The Quantum Key Distribution (QKD) network faces challenges in ensuring the confidentiality, integrity, and authenticity of quantum keys during the process of delivering quantum keys from the QKD network to the user application. To address these issues, a quantum key secure delivery scheme based on tickets is proposed. There are four types of tickets in the scheme: the user ticket, which is used for authenticating the identity of the user application; the access ticket, which is employed for granting access to the end-to-end key; and the publishing ticket and subscribing ticket, which are utilized for authorizing access to the group key. Additionally, a security mechanism based on symmetric cryptography for transmitting quantum keys is also proposed. It is used to protect the confidentiality, integrity, and authenticity of key data when quantum keys are transferred from the QKD network to user applications. Security analysis indicates that this scheme can effectively resist common attacks such as impersonation and man in the middle. Furthermore, by employing Secure Sockets Layer/Transport Layer Security (SSL/TLS) to establish a secure channel for the interactions between the user application and the Quantum Key Service (QKS), this scheme provides dual protection for the quantum key delivery process. This approach effectively mitigates potential security threats and enhances the overall security of the process.
The Quantum Key Distribution (QKD) network faces challenges in ensuring the confidentiality, integrity, and authenticity of quantum keys during the process of delivering quantum keys from the QKD network to the user application. To address these issues, a quantum key secure delivery scheme based on tickets is proposed. There are four types of tickets in the scheme: the user ticket, which is used for authenticating the identity of the user application; the access ticket, which is employed for granting access to the end-to-end key; and the publishing ticket and subscribing ticket, which are utilized for authorizing access to the group key. Additionally, a security mechanism based on symmetric cryptography for transmitting quantum keys is also proposed. It is used to protect the confidentiality, integrity, and authenticity of key data when quantum keys are transferred from the QKD network to user applications. Security analysis indicates that this scheme can effectively resist common attacks such as impersonation and man in the middle. Furthermore, by employing Secure Sockets Layer/Transport Layer Security (SSL/TLS) to establish a secure channel for the interactions between the user application and the Quantum Key Service (QKS), this scheme provides dual protection for the quantum key delivery process. This approach effectively mitigates potential security threats and enhances the overall security of the process.
An integration of Quantum Key Distribution and Transport Layer Security is an important research area aimed at addressing the vulnerabilities of traditional cryptographic systems posed by the advancement of quantum computing. QKD leverages the principles of quantum mechanics to provide absolute security, while TLS is a widely used protocol that ensures the confidentiality and integrity of internet communications, offering end-to-end security. The combination of these two technologies is considered a method to enhance TLS by incorporating QKD-generated keys, thereby mitigating potential security risks arising from quantum computing. This paper proposes the QKD-TLS integration models that can support end-to-end secure communication.
Quantum key distribution (QKD) is a promising technique for addressing quantum threats. To enable easy-to-use cryptographic services based on QKD, we designed a cryptosystem that integrates classical cryptographic systems with key generation and distribution using a QKD network. The proposed cryptosystem comprises a centrally deployed cryptography management service platform and distributed key management systems. The paper presents the functional modules, main processes, interface design, and security requirements of the cryptosystem. This cryptosystem provides a secure and efficient way to offer cryptographic services for various business applications, such as identity authentication, application authorization and point-to-point or group session key distribution. By integrating QKD with classical cryptosystems, this approach can improve the security of traditional cryptographic systems by using the random and unconditionally secure keys generated by QKD. Furthermore, combining QKD with classical cryptographic systems can enhance the scalability of QKD and provide more efficient and cost-effective solutions for large-scale cryptographic services.
The current Quantum Key Distribution (QKD) key delivery API relies on HTTPS for secure communication. It is vulnerable to quantum computer threats due to its use of public key cryptography. To mitigate insider attacks, leveraging quantum computing threats within the security boundary and encrypting communication between the application and the KMS is essential. This paper focuses on simulating a 2-node QKD topology using the DARPAN Application. Additionally, we conduct tests on QKD KMS APIs with the Postman tool to ensure consistent retrieval of shared keys at both communication endpoints. Through our simulations and tests, we aim to validate the effectiveness and reliability of the proposed approach in securely managing cryptographic keys within the QKD-network.
The energy and power industry faces increasing data security challenges amidst its digital transformation. Databases, as the foundation of digital infrastructure, require advanced encryption techniques to safeguard sensitive information. This paper proposes a novel encryption framework, QKD-ABE, that integrates Quantum Key Distribution (QKD) with Attribute-Based Encryption (ABE) to enhance the confidentiality, integrity, and access control of power system data. QKD enables unconditional security in key distribution by leveraging quantum mechanics, effectively preventing key interception and tampering. ABE provides fine-grained access control by enforcing encryption policies based on user attributes, ensuring that only authorized individuals can access private data. The proposed scheme also demonstrates strong resistance to common security threats, including man-in-the-middle and eavesdropping attacks, through quantum measurement disturbance and Quantum Bit Error Rate (QBerr) verification. Experimental results and theoretical analysis indicate that QKD-ABE offers a secure, efficient, and scalable solution for protecting sensitive data in modern smart grid environments.
Quantum secure communication technology, grounded in the principles of quantum mechanics, has revolutionized traditional cryptographic methods, which predominantly rely on mathematical algorithms and logical transformations. Quantum key distribution (QKD) facilitates the secure sharing of symmetric keys between legitimate parties, ensuring the integrity and confidentiality of information in communication channels. Among various QKD schemes, continuous variable quantum key distribution (CV-QKD) has emerged as a viable alternative to the more established discrete variable quantum key distribution (DV-QKD). CV-QKD boasts several advantages, including straightforward deployment, reduced operational costs, and stable signal quality, positioning it as a significant component of the quantum communication landscape. Quantum noise stream cipher (QNSC) represents a technique that employs redundant data streams to encrypt plaintext. Notably, QNSC shares structural similarities with the optical path used in quantum key distribution, allowing for compatibility with existing QKD infrastructure. Furthermore, the keys generated through quantum key distribution ensure absolute security, enabling them to substitute the data streams produced by pseudo-random sequences traditionally used in classical encryption schemes. This substitution enhances the overall security framework of the quantum noise stream encryption approach. The quantum access network (QAN) extends quantum key distribution capabilities from point-to-point connections to point-to-multipoint configurations, thereby becoming an essential component of contemporary network architectures. By interlinking multiple end users with a network backbone, quantum access networks can seamlessly integrate with quantum key distribution protocols. This integration offers a cost-effective and scalable solution for user access to the network. Extensive experimental verifications have demonstrated the viability of downstream access networks, indicating that the merging of quantum access network structures with quantum stream encryption technologies can yield a comprehensive quantum experimental platform. On this platform, security keys are derived through quantum key distribution, which subsequently facilitates the encryption of plaintext information. Notably, experimental validations involving eight users have been successfully executed on this platform, underscoring its practical applicability and effectiveness.
All Classical cryptographic methods used in our life based on mathematical ideas & computational assumption are actually unsafe, so quantum cryptography is proposed nowadays Quantum key distribution (QKD) promises secure key agreement by using quantum mechanical systems. QKD will be an important part of future cryptographic infrastructures. It can provide long-term confidentiality for encrypted information without reliance on computational assumptions. Although QKD still requires authentication to prevent man-in-the-middle attacks. Firstly, In this paper At quantum key distribution protocol process is introduced. Secondly, several improvements to the basic steps of two references are reviewed because of its defects, mainly about identity authentication in order to prevent communication partners' counterfeit, including errors removing, estimating Attacker's information, secrecy enhancement, etc. At last, based upon original improvements reserved selectively, the whole process of quantum key distribution protocol after improvement & then comparison is introduced in detail.