US 2021/0067331 A1 · METHOD FOR ISSUING QUANTUM KEY CHIP, APPLICATION METHOD, ISSUING PLATFORM AND SYSTEM

Abstract

A method for issuing a quantum key chip, a method for applying a quantum key chip, an issuing platform and a system. The method comprises: feeding, by a a quantum key issuing platform, a quantum key into a quantum key chip and binding an ID of the quantum key chip in a one-to-one correspondence to an ID of a user using the quantum key chip, where the ID of the quantum key chip and/or the ID of the user serve as identification information of the quantum key in the quantum key chip, and the quantum key is obtained by pre-negotiation between the quantum key issuing platform and a key distribution center (KDC); and sending, by the quantum key issuing platform, the identification information of the quantum key to the KDC, so that the KDC binds the identification information to the quantum key corresponding to the identification information.

Claims19

Dependent claims

A method for issuing a quantum key chip, comprising:

feeding, by a quantum key issuing platform, a quantum key into the quantum key chip;
binding, by the quantum key issuing platform, an ID of the quantum key chip in a one-to-one correspondence with an ID of a user using the quantum key chip, wherein the ID of the quantum key chip and/or the ID of the user serve as identification information of the quantum key in the quantum key chip, and the quantum key is obtained by pre-negotiation between the quantum key issuing platform and a key distribution center (KDC);
and
sending, by the quantum key issuing platform, the identification information of the quantum key to the KDC, so that the KDC binds the identification information to the quantum key corresponding to the identification information.

1 more element

A method for applying a quantum key chip, applied to a communication system of a secure socket layer virtual private network SSL VPN, wherein:

the system comprises a client SSL VPN, a server SSL VPN, a key distribution center (KDC), and a quantum key chip;
and
in a case that negotiation on a quantum key performed by the client SSL VPN and the server SSL VPN is normal, the method comprises:
acquiring, by the client SSL VPN, a first random number from the quantum key chip;
sending, by the client SSL VPN, the first random number to the server SSL VPN;
receiving, by the client SSL VPN, a second random number sent by the server SSL VPN;
determining, by the client SSL VPN and the server SSL VPN in the negotiation, that the quantum key in the quantum key chip serves as a pre-master key;
sending, by the client SSL VPN, an index of the quantum key serving as the pre-master key in the quantum key chip and identification information of the quantum key to the server SSL VPN, so that the server SSL VPN acquires the quantum key from the KDC as the pre-master key by using the index of the quantum key and the identification information of the quantum key, wherein an ID of the quantum key chip and/or an ID of a user serve as the identification information of the quantum key in the quantum key chip, and the identification information is bound with the quantum key corresponding to the identification information by the KDC in advance;
and
acquiring, by the client SSL VPN and the server SSL VPN, a session key based on the first random number, the second random number and the quantum key serving as the pre-master key through a predetermined algorithm.

7 more elements

A method for applying a quantum key chip, applied to a communication system of a secure socket layer virtual private network SSL VPN, wherein:

the system comprises a client SSL VPN, a sever SSL VPN, a key distribution center (KDC), and a quantum key chip;
and
in a case that negotiation on a quantum key performed by the client SSL VPN and the server SSL VPN is normal, the method comprises:
determining, by the server SSL VPN and the client SSL VPN in the negotiation, that the quantum key in the quantum key chip serves as a session key;
and
sending an index of the quantum key serving as the session key in the quantum key chip and identification information of the quantum key to the server SSL VPN, so that the server SSL VPN acquires the quantum key from the KDC as the session key by using the index of the quantum key and the identification information of the quantum key, wherein an ID of the quantum key chip and/or an ID of a user serve as the identification information of the quantum key in the quantum key chip, and the identification information is bound with the quantum key corresponding to the identification information by the KDC in advance.

3 more elements

A system for applying a quantum key, comprising a quantum key chip, a client SSL VPN, a server SSL VPN, and a key distribution center (KDC), wherein:

the client SSL VPN is configured to, in case of determining that negotiation on the quantum key performed with the server SSL VPN is normal:
acquire a first random number from the quantum key chip,
send the first random number to the server SSL VPN,
receive a second random number sent by the server SSL VPN, determine, in the negotiation with the server SSL VPN, that the quantum key in the quantum key chip serves as a pre-master key, and
send an index of the quantum key serving as the pre-master key in the quantum key chip and identification information of the quantum key to the server SSL VPN;
the quantum key chip is configured to generate the first random number;
the server SSL VPN is configured to acquire the quantum key from the KDC as the pre-master key by using the index of the quantum key and the identification information of the quantum key;
the KDC is configured to bind the identification information with the quantum key corresponding to the identification information in advance, wherein an ID of the quantum key chip and/or an ID of a user serve as the identification information of the quantum key in the quantum key chip;
and
the client SSL VPN and the server SSL VPN are further configured to acquire a session key based on the first random number, the second random number and the quantum key serving as the pre-master key through a predetermined algorithm.