Alerta

Method and apparatus for generating random numbers for encryption and decryption of data transmitted and received by digital walkie-talkie using quantum random numbers

Resumen de: KR20260123177A

0001a 본 발명에 따른 디지털 무전기의 송수신 데이터 암복호화를 위한 난수 생성 방법은, 양자난수생성기로 양자난수를 생성하는 단계; 상기 양자난수의 난수성을 검증하는 단계; 및 상기 양자난수의 난수성이 검증되면, 난수발생기로, 상기 양자난수를 잡음원으로 사용하여 난수를 생성하는 단계를 포함하는 것을 특징으로 한다.

SYSTEM FOR DISTRIBUTING QUANTUM KEYS USING CORRECTION OF THE POLARIZATION OF PHOTONS

Resumen de: US20260238352A1

0000 A transmitter of a multiplexed signal through a transmission channel includes a generator of an initial quantum signal, of a first reference signal and of a second reference signal, an encoder having N optical channels including a selector for passing the initial signal to one of the channels, and a recombiner for generating the multiplexed signal, the multiplexed signal including first and second signals (R<11>, R<12>) for controlling first and second polarization-encoding values (P<1>, P<2>), respectively, and a quantum signal, determined based on the initial signal, encoded with an encoding value. The optical channels include two channels each including a unit for integrating a reference signal into the channel, each control signal being determined based on one of the reference signals delivered by the channel in question to the recombiner.

QUANTUM COMMUNICATION SYSTEM USING CORRECTION OF THE POLARIZATION OF PHOTONS

Resumen de: US20260238350A1

0000 A receiver is provided for receiving a multiplexed signal and an optical signal that are transmitted independently through a transmission channel, the multiplexed signal including a first quantum signal (Q) and at least one polarization state control signal, the optical signal including a second quantum signal (Q), the receiver having a processing chain and a correlation module associated with a polarization base of at least one polarization state, the chain being designed to determine the polarization state of the control signal and to modify the polarization of the multiplexed signal so as to align the determined state with the state of the base, the module being configured to carry out a correlation measurement between the first and second quantum signals and to generate, based on the measurement, at least one information signal regarding the entanglement state of the first and second quantum signals.

KEY MANAGEMENT DEVICE, QUANTUM CRYPTOGRAPHY COMMUNICATION SYSTEM, KEY MANAGEMENT METHOD, AND COMPUTER PROGRAM PRODUCT

Resumen de: US20260238621A1

According to an embodiment, a key management device includes one or more hardware processors configured to: generate a first global key based on a first random number; add, to a first packet including the first global key, first path information indicating a relay path for the first packet; and encrypt the first packet with a local key shared with a different node and transmit the encrypted first packet to the different node.

SECURE TRANSMISSION

Resumen de: US20260238680A1

A method of monitoring a transmission includes obtaining one or more values of bit error rate (BER) of the transmission received at a receiver; and determining that the transmission has been intercepted based on a deviation of the obtained bit error rate value from an expected bit error rate value.

RECEPTION DEVICE, QUANTUM CRYPTOGRAPHY SYSTEM, INFORMATION RECONCILIATION METHOD, AND COMPUTER-READABLE MEDIUM

Resumen de: US20260238470A1

0000 A reception device comprises: a quantum communication unit that receives key information, including information from which a shift key is derived; a random number generation unit that generates a random number in which a portion of the key information is compressed on the basis of a characteristic value of noise in the reception of the key information; and an error correction unit that performs information reconciliation on the basis of the random number.

METHOD AND APPARATUS FOR HANDLING SECONDARY NODE OPERATIONS IN MULTI-RAT DUAL CONNECTIVITY

Resumen de: US20260239122A1

The present disclosure relates to a 5G communication system or a 6G communication system for supporting higher data rates beyond a 4G communication system such as long term evolution (LTE). The method includes receiving at least one User Equipment (UE) capability information from at least one UE, wherein the at least one UE capability information comprises a Post Quantum Cryptography (PQC) information, transmitting an SN addition request message to at least one SN with the PQC information, based on the at least one UE capability information, receiving an SN addition request acknowledge message from the at least one SN, if PQC is supported between the at least one UE and the at least one SN, and receiving an SN addition request reject message from the at least one SN, if PQC is not supported between the at least one UE and the at least one SN.

METHOD AND SYSTEM FOR FACILITATING POST QUANTUM SECURE PRIMARY AUTHENTICATION OF A SUBSCRIBER

Resumen de: US20260239002A1

0000 The present disclosure relates to a 5G communication system or a 6G communication system for supporting higher data rates beyond a 4G communication system such as long term evolution (LTE). The present disclosure relates to a method and system for facilitating post quantum secure primary authentication of a subscriber. The method by an UE discloses applying a quantum safe cryptographic technique on a quantum based public key associated with a home network, generating an encrypted quantum safe shared key based on the applied quantum safe cryptographic technique, transmitting the encrypted quantum safe shared key along with cipher-text value and MAC-tag value associated with the subscriber to a network entity for authenticating the subscriber.

High Current Column Grid Array Pillars

Resumen de: US20260240010A1

0000 A column grid array for low-voltage, high-current delivery uses pillars formed from bundles of parallel conductive filaments consolidated into metallic plugs at each end with an unconstrained compliant span between the plugs. The pillars are joined in a two-dimensional grid between opposing substrates to deliver aggregate current with controlled impedance while accommodating differential displacement without plastic deformation. Interleaving power and return pillars reduces loop inductance and transient droop. Optional sleeves or elastomer collars manage lateral stability; spare pillars and test features enable in-situ continuity verification and activation of redundancy. Methods include preparing filament bundles, consolidating ends by metallurgical bonding, joining plugs to substrate pads, and arranging pillars at grid pitch suitable for wafer-scale or module-scale power distribution.

Systems and Methods for a Quantum Safe Certificate Ledger

Resumen de: US20260238465A1

0000 A quantum safe blockchain system can operate with quantum safe blockchain nodes (QSBN) and validators. A QSBN can generate a pending register certificate transaction comprising a public key, a fingerprint for a certificate, a URL for the certificate, a first registration number for a parent certificate of the certificate, and a digital signature. The QSBN can transmit the pending register certificate transaction to the quantum safe blockchain system. A validator can receive the pending transaction, validate the digital signature using the public key and include a confirmed register certificate transaction in a block. The confirmed transaction can include a second registration number for the certificate. The QSBN can receive the confirmed transaction and store in a database the fingerprint, the first registration number, and the second registration number. The QSBN can generate a pending certificate revocation transaction for the certificate, and transmit the pending transaction to the blockchain system.

QUANTUM CRYPTOGRAPHY IN AN INTERNET KEY EXCHANGE PROCEDURE

Resumen de: EP4790952A2

In some implementations, a first network device may communicate, with a second network device, one or more internet key exchange (IKE) messages to exchange a first identifier associated with the first network device and a second identifier associated with the second network device, and to indicate that a post-quantum preshared key (PPK) is to be used as a shared key for an IKE security association (SA) between the first network device and the second network device. The first network device may obtain, from a key management entity (KME), a quantum key based on providing the second identifier to the KME, wherein the PPK is based on the quantum key. The first network device may communicate, with the second network device, one or more IKE authentication messages to exchange a third identifier associated with the quantum key and to confirm that the second network device successfully obtained the PPK.

FIRST PRIVATE KEY VERIFICATION METHOD, TERMINAL DEVICE, SYSTEM, COMPUTER PROGRAM, AND COMPUTER-READABLE STORAGE MEDIUM

Resumen de: EP4790945A1

0001 Es wird ein Verfahren zur Verifizierung eines ersten privaten Schlüssels angegeben, der mittels Quantenschlüsselverteilung erzeugt ist, umfassend ein Bereitstellen des ersten privaten Schlüssels an eine Endbenutzerapplikation (2) von einer Benutzerapplikation (4) einer ersten Vorrichtung (5) über eine lokale Verbindung (8), ein Senden einer ersten Identifikationsinformation von der Endbenutzerapplikation (2) oder der Benutzerapplikation (4) an eine Zwischeninstanz (6), wobei die erste Identifikationsinformation charakteristisch für den ersten privaten Schlüssel ist, ein Empfangen einer Verifizierungsantwort von der Endbenutzerapplikation (2) oder der Benutzerapplikation (4) von der Zwischeninstanz (6), wobei die Verifizierungsantwort charakteristisch ist für einen Abgleich der ersten Identifikationsinformation und einer zweiten Identifikationsinformation, wobei die zweite Identifikationsinformation charakteristisch ist für den zweiten privaten Schlüssel, der auf einer zweiten Vorrichtung (7) hinterlegt ist, und ein Verifizieren des ersten privaten Schlüssels von der Endbenutzerapplikation (2) oder der Benutzerapplikation (4) in Abhängigkeit der Verifizierungsantwort. 0002 Des Weiteren werden eine Endvorrichtung, ein System, ein Computerprogramm und ein computerlesbares Speichermedium angegeben.

基于暗计数预测的单光子探测门控与偏压协同优化方法

Resumen de: CN122553999A

本发明涉及光电探测和量子通信技术领域，公开了一种基于暗计数预测的单光子探测门控与偏压协同优化方法，包括单光子探测的状态采集、构建历史状态序列、暗计数趋势预测、门宽与偏压联合优化、参数执行以及反馈更新等步骤，由此形成“预测—优化—执行—反馈”的闭环控制过程。与现有技术相比，本发明通过暗计数趋势预测和门控窗口、偏压协同调节，可在一定程度上缓解固定参数方案响应滞后的问题。系统在暗计数出现升高趋势时提前生成控制量，有助于减少暗计数进入有效探测窗口的概率，并降低雪崩误触发对QBER的影响，同时，本发明有助于减少有效探测事件被过度牺牲的情况，使探测器在不同噪声状态下保持相对稳定的工作状态。

一种格密码拒绝采样的数字签名加固方法、系统及其介质

Resumen de: CN122554105A

0001 本发明公开了一种格密码拒绝采样的数字签名加固方法、系统及其介质，属于后量子密码技术领域。所述方法包括：配置多个冗余状态变量并赋予防编译器优化属性，强制微处理器直接向物理内存发起读写事务；调用底层验证模块进行多次独立求值并存入各状态变量；采用非短路求值的按位逻辑算子对多个状态变量进行聚合计算；仅当聚合结果表明所有求值均未越界时放行签名，否则擦除中间状态并重新触发签名循环。本发明通过软硬件协同设计，在不增加昂贵硬件传感器的前提下，同时抵御故障注入攻击与编译器优化，并具有恒定时间特性，可用于智能卡、金融网关等安全设备。

一种基于量子密钥的电车安全换电方法

Resumen de: CN122539955A

本发明属于车联网技术领域，尤其涉及一种基于量子密钥的电车安全换电方法。安全换电方法包括：电车前往换电站；若当前换电站与电车属于同一车企，则电车基于相同的通信协议向当前换电站发起域内认证；若域内认证成功，则电车电池卡槽锁开启，在当前换电站中进行电池更换，并与当前换电站之间通过第一通信密钥进行对称加密对话；若当前换电站与电车不属于同一车企，则由电车与当前换电站之间的跨域认证；若跨域认证成功，则电车电池卡槽锁开启，在当前换电站中进行电池更换，并与当前换电站之间基于当前换电站的通信协议、通过第二通信密钥进行对称加密对话。本发明的安全换电方法，可以使电车在不同车企的换电站中进行安全地电池更换。

一种可配置的多模式混合密钥协商系统及方法

Resumen de: CN122554093A

0001 本发明涉及网络安全与密码技术，具体涉及一种可配置的多模式混合密钥协商系统及方法，包括本地端、对端、QKD网络及通信链路，硬件密码设备集成经典随机数发生器、量子随机数发生器和QKD接口，支持生成三类密钥；业务系统可通过手动输入或场景自动映射选择工作模式参数，参数通过位域控制密钥使能状态，对应纯经典、纯量子随机数、全融合、经典+QKD、量子随机数+QKD五种模式；启用密钥采用经典国密算法/NIST PQC算法差异化封装，禁用密钥填充零值密文，对端解密后通过异或运算生成最终业务密钥；本发明实现了安全强度、合规要求、性能成本的灵活权衡，支持业务系统根据场景需求动态选择密钥组合策略，适配多行业、多场景，兼顾兼容性与前瞻性。

基于量子密钥分发的流媒体通信安全控制系统及方法

Resumen de: CN122554205A

本发明涉及流媒体通信安全技术领域，公开了基于量子密钥分发的流媒体通信安全控制系统及方法；该系统包括量子密钥分发模块、流媒体通信模块和安全控制模块；量子密钥分发模块通过量子信道实现通信双方之间的密钥生成与分发；流媒体通信模块负责流媒体数据的编码、传输与解码；安全控制模块动态协调密钥获取与应用过程，根据流媒体数据的传输特征进行密钥更新；本发明在保证流媒体通信实时性的前提下，实现了密钥的动态更新，并根据流媒体数据的特征参数自适应地管理密钥应用过程，使得整个通信过程既安全又高效。

一种通信方法及装置

Resumen de: CN122554077A

本申请提供了一种通信方法，应用于目标路径的头节点，目标路径上包括的节点均为量子节点，头节点在目标路径上的下一跳节点为第一节点。头节点向第一节点发送第一报文，第一报文中包括第一密钥信息和第一段路由信息，第一密钥信息是根据业务密钥和第一共享量子密钥得到的，第一共享量子密钥为头节点和第一节点之间的共享量子密钥，第一段路由信息指示所述目标路径，其中，第一段路由信息用于指导第一报文转发。利用本方案，头节点利用第一共享量子密钥对业务密钥进行安全性保护，从而保障了业务密钥的安全性。

一种面向车联网跨域通信的基于格密码学的身份认证及密钥协商方法

Resumen de: CN122554082A

0001 本发明公开了一种面向车联网跨域通信的基于格密码学的身份认证及密钥协商方法。本发明设计了一种基于格的无证书可聚合签名，利用该机制在不增加通信开销的前提下让可信机构TA为跨域通信用户的信誉担保；另外，本发明设计了一种基于模块格的无证书密钥封装方法，在不引入证书管理开销、不产生密钥托管问题的前提下实现了安全密钥分发；最后，本发明将设计的两种机制有机结合，实现了轻量高效的后量子跨域双向身份认证和密钥协商。本发明在降低了通信开销、解决了密钥托管问题的同时，实现了可抗量子计算攻击的安全身份认证和密钥协商。

抗量子攻击的移动接入认证与密钥协商方法及电子设备

Resumen de: CN122554088A

本申请提供一种抗量子攻击的移动接入认证与密钥协商方法及电子设备，方法包括：接收服务网络发送的消息；基于本地保存的后量子私钥解封装密文以得到临时共享密钥；根据用户标识确定目标用户永久标识符并在数据库中查找永久密钥；根据预先生成的随机数、永久密钥、临时共享密钥和服务网络身份标识生成认证令牌和哈希期望响应值；将认证向量发送给服务网络以使服务网络对用户设备进行移动接入认证并发送响应值；将响应值与本地计算的期望响应值进行比较，若相等，则完成对用户设备的移动接入认证，生成锚密钥，并将目标用户永久标识符和锚密钥发送给服务网络。本申请能够解决现有移动通信接入认证协议在量子计算攻击模型下面临的安全性不足问题。

一种用于量子安全网络的分布式唯一标识生成方法及系统

Resumen de: CN122554094A

0001 本发明涉及量子保密通信技术领域，公开了一种用于量子安全网络的分布式唯一标识生成方法及系统，通过创新的ID结构设计、节点编号分层管理机制以及系统化的模块部署。与现有技术相比，本发明实现量子安全网络中密码本标识和应用会话标识的全局唯一性，避免标识冲突导致的业务中断或安全风险；提升标识管理的灵活性和高效性，支持自治域与虚拟自治域的动态划分和拓扑管理；增强标识的安全性能，采用抗量子计算的技术方案，确保标识在量子计算环境下的安全性；同时，满足不同业务场景对标识生成的多样化需求，实现密码本ID与应用ID的统一生成与管理，为量子安全网络的规模化应用奠定技术基础。

一种天地一体化身份认证系统及其方法

Resumen de: CN122554112A

0001 本发明公开了一种基于芯片硬件信任根与北斗短报文双向认证的天地一体化身份认证系统，包括：一芯片硬件信任根单元，在芯片制造阶段固化Global_ID，并动态派生芯片私钥；一IPv6地址派生与绑定单元，基于芯片Global_ID及芯片公钥，通过动态可验证混淆地址派生算法生成与芯片绑定的IPv6地址；一北斗短报文双向认证单元，通过北斗短报文执行挑战‑响应双方签名流程，实现终端与验证方之间的相互身份认证；一端到端加密通信单元，利用派生出的会话密钥对经IPv6地址标识的通信数据进行加密传输；一双哈希链分片重组单元，用于对加密后的通信数据进行基于前向哈希链和后向哈希链的双向校验分片发送与乱序重组。

一种工控设备密码迁移策略确定方法、装置、设备及介质

Resumen de: CN122554095A

本申请公开了一种工控设备密码迁移策略确定方法、装置、设备及介质，涉及网络安全技术领域，包括：基于目标工控设备对应的物理隔离等级分别执行对应的资产探测方式，得到相应的密码资产探测结果，并基于预设置信度权重值对该结果进行融合，得到密码资产初始数据；将密码资产初始数据进行结构化处理得到的目标密码物料清单后，输入至预设逻辑规则决策引擎中，得到敏捷性状态分级；基于敏捷性状态分级对各资产节点进行动态权重分配，得到目标权重系数，并基于密码资产初始数据确定目标工控设备对应的软件敏捷性得分和硬件敏捷性得分后确定工控密码敏捷性评估结果，以便进行密码迁移策略。这样一来，可以实现工控设备向目标计算密码的平滑迁移。

保密通信方法、保密通信装置、电子设备及存储介质

Resumen de: CN122554141A

本申请提供了一种保密通信方法、保密通信装置、电子设备及计算机程序产品；方法包括：从全局区块链中确定第一区块；确定第一文件；基于第一区块和第一文件，确定第一密钥；基于第一密钥，对第一文件进行加密，得到加密后的第一文件；向服务器传输加密后的第一文件，以存储。通过本申请，能够提升了数据的安全性。

基于硬件安全单元的混合密码抗量子加速控制系统及方法

Nº publicación: CN122554217A 11/08/2026

Solicitante:

江苏翔晟信息技术股份有限公司

Resumen de: CN122554217A

0001 本发明公开了基于硬件安全单元的混合密码抗量子加速控制系统及方法，涉及数据安全技术领域；其技术要点为：获取混合加密请求；将内部静态随机存取存储器划分为经典数据区与多项式系数区；解析混合加密请求提取抗量子公钥；将多项式系数拆分为匹配经典大整数协处理器运算位宽的系数数据块；将系数数据块写入多项式系数区；将状态切换控制字序列注入经典大整数协处理器的指令寄存器；排序组合多个中间变换系数生成变换后系数矩阵；生成变换后系数矩阵；读取变换后系数矩阵并执行抗量子封装运算生成抗量子密文；拼接经典密码签名结果与抗量子密文生成混合密码载荷；本发明降低了加密时延、提升运算稳定性与算力利用率。