一个新型的量子密钥服务体系架构

A New Architecture of Quantum Key Service

目前,作为一个具有战略意义的通信保密技术,量子通信已得到了比较广泛的应用可行性验证.但是,量子通信规模应用所面临的可信中继管理难度大、应用接入不便等依然未得到完善解决.为了解决上述难题,本文首先提出了一个量子网络虚拟化方案,即,每一个节点与相邻的每一个节点分别协商一个共享量子密钥,计算其中所有任意两个共享量子密钥的异或值作为虚拟节点路由状态,服务器把所有节点的所有虚拟节点路由状态封装为一个数据文件;基于该数据文件可以实现实时的量子密钥服务.该方案实现了量子密钥服务与量子网络的安全分离,从而可以面向规模用户提供实时量子密钥服务.该方案具有量子安全性、较高的效率、灵活的规模应用接入性能,可以应用到各种量子通信网络,并将在量子通信网络的规模应用中发挥重要作用。

As a promising direction of secure communication,the feasibility of quantum communication has been widely verified.However,the problems faced by quantum communication network,such as concurrent conflict of quantum relay links,relay delay and inconvenient access to applications,are still not solved perfectly.In order to overcome the above technical problems,a quantum network virtualization scheme is proposed in this paper.In the scheme,each node in a quantum network negotiates a shared quantum key with each of its neighboring nodes,and calculates the XOR values of any two shared quantum keys from these shared quantum keys.A server encapsulates all the current XOR values into a data file.One can construct virtual quantum links by the data file,which can be employed to realize real-time quantum key services without the directly support of quantum cryptography networks.The scheme,which can be used to overcome the bottle-neck of large-scale applications of quantum key distribution network,can be directly applied to most quantum networks and can potentially be a standard approach for largescale quantum network.