Quantum key transmission method, apparatus, and system

A method, comprising:

• receiving, by a quantum device, a key request packet from an application device, wherein the key request packet comprises a user identifier corresponding to the application device, a first public key, a first statistical value, and a first message authentication code value, wherein the first statistical value is a sending count that is recorded by the application device and that is of the key request packet comprising the user identifier;
• obtaining, by the quantum device based on the key request packet, first authentication information and storage information that corresponds to the user identifier, wherein the storage information comprises a shared key corresponding to the quantum device and the user identifier, the first authentication information comprises the first public key, the storage information further comprises a second statistical value, the second statistical value is a sending count that is recorded by the quantum device and that is of the key request packet comprising the user identifier;
• when the second statistical value is greater than or equal to the first statistical value, stopping, by the quantum device, a quantum key transmission procedure, or when the second statistical value is less than the first statistical value, updating, by the quantum device, the second statistical value, to enable an updated second statistical value to be equal to the first statistical value;
• verifying, by the quantum device, the first message authentication code value based on the shared key and the first authentication information;
• in response to the verifying performed by the quantum device on the first message authentication code value succeeding, encrypting, by the quantum device, quantum key information by using the first public key, to obtain a first ciphertext, wherein the quantum key information comprises a quantum key;
• calculating, by the quantum device, second authentication information based on the shared key, to obtain a second message authentication code value, wherein the second authentication information comprises the first ciphertext;
• and
• sending, by the quantum device to the application device, a key response packet corresponding to the key request packet, wherein the key response packet comprises the first ciphertext and the second message authentication code value.

An application device, comprising:

• a memory storing program instructions;
• a network interface;
• and
• at least one processor, wherein after the at least one processor reads the program instructions stored in the memory, the application device is enabled to perform the following operations:
• generating a derived key based on a target password by using a key derivation function;
• sending a key request packet to a quantum device, wherein the key request packet comprises a user identifier corresponding to the application device, a first public key, and a first message authentication code value, wherein the user identifier is used by the quantum device to obtain storage information corresponding to the user identifier, and the storage information comprises a shared key corresponding to the quantum device and the user identifier, wherein the first public key is used by the quantum device to encrypt quantum key information allocated to the application device, the quantum key information comprises a quantum key, and the first public key is a public key in a key pair obtained by the application device by running a post-quantum key generation algorithm, wherein the first message authentication code value is obtained by the application device by calculating first authentication information based on the shared key, and the first authentication information comprises the first public key, and wherein the shared key is obtained based on the derived key;
• receiving, from the quantum device, a key response packet corresponding to the key request packet, wherein the key response packet comprises a first ciphertext and a second message authentication code value;
• verifying the second message authentication code value based on the shared key and second authentication information, wherein the second authentication information comprises the first ciphertext;
• and
• in response to the verifying performed by the application device on the second message authentication code value succeeding, decrypting the first ciphertext by using a first private key, to obtain the quantum key information, wherein the first private key is in the key pair.

A quantum device, comprising:

• a memory storing program instructions;
• a network interface;
• and
• at least one processor, wherein after the at least one processor reads the program instructions stored in the memory, the quantum device is enabled to perform the following operations:
• receiving a key request packet from an application device, wherein the key request packet comprises a user identifier corresponding to the application device, a first public key, a first statistical value, and a first message authentication code value, wherein the first statistical value is a sending count that is recorded by the application device and that is of the key request packet comprising the user identifier;
• obtaining, based on the key request packet, first authentication information and storage information that corresponds to the user identifier, wherein the storage information comprises a shared key corresponding to the quantum device and the user identifier, the first authentication information comprises the first public key, the storage information further comprises a second statistical value, the second statistical value is a sending count that is recorded by the quantum device and that is of the key request packet comprising the user identifier;
• when the second statistical value is greater than or equal to the first statistical value, stopping, by the quantum device, a quantum key transmission procedure, or when the second statistical value is less than the first statistical value, updating, by the quantum device, the second statistical value, to enable an updated second statistical value to be equal to the first statistical value;
• verifying the first message authentication code value based on the shared key and the first authentication information;
• in response to the verifying performed by the quantum device on the first message authentication code value succeeding, encrypting quantum key information by using the first public key, to obtain a first ciphertext, wherein the quantum key information comprises a quantum key;
• calculating second authentication information based on the shared key, to obtain a second message authentication code value, wherein the second authentication information comprises the first ciphertext;
• and
• sending, to the application device, a key response packet corresponding to the key request packet, wherein the key response packet comprises the first ciphertext and the second message authentication code value.