암호장치의 송·수신자 역할 설정이 없는 양자키분배 시스템 설계
Design of Quantum Key Distribution System without Fixed Role of Cryptographic Applications
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
양자키분배(QKD)는 양자컴퓨터의 위협으로부터 안전하게 비밀키를 나누어 갖는 키공유 프로토콜 중 하나이다. 일반적으로 QKD 장치에 연결되는 암호장치는 경합조건 발생과 구현의 복잡성 때문에 송신자 또는 수신자의 역할을설치할 때부터 적용한다. 기존 QKD 시스템은 링크용 암호장치에 주로 적용되었기 때문에 암호장치의 송·수신자 역할을 고정하여도 문제가 없었다. 암호장치와 QKD 장치가 공급하는 양자키의 종속성을 제거하여, QKD 네트워크로유연하게 확장할 수 있는 새로운 QKD 시스템 및 프로토콜을 제안하였다. 기존 QKD 시스템에서는 암호장치가 요청하는 비밀키를 양자키로 직접 분배하였으나, 제안한 QKD 시스템에서는 난수로 생성한 비밀키를 암호장치에 분배한다. 두 QKD 노드 사이에서 미리 나누어 가진 송신용 및 수신용 양자키를 이용하여 비밀키를 암호화하고 전달하는 구조를 제안하였다. 제안한 QKD 시스템은 QKD 장치들 사이에서 공유한 양자키의 의존성을 제거하여 암호장치의 고정된 송·수신자 역할이 필요 없다.
Abstract
QKD(Quantum Key Distribution) is one of the protocols that can make two distant parties safely share secure keysagainst the threat of quantum computer. Generally, cryptographic applications which are connected to the QKD device havefixed roles as a transmitter and a receiver due to the race condition and complexity of implementation. Because theconventional QKD system is mainly applied to the link encryptor, there are no problems even if the roles of thecryptographic devices are fixed. We propose a new scheme of QKD system and protocol that is easy to extend to the QKDnetwork by eliminating quantum key dependency between cryptographic device and QKD node. The secure keys which aregenerated by the TRNG(True Random Number Generator) are provided to the cryptographic applications instead of quantumkeys. We design an architecture to transmit safely the secure keys using the inbound and outbound quantum keys which areshared between two nodes. In this scheme, since the dependency of shared quantum keys between two QKD nodes iseliminated, all cryptographic applicatons can be a master or a slave depending on who initiates the cryptographiccommunications.
참고문헌 (23)
- M. Dianati, "Architecture and protocols of the future European Quantum key distribution network", Secur. Commun. Netw., 1(1), pp.57~74 (2008)
- M. Peev, "The SECOQC quantum key distribution network in Vienna", New J. Phys., 11(7) (2009)
- M. Dianati, "Architecture of the secoqc quantum key distribution network", Proc. 1st Int. Conf. Quantum Nano Micro Technol. (ICQNM), pp.13~ (2007)
- M. Sasaki, "Field test of quantum key distribution in the Tokyo QKD network", Opt. Exp., 19(11), pp.10387~10409 (2011)
- R. Alléaume, "Using quantum key distribution for cryptographic purposes: A survey", Theoretical Computer Science, 560, pp.62~81 (2014)
- A. Aguado, "The engineering of software-defined quantum key distribution networks", IEEE Commun. Mag., 57(7), pp.20~26 (2019)
- Y. Cao, "Key on demand (KoD) for software-defined optical networks secured by quantum key distribution (QKD)", Opt. Exp., 25(22), pp.26453~26467 (2017)
- Y. Zhao, "Software defined optical networks secured by quantum key distribution (QKD)", 2017 IEEE, 2017, 1~4
- S. Marksteiner, "On the Resilience of a QKD Key Synchronization Protocol for IPsec", Int. J. on Adv. in Secur., 9(3& 4), pp.90~100 (2016)
- S. Ghernaouti-Helie, "Using quantum key distribution within IPSEC to secure MAN communications", MAN 2005 conference (2005)
- ETSI, "Quantum Key Distribution (QKD); Application Interface", ETSI GS QKD 004 V1.1.1, ~ (2010)
- ETSI, "Quantum Key Distribution (QKD); Protocol and data format of REST-based key delivery API", ETSI GS QKD 014, ~ (2019)
- ISO, "Security requirements, test and evaluation methods for quantum key distribution–part 1: Requirements", ISO, SC27, pp.WG3 working draft, 2020[DOI]
- ETSI, "Quantum Key Distribution (QKD); QKD Module Security Specification", ETSI GS QKD 008, ~ (2010)
- L. Salvail, "Security of trusted repeater quantum key distribution networks", J. Comput. Secur., 18(1), pp.61~87 (2010)
- P. Schartner, "How to overcome the 'Trusted Node Model' in Quantum Cryptography", 2009 Int. Conf. on Computational Science and Engineering, pp.259~262 (2009)
- A. Tajima, "Quantum key distribution network for multiple applications", Quantum Science and Technology, 2(3) (2017)
- A. Tajima, "Quantum Key Distribution Network and Its Application", IEEE Photonics Conf (2018)
- ETSI, "Quantum Key Distribution (QKD); Components and Internal Interfaces", ETSI GS QKD 003, ~ (2018)
- ETSI, "Quantum Key Distribution (QKD); Use Cases", ETSI GS QKD 002, ~ (2010)
- ETSI, "Quantum Key Distribution (QKD); Device and Communication Channel Parameters for QKD Deployment", ETSI GS QKD 012, ~ (2019)
- ITU, "Overview on networks supporting quantum key distribution", ITU-T Y.3800, ~ (2019)
- A. Mink, "Quantum Key Distribution (QKD) and Commodity Security Protocols: Introduction and Integration", Int. J. Netw. Secur. &Its Appli., 1(2), pp.101~112 (2009)