Research On Quantum Key Distribution Protocol And Key Routing Algorithm

Ensuring the security of communication information has always been the focus of academic research.Traditional communication encryption methods present inevitable drawbacks due to the emergence of quantum algorithms and quantum computers,and all communication networks relying on asymmetric encryption algorithms such as RSA and ECC have huge security risks.After the world's first Quantum Key Distribution(QKD)protocol,the BB84 protocol,was proposed,QKD-based quantum confidential communications came into the limelight.Although the research on QKD has been developed for nearly 40 years,the existing QKD-based quantum confidentiality communication system still has many problems that need to be solved.For example,the legitimacy of the identity of the communicating parties is not taken into account,and the undesirable conditions that exist in the practical use of QKD systems,such as channel noise,device errors and detection errors,etc.So suitable methods need to be added to the quantum key distribution protocol for authentication and error correction.In addition,the QKD protocol only supports short-range,direct-connected,point-to-point key distribution.Therefore,in large-scale quantum network applications,on the one hand,an efficient multi-user group key negotiation protocol needs to be designed,and on the other hand,a quantum key routing algorithm needs to be designed to solve the long-distance,cross-device key routing problem,taking into account various factors in QKD networks.This thesis is based on the project of the Key Laboratory of National Defense Science and Technology for Confidential Communications,and designs the corresponding improved quantum key distribution protocol and quantum key routing algorithm around the above problems of the existing QKD protocol,and the main innovative work is as follows:1.First,this thesis defines a four-layer architecture for quantum key distribution networks based on software-defined networks to determine the working layers and working modes of the protocols and algorithms in this thesis.Then for short-range peer-to-peer key distribution,this thesis proposes a protocol based on Bell State with Authentication Quantum Key Distribution(BBS-AQKD)to address a variety of problems such as authentication,undesirable real-world environment,and low key formation rate that have not been considered by existing research.The protocol can realize quantum authentication and quantum key distribution simultaneously in the key negotiation stage,and has the functions of fast identity verification,BER estimation and error correction.And the security analysis demonstrates the security of shared keys and authentication in this protocol.2.A Partitioning Key Domain Quantum Group Key Agreement(PKD-QGKA)protocol is proposed based on the security assurance of BBS-AQKD protocol for secure group communication under a wide range of networks.Compared with the traditional group key negotiation protocols,this protocol adopts the distributed idea that the generation of group keys is jointly calculated by all group members,which avoids the untrustworthiness problem caused by a single node.In addition,the partitioning key domain approach can reduce the number of key negotiation rounds and accelerate the generation rate of group keys based on the existing key resources.3.For long-distance,trusted relay-based key routing,existing research has problems such as the metric is not comprehensive enough and the routing algorithm is not reasonable enough.Taking into account various factors such as link length,link hops,channel noise,available key quantity and quality of service,a new routing metric function-link contribution-is designed and a Based on Link Contribution Quantum Key Routing Algorithm is proposed.Simulation experiments show that the algorithm outperforms existing studies in terms of key distribution rate,average key delivery delay and network service quality.4.To implement the quantum key distribution network supervisory system,the BBS-AQKD protocol and the BLC-QKRA routing algorithm are implemented respectively for the proposed protocol and algorithm.And using the execution results of the protocols,the encrypted transmission of data information and integrity checking are realized;using the key routing algorithm,the fast calculation of the key routing path is realized.