This paper proposes a lightweight and high-security identity authentication technique for satellite signaling, enhanced through the integration of a Quantum Random Number Generator (QRNG). By compressing the key length to 128 bits, the method reduces authentication latency to approximately 100 µs on commonly used satellite MCUs, while introducing quantum-origin entropy to address the inherent trade-offs among security, bandwidth, power consumption, and latency in satellite communication systems. Without altering the essential communication functions or the signaling transparency of satellites, the scheme utilizes high-entropy quantum random numbers generated by the QRNG chip, combined with the SM3-based key derivation algorithm and the SM4 encryption algorithm, to achieve low-power and low-latency authentication. This design effectively eliminates the performance bottlenecks and security vulnerabilities associated with traditional pseudorandom number generators and significantly improves the system's security and reliability. Experimental results show that QRNG integration substantially reduces system latency and mitigates security threats such as man-in-the-middle attacks and unauthorized terminal replication, while also providing resistance to quantum-computing-based attacks, thereby offering a robust security foundation for satellite communications in the emerging quantum computing era.
This paper proposes a lightweight and high-security identity authentication technique for satellite signaling, enhanced through the integration of a Quantum Random Number Generator (QRNG). By compressing the key length to 128 bits, the method reduces authentication latency to approximately 100 µs on commonly used satellite MCUs, while introducing quantum-origin entropy to address the inherent trade-offs among security, bandwidth, power consumption, and latency in satellite communication systems. Without altering the essential communication functions or the signaling transparency of satellites, the scheme utilizes high-entropy quantum random numbers generated by the QRNG chip, combined with the SM3-based key derivation algorithm and the SM4 encryption algorithm, to achieve low-power and low-latency authentication. This design effectively eliminates the performance bottlenecks and security vulnerabilities associated with traditional pseudorandom number generators and significantly improves the system's security and reliability. Experimental results show that QRNG integration substantially reduces system latency and mitigates security threats such as man-in-the-middle attacks and unauthorized terminal replication, while also providing resistance to quantum-computing-based attacks, thereby offering a robust security foundation for satellite communications in the emerging quantum computing era.
Satellite communication networks play a critical role in providing connectivity to remote regions and areas with limited infrastructure. However, their inherently open nature and physical exposure make them particularly susceptible to security threats, including replay, impersonation, and man-in- the-middle attacks. The emergence of quantum computing further undermines the robustness of conventional cryptographic schemes that rely on number-theoretic assumptions. To mitigate these challenges, this article proposesHBQS, a lightweight post-quantum authentication framework designed for satellite platforms with limited resources.HBQSintegrates Physically Unclonable Functions (PUFs) with hash-based cryptography, leveraging SPHINCS+ digital signatures and SHA-3 hashing to provide secure mutual authentication and session key establishment. The protocolHBQSwas implemented and evaluated on embedded hardware platforms, including Raspberry Pi 4.0, PYNQ-Z2 FPGA, and a Dell ground control station. The experimental results demonstrate thatHBQSachieves mutual authentication in 0.88 ms, offering an approximately 67% reduction in execution time compared to representative baselines from the prior literature. Entropy analysis confirms that the proposed protocol maintains a high entropy across critical components, withHBQSachieving a signature entropy of 164.63 bits and PUF response entropy of 172.58 bits, indicating strong resistance to statistical and modeling attacks. A formal security analysis conducted within the Random Oracle Model demonstrates semantic security against both classical and quantum adversaries. The protocolHBQSshows a significant improvement over existing methods, achieving approximately 67% reduction in computational execution time, approximately 11.5% faster user-side handshake time, approximately 0.6% improvement on the satellite side and full security coverage across all evaluated security features with only a 21.4% increase in static memory usage as the trade-off. These findings positionHBQSas an efficient, secure, and scalable authentication solution for next-generation satellite communication systems operating in the post-quantum era.
In the face of escalating threats against conventional cryptographic authentication systems, quantum random number generators (QRNGs) offer a promising path toward unforgeable and unpredictable security primitives. This paper presents a quantum randomness-driven identity authentication framework that leverages device-independent QRNGs to generate ephemeral, irreproducible identity tokens. Unlike classical pseudo-random methods, QRNG-based schemes produce entropy from fundamental quantum phenomena, ensuring resistance to reverse engineering and side-channel attacks. The proposed protocol integrates quantum tokens into a mutual challenge–response structure, employs lightweight post-processing via entropy extractors, and supports deployment in low-latency IoT and edge computing scenarios. Experimental evaluations using QRNG-augmented authentication on simulated identity datasets demonstrate marked improvements in authentication unpredictability, collision resistance, and robustness under adversarial impersonation attempts. This work provides an end-to-end blueprint for embedding quantum entropy into next-generation identity frameworks, bridging the gap between quantum hardware and practical cybersecurity applications.
In the rapidly evolving field of satellite technology, ensuring secure transmission of telemetry data has become increasingly critical. Traditional encryption methods, such as AES, rely on static keys, which pose significant risks if compromised, allowing attackers to decrypt past and future communications. This paper addresses the shortcomings of traditional method by proposing a session-based encryption approach using CRYSTALS Kyber, a post-quantum cryptography technique. Our method enhances security by generating unique session keys for each satellite and ground station communication window, mitigating the impact of potential key exposure. Through the implementation of this approach, which includes the use of a quantum random number generator (QRNG) for key generation, we demonstrate secure end-to-end encryption and decryption of satellite telemetry data. This approach not only fortifies current security measures but also ensures resilience against future quantum computing threats, providing a robust solution for the secure transmission of satellite data in the quantum era.
Defense, finance, navigation and global internet constellations are now dependent on satellite communication. Nevertheless, the majority of systems continue to use classical pseudo-random number generators (PRNGs) to encrypt and authenticate, and these are susceptible to prediction, replay and side-channel attacks. This paper presents a design of a model to incorporate Quantum True Random Number Generators (QTRNGs) to tap into natural randomness of quantum phenomena into satellite communication systems. The design is a gate based QRNG design based on Hadamard, SX and Pauli-Z gates, which are implemented and tested with NIST 800-22 and NIST 800-90B tests. The protocol architecture uses QRNGs to generate secure keys in ground-to-satellite and inter-satellite links. It shows a better result in entropy, unpredictability and attack resistance. The suggested architecture illustrates the ability of satellites enabled by QRNG to ensure the real-time and futureproof security of the worldwide communication networks.
Secure communication has become essential due to the rapid increase in cyber-attacks and data security threats in modern networks. Traditional communication systems mainly rely on classical security methods, which may become vulnerable to advanced attacks. Quantum Key Distribution (QKD) improves secure communication by generating cryptographic keys using quantum principles, making key interception extremely difficult. In this work, a Quantum Random Number Generator (QRNG) is integrated with classical communication to develop a hybrid quantum-classical communication framework. The QRNG generates highly random bits that improve authentication, randomness, and key security. The proposed system compares three QKD protocols: BB84, B92, and E91 using different bit sizes of 8000, 10000, and 13000 bits. The protocols are evaluated using important metrics such as QBER, key rate, entropy, erasure rate, throughput, and correlation. Experimental results show that all protocols achieved entropy values close to 1 and correlation values near zero, indicating strong randomness and secure key generation. Among the evaluated protocols, E91 achieved lower QBER values and higher key rates, while BB84 showed stable and reliable performance. B92 produced comparatively higher error rates under similar conditions. The throughput remained nearly 278–281 bits/sec across all experiments. A ranking-based analysis confirmed that E91 provides the best balance between security, efficiency, and communication performance, making it suitable for future quantum-secure communication systems.
This paper presents a security solution for power load control systems by integrating quantum key technology to address the security challenges encountered by traditional encryption methods in power systems. Conventional identity authentication and key exchange schemes often depend on pseudorandom number generators, which are susceptible to various attacks. The proposed scheme leverages quantum random number generation combined with symmetric encryption techniques to design an anonymous authentication protocol, aimed at safeguarding data transmission and load control processes within the power system. Specifically, the scheme includes a three-phase registration process and a two-phase authentication process to ensure secure communication between the Power Load Management System (PLS) and the Quantum Secure Load Control Terminal (QLT). During the registration phase, the PLS registers with the quantum key center, while the QLT registers with the quantum key center via the PLS. In the authentication phase, the scheme supports initial and rapid re-authentication using quantum keys and pseudonym technology to prevent identity spoofing, data tampering, and replay attacks. Experimental results demonstrate that the proposed scheme maintains high security while offering reduced computational overhead and increased efficiency, making it well-suited for resource-constrained power system environments.