Alerta

一种数据安全传输方法及其系统

Resumen de: CN122533824A

本申请公开了一种数据安全传输方法及其系统，该系统包括两两通过通信网络相互连接的根密钥运营商、发送端和接收端；根密钥运营商包括认证模块、接收模块和密钥及扩充算法分发模块，接收模块分别与认证模块和密钥及扩充算法分发模块连接。本发明在发送端采用加密密钥对待发送数据进行加密，生成加密数据，保障了数据传输的机密性；同时，在本地生成哈希函数对加密数据的至少一部分进行哈希运算得到哈希值，用于后续的完整性校验，能够有效检测数据是否遭受恶意篡改；此外，进一步对第一哈希值和加密数据的至少一部分计算校验和，用于快速检测传输过程中的随机比特错误；本发明兼顾了高安全性、强完整性保护与低开销差错检测。

无人机身份认证方法、装置、设备、介质及程序产品

Resumen de: CN122534423A

本申请提供一种无人机身份认证方法、装置、设备、介质及程序产品，涉及通信领域。本申请的方法应用于无人机终端，包括：获取无人机终端进行身份认证时使用的第一量子密钥和无人机终端的多种身份信息；对多种身份信息进行摘要计算，得到无人机终端的身份摘要信息；将多种身份信息中的一种身份信息确定为无人机终端的主身份标识；根据第一量子密钥对身份摘要信息和主身份标识进行加密，得到待校验身份信息；向认证服务器发送携带待校验身份信息的身份认证请求，以指示认证服务器根据待校验身份信息对无人机终端进行身份认证。本申请可解决现有无人机身份认证方法中需改造核心网网元、身份信息易泄露、传统安全机制抗攻击能力弱等问题。

SYSTEMS AND METHODS FOR CERTIFIED QUANTUM RANDOMNESS EXPANSION USING RANDOM CIRCUIT SAMPLING

Resumen de: US20260230316A1

A method may include: selecting a random quantum circuit from a family of random quantum circuits; communicating the selected random quantum circuit to a quantum device, wherein the quantum device applies the selected random circuit to its internal state and measures the internal state to obtain a bit string; calculating a probability that the bit string is a result of the selected random quantum circuit; repeating the communicating, the receiving, and the calculating using the selected random quantum circuit or a new random quantum circuit for a number of rounds; collecting a tuple comprising the random quantum circuit communicated to the quantum device, the bit string received from the quantum device, and the probability; computing a validation value for the tuples; validating the validation value; outputting the bit strings to a quantum-proof randomness extractor, wherein the quantum-proof randomness extractor returns a final bit string; and outputting the final bit string.

CRYPTOGRAPHIC SCHEMES FOR HYBRID CLASSICAL-QUANTUM COMPUTER SYSTEMS

Resumen de: AU2025211157A1

In a general aspect, hybrid classical-quantum cryptographic systems are presented. In some implementations, a hybrid computer system includes a quantum computing system and a classical computing system configured to obtain a message to send to a recipient; obtain a shared secret that includes a quantum logic circuit and is known by the recipient; generate an encrypted version of the message based on the quantum logic circuit; and send the encrypted version of the message to the recipient.

KEY MANAGEMENT APPARATUS, KEY MANAGEMENT METHOD, AND DATA STORING SYSTEM

Resumen de: US20260230314A1

A key management apparatus includes a determination unit that determines a predetermined number of participants among a plurality of participants for storing divided data obtained by division from predetermined data by secret distribution processing, as participants for encrypting and storing the divided data by using a quantum encryption key, and a key transmission unit that transmits an encryption key used to encrypt the divided data to each of the predetermined number of participants by quantum key distribution. The determination unit determines the predetermined number of participants based on a number of hops of a key relay from the key management apparatus to each participant in the quantum key distribution.

QUANTUM-RESISTANT ARCHITECTURE

Resumen de: US20260230309A1

0000 Systems, methods, and computer-readable media are disclosed. A system can include a cyber resilience system configured to receive or identify cyber resilience data corresponding with at least one cyber resilience operation performed in at least one decentralized network, centralized network, or data source (DNCNDS). The system can include a cryptography system configured to apply a quantum-resistant model to cause the quantum-resistant model to generate a protected data package including at least the cyber resilience data, generate, using a post-quantum signature scheme, one or more digital signatures of the protected data package, and store the protected data package and the one or more digital signatures with the at least one DNCNDS. The system can include a secure data channel configured to provide the protected data package via at least one of an identifier, interface, or endpoint within the at least one DNCNDS or external to the at least one DNCNDS.

System and Method for Adaptive Virtual Reality Assistance with Real-Time Companion Intelligence

Resumen de: US20260228979A1

0000 A system provides adaptive assistance through virtual reality and artificial intelligence. The system includes a data acquisition module receiving multimodal input data from sensors, a virtual reality module generating an interactive virtual environment, and a processor that processes the input data to generate user state data and virtual companion data. The processor dynamically modifies parameters of the virtual environment based on processed data. A memory stores input data, processed data, behavioral models, and environment configuration data. A backend platform processes and transmits data to remote devices through a communication interface. The virtual reality module renders a virtual companion within the interactive virtual environment according to the virtual companion data and modifies the environment based on processed parameters. This system architecture enables real-time adaptation of both the virtual companion and virtual environment in response to user interactions and states.

SINGLE STAGE MULTIPLY-ACCUMULATE (MAC) BUTTERFLY MULTIPLIER CIRCUIT FOR NUMBER THEORIC TRANSFORMS

Resumen de: US20260230311A1

Disclosed are systems, apparatuses, processes, and computer-readable media for sharing encrypted entropy. For example, a method includes determining a plurality of second coefficients from a plurality of first coefficients in association with a Numeric Theoric Transform (NTT), wherein each second coefficient of the plurality of second coefficients is generated based on a corresponding first coefficient of the plurality of first coefficients using a shared stage multiplier circuit; and generating an encryption key based on the plurality of second coefficients.

AI-Quantum Middleware and Operating System for Distributed, Modular, Post-Quantum Secure Hybrid Workload Execution and Autonomous Decision Optimization

Resumen de: US20260230312A1

A modular artificial intelligence (AI) and quantum computing middleware system enables real-time, post-quantum secure hybrid workload orchestration across classical and quantum-simulated environments. The system includes a tensor factorization engine that emulates 60-100+ qubit-scale inference using classical infrastructure, a universal API gateway for cross-platform model execution, and a cryptographic security layer implementing continuous-variable quantum key distribution (CV-QKD) and lattice-based encryption. Additional modules support swarm coordination using quantum tensor networks, explainable AI for compliance traceability, and a digital twin interface for real-time validation. The invention enables secure, scalable deployment in edge-native, cloud-based, and air-gapped environments for aerospace, defense, and intelligent infrastructure applications.

SYSTEM UND VERFAHREN ZUM QUANTENSCHLÜSSELAUSTAUSCH (QKD)

Resumen de: DE102025103708A1

Vorgeschlagen wird System zum Quantenschlüsselaustausch (QKD) (1), umfassend eine verschränkte Photonenquelle (2) zur Erzeugung von polarisationsverschränkten Photonenpaaren, einen ersten Empfänger (3) und einen zweiten Empfänger (4), wobei jedes polarisationsverschränkte Photonenpaar aus einem Signal-Photon und einem Idler-Photon besteht, und wobei der erste Empfänger (3) über einen ersten Kommunikationskanal (7) mit der verschränkten Photonenquelle (2) zur Übertragung der Signal-Photonen oder der Idler-Photonen verbunden ist, wobei der erste Empfänger (3) eine erste Detektionseinheit (7) aufweist, und wobei der zweite Empfänger (4) über einen zweiten Kommunikationskanal (8) mit der verschränkten Photonenquelle (2) zur Übertragung der Idler-Photonen oder der Signal-Photonen verbunden ist, wobei der zweite Empfänger (4) einen Demultiplexer (11) und mindestens eine zweite Detektionseinheiten (10) aufweist, wobei der Demultiplexer (11) die Idler-Photonen oder die Signal-Photonen entsprechend ihrer Wellenlänge auf mindestens zwei Ausgänge des Demultiplexers (11) aufteilt, und wobei nach jedem Ausgang des Demultiplexers jeweils eine Polarisationsabgleicheinheit (12) angeordnet ist.

POST-QUANTUM KEY AGREEMENT MECHANISM FOR PRESERVING CONFIDENTIALITY OF DIGITALLY TRANSMITTED SECRET AND METHOD THEREOF

Resumen de: WO2026164509A1

The invention relates to an improved post-quantum cryptographic system for preserving confidentiality of an agreed secret parameter in a transaction over a data communication network. The system includes a cryptographic unit with a key generation module and a cryptographic module deployed at a sender, a recipient, and a CA on a server. The CA authenticates the transaction by verifying a sender identifier provided by the recipient. The key generation module generates private seeds of at least 128 bits using a TRNG or PRNG and derives partial and final agreed secret parameters from the KAZ-KA Problem, with a trapdoor randomly selected from a public list. The cryptographic module forms the agreed secret parameter y, derives sk = KDF(y), and uses it for symmetric encryption of an electronic or digital message M via a corresponding symmetric cryptosystem.

ENCRYPTED COMMUNICATION METHOD, NON-TRANSITORY COMPUTER-READABLE RECORDING MEDIUM, AND CONNECTED DEVICE

Resumen de: US20260230317A1

0000 In an encrypted communication method, a public key (a first encryption key) is generated using a random seed stored in advance, a random number to be shared with a connected device to be communicated with is obtained through communication using the public key (the first encryption key) generated, and encrypted communication with the connected device is performed using a cryptographic scheme that is usable by using the obtained random number as a symmetric key (a second encryption key).

A SYSTEM FOR CRYPTOGRAPHIC AGILITY WITH PROXY TASK MANAGEMENT

Resumen de: US20260230313A1

A method of cryptographic agility for post-quantum cryptography by swapping a ciphersuite is provided. The method can include performing, by a configuration agent or proxy, cryptography based on a current ciphersuite. The method can further include receiving, by the configuration agent and from a configuration orchestrator, instructions to invoke a protocol to swap the current ciphersuite. The method can further include invoking, by the configuration agent, the protocol to swap the current ciphersuite. The method can further include communicating, by a quantum secure layer (QSL) agent, a next ciphersuite from a set of ciphersuites to a key distribution center (KDC). The next ciphersuite can comprise a post-quantum ciphersuite, such as a next asymmetric or symmetric algorithm, cryptographic random number generator, or cryptographic hash function. The method can further include replacing the current ciphersuite with the next ciphersuite and performing cryptography based on the next ciphersuite.

REMOTE SERVICE PROVISIONING METHOD, EMBEDDED UNIVERSAL INTEGRATED CIRCUIT CARD AND REMOTE SERVICE PROVISIONING PLATFORM

Resumen de: US20260230827A1

0000 Remote service provisioning method for EUICC cards, to provide secure communication against quantum computing attacks, comprising: providing a GQ-eUICC card comprising a GQ-module, with post-quantum cryptography algorithms, and an eUICC card, generating one or more interfaces in response to connection requests to SM-DP+ and/or SM-DS service subscription servers; establishing session keys by means of post-quantum algorithms; encapsulating all the payload without modifications by means of a QIF tunnel, generated by the post-quantum cryptography algorithms; sending encapsulated communication interfaces to a QDS and/or QDP+ provisioning platform; decapsulating the encapsulated communication interfaces; establishing a connection between the QDS and/or QDP platforms and the SM-DP+ and/or SM-DS subscription servers using an i-ESx tunnel based on symmetric exchange, which encapsulates the original interfaces; establishing through an interface a secure communication between the SM-DP+ and/or SM-DS subscription servers and a service provider; and establishing a secure communication between the service provider and the eUICC.

END-TO-END TRANSPORT LAYER SECURITY

Resumen de: US20260230303A1

0000 The present disclosure relates to exchanging information between a start node and an end node. Based on the information session keys for a connection comprising the start node, the end node, and at least one intermediate node are established. The session keys include a data encryption session key and a Message Authentication Code (MAC) session key. The data is encrypted using the data encryption session key at the start node. MAC is generated using the MAC session key. The encrypted data is relayed, via the at least one intermediate node, from the start node to the end node without the at least one intermediate node re-encrypting the data.

BIOMETRIC RELIANT SYSTEM AND METHOD

Resumen de: US20260230340A1

0000 A biometric blockchain system is provided with a card body dimensioned to approximate a standard credit card, a biometric sensor module embedded in the card body and configured to capture fingerprint or facial data, embedded electronics including at least one microcontroller unit, a cryptographic processor, and non-volatile memory, communication interfaces including at least one of near field communication or bluetooth low energy or ultra-wide band, and a power source. The biometric sensor module captures biometric data, the embedded electronics generate a cryptographic key from the biometric data using a biometric key derivation function, and the cryptographic key enables access to a private blockchain ledger for secure interactions among users with compatible cards. The card body comprises a core layer comprising a substrate film, a core sheet comprising a component section with an antenna structure and a system-in-package, and a crosslinked polymer composition disposed on both sides of the substrate film.

KEY ESTABLISHMENT AND SECURE COMMUNICATIONS BASED ON SATELLITE ENTROPY SOURCES

Resumen de: US20260230315A1

0000 Systems and techniques for secure communications and distribution of random values, produced from at least two satellite entropy sources, are described. These random values may be provided by respective quantum random number generators (QRNGs) at separate satellites, and optionally combined with values from ground-based entropy sources (e.g., QRNGs at terrestrial locations). An example method includes: receiving a first random value and a second random value via at least one satellite communication, where the first random value is generated by a first QRNG at a first satellite, and the second random value is generated by a second QRNG at a second satellite; and generating a cryptographic key based on the first random value and the second random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.

PROVIDING QUANTUM-SAFE COMMUNICATIONS SECURITY OVER AN INSECURE NETWORK

Resumen de: US20260230310A1

An initial true random number is generated. A hybrid key pair is generated based on the initial true random number. The hybrid key pair includes a first key pair generated by a quantum-safe cryptographic algorithm and a second key pair generated by a cryptographic algorithm. A system request is provided to an entropy service. The system request includes the hybrid key pair. Quantum entropy data included in a response received from the entropy service is decrypted. The response includes a public key associated with the entropy service. The decrypted encrypted quantum entropy data is utilized for cryptographic operations.

Method and System for Quantum Computations with Resource Management and Secure Encryption

ANALYZING METHOD AND MODULE FOR A QUANTUM KEY DISTRIBUTION NETWORK

Resumen de: EP4787772A1

0001 A method for analyzing a quantum key distribution network, QKDN, wherein a QKDN analyzer module measures a key system attribute, KSA, of the QKDN and/or checks a functionality of the QKDN; a QKDN analyzer device for analyzing a QKDN, QKD nodes for a QKDN, a QKDN and a computer program product.

Adaptive quantum privacy gateway (aqpg)

Resumen de: GB2703677A

A data transfer request is received and related contextual metadata is retrieved including data sensitivity, required confidentiality duration, and quantum cryptographic threat intelligence. A threat level for the transfer is assessed and a necessary quantum-resistant encryption strength is indicated, based on which an encryption algorithm is selected and applied to balance strength and performance. User-defined consent parameters associated with the data transfer are retrieved, and compliance is observed through routing or transformation (e.g., anonymisation) of the data to control recipients, geographic restrictions, and data usage. System performance and environmental impact is optimised whilst meeting cryptographic and consent requirements. The system dynamically assesses recent algorithm developments and quantum cryptanalysis breakthroughs to select an efficient algorithm that still meets the security requirements of the data. Adjustments may include selecting alternative cryptographic algorithms known for lower energy consumption or reducing the operational frequency of certain resource-intensive tasks. The system can proactively schedule or rate-limit non-critical data transfers during periods of peak computational load to ensure sufficient resources remain available for high-priority communications. Fig. 3

METHOD AND SYSTEM TO ESTIMATE RISK FOR A SOFTWARE APPLICATION DUE TO QUANTUM THREAT

Resumen de: EP4773541A1

Conventional risk estimation techniques perform dynamic analysis of application or use models which require training data. Present disclosure provides method and system to estimate risk for a software application due to quantum threat by static analysis. A set of records pertaining to the application is received and parsed to obtain application, crypto and platform parameters. In addition, list of quantum vulnerable algorithms, number of Qubits required to break a cryptographic algorithm used by the application and a current Qubit number are also received. Then, value of Quantum Day is determined based on the current Qubit number and the number of Qubits required to break the cryptographic algorithm used by the application. Further, SOD (Severity, Occurrence, Detection) scores are calculated for each parameter, and they are multiplied to determine Risk Priority Number (RPN) for each parameter. Finally, RPNs of all parameters are summed up to estimate overall risk of the application.

QUANTUM KEY DISTRIBUTION IN AN OPTICAL NETWORK AND QUANTUM-SECURED OPTICAL CHANNELS

Resumen de: US2025106012A1

Systems and methods for quantum key distribution in an optical network and quantum-secured optical channels. A node for operation in an optical network includes one or more degrees each connected to a corresponding optical span including one or more fibers; and one or more Quantum-Optical Service modules (QOSM) for each of the one or more degrees, each QOSM supporting Quantum Key Distribution (QKD) for establishing a quantum-secured channel and Optical Service Channel (OSC) functionality over the quantum-secured channel. A line amplifier system for operation in an optical network includes one or more optical amplifiers configured to amplify optical channels over an optical span in the optical network; and a trusted quantum repeater, connected to the optical span, and configured to support QKD for establishing a first quantum-secured channel and a second quantum-secured channel and OSC functionality over the first quantum-secured channel and the second quantum-secured channel.

FABRICATION METHOD, QUANTUM RANDOM NUMBER SECURITY CHIP, AND METHOD FOR GENERATING QUANTUM KEY

Resumen de: EP4787148A2

The present disclosure provides a fabrication method, a quantum random number security chip, and a method for generating a quantum key, which mainly relate to the field of quantum random number generation technology. The fabrication method includes: providing a quantum entropy source die and a security processing module on a first surface of a substrate and a second surface of the substrate respectively to form a three-dimensional stacked structure, where a plurality of copper pillars are disposed on the second surface of the substrate; performing a molding process on the first surface of the substrate and the second surface of the substrate to obtain an encapsulation structure encapsulating the substrate, where the plurality of copper pillars have bumps exposed outside the encapsulation structure; and rerouting a substrate pad disposed on the second surface of the substrate to a fan-out region of the substrate by using a wafer-level fan-out method, such that the bumps of the plurality of copper pillars exposed outside the encapsulation structure serve as external pins of the quantum random number security chip, thereby obtaining the quantum random number security chip.

QUANTUM READY INTELLIGENT SECURITY GATEWAY

Nº publicación: EP4785533A2 05/08/2026

Solicitante:

PALO ALTO NETWORKS INC [US]
Palo Alto Networks, Inc.

Resumen de: US2025112897A1

Techniques for applying a quantum ready intelligent security gateway are disclosed. In some embodiments, a system/process/computer program product for applying a quantum ready intelligent security gateway (e.g., a quantum ready intelligent security gateway that supports quantum key distribution (QKD) and/or post-quantum cryptography (PQC) for providing a secure tunnel to the mobile network) includes monitoring network traffic on a mobile network at a security gateway to identify a new session; determining meta information associated with the new session by extracting the meta information from the network traffic via one or more interfaces; and enforcing a security policy on the new session at the security gateway based on the meta information to apply context-based security in the mobile network.