融合副载波复用量子密钥分配的智能配电网安全通信机制

Secure Communication Mechanism for Smart Distribution Network Integrated With Subcarrier Multiplexed Quantum Key Distribution

针对基于无源光网络(passive optical network,PON)的智能配电网(smart distribution grid,SDG)通信平台,首先深入分析其信息安全风险,在此基础上提出了将高效的副载波复用量子密钥分配(subcarrier multiplexed quantum key distribution,SCM-QKD)技术融合于PON-SDG的技术构想。针对树形、手拉手和链状3种典型拓扑,对采用SCM-QKD技术的PON的量子密钥差错率(quantum bit-error-rate,QBER)和筛选成钥率参数进行了理论计算。计算和分析结果表明,在典型的PON链路长度和分光比参数下,SCM-QKD技术能够满足SDG业务的信息安全需求。最后给出了融合SCM-QKD技术实现PON中光线路终端(optical line terminal,OLT)和用户侧光网络单元(optical network unit,ONU)共享量子密钥的分配,以及基于该密钥实现OLT与ONU双向身份认证和会话密钥生成的实施方案流程。

Firstly, the risk of information security of the passive optical network （PON） based communication platform for smart distribution grid （SDG） is analyzed, and on this basis a technical thinking of integrating the high efficient subcarrier multiplexed quantum key distribution （SCM-QKD） with PON-SDG is proposed. Secondly, as for the three typical topological forms, namely the tree-form, hand-in-hand form and the chain form, the quantum bit-error-rate （QBER） for PON utilizing SCM-QKD technology and the parameters of quantum sifted-key-generation-rate are theoretically calculated. Calculation and analysis results show that under typical link length of PON and power-split-ratio parameters the SCM-QKD technology can meet the demand on information security of PON-SDG communication service. Finally, the method to share the quantum key distribution between the optical line terminal （OLT） in PON and the optical network unit （ONU） at the user side is given, and based on the key the concrete implementation of the two-way identity authentication and the generation process of the session key between OLT and ONU are given.