CN-121984666-A - Quantum trusted relay multicast routing method and quantum trusted relay multicast routing system

CN121984666ACN 121984666 ACN121984666 ACN 121984666ACN-121984666-A

Abstract

The application discloses a quantum credible relay multicast routing method and a system. The quantum trusted relay multicast routing method is used for a password service management center and comprises the steps of responding to a group key distribution request initiated by a source node, obtaining state information of a quantum key distribution network, constructing a multicast routing distribution path according to the state information, and sending routing instructions to the source node and the trusted relay node based on the multicast routing distribution path. Therefore, multiplexing of the network shared link is realized by constructing the multicast routing distribution path, and compared with repeated transmission of the same key in a point-to-point distribution mode, original repeated point-to-point transmission is integrated into one-time multicast transmission, so that the total time of key distribution is shortened to a certain extent, the occupation of network bandwidth is reduced, and the distribution efficiency of quantum keys and the utilization rate of the network bandwidth are improved to a certain extent.

Inventors

WANG DAWEI

Assignees

中电信量子信息科技集团有限公司

Dates

Publication Date: 20260505
Application Date: 20251226

Claims (10)

1. A quantum trusted relay multicast routing method for a cryptographic service management center, the method comprising: Responding to a group key distribution request initiated by a source node, and acquiring state information of a quantum key distribution network, wherein the group key distribution request comprises a target node list; constructing a multicast route distribution path according to the state information; And sending a routing instruction to the source node and the trusted relay node based on the multicast routing distribution path, wherein the source node sends a quantum key to the trusted relay node according to the routing instruction, the trusted relay node receives the quantum key sent by the source node and sends the quantum key to a target node according to the routing instruction, and the trusted relay node is a relay node positioned on the multicast routing distribution path.
2. The method of claim 1, wherein constructing a multicast routing distribution path based on the status information comprises: constructing a target point set according to the source node and the target node; calculating the shortest path between any two nodes in the target point set and the corresponding cost of the shortest path according to the state information to obtain a target complete graph; obtaining a minimum distribution path according to the target complete graph; And carrying out path restoration processing on the minimum distribution path to obtain the multicast route distribution path.
3. The method of claim 1, wherein constructing a multicast routing distribution path based on the status information comprises: Initializing the concentration of a link pheromone among all nodes in the quantum key distribution network; obtaining heuristic information probability according to the state information; configuring a plurality of path exploration main bodies, wherein each path exploration main body selects a path according to the pheromone concentration and the heuristic information probability, traverses the target node and constructs a corresponding initial multicast route distribution path; calculating a total cost for each of the initial multicast route distribution paths; And determining the multicast route distribution paths according to the total cost of each initial multicast route distribution path.
4. A method according to claim 3, characterized in that the method further comprises: Configuring a preset iteration number threshold for constructing the initial multicast route distribution path; Releasing pheromones on links of the initial multicast route distribution path with the lowest total cost of each traversal construction; constructing a plurality of initial multicast route distribution paths again, and iterating the construction of the initial multicast route distribution paths; And under the condition that the iteration times reach the preset iteration times threshold, determining an iteration multicast route distribution path with the lowest total cost in a plurality of iteration multicast route distribution paths obtained through final iteration as the multicast route distribution path.
5. The method according to claim 1, wherein the method further comprises: Monitoring the state of the quantum key distribution network; Reconstructing the multicast route distribution path under the conditions that the link key allowance is smaller than a preset threshold value, the link delay is larger than a preset threshold value, the link error rate is larger than a preset threshold value and/or the node load is larger than a preset threshold value.
6. A quantum trusted relay multicast routing method, the method for a trusted relay node, the method comprising: Receiving a quantum key sent by a source node, wherein a password service management center responds to a group key distribution request initiated by the source node, acquires state information of a quantum key distribution network, constructs a multicast route distribution path according to the state information, sends a route instruction to the source node and the trusted relay node based on the multicast route distribution path, and sends the quantum key to the trusted relay node according to the route instruction, wherein the group key distribution request comprises a target node list, and the trusted relay node is a relay node positioned on the multicast route distribution path; and sending the quantum key to a target node according to the routing instruction.
7. The method of claim 6, wherein the receiving the quantum key transmitted by the source node comprises: receiving a first encryption quantum key sent by the source node, wherein the source node encrypts the quantum key according to a first link key shared with the trusted relay node, generates the first encryption quantum key, and sends the first encryption quantum key to the trusted relay node according to the routing instruction; Decrypting the first encrypted quantum key according to the first link key to obtain the quantum key.
8. The method of claim 7, wherein the sending the quantum key to a destination node according to the routing instructions comprises: encrypting the quantum key according to a second link key to generate a second encrypted quantum key, wherein the second link key is a link key shared by the trusted relay node and the target node; And sending the second encrypted quantum key to the target node according to the routing instruction, wherein the target node decrypts the second encrypted quantum key according to the second link key to obtain the quantum key.
9. The method of claim 6, wherein the trusted relay node comprises at least two trusted relay child nodes, the method further comprising: A first trusted relay sub-node receives a third encryption quantum key sent by the source node, wherein the source node encrypts the quantum key according to a third link key shared with the first trusted relay sub-node, generates the third encryption quantum key, and sends the third encryption quantum key to the first trusted relay sub-node according to the routing instruction, and the first trusted relay sub-node is one of the trusted relay sub-nodes; The first trusted relay child node decrypts the third encrypted quantum key according to the third link key to obtain the quantum key; The first trusted relay node encrypts the quantum key according to a fourth link key to generate a fourth encrypted quantum key, wherein the fourth link key is a link key shared by the first trusted relay node and a second trusted relay node, and the second trusted relay node is one of the trusted relay nodes; the first trusted relay sub-node sends the fourth encryption quantum key to the second trusted relay sub-node according to the routing instruction, wherein the second trusted relay sub-node decrypts the fourth encryption quantum key according to the fourth link key to obtain the quantum key; the second trusted relay node encrypts the quantum key according to a fifth link key to generate a fifth encrypted quantum key; And the second trusted relay sub-node sends the fifth encrypted quantum key to the target node according to the routing instruction, wherein the target node decrypts the fifth encrypted quantum key according to the fifth link key to obtain the quantum key.
10. A quantum trusted relay multicast routing system, characterized in that the system comprises a cryptographic service management center, a target node, a source node and a trusted relay node, wherein, The cryptographic service management center is configured to obtain state information of a quantum key distribution network in response to a group key distribution request initiated by a source node, wherein the group key distribution request comprises a target node list; constructing a multicast route distribution path according to the state information; transmitting a routing instruction to the source node and a trusted relay node based on the multicast routing distribution path, wherein the trusted relay node is a relay node positioned on the multicast routing distribution path; The source node is configured to send a quantum key to the trusted relay node according to the routing instruction; the trusted relay node is configured to receive the quantum key sent by the source node and send the quantum key to a target node according to the routing instruction.

Description

Quantum trusted relay multicast routing method and quantum trusted relay multicast routing system Technical Field The application relates to the technical field of communication, in particular to a quantum trusted relay multicast routing method and a quantum trusted relay multicast routing system. Background In a quantum key distribution scenario, a source node in a quantum key distribution network generally establishes a point-to-point key distribution link with each target node separately, so as to realize quantum key distribution. However, the network bandwidth is excessively occupied, so that the network bandwidth utilization rate is low, and network resources are wasted. Disclosure of Invention The application provides a quantum trusted relay multicast routing method and a quantum trusted relay multicast routing system. The embodiment of the application provides a quantum trusted relay multicast routing method, which is used for a password service management center and comprises the following steps: Responding to a group key distribution request initiated by a source node, and acquiring state information of a quantum key distribution network, wherein the group key distribution request comprises a target node list; constructing a multicast route distribution path according to the state information; And sending a routing instruction to the source node and the trusted relay node based on the multicast routing distribution path, wherein the source node sends a quantum key to the trusted relay node according to the routing instruction, the trusted relay node receives the quantum key sent by the source node and sends the quantum key to a target node according to the routing instruction, and the trusted relay node is a relay node positioned on the multicast routing distribution path. Therefore, multiplexing of the network shared link is realized by constructing the multicast routing distribution path, and compared with repeated transmission of the same key in a point-to-point distribution mode, original repeated point-to-point transmission is integrated into one-time multicast transmission, so that the total time of key distribution is shortened to a certain extent, the occupation of network bandwidth is reduced, and the distribution efficiency of quantum keys and the utilization rate of the network bandwidth are improved to a certain extent. In some embodiments, the constructing a multicast routing distribution path according to the state information includes: constructing a target point set according to the source node and the target node; calculating the shortest path between any two nodes in the target point set and the corresponding cost of the shortest path according to the state information to obtain a target complete graph; obtaining a minimum distribution path according to the target complete graph; And carrying out path restoration processing on the minimum distribution path to obtain the multicast route distribution path. Therefore, by combining the composite cost function and the graph theory algorithm, the multicast routing distribution path with optimal cost effectiveness is constructed, and the network bandwidth occupation, the node load and the transmission delay in the key distribution process are effectively reduced, so that the utilization efficiency of the network bandwidth and the quantum key is improved to a certain extent, the key distribution time is shortened, the expansibility and the reliability of the quantum key distribution network are enhanced, and solid path support is provided for the safe multicast distribution of the quantum key. In some embodiments, the constructing a multicast routing distribution path according to the state information includes: Initializing the concentration of a link pheromone among all nodes in the quantum key distribution network; obtaining heuristic information probability according to the state information; configuring a plurality of path exploration main bodies, wherein each path exploration main body selects a path according to the pheromone concentration and the heuristic information probability, traverses the target node and constructs a corresponding initial multicast route distribution path; calculating a total cost for each of the initial multicast route distribution paths; And determining the multicast route distribution paths according to the total cost of each initial multicast route distribution path. Therefore, the path exploration main bodies search in parallel based on the pheromone concentration and heuristic information probability, global optimal search and dynamic adaptation of the multicast routing distribution path are realized to a certain extent, the risk of sinking into a local optimal solution is effectively reduced, the network bandwidth and the quantum key utilization efficiency are improved, the quantum key distribution stability is ensured, and flexible and reliable path support is provided for a complex dynamic large-sca