量子密钥协商系统应用架构设计与方法研究

发布时间：2018-04-12 06:10

本文选题：量子密钥分发 + 安全威胁　；参考：《电子科技大学》2014年硕士论文

【摘要】：具有物理安全特性的量子密钥分发(quantum key distribution,QKD)技术发展迅速,越来越受到人们的广泛关注。在安全保密方面,量子密钥在协商过程中的无条件安全性也决定了它在军事、政务、金融等领域当中的地位和作用。近年来,量子通信和量子密钥分发在理论和实验方面均取得了较大突破,也有少量的商品和应用场景出现,但受制于非理性的器件、复杂的电磁环境、应用环境安全性和速率等性能瓶颈因素,难以在现实生活中推广使用。本文正是针对上述部分问题,以量子密钥分发网络和经典网络的融合网络为研究对象,在量子密钥分发技术和“一次一密乱码本”(one time pad,OTP)体制基础上,主要对量子密钥分发技术在经典网络中应用的模式进行了架构,对其安全威胁和解决办法进行了分析和探讨,还对量子密钥的应用方法进行了研究以及对关键设备方案进行了设计。主要内容为:1、研究QKD如何在经典网络中应用,提出了直接应用、密分保护和密钥扩展三种模式。直接应用模式解决了OTP体制下的密钥安全分发问题;密分保护模式克服了经典密码系统中顶级密钥(主密钥)须离线传递的困难;密钥扩展模式解决了密钥分发码率低以适应高速应用的问题。2、研究融合网络的安全威胁及解决办法,提出了融合网络的安全模型,分析了量子终端、QKD应用设备在身份信任、物理防护、外设管控、数据保护、计算环境、状态监控等方面的安全威胁,针对此建立了安全防护体系,设计了相应的安全防护措施,可为QKD在经典网络中的应用提供整体安全支撑和指导。3、研究量子密钥的应用安全,提出了密钥扩展前和预协商时按照NIST标准进行16项检测,扩展后应用前进行常规5项检测的机制,设计了量子密钥的存储格式和使用后的销毁方法,并对其随机性能进行了验证,结果表明其随即性能满足标准要求。4、设计并研制了QKD应用样机,实现了量子密钥在安全话音、安全数据等业务中的应用,并进行了相关验证,结果表明其密钥扩展功能以及速率满足应用要求,为QKD技术的实用和推广提供了支撑。
[Abstract]:Quantum key distribution (QKD) technology, which has physical security properties, has developed rapidly and attracted more and more attention.In terms of security and security, the unconditional security of quantum keys in the negotiation process also determines its position and role in military, government, finance and other fields.In recent years, quantum communication and quantum key distribution have made great breakthroughs in both theory and experiment, and a small number of commodities and applications have emerged, but they are constrained by irrational devices and complex electromagnetic environment.It is difficult to popularize it in real life because of the performance bottleneck factors such as environment security and rate.In order to solve the above problems, this paper takes the fusion network of quantum key distribution network and classical network as the research object, based on the quantum key distribution technology and the "one time pado OTP" system.In this paper, the application mode of quantum key distribution technology in classical network is constructed, and its security threats and solutions are analyzed and discussed.The application method of quantum key and the design of key equipment are also studied.The main content is: 1. How to apply QKD in classical network is studied. Three modes of direct application, secret division protection and key extension are proposed.The direct application mode solves the problem of key security distribution in OTP system, and the secret protection mode overcomes the difficulty of off-line transfer of top-level key (master key) in classical cryptosystem.The key extension mode solves the problem of low code rate of key distribution to adapt to high speed application. The security threats and solutions of the fusion network are studied. The security model of the fusion network is proposed, and the identity trust of the QKD application device in the quantum terminal is analyzed.Physical protection, peripheral control, data protection, computing environment, state monitoring and other aspects of the security threats, this paper established a security protection system, designed the corresponding safety protection measures,It can provide the whole security support and guidance for the application of QKD in the classical network. It studies the application security of quantum key, and proposes 16 items of detection according to the NIST standard before and before the key expansion and pre-negotiation.The mechanism of conventional 5 items detection before application is extended, the storage format of quantum key and the method of destruction after use are designed, and its random performance is verified.The results show that its random performance meets the requirements of standard .4. the prototype of QKD application is designed and developed, and the application of quantum key in secure voice, secure data and other services is realized, and the relevant verification is carried out.The results show that the function and rate of key expansion can meet the requirements of application and provide support for the application and popularization of QKD technology.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：O413;TN918.4

【相似文献】