CN111404674A - Method and equipment for generating and receiving session key - Google Patents

Abstract

The invention discloses a method and device for generating and receiving a session key, which are used to solve the problem that quantum communication is susceptible to interference. The method includes: generating at least one random number S; transmitting the corresponding random number S through a quantum channel corresponding to each random number S, so that the receiver uses a hash function to hash the received random number S with a preset key. The hash operation generates the session key Ks; receives the corresponding random number S transmitted by the quantum key distribution end through at least two quantum channels; uses the hash function to perform the hash operation on the received random number S and the preset key to generate the session key. key Ks. For the transmission of quantum keys over long distances in quantum communication and the anti-jamming transmission of quantum keys.

Description

A method and device for generating and receiving a session key

technical field

The present invention relates to quantum key distribution, in particular to a method and device for generating and receiving session keys.

Background technique

Due to the rapid development of quantum computing technology, the security of many classical cryptographic algorithms faces increasingly severe challenges. Quantum computing technology has different effects on asymmetric cryptographic algorithms and symmetric cryptographic algorithms. Existing symmetric cryptographic algorithms can be guaranteed to be secure under quantum computing conditions as long as their key length is doubled. Quantum computing technology will invalidate the asymmetric algorithms based on computational complexity, such as RSA and DH, which are commonly used now. Because the data protection of most systems uses symmetric key algorithms, but the keys used depend on asymmetric algorithms to generate, so quantum computing technology will pose a serious threat to today's security systems.

Based on the non-divisible, inaccurate, non-reproducible and ideal random characteristics of the laws of quantum mechanics, and does not depend on any requirements and assumptions on computational complexity, Quantum Key Distribution (Quantum Key Distribution) is a method in the quantum era. The key technology to ensure the safe distribution of keys. It replaces the existing asymmetric algorithm to achieve key agreement, which can enable the current security system to continue to be used in the quantum era. Although it has broad application prospects, it has the following disadvantages:

In the process of quantum communication, a sudden change of state occurs when the quantum is measured. Once the two communicating parties find that the state has changed, they will stop communicating. So any form of intrusion by the adversary, be it eavesdropping, copying, or jamming, will obstruct communications.

SUMMARY OF THE INVENTION

The invention provides a method and device for generating and receiving a session key, which can solve the problem that quantum communication is susceptible to interference.

In a first aspect, the present invention provides a method for generating a session key, the method comprising:

generate at least one random number;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, so that the receiver uses a hash function to perform a hash operation on the received random number and a preset key to generate a session key.

In a second aspect, the present invention provides a method for receiving a session key, the method comprising:

Receive the corresponding random number transmitted by the quantum key distributor through at least two quantum channels;

The received random number and preset key are hashed with a hash function to generate a session key.

In a third aspect, the present invention provides a device for generating a session key, the device comprising: a processor and a memory, wherein the memory stores program codes, and when the program codes are executed by the processor, all The described processor performs the following steps:

generate at least one random number;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, so that the receiver uses a hash function to perform a hash operation on the received random number and a preset key to generate a session key.

In a fourth aspect, the present invention provides a device for receiving a session key, the device comprising: a processor and a memory, wherein the memory stores program codes, and when the program codes are executed by the processor, all The described processor performs the following steps:

Receive the corresponding random number transmitted by the quantum key distributor through at least two quantum channels;

The received random number and preset key are hashed with a hash function to generate a session key.

A method and device for generating and receiving a session key provided by the present invention have the following beneficial effects:

According to the preset key and random number, the session key is generated based on the hash function, which can ensure that the security of the session key does not depend on whether the relay station of the quantum network is trustworthy, so that when the relay station is used to transmit the quantum key over a long distance, the quantum Communication is not easily obstructed and can meet the user's requirements for session key security;

In addition, when a multi-quantum channel key distribution is adopted, it can be ensured that when one quantum channel is disturbed, the entire quantum communication system is still unaffected, which improves the anti-interference ability of quantum communication.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the accompanying drawings used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

1 is a system diagram for generating and receiving a session key;

Figure 2 is a diagram of a single quantum channel key generation system;

Figure 3 is a diagram of two quantum channel key generation systems;

Fig. 4 is a system diagram of multiple quantum channel key generation;

Fig. 5 is a kind of generation method diagram of session key;

FIG. 6 is a diagram of a method for receiving a session key.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Example 1

An embodiment of the present invention provides a system for generating and receiving session keys. As shown in FIG. 1 , the system includes a quantum key distribution terminal, at least one quantum key receiving terminal, and at least two quantum channels, wherein:

The quantum key distribution terminal is used to generate at least one random number S, and sends the generated random number S to at least one quantum key receiving terminal through at least two quantum channels;

The quantum key receiving end receives the corresponding random number S transmitted by the quantum key distributing end through at least two quantum channels, and uses a hash function to perform a hash operation on the received random number S and the preset key K to generate a session key. key Ks.

Because the hash function is a one-way hash function that compresses data of any length to a certain fixed length through a hash algorithm, even if the attacker obtains the random number S transmitted by the quantum channel, because the two parties of the communication do not know The above-mentioned session key Ks cannot be obtained even with the preset key, which ensures the reliability of quantum communication and the security of generating the session key.

In addition, in the process of quantum communication, based on the characteristics of the quantum channel, the consistency of the sent message and the received message can be guaranteed, the attacker cannot modify the random number S, and the state mutation will occur when the quantum is measured. If the state changes, the communication will be stopped, and the use of multiple quantum channels to transmit the random number S provided in this embodiment can ensure that even if one quantum channel is disturbed, the two communicating parties will not stop the communication, and the undisturbed quantum channel can still be used. The random number S transmitted in the channel generates the session key.

As an optional implementation manner, the above-mentioned hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

As an optional implementation manner, the above random number S represents a single random number value, and may also represent a random number stream.

Depending on the number of random numbers S and quantum channels, the above-mentioned random number S is sent to at least one quantum key receiver through at least two quantum channels in the following situations:

Case 1: When the random number S represents a single random value, the single random number S uses a quantum channel A to transmit the above-mentioned single random number S correspondingly;

Case 2: When the random number S represents a random number stream, a random number stream S correspondingly uses a quantum channel A to transmit the above-mentioned random number stream S;

Case 3: When n (n is a positive integer and greater than or equal to 2) random values S represent n random values S ₁ S ₂ ...S _n , each random value uses a quantum channel A to transmit the above single random value S, a total of It needs to use n quantum channels for transmission, for example, the random value S ₁ is transmitted through the quantum channel A ₁ , the random value S ₂ is transmitted through the quantum channel A ₂ , and similarly, the random number Sn _is transmitted through the quantum channel An.

Case 4: When n (n is a positive integer and greater than or equal to 2) random number streams S represent n random number streams S ₁ S ₂ ...S _n , each random number stream uses a quantum channel A to transmit the above single random number The stream S needs to be transmitted using n quantum channels in total. For example, the random number stream S ₁ is transmitted through the quantum channel A ₁ , and the random number stream S ₂ is transmitted through the quantum channel A ₂ . Similarly, the random number stream is transmitted through the quantum channel A _n . _Sn .

As an optional implementation manner, the corresponding random number S is transmitted through the quantum channel corresponding to each random number S, including:

The corresponding random number S is transmitted through the quantum channel corresponding to each random number S in the quantum communication relay network.

Because quantum communication uses a single photon as a carrier, considering the attenuation of a single photon in the fiber channel and the sensitivity of the detector, the quantum communication distance generally does not exceed 200 kilometers, which limits the use range of quantum key distribution. Multiple relay stations relay and forward quantum keys, which can realize long-distance transmission of quantum communication.

In the prior art, there are at least one relay station between two long-distance communication users, and each adjacent two relay stations use a quantum channel to obtain a shared quantum key, and use the shared quantum key pair to transmit segment by segment. The relay and forwarding operation of "encryption-decryption-encryption...decryption" is carried out with the session key of the receiver, and finally the receiver obtains the session key and realizes long-distance quantum communication. Moreover, in the prior art, the above quantum key transmission depends on the relay station being a trusted relay station.

In this embodiment, the quantum communication relay network can be used to realize long-distance transmission of quantum communication. Specifically, the quantum communication relay network is a relay network architecture composed of at least one relay station. The information is forwarded to the receiving end to receive. There are at least one relay station between two communication users, and the corresponding random number S is transmitted between each adjacent two relay stations through at least one quantum channel. After multiple relay stations forward the above random number S, the receiver finally obtains the session key to realize long-distance quantum communication.

Because the above relay station is a relay forwarding operation for the above random number S, there is no need to ask the relay station to be a trusted relay station. Even if the relay station is not credible, the attacker obtains the above random number, because the above receiving end uses a hash function to receive random numbers. The number S and the preset key are hashed to generate the session key Ks. Based on the characteristics of the above-mentioned hash function, the attacker cannot obtain the above-mentioned session key Ks according to S without knowing the preset keys of both parties. The security of the session key Ks generated based on the hash function is ensured by using the quantum channel in the relay network to transmit the random number S.

To sum up, the distribution end uses the quantum channel corresponding to each random number S in the above quantum communication relay network to transmit the corresponding random number S, and the receiver uses a hash function to hash the received random number S and the preset key. The operation to generate the session key Ks can not only realize the long-distance transmission of the quantum channel, but also solve the problem that quantum communication is easily obstructed.

As an optional implementation manner, the distributing end may send at least one random number S to one receiving end, and may also send at least one random number S to multiple receiving ends. The distributor can also generate the session key Ks based on the hash function by using the preset key K and the generated random number S, so that the distributor and one or more receivers communicate using the session key Ks.

As an optional implementation manner, the communication between the distributing end and one or more receiving ends uses the session key Ks, including:

The distributor receives the confirmation message fed back by the receiver, and determines the random number S successfully received by the receiver;

A hash function is used to perform a hash operation on the random number S successfully received by the recipient and the preset key to generate a session key Ks.

At this point, the distributing end receives the confirmation message fed back by the receiving end, and knows which random numbers S have been received by the receiving end. S performs a hash operation to generate the same session key Ks, and uses the session key Ks to encrypt the message to be transmitted by the distributor to ensure the security of the communication between the user at the distributor and the receiver.

As another optional implementation manner, the distributing end, as the distributing party for distributing the quantum key, can send at least one random number S to multiple receiving ends. Among them, each receiving end receives the same random number S, or all receive the same multiple random numbers S, and each receiving end uses the received random number S and the preset key K to generate the session key based on the hash function. Ks. Because the random number S and the preset key K received by each receiver are the same, the same session key Ks is generated based on the hash function. The session key Ks can be used as a shared session key for any two of the multiple receivers. The messages transmitted between the receivers are encrypted to ensure the security of the messages transmitted by both parties.

To sum up, in this embodiment, the problem of short quantum communication distance is solved by using the relay network, and the problem that quantum communication is susceptible to interference is solved by using multiple quantum channels in the relay network.

In order to clearly describe a quantum key security distribution system provided by the embodiment of the present invention, two quantum channel key distribution systems are taken as an example, and the systems are limited to include: a quantum key distribution end and a quantum key receiving end , a quantum relay network, a quantum channel. As shown in Figure 2, the interaction process between the quantum key distributor and the quantum key receiver in the system is as follows:

Step 201: the distribution end generates a random number S, where the random number S represents a single random value;

Step 202: transmit the corresponding random number S to the receiving end through a quantum channel in the quantum relay network;

There are multiple relay stations in the relay network. After the relay and forwarding operation of each relay station, the quantum channel relays and forwards the random number S sent by the distribution terminal, and finally transmits the random number S to the receiving terminal for reception.

Step 203: The receiving end receives the corresponding random number S transmitted by the single quantum channel, and uses a hash function to perform a hash operation on the received random number S and the preset key K, to generate a session key Ks.

The above-mentioned preset key K is the same preset key K agreed in advance by the distributor and the receiver.

Step 204: After the receiving end successfully receives the random number S, it feeds back a confirmation message to the distributing end.

After the receiving end does not receive the random number S, the distributing end cannot receive the feedback confirmation message sent by the receiving end.

Step 205: The distributor receives the feedback confirmation message sent by the receiver, determines the random number S successfully received by the receiver, and uses a hash function to hash the random number S and the preset key successfully received by the receiver. operation to generate the session key Ks.

The distributing end and the receiving end use the same random number S and preset key to generate the same session key Ks by using the hash function, and use the session key Ks to encrypt the information transmitted between the distributing end and the receiving end to ensure the transmission of both parties. Information security.

Taking two quantum channel key distribution systems as an example, the system is limited to include: a quantum key distribution terminal, a quantum key receiving terminal, a quantum relay network, and two quantum channels. As shown in Figure 3, the interaction process between the quantum key distributor and the quantum key receiver in the system is as follows:

Step 301: the distribution end generates two random numbers S ₁ and S ₂ , and the random numbers S ₁ and S ₂ both represent a single random value;

Step 302 : transmit corresponding random numbers S ₁ and S ₂ to the receiving end respectively through the two quantum channels A ₁ and A ₂ in the quantum relay network;

There are multiple relay stations in the relay network, and the quantum channels A ₁ and A ₂ relay and forward the two random numbers S ₁ and S ₂ sent by the distribution terminal through the relay and forwarding operation of each relay station, and finally the above random number S is forwarded. _{1. S2} is transmitted to the receiving end for reception.

Step 303: The receiving end receives the corresponding random numbers S ₁ and S ₂ transmitted by the two quantum channels A ₁ and A ₂ , and uses a hash function to perform a hash operation on the received random numbers S ₁ , S ₂ and the preset key K , and generate the session key Ks.

The above-mentioned preset key K is the same preset key K agreed in advance by the distributor and the receiver.

Step 304: After successfully receiving the random numbers S ₁ and S ₂ , the receiving end feeds back a confirmation message to the distributing end.

Step 305: The distributing end receives the feedback confirmation message sent by the receiving end, determines the random numbers S ₁ and S ₂ successfully received by the receiving party, and uses a hash function to perform a hash function on the random numbers S ₁ and S ₂ successfully received by the receiving party. Perform a hash operation with the preset key to generate the session key Ks.

If the receiving end only receives the random number S ₁ and sends a feedback confirmation message of receiving the random number S ₁ to the distributing end, the distributing end confirms that only the random number S ₁ has been successfully received by the receiving end, and the distributing end and the receiving end can still use the hash. The hash function performs hash operation on the preset key K and the random number S ₁ to generate the session key Ks.

The distributing end and the receiving end use the same random number S and preset key to generate the same session key Ks by using the hash function, and use the session key Ks to encrypt the information transmitted between the distributing end and the receiving end to ensure the transmission of both parties. Information security.

Taking the multi-quantum channel key distribution system as an example, the system is limited to include: a quantum key distribution terminal, a quantum key receiving terminal, a quantum relay network, and multiple quantum channels. As shown in Figure 4, the interaction process between the quantum key distributor and the quantum key receiver in the system is as follows:

Step 401: The distribution end generates n (n is a positive integer and greater than or equal to 2) random numbers S, where the random numbers S represent n random numbers S ₁ S ₂ ···S _n ;

Step 402: Transmit the corresponding random number S to the receiving end through n (n is a positive integer and greater than or equal to 2) quantum channels A in the quantum relay network.

Wherein, each quantum channel transmits a corresponding random number S, that is, quantum channel A ₁ transmits random number S ₁ , and quantum channel A ₂ transmits random number S ₂ , and similarly, transmits random number _Sn through quantum channel An;

There are multiple relay stations in the relay network, and each relay station in each quantum channel can relay and forward the random number S transmitted in the quantum channel sent by the distributing end, and finally transmit the above random number S to the receiving end for reception.

Step 403: The receiving end receives the corresponding random number S transmitted by each quantum channel, and uses a hash function to perform a hash operation on the received random number S and the preset key K to generate a session key Ks.

The receiving end receives the random number S transmitted by each quantum channel, that is, the random number received by the receiving end is: S ₁ S ₂ ...S _n , and the above-mentioned preset key K is the same preset key agreed by the distributor and the receiver in advance. The key K, based on the hash function, uses the preset key K and random numbers S ₁ S ₂ . . . S _n to perform a hash operation to generate a session key Ks.

Step 404: After the receiving end successfully receives the random number S, it feeds back a confirmation message to the distributing end.

The receiving end does not receive the random number S, and the distributing end cannot receive the feedback confirmation message sent by the receiving end.

Step 405: The distributor receives the feedback confirmation message sent by the receiver, determines the random number S successfully received by the receiver, and uses a hash function to hash the random number S and the preset key successfully received by the receiver. operation to generate the session key Ks.

For example, if the receiving end successfully receives the random numbers S ₁ , S ₂ , S ₃ , and S ₄ and sends a feedback confirmation message to the distributing end, but does not receive S ₄ sent by the distributing end, it sends a feedback confirmation message to the distributing end as S ₁ , S 2 , S 3 , and S 4 . S ₂ , S ₃ ; after receiving the feedback confirmation message, the distributing end determines that the receiving end has received the random numbers S ₁ , S ₂ , and S ₃ .

The distributing end and the receiving end use the same random numbers S ₁ , S ₂ , S ₃ and the preset key K to generate the same session key Ks by using the hash function, and use the session key Ks to transmit the data between the distributing end and the receiving end. The information is encrypted to ensure the security of the information transmitted by both parties.

To sum up, according to the different numbers of quantum channels in the above-mentioned relay network, taking single quantum channel and multiple quantum channels as examples, the beneficial effects of the present invention are summarized as follows:

Taking a single quantum channel and the distribution end sending a random number S as an example, the single quantum channel in the relay network is used to send the random number S to the receiving end, and the receiving end uses a hash function to generate a session key.

Based on the one-way feature of the hash function, even if the relay station in the above relay network is untrustworthy, the attacker obtains the random number S, but the attacker does not know the preset key K between the communication users, so he still cannot obtain the session key. . The security of the session key does not depend on whether the relay station of the quantum network is trustworthy, so as to ensure the security requirements of the communication user for the session key.

Taking multiple quantum channels, the distributing end sends n random numbers S ₁ S ₂ ...S _n or n random number streams S ₁ S ₂ ...S _n , (n is a positive integer and greater than or equal to 2) as an example. The quantum channel corresponding to the random number sends the random number or random number stream to the receiver, and the receiver uses the hash function to generate the session key.

Based on the one-way feature of the hash function and multi-quantum channel transmission, even if all quantum channels are untrustworthy, the attacker cannot obtain the session key. Moreover, using multi-quantum channel key distribution, even if one quantum channel is disturbed, the entire quantum communication The communication of the system is also not affected.

Embodiment 2

Based on the same inventive concept, an embodiment of the present invention provides a device for securely distributing and receiving quantum keys. For the specific implementation of the device, reference may be made to the description of the system embodiment section, and repeated details will not be repeated.

The device includes a processor, memory and a transceiver.

The processor is responsible for managing the bus architecture and general processing, and the memory can store data that the processor uses when performing operations. The transceiver is used to receive and transmit data under the control of the processor.

The bus architecture may include any number of interconnected buses and bridges, in particular one or more processors represented by processors and various circuits of memory represented by memories linked together. The bus architecture may also link together various other circuits, such as peripherals, voltage regulators, and power management circuits, which are well known in the art and, therefore, will not be described further herein. The bus interface provides the interface. The processor is responsible for managing the bus architecture and general processing, and the memory can store data that the processor uses when performing operations.

The processes disclosed in the embodiments of the present invention may be applied to a processor or implemented by a processor. In the implementation process, each step of the signal processing flow can be completed by hardware integrated logic circuits in the processor or instructions in the form of software. The processor may be a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the functions in the embodiments of the present invention. The disclosed methods, steps and logical block diagrams. A general purpose processor may be a microprocessor or any conventional processor or the like. The steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied as executed by a hardware processor, or executed by a combination of hardware and software modules in the processor. The software modules may be located in random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, registers and other storage media mature in the art. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the signal processing flow in combination with its hardware.

The first device is a device for generating session keys.

Among them, the processor is used to read the program in the memory and perform the following processes:

generate at least one random number;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, so that the receiver uses a hash function to perform a hash operation on the received random number and a preset key to generate a session key.

As an optional implementation manner, generating at least one random number includes:

generate a random number;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, including:

The random number is transmitted through a quantum channel corresponding to a random number.

As an optional implementation manner, generating at least one random number includes:

generate at least two random numbers;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, including:

The corresponding random numbers are transmitted through a quantum channel corresponding to each random number, where one random number corresponds to one quantum channel.

As an optional implementation manner, the processor is further configured to:

The corresponding random number is transmitted through the quantum channel corresponding to each random number in the quantum communication relay network.

As an optional implementation manner, the processor is further configured to:

After receiving the confirmation message fed back by the receiver, determine the random number successfully received by the receiver;

Use a hash function to perform hash operation on the received random number and a preset key to generate a session key, including:

A hash function is used to perform a hash operation on the random number successfully received by the recipient and the preset key to generate a session key.

Optionally, the above-mentioned hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

The second device is a receiving device of a session key.

Among them, the processor is used to read the program in the memory and perform the following processes:

Receive the corresponding random number transmitted by the quantum key distributor through at least two quantum channels;

The received random number and preset key are hashed with a hash function to generate a session key.

As an optional implementation manner, the processor is further configured to:

A corresponding random number transmitted by at least two quantum channels in the quantum communication relay network is received.

As an optional implementation manner, the processor is further configured to:

After successfully receiving the random number, a confirmation message is sent back to the distributor.

Optionally, the above-mentioned hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

Embodiment 3

Based on the same inventive concept, an embodiment of the present invention provides an apparatus for securely distributing and receiving quantum keys. For the specific implementation of the apparatus, reference may be made to the description of the system embodiment section, and repeated details will not be repeated.

The first device is a device for generating a session key.

The device includes:

a random number generating unit, used to generate at least one random number;

The session key unit is configured to transmit the corresponding random number through the quantum channel corresponding to the random number, so that the receiver uses a hash function to perform a hash operation on the received random number and a preset key to generate a session key.

As an optional implementation manner, generating at least one random number includes:

generate a random number;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, including:

The random number is transmitted through a quantum channel corresponding to a random number.

As an optional implementation manner, generating at least one random number includes:

generate at least two random numbers;

The corresponding random number is transmitted through the quantum channel corresponding to the random number, including:

The corresponding random numbers are transmitted through a quantum channel corresponding to each random number, where one random number corresponds to one quantum channel.

As an optional implementation manner, the session key unit is further configured to transmit the corresponding random number through the quantum channel corresponding to each random number in the quantum communication relay network.

As an optional implementation, it is also used for:

After receiving the confirmation message fed back by the receiver, determine the random number successfully received by the receiver;

Use a hash function to perform hash operation on the received random number and the preset key to generate a session key, which is used for:

A hash function is used to perform a hash operation on the random number successfully received by the recipient and the preset key to generate a session key.

As an optional implementation manner, the above-mentioned hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

The second device is a device for receiving a session key.

The device includes:

a key receiving unit for receiving the corresponding random numbers transmitted by the quantum key distribution terminal through at least two quantum channels;

The session key unit is configured to perform a hash operation on the received random number and the preset key by using a hash function to generate a session key.

As an optional implementation manner, the receiving key unit is also used for:

A corresponding random number transmitted by at least two quantum channels in the quantum communication relay network is received.

As an optional implementation manner, the above-mentioned device is also used for:

After successfully receiving the random number, a confirmation message is sent back to the distributor.

As an optional implementation manner, the above-mentioned hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

Embodiment 4

Method 1. The embodiment of the present invention provides a method for generating a session key at the distribution end. As shown in FIG. 5 , the method includes:

Step 501: Generate at least one random number.

In the implementation, according to different quantum channels, it can be divided into the following situations:

Case 1: The distributor generates a random number and sends the random number to the receiver through a quantum channel;

Case 2: The distribution end generates at least two random numbers, and sends the random numbers to the receiving end through at least two quantum channels corresponding to the above random numbers.

Step 502: Transmit the corresponding random number through the quantum channel corresponding to the random number, so that the receiver uses a hash function to perform a hash operation on the received random number and a preset key to generate a session key.

As an optional implementation manner, the corresponding random numbers are transmitted through the quantum channel corresponding to each random number, including:

The corresponding random number is transmitted through the quantum channel corresponding to each random number in the quantum communication relay network.

As an optional implementation, it also includes:

After receiving the confirmation message fed back by the receiver, determine the random number successfully received by the receiver;

Use a hash function to perform hash operation on the received random number and a preset key to generate a session key, including:

A hash function is used to perform a hash operation on the random number successfully received by the recipient and the preset key to generate a session key.

As an optional implementation manner, the above-mentioned hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

Method 2. The embodiment of the present invention provides a method for receiving a session key at the receiving end. As shown in FIG. 6 , the method includes:

Step 601: Receive the corresponding random number transmitted by the quantum key distributor through at least two quantum channels;

In the implementation, the sender sends at least two random numbers, and the receiver receives at least one random number, because if the sender sends two random numbers, once a quantum link is disturbed, the receiver can only receive one random number.

Step 602: Use a hash function to perform a hash operation on the received random number and a preset key to generate a session key.

As an optional implementation manner, receiving corresponding random numbers transmitted by the quantum key distributor through at least two quantum channels, including:

A corresponding random number transmitted by at least two quantum channels in the quantum communication relay network is received.

As an optional implementation, it also includes:

After successfully receiving the random number, a confirmation message is sent back to the distributor.

As an optional implementation manner, the hash function is a secure hash algorithm SHA-256, a secure hash algorithm SHA-512, or a secure hash algorithm SHA-3.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media having computer-usable program code embodied therein, including but not limited to disk storage, optical storage, and the like.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block in the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce A device that implements the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer readable memory result in an article of manufacture comprising the instruction apparatus, the instructions The device implements the functions specified in the flow or flows of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit and scope of the invention. Thus, provided that these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims (12)

1. A method for generating a session key, the method comprising:

generating at least one random number;

and transmitting the corresponding random number through a quantum channel corresponding to the random number, so that the receiver performs hash operation on the received random number and a preset key by using a hash function to generate a session key.

2. The method of claim 1, wherein generating at least one random number comprises:

generating a random number;

transmitting a corresponding random number through a quantum channel corresponding to the random number, comprising:

transmitting the random number through a quantum channel corresponding to a random number.

3. The method of claim 1, wherein generating at least one random number comprises:

generating at least two random numbers;

transmitting a corresponding random number through a quantum channel corresponding to the random number, comprising:

and transmitting the corresponding random number through one quantum channel corresponding to each random number, wherein one random number corresponds to one quantum channel.

4. The method according to any one of claims 1 to 3, wherein transmitting the corresponding random number through the quantum channel corresponding to the random number comprises:

and transmitting the corresponding random number through the quantum channel corresponding to each random number in the quantum communication relay network.

5. The method of claim 1, further comprising:

receiving a confirmation message fed back by a receiver, and determining a random number successfully received by the receiver;

carrying out hash operation on the received random number and a preset key by utilizing a hash function to generate a session key, wherein the hash operation comprises the following steps:

and carrying out hash operation on the random number S successfully received by the receiver and the preset key by utilizing a hash function to generate a session key.

6. The method of claim 1, wherein the hash function is secure hash algorithm SHA-256 or secure hash algorithm SHA-512 or secure hash algorithm SHA-3.

7. A method for receiving a session key, the method comprising:

receiving corresponding random numbers transmitted by the quantum key distribution terminal through at least two quantum channels;

and carrying out hash operation on the received random number and the preset key by using a hash function to generate a session key Ks.

8. The method of claim 7, wherein receiving the corresponding random numbers transmitted by the quantum key distribution end through the at least two quantum channels comprises:

and receiving corresponding random numbers transmitted by at least two quantum channels in the quantum communication relay network.

9. The method of claim 7, further comprising:

after the random number is successfully received, a confirmation message is fed back to the distributing terminal.

10. The method of claim 7, wherein the hash function is secure hash algorithm SHA-256 or secure hash algorithm SHA-512 or secure hash algorithm SHA-3.

11. A session key generation device, characterized by comprising: a processor and a memory, wherein the memory stores program code that, when executed by the processor, causes the processor to perform the steps of the method of any of claims 1 to 6.

12. A receiving apparatus of a session key, characterized in that the apparatus comprises: a processor and a memory, wherein the memory stores program code that, when executed by the processor, causes the processor to perform the steps of the method of any of claims 7 to 10.

Images