Absstract of: WO2025062472A1
Data (D) transmission system (10) via satellite (11), comprising at least one satellite station (40) disposed on a respective satellite (11) with which a first transmission station (20) and a second transmission station (30) are operatively connected, during use, wherein at least one of either the first (20) or the second station (30) is disposed, during use, on a mobile means of transport (12), the other being disposed on a respective mobile means of transport (12) or on a fixed point on land. The stations (20, 30, 40) comprise, respectively, at least an optical assembly (22, 32, 42) configured to transmit and/or receive one or more optical signals (SO) comprising at least a first type of optical signal (SOI) to allow the quantum distribution of encryption keys, and a transmission assembly (21, 31, 41) configured to transmit and receive one or more radio frequency signals (SR) containing data (D), wherein said optical assemblies (22, 32, 42) and said radio frequency transmission assemblies (21, 31, 41) are configured to transmit and/or receive respective pointing signals to achieve an alignment between the stations (20, 30, 40).
Absstract of: WO2025061836A1
The present invention relates to an integrated quantum random number generator, iQRNG, in particular a photonic QRNG which is monolithically scalable in a common semiconductor substrate in the same material system and constructed in a completely integrated manner, consisting of a photon source and a detector, coupled directly to the source, for individual photons in a particularly compact and attack-resistant design on a technology platform, open for diverse applications, for semiconductor structuring. The subject matter of the present invention is an integrated quantum random number generator, iQRNG, (200), comprising a photon source (120) and an individual photon detector (130), wherein the photon source (120) and the individual photon detector (130) are arranged in the vertical direction one above the other in a common substrate (110) made of a semiconductor material. The present invention also relates to an integrated electronic circuit (500) which comprises at least one iQRNG (200) according to the invention.
Absstract of: EP4783040A1
0001 A method for enhancing detection of fraudulent authentication data includes receiving, by an electronic device, data during an authentication transaction, computing a feature vector from the received data, and normalizing the feature vector. The method also includes encoding the normalized feature vector into qubits, expanding, using at least one quantum algorithm, the normalized feature vector into a high-dimensional space, and detecting in the high-dimensional space anomalies indicative of fraud based on the qubits. Furthermore, the method includes calculating, based on the detected anomalies, a confidence score reflecting a likelihood that the received data is genuine and comparing the confidence score against a threshold value. In response to determining the confidence score fails to satisfy the threshold value, the method determines that the received data requires secondary authentication.
Absstract of: KR20260117471A
0001a 본 발명은 PQC 및 QKD 하이브리드 네트워크에서의 암호화 데이터 전송 방법, 장치 및 컴퓨터 프로그램에 관한 것으로, 본 발명의 PQC 및 QKD 하이브리드 네트워크에서의 암호화 데이터 전송 방법은, 제1 암호화기에서 제1 암호화 처리된 제1 암호화 데이터를 수신하는 단계; 제1 암호화 데이터를 제1 암호화 메모리에 전달하는 단계; 제1 암호화 메모리에서 제1 암호화 데이터를 제1 복호화 처리하는 단계; 제1 암호화 메모리에서 제1 복호화 처리된 제1 복호화 데이터를 제2 암호화 처리하는 단계; 및 제2 암호화 처리된 제2 암호화 데이터를 제2 암호화기에 전송하는 단계;를 포함하는, 방법을 제시한다.
Absstract of: EP4783514A1
This application discloses a quantum key distribution method, apparatus, and system, relating to the field of network technologies. A first quantum device generates a modulated optical signal that carries quantum information and classical information. Both the classical information and the quantum information are modulated on at least one polarization of the modulated optical signal, the modulated optical signal includes a plurality of subcarriers in different frequency segments, the classical information and the quantum information are on different subcarriers among the plurality of subcarriers, and the classical information includes quantum key agreement information. The first quantum device sends the modulated optical signal to a second quantum device via an optical fiber link. By modulating the quantum information and the classical information on the same polarization of the optical signal, a system achieves a high capacity. The quantum information and the classical information are modulated on subcarriers in different frequency segments within the optical signal, so that respective modulation accuracy requirements of a classical signal and a quantum signal can be satisfied. Reusing a set of devices to transmit both the quantum information and the classical information reduces hardware costs.
Absstract of: CN122475863A
The invention discloses an adaptive security control method and device for a quantum key distribution system, and a storage medium. Relates to the technical field of quantum key distribution, and the method comprises the following steps: collecting side channel data of a quantum key distribution system in a quantum key generation process, and converting the side channel data into a side channel feature vector; calculating the information leakage amount of the quantum key in the quantum key generation process according to the side channel feature vector; calculating a comprehensive risk value of the quantum key distribution system according to the information leakage amount and the side channel feature vector; determining a target parameter value corresponding to the target parameter according to the information leakage amount and the comprehensive risk value; and adjusting a parameter value of a target parameter of the quantum key distribution system in the quantum key generation process based on the target parameter value. According to the method and the device, the problem of poor security of the quantum key distribution system in the key generation process due to the fact that the leakage amount cannot be accurately quantified in the related technology is solved.
Absstract of: CN122475862A
The invention discloses a quantum random number-based NTT module side channel defense method and an implementation circuit, and the method comprises the steps: dividing a plurality of butterfly operations of each level in NTT operation into a plurality of groups for scheduling execution, and distributing a two-bit random number for each group; and according to the value of the two-bit random number, respectively determining the execution opportunity of each group of butterfly operations or whether pseudo operations are inserted according to a preset scheduling rule. The implementation circuit comprises a quantum random number generator, an out-of-order controller, a constant register set, a coefficient register set and an NTT butterfly operation unit. According to the method, by randomizing the operation time sequence and inserting the pseudo operation which is difficult to distinguish in statistics, the side channel attack based on power consumption analysis is effectively resisted, the hardware overhead is small, the random number consumption is low, and the method is particularly suitable for embedded password equipment with limited resources.
Absstract of: CN122475859A
The invention relates to a quantum homomorphic encryption method based on MLWE encryption and CSS coding, and the method comprises the steps: carrying out the plaintext quantum encryption operation at a client, and obtaining a ciphertext quantum state; an evaluation parameter is generated at the client, MLWE encryption and CSS coding operation are carried out, and an evaluation parameter ciphertext quantum state is obtained; the server receives the evaluation parameter ciphertext quantum state, and performs CSS decoding and MLWE decryption operation to obtain an evaluation parameter; the server performs quantum circuit operation on the ciphertext quantum state according to the evaluation parameter, obtains the evaluated ciphertext quantum state, and records a quantum gate and an operation position thereof; and the client updates the key according to the quantum gate recorded by the server and the operation position of the quantum gate, and decrypts the evaluated ciphertext quantum state to obtain a plaintext. According to the method, the security and fault-tolerant capability of quantum homomorphic encryption can be improved, the data privacy is ensured, and meanwhile, the direct quantum calculation on the ciphertext is supported, so that the method is a beneficial supplement in the field of quantum security calculation.
Absstract of: CN122475889A
The invention discloses a TLS protocol handshake method and system suitable for the bank industry, and relates to the technical field of quantum cryptography migration resistance, and the method comprises the steps: a bank client generates and sends a ClientHello message to a bank server; the bank server generates a Server Hello message and sends the Server Hello message to the bank client; the bank server generates and sends a certificate message and a server certificate verification message to the bank client; the bank client verifies the ML-DSA signature value, key de-encapsulation is completed according to the target anti-quantum migration mode, and a client key exchange message is generated and sent to the bank server; and after the bank client interacts with the bank server to complete the message and the verification is passed, deriving a session key according to the target anti-quantum migration mode, and carrying out encrypted communication by using the session key. According to the invention, the risk of connection interruption caused by protocol stiffness is effectively avoided, and a stable and reliable anti-quantum migration path is provided for a bank stock network environment.
Absstract of: CN122457261A
The invention belongs to the technical field of information security, and discloses an anti-quantum private information retrieval method, which comprises the following steps that: after a post-quantum temporary public key sent by a client is used at a server to carry out encapsulation processing to obtain a retrieval key encapsulation ciphertext, the client uses a post-quantum temporary private key to decrypt the retrieval key encapsulation ciphertext to obtain a retrieval key; the client encrypts a retrieval vector corresponding to the target retrieval information by using the homomorphic public key and the retrieval key to obtain an encrypted homomorphic query ciphertext; the server performs homomorphic linear combination processing on the prompt information set based on the encrypted homomorphic query ciphertext to obtain a retrieval result ciphertext, and encrypts the retrieval result ciphertext by using a retrieval key to obtain an encrypted retrieval result ciphertext; the client decrypts the encrypted retrieval result ciphertext by using the retrieval key and the homomorphic private key to obtain a retrieval result; through the method, the security of private information retrieval is improved.
Absstract of: CN122457228A
The invention relates to an on-chain autonomy protection method and device based on a smart contract and a dynamic data quantification model. The method comprises the following steps: generating a transaction load and deploying the transaction load to a predefined data autonomy management smart contract instance; the data demander submits a data use request to the data autonomy management smart contract through an on-chain interface; the data autonomy management intelligent contract receives the data use request, and performs matching verification on the data use request and data authorization strategy metadata corresponding to the data asset identifier registered on the chain; the terminal user responds to the data transmission request, and performs security calculation on local encrypted data by using a partial decryption key and a multi-party calculation hybrid protocol; and calling a contribution degree quantification algorithm predefined in the data autonomy management intelligent contract to calculate a data contribution quantification value of each terminal user. According to the method, homomorphic encryption and secure multi-party calculation are mixed, the leakage path of data in a calculation link is cut off, and the enthusiasm of users to share high-quality data is stimulated.
Absstract of: CN122457327A
The invention relates to a quantum fusion key IPsec encryption method based on ONT equipment. The quantum fusion key IPsec encryption method comprises the following steps: quantum key generation: a quantum cryptography service platform generates a quantum key; quantum key acquisition: applying for and acquiring an online quantum key from a quantum cryptography service platform; the IKE SA negotiation comprises the following steps: generating an IKESA session key SKEYIDe; quantum key fusion: fusing the original key and the quantum key; issuing the fusion key: on the ONT, configuring the fusion key to a kernel layer; iPSec data encryption: calling the obtained session key to package and encrypt the message, and sending the message to network side equipment; and quantum key updating: periodically obtaining a new quantum key and calculating a new fusion key. Through the steps of quantum key generation, acquisition, fusion, encryption, updating and the like, the security risk of traditional IPSec encryption in a quantum computing environment is solved, and the method has the advantages of improving communication security and resisting quantum attacks.
Absstract of: CN122453513A
The invention discloses a virtual power plant transaction method and system based on quantum key and causal inference reinforcement learning, and the method comprises the steps: synchronizing a gating pre-adjustment trigger signal to a three-domain sensing module, completing the synchronous collection of multi-domain features, completing the adaptive weight distribution through the combination of the multi-domain features and a business level, and carrying out the cross-domain weight fusion decision, according to the method, an electromagnetic interference domain, a network performance domain and a service semantic domain are brought into a unified decision-making system, full-link perception and collaborative optimization from a physical layer electromagnetic environment to an application layer service requirement are achieved, and it is ensured that the gating adjustment strategy not only adapts to the current electromagnetic environment, but also adapts to the application layer service requirement. The security level requirement of the service is met; meanwhile, a state-aware adaptive weight distribution mechanism is designed, high-security-level services correspond to higher service semantic domain weights, periodic control flows correspond to higher network performance domain weights, and strong EMI environments correspond to higher electromagnetic interference domain weights.
Absstract of: CN122457255A
The invention relates to quantum key distribution, in particular to a satellite-ground continuous variable quantum key distribution system and method based on deep learning, and the system comprises a signal receiving and shunting module which receives a multiplexing optical signal which is from a satellite and comprises a quantum signal and a classical reference pulse, the quantum signal and the classic reference pulse are correspondingly separated to a coherent detection and key generation module and an intensity measurement module; the intensity measurement module is used for acquiring a two-dimensional intensity distribution image of the classic reference pulse; the deep learning phase estimation module is internally provided with a pre-trained deep learning model, takes the two-dimensional intensity distribution image as input, and outputs a two-dimensional phase correction value matrix with the same resolution as the input image; the phase modulation module is used for carrying out real-time phase correction on the locally generated light wavefront according to the two-dimensional phase correction value matrix so as to compensate phase distortion caused by atmospheric turbulence; the method can effectively overcome the defect that it is difficult to accurately correct phase distortion caused by atmospheric turbulence in a satellite-ground link in real time.
Absstract of: CN122457251A
The invention relates to the technical field of quantum communication, and discloses a quantum communication sensing integrated system based on B92 polarization coding, which comprises a quantum state preparation and sending module, a quantum communication/sensing channel, a quantum state receiving and measuring module and a time synchronization and data post-processing module. According to the method, deep integration and synchronous execution of quantum key distribution and environmental physical quantity sensing functions are realized on the premise of not introducing additional special reference optical signals and not damaging quantum communication security. Key information is transmitted and environment disturbance is sensed through a quantum channel at the same time, and disturbance information is extracted by utilizing the high sensitivity of a light quantum state to environment disturbance and combining the communication error rate or the single photon counting statistical characteristic. According to the invention, free space quantum communication and a sensing channel are adopted to integrate a phase sensing function, resource sharing of a signal carrier, a transmission channel and processing equipment is realized, quantum resources are remarkably saved, and the resource utilization efficiency of the whole system is improved.
Absstract of: CN122452820A
The invention relates to the technical field of federated learning, in particular to a federated learning training method based on quantum key distribution, which comprises the following steps: binding key generation and training rounds and pre-distributing to a hardware security module to realize round secondary key isolation and construct a quantum security protection system; through dual verification of a time sequence stamp and key hash, node time compliance and key holding integrity are verified at the same time, replay attacks and identity forgery are effectively discriminated, and a trusted initial legal node set is generated; physical relevance between nodes is measured and detected by using an entangled particle Bell state, and collusion behaviors which are difficult to find by a traditional password means are identified; information security protection of gradient data is realized by adopting a block one-time pad and out-of-order transmission strategy; the aggregation weight is dynamically distributed based on the behavior association degree, the influence of suspicious nodes on the model is inhibited, the key is thoroughly destroyed after aggregation, a new round of key is generated, and the key full-life-cycle closed-loop safety is achieved.
Absstract of: CN122457259A
The invention provides a multi-level Hash chain mixed signature method and device, and belongs to the field of digital signatures, and the method comprises the steps: generating a unique session ID and a session context, and reading a homologous quantum root key; acquiring a PUF negotiation root key, and deriving a PUF session key; performing hash operation by combining the unique session ID, the session context and the homologous quantum root key to generate a unique session basic key seed; performing heterogeneous splitting on the original signature message, and constructing a multi-stage hidden salt hash chain; performing grouping on the two message fragments and the multi-level hidden salt hash chain, and performing compliance signature operation and post-quantum signature operation on grouped data to generate an inner-layer national secret signature and an outer-layer anti-quantum trusted signature; and packaging the data to generate a signature data packet, and sending the signature data packet to a signature verification party. According to the invention, the comprehensive targets of anti-quantum security enhancement, hardware-level identity traceability verification, national sealing compliance verification and signature and multi-factor collaborative deep protection are realized.
Absstract of: CN122457258A
The invention discloses a security cryptographic chip authentication method and system supporting a post-quantum cryptographic algorithm, and belongs to the technical field of information security and cryptographic chips, and the system comprises a security cryptographic chip end integrated in a security cryptographic chip and an authentication server end in communication connection with the security cryptographic chip end; the secure cryptographic chip end comprises a hardware trust root module which is used for generating a chip unique identity identifier and a hardware root key; a secure coprocessor; the post quantum cryptography hardware acceleration engine is used for carrying out hardware acceleration operation on a post quantum cryptography algorithm; the anti-side channel protection module is used for providing mask operation protection, random power consumption compensation and time sequence disturbance; the secure storage module is used for storing the quantum cryptography private key material encrypted by the hardware root key and the equipment certificate; the method has hardware-level anti-cloning and anti-physical detection capabilities while resisting quantum computing attacks, and is suitable for high-security-level chip authentication scenes.
Absstract of: CN122457143A
The invention belongs to the technical field of communication network convergence, and discloses a protection wavelength interval configuration method and a QKD and OTN common fiber transmission system. Comprising a QKD transmitting end, a synchronous negotiation transmitting unit, an OTN transmitting end, a first silicon optical integrated wavelength division multiplexing chip, a public transmission optical fiber, a second silicon optical integrated wavelength division multiplexing chip, a QKD receiving end, a quantum light detection unit, a synchronous negotiation receiving unit, an OTN service receiving unit and a control and management module, and the control and management module executes a protection wavelength interval configuration method. Compared with the prior art, through the protection wavelength interval configuration method, the isolation distance can be dynamically determined according to the bandwidth, the temperature drift, the filtering roll-off and the safety margin, and the probability that noise such as adjacent channel crosstalk and Raman scattering enters a quantum receiving window is reduced; and a linkage decision is made by integrating the bit error rate, the code rate, the receiving counting rate, the OTN bit error rate, the optical power, the chip temperature and the alarm information, so that the self-adaptive capability of the common fiber system is improved.
Absstract of: CN122457256A
The invention discloses a power grid data security protection method and system based on an anti-quantum algorithm, and relates to the technical field of power communication security. Comprising the following steps: receiving a power grid longitudinal communication message, analyzing a power protocol field and current security association information, and generating control sequence identification information; according to the control sequence identification information and the current security association information, identifying a fault burst window and a re-key boundary, and determining a control sequence with a boundary crossing risk; establishing a cross-key boundary anchoring record for the control sequence and generating a boundary continuity label; in anti-quantum re-key switching, enabling the new security association to enter a sendable state, and enabling the old security association to enter a limited receiving state; performing verification, service sequence verification and delivery on the cross-boundary control message according to the cross-key boundary anchoring record and the boundary continuity label; and after the control sequence is closed, releasing the old security association and generating a security protection result. According to the invention, the continuity, reliability and auditing performance of power grid data security protection can be improved.
Absstract of: CN122457249A
The invention discloses a quantum security root key access method and system, and the method comprises the steps: a terminal transmits a device code to a root key center and a command center through an aggregation security gateway, and the root key center distributes n groups of root key plaintexts and corresponding root key ciphertexts for the device code of the terminal, constructs a solidified file, and correspondingly stores the solidified file locally; the command and control center distributes network access codes for the equipment codes and correspondingly stores the network access codes locally; the terminal obtains a group of root key ciphertexts and sub-curing files thereof; for the group of root key ciphertexts, the terminal requests a root key center to execute root key access authentication operation through the aggregation security gateway and executes network access code matching operation to the command and control center, and when both the root key access authentication operation and the network access code matching operation are passed, the terminal sends the root key ciphertexts to the command and control center; and the aggregation security gateway obtains a corresponding group of root key plaintexts from the root key center, obtains the network access code from the command center, and notifies the terminal to obtain and store the group of root key plaintexts.
Nº publicación: JP2026524903A 24/07/2026
Applicant:
アンゴカ・リミテッド
Absstract of: WO2025012609A1
A method of key amplification by a first system and a second system of a network having a key to be amplified, a shared secret, a shared first system identity, a shared second system identity, a shared first key and a shared second key, comprising: (i) each system generating a new random number and creating a combination of the new random number and the shared first key; (ii) each system using a shared predetermined process to generate a shared nonce derived from at least each system identity; (iii) each system using a shared predetermined process to generate a shared key and using the shared key to encrypt the combination with the shared nonce; (iv) each system receiving the encrypted combination from the other system; (v) each system using the shared key to decrypt the encrypted combination with the shared nonce to obtain the combination; (vi) each system generating a key of a set of keys which is a function of the combination of the first system, the combination of the second system, the shared second key and the shared secret, and (vii) each system repeating steps (i) to (vi) a predetermined number of times to generate further keys of the set of keys which set of keys comprise an amplification of the key to be amplified. A system for key amplification is further provided.