Alerta

QUANTUM KEY MANAGEMENT SYSTEM FOR NETWORK NODE, COMMUNICATION NETWORK, METHOD, COMPUTER PROGRAM

Absstract of: EP4749988A1

Provided is a first network node for communicating with a second network node. The first network node includes circuitry configured to locally generate a first encryption key. The circuitry is further configured to communicate the first encryption key to the second network node via a first communication path. The circuitry is further configured to receive a second encryption key from the second network node via a second communication path. The second communication path involves at least one third network node different from a fourth network node of the first communication path. The circuitry is further configured to communicate encrypted payload data with the second network node. The encryption is based on a combination of the first and second encryption keys.

TECHNIQUES FOR PROVIDING AN ENTANGLEMENT DISTRIBUTION FOR QUANTUM APPLICATIONS IN FORM OF AN ENTANGLEMENT DISTRIBUTION AS A SERVICE (EDAAS)

Absstract of: EP4749998A1

A system for providing an entanglement distribution for quantum applications in form of an Entanglement Distribution as a Service (EDaaS), comprising:A network provider plane configured to manage the generation, distribution, forwarding, and storage of entangled quantum states across a quantum network, the network provider plane comprising:- One or more quantum optical elements especially single photon sources, fiber-optic links, beam splitters, single-photon detectors, and quantum memories for generating and maintaining entangled photonic states;- A quantum link layer providing quantum optical connections to distribute entangled photon states between directly connected network nodes;- A quantum network layer configured for dynamic routing of quantum states across multiple optical paths between network nodes;An Application Programming Interface (EdaaS-API) operable at the service level, said API comprising:- A state retrieval interface configured to provide applications with logical and physical addresses of stored quantum states within the quantum memories;- A Q-Push interface configured to enable the export of selected quantum states, based on physical storage addresses, over a quantum channel by triggering the release of entangled photon states;A software-defined network (SDN) management layer configured to dynamically manage the configuration, monitoring, and routing of entangled states across the quantum network, said SDN management layer comprising:- A service configura

CONTINUOUS VARIABLE-QUANTUM KEY DISTRIBUTION SYSTEM AND METHOD

Absstract of: WO2025045383A1

A CV-QKD system comprising a plurality of transmitters, one or more splitters, and a plurality of receivers is provided. Each transmitter modulates a quantum signal according to a discrete or continuous distribution in phase and amplitude. Each splitter distributes N modulated quantum signals, received from a respective transmitter or from another splitter, into M modulated quantum sub-signals. Each receiver is configured to: receive, via a respective quantum channel, a modulated quantum sub-signal associated to one or more of the transmitters from the one or more splitters; detect one or more quadrature components of the received modulated quantum sub-signal; and perform a respective post-processing protocol with one or more of the plurality of transmitters to generate one or more individual final secret keys between the one or more transmitters and the receiver and/or one or more common secret keys between the one or more transmitters and the plurality of receivers.

METHOD AND DEVICE FOR GUARANTEEING AUTHENTICITY OF DIGITAL DATA

Absstract of: EP4518243A1

0001 In the method for guaranteeing authenticity of digital data, data are considered that are digitally signed with a pre-quantum signature and the method comprises the steps of generating a time stamp and digitally signing the pre-quantum signature together with the time stamp using a post-quantumg signature.

一种信道窃听监测方法和系统

Absstract of: CN122092984A

本申请提供了一种信道窃听监测方法和系统，其中的方法包括：设置一个控制端，并在待测光通信链路上设置至少两个对测节点；所述控制端与每个对测节点均分别通过待测光通信链路连接；控制端将光量子信号发送给对测节点；对测节点将接收到的光量子信号原路反射回控制端；控制端根据发送和接收到的光量子信号确认控制端与对测节点之间的光通信链路的安全状态。应用本申请可以实现对信道被窃听行为的实时监测。

基于数字孪生的虚拟电厂实时仿真方法及系统

Absstract of: CN122088282A

0001 本发明公开了基于数字孪生的虚拟电厂实时仿真方法及系统，涉及智能电网能源管理技术领域，包括，通过量子加密数据通道对电厂运行数据及环境参数进行量子密钥分配与传输，生成加密虚拟电厂数据集；对加密虚拟电厂数据集进行量子解密，生成气象扰动预测信息；通过预训练的数字孪生模型对虚拟电厂进行动态参数更新，输出数字孪生状态信息；采用实时仿真模型对数字孪生状态信息进行电厂动态仿真，形成仿真执行报告；对仿真执行报告进行偏差验证与运行参数调整，输出优化调整指令，完成虚拟电厂实时仿真闭环控制。本发明通过量子加密数据通道与电厂动态仿真双机制协同，实现虚拟电厂的高精度动态控制和闭环优化。

基于物理学量子动态公钥和云熵同步私钥的新一代密码系统、方法、终端、服务器以及介质

Absstract of: CN122093043A

本发明公开了基于物理学量子动态公钥和云熵同步私钥的新一代密码系统、方法、终端、服务器以及介质，涉及量子信息技术、密码学与物联网安全交叉技术领域，该系统包括终端、服务器及云熵同步私钥库所述终端被配置为：利用所述量子随机数生成模块生成量子随机数，并基于所述量子随机数产生同步参数，将所述同步参数或由其导出的物理学量子动态公钥发送至所述云熵同步服务器；所述终端与所述云熵同步服务器进一步被配置为：基于所述同步参数，应用相同的云熵映射算法，从所述云熵同步私钥库中确定相同的目标熵材料，并基于所述目标熵材料生成相同的会话密钥。该密钥系统实现了非交互式密钥建立、前向保密与内生抗量子计算攻击。

利用量子纠缠分发来生成可验证私有随机性

Absstract of: US2025131317A1

0000 A system and method for providing quantum entanglement-as-a-service and simultaneously producing verifiably random sequences of numbers are described. When distributing quantum entanglement between customers Alice and Bob, Alice and Bob may exchange information pertaining to a measurement basis that they respectively used when performing measurements using respective halves of entangled particles. When customer Alice, for example, determines that both Alice and Bob have performed a given measurement in a same measurement basis, said result may be used in a quantum key distribution (QKD) code. When customer Alice determines that they have not performed the given measurement in the same measurement basis, Alice may concatenate said portion of the results into a private and verifiable sequence of random numbers. Providing distributed quantum entanglement therefore results in both a QKD code between said customers and in respective private and verifiably random sequences of numbers.

基于混沌系统和DNA动态编码的量子图像加密算法

Absstract of: CN122093512A

0001 本发明涉及混沌系统理论技术领域，且公开了基于混沌系统和DNA动态编码的量子图像加密算法，所述算法包括量子图像编码模块、混沌序列生成模块、DNA动态编码与运算模块和中央控制模块；所述算法还集成有密钥管理单元；通过采用增强量子相位表示法将经典图像转换为量子图像，并利用混沌序列控制的量子门操作实现像素位置的量子置乱和像素值的初步扩散，使得系统能够在量子层面直接对图像信息进行高效的初步混淆与扰乱，为后续加密奠定了安全的预处理基础；通过采用并行多混沌系统生成动态密钥流，并引入基于图像哈希值的动态扰动机制，使得产生的密钥流随机性更强、与明文图像内容动态相关，增强了抵御安全威胁的能力。

抗内部攻击的后量子安全可链接环签名方法及系统

Absstract of: CN122093106A

本发明公开了一种抗内部攻击的后量子安全可链接环签名方法及系统，包括：第一服务设备生成公共参数；每个用户设备利用公共参数生成自身的公私钥对，并将公钥发送至第一服务设备注册；第一服务设备对接收到的所有身份信息验证，并将所有验证通过的用户设备的公钥形成一个公钥环并公开；当任一用户设备需向第二服务设备发送消息时，基于自身的私钥、消息、公钥环生成包含可链接标签的环签名，并将环签名和消息发送至第二服务设备；第二服务设备对每个环签名进行安全验证并在验证通过后，基于可链接标签验证不同的环签名是否属于同一用户设备。本发明能够在匿名场景下保护用户隐私，实现对同一用户多次签名的链接，还可抵抗来自内部的攻击。

一种面向天基轨道数据中心的后量子密码安全数据存储与传输系统

Absstract of: CN122093047A

0001 本发明涉及天基数据安全与后量子密码领域，具体公开了一种面向天基轨道数据中心的后量子密码安全数据存储与传输系统，包括：星载终端模块、地面管控模块及星间互联模块；星载终端模块配置轻量化后量子密码处理单元，采用裁剪后的格基后量子密码算法，结合数据分层存储、动态算法切换及抗辐射分片存储；星间互联模块通过ML‑KEM算法实现密钥协商，星地链路采用混合加密架构；地面管控模块负责密钥管理与数据验证。本发明有效解决了天基资源受限、极端环境及链路不稳定的问题，实现在轨数据抗量子安全存储与传输，提升系统可靠性与适配性。

一种抗干扰量子密钥分发协议优化方法

Absstract of: CN122093042A

0001 本发明涉及量子通信技术领域，公开了一种抗干扰量子密钥分发协议优化方法，包括：获取测量端在筛选密钥阶段输出的单光子计数量统计值，包括信号态、诱骗态和真空态计数值；计算真空态计数值瞬时方差，并依据该方差与信号态计数值比值确定计数校正参数；利用该参数修正单光子计数量统计值的增益偏差；从修正后的统计值提取偏振偏差特征向量并确定位偏移参数；在测量端偏振控制电压恒定时，基于位偏移参数对筛选密钥序列实施位级逻辑重映射以补偿信道扰动，本发明通过协议层逻辑映射将基矢偏转量转化为地址偏移，消除硬件校准对链路的占用，保障环境扰动下的成钥连续性，避免强光导频引入的背景噪声，提升量子密钥分发效率。

一种信道窃听监测方法和系统

Absstract of: CN122092983A

0001 本申请提供了一种信道窃听监测方法和系统，其中的方法包括：设置两个信号发射接收装置，所述两个信号发射接收装置通过待测光通信链路连接；两个信号发射接收装置进行时钟对准；两个信号发射接收装置分别向对方发送光量子信号，并接收对方发送的光量子信号；两个信号发射接收装置分别根据发送和接收到的光量子信号确认两个信号发射接收装置之间的光通信链路的安全状态。应用本申请可以实现对信道被窃听行为的实时监测。

金融交易业务的处理方法及其装置、程序产品、电子设备

Absstract of: CN122087848A

本发明公开了一种金融交易业务的处理方法及其装置、程序产品、电子设备，涉及金融科技领域或其他相关领域，其中，该处理方法包括：在用户在客户端发起金融交易业务且授权的情况下，采集用户的行为数据，采用预设长短记忆模型对行为数据进行处理，得到风险等级，基于风险等级，确定加密策略，并采用加密策略，对交易业务信息进行加密，基于加密后的交易业务信息，从预设数据库中与金融交易业务的业务类型对应的预设分区获取响应数据，并采用加密策略对响应数据进行处理，将处理后的响应数据在客户端上展示。本发明解决了相关技术中在进行金融交易业务处理时，无法保护信息的安全的技术问题。

QRNG EMBEDDED QUANTUM RANDOM NUMBER GENERATOR QRNG BASED DEVICES

Absstract of: EP4745755A1

Systems and methods are provided for implementing and utilizing embedded quantum random number generator (QRNG) based devices. An optical device configured for use in quantum random number generation may have an integrated structure that includes, at least, an optical source configured to emit a light beam, a photodetector configured to detect light based on detection criteria, and a polarizer disposed between the optical source and the photodetector. The optical source, the photodetector, and the polarizer are directly integrated or embedded into the integrated structure. The polarizer is configured to process light based on polarization criteria that include passing or discarding light having a particular polarization. The optical device is configured for use in facilitating or enabling quantum random number generation based on detection of the light beam by the photodetector based on the detection criteria.

Quantum security parallelizable message authentication code construction method and system

Absstract of: CN122073527A

The invention discloses a parallel message authentication code construction method and system for quantum security. The method comprises the following steps: 1) selecting an adjustable block cipher algorithm key K, nonlinear transformation theta and the length tau of a message identification code by a participant; 2) the sender executes an MAC generation scheme, takes the key K, the temporary value N and the message M as input, outputs a message identification code and sends the message identification code to the receiver; the flow of the MAC generation scheme is as follows: a) dividing a message M into a plurality of n-bit groups; b) encrypting the ith group Mi by using an algorithm, and inputting theta to obtain a state Si after the output and the state Si-1 are subjected to XOR; c) intercepting the leftmost side tau bit of the state Sm corresponding to the last group as a message identification code; and 3) the receiver executes an MAC verification scheme, and verifies whether (MAC, M) is correct or not by taking the key K, the temporary value N, the message M and the message authentication code MAC as input.

Key generation method, device and system

Nº publicación: CN122073531A 22/05/2026

Applicant:

HUAWEI TECH CO LTD
\u534E\u4E3A\u6280\u672F\u6709\u9650\u516C\u53F8

Absstract of: CN122073531A

The invention provides a key generation method, device and system, and relates to the technical field of networks. A first application device determines a negotiation key by performing key negotiation with a second application device. The first application device generates a target key based on the seed key and the key-derived function parameter value using the key-derived function. And the first application device encrypts key context information by using the negotiation key to obtain a key context information ciphertext, the key context information comprising a key derived function parameter value. And the first application device sends a key generation request message to the second application device, wherein the key generation request message comprises the key context information ciphertext. The key generation request message is used for requesting the second application equipment to generate a target key. The two communication parties can automatically generate the same target key. The key context information used for generating the target key is transmitted after being symmetrically encrypted by adopting the negotiation key, so that anti-quantum security in the target key generation process can be realized.