信息网络安全

信息网络安全 ›› 2025, Vol. 25 ›› Issue (10): 1546-1553.doi: 10.3969/j.issn.1671-1122.2025.10.006

• 理论研究 • 上一篇    下一篇

基于密钥双同步的量子密钥通用服务模式研究

谢四江1,2(), 冯雁1,2, 阎亚龙1,2, 宁飞3   

  1. 1.中国科学技术大学网络空间安全学院，合肥 230026
    2.北京电子科技学院网络空间安全系，北京 100070
    3.长沙医学院信息工程学院，长沙 410219
  • 收稿日期:2025-02-05 出版日期:2025-10-10 发布日期:2025-11-07
  • 通讯作者: 谢四江 E-mail:xiesj@besti.edu.cn
  • 作者简介:谢四江（1971—），男，湖北，正高级工程师，博士研究生，主要研究方向为密码系统、量子保密通信网络安全体系|冯雁（1979—），女，江西，副教授，博士研究生，主要研究方向为量子保密通信网络安全体系、后量子密码学|阎亚龙（1976—），男，青海，高级工程师，博士研究生，主要研究方向为量子保密通信网络安全体系、后量子密码学|宁飞（1981—），男，山东，高级工程师，博士，主要研究方向为量子保密通信网络安全体系、数据安全
  • 基金资助:
    科技创新2030—“量子通信与量子计算机”重大项目(2021ZD0301301);中央高校基本科研业务费专项资金(32820230057Z0114)

Research on Universal Service Mode of Quantum Key Based on Dual Key Synchronization

XIE Sijiang1,2(), FENG Yan1,2, YAN Yalong1,2, NING Fei3   

  1. 1. School of Cyber Science and Technology, University of Science and Technology of China, Hefei 230026, China
    2. Department of Cyberspace Security, Beijing Electronic Science and Technology Institute, Beijing 100070, China
    3. College of Information Engineering, Changsha Medical University, Changsha 410219, China
  • Received:2025-02-05 Online:2025-10-10 Published:2025-11-07
  • Contact: XIE Sijiang E-mail:xiesj@besti.edu.cn

RichHTML

10

PDF (PC)

13

摘要：

针对量子密钥分发网络中量子密钥服务通用性不足和服务质量保障不完善等问题，文章提出一种基于密钥双同步的量子密钥通用服务模式。该模式首先从抽象层面设计量子密钥分发网络应用模型，明确量子密钥分发网络服务于密码系统、密钥管理系统和用户应用系统的具体方式；其次，提出动态端到端、静态端到端、动态群组和静态群组4类量子密钥服务，实现对多种密码应用场景的更优适配；然后，引入基于双密钥池的密钥双同步机制，有效解决了量子密钥分发网络在端到端量子密钥分发过程中出现的密钥竞争使用和密钥服务可靠性保障等问题；最后，在量子密钥服务中实现上述4类量子密钥通用服务和密钥双同步机制。文章在实际量子密钥分发网络中对量子密钥服务进行测试，验证了该模式能够支持量子密钥分发技术与用户经典密码应用的有效融合，为量子密钥分发网络的大规模应用提供了技术支撑。

关键词: 量子密钥, 通用服务, 端到端密钥, 群组密钥, 密钥双同步

Abstract:

A universal service mode of quantum key based on dual key synchronization was proposed in order to address the problems of quantum key service of quantum key distribution network, such as limited universality and lack of service quality assurance. In this general service mode, the application model of quantum key distribution network was first designed abstractly, the concrete ways of quantum key distribution network serving cryptographic systems, key management systems and applications were given. Secondly, four types of universal quantum key services, namely dynamic end-to-end key service, static end-to-end key service, dynamic group key service and static group key service, were proposed to realize the optimal adaptation of quantum key service to multiple cryptographic application scenarios. Then, a dual key synchronization mechanism based on dual types of key pools was proposed, which effectively addressed the problems of competitive use of quantum key and reliability assurance of quantum key service for the end-to-end quantum key distribution in quantum key distribution network. Finally, the four types of universal quantum key services and the dual key synchronization mechanism were implemented in quantum key service. Through the testing of quantum key service in quantum key distribution network, it has been verified that the proposed universal service mode of quantum key can support the effective integration of quantum key distribution technology and classic cryptographic applications, and can provide support for the large-scale application of quantum key distribution network.

Key words: quantum key, universal service, end-to-end key, group key, dual key synchronization

中图分类号: