys while being immune to environmental disturbances.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If classical authentication techniques based on computing complexity are used, then identity authentication is achieved using digital signature technology, but security may be cracked or compromised when used in quantum computing and cloud computing environments

Engineering Contradiction:
ImproveauthenticationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent replaces classical computational authentication mechanisms (digital signatures based on mathematical complexity) with quantum-based authentication using pre-shared secrets and quantum key distribution. This substitution transitions from computational security (which can be broken by quantum computers) to quantum mechanical security (which remains secure against quantum computing attacks).

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentEP3338399B1Method, apparatus, terminal device and system for generating shared key
Publication Date: 2021.04.07 ALIBABA GROUP HOLDING LTD
  • EP3338399B1 patent drawingFigure 1
  • EP3338399B1 patent drawingFigure 2
  • EP3338399B1 patent drawingFigure 3

AI summary

Embodiments of the present application provide apparatus and methods for generating a shared key, including setting up a key negotiation connection, and determining an algorithm code by negotiating using the key negotiation connection. An algorithm corresponding to the algorithm code is retrieved from a pre-stored algorithm library, and a pre-stored seed key is calculated using the algorithm to obtain a shared key. Compared with traditional key generation methods, embodiments of the present invention avoid the problem of a high bit error rate that occurs in the traditional quantum key generation methods, especially quantum key generation methods. One exemplary method determines an algorithm code through negotiation, retrieves a pre-stored algorithm corresponding to the algorithm code, and generates a new shared key using a seed key.