Resumen de: WO2026209158A1
Provided is a method for distributing a key from a source node to N destination nodes in a communication system, N being an integer greater than 2. The N destination nodes have a first mask, and each of the N destination nodes has a respective second mask, and a respective local key. The method comprises generating, by the source node, a key mask by combining the key to be distributed and a local key of the source node and transmitting, by the source node, the key mask to a destination node of the N destination nodes. The destination node obtains the key by combining the received key mask, the respective local key of the destination node, the first mask, and the respective second mask of the destination node.
Resumen de: US20260312796A1
0000 A quantum cryptography communication method between a first communication device and a second communication device may include: a quantum communication step of generating a second information sequence based on a first information sequence by the second communication device, when the first communication device transmits the first information sequence generated by randomly modulating a phase or polarization of photons to the second communication device; and a post-processing step of adjusting the first information sequence and the second information sequence to be identical on the basis of an error correction mode selected based on a predetermined criterion. The error correction mode may be classified according to a subject of decoding parity information.
Resumen de: WO2026209235A1
Example embodiments of the present disclosure are directed to quantum random number generation (QRNG) capability verification. In a method, an apparatus obtains capability information about QRNG support of the apparatus, the capability information being generated in a trusted execution environment (TEE) of the apparatus. The apparatus transmits, to a network entity, a request for registering the apparatus for QRNG usage, the request including the capability information.
Resumen de: US20260312821A1
An encryption method and system for securing data through structure-aware semantic fragmentation. An input data stream is segmented into semantically meaningful fragments using a transformer-based neural network. Each fragment is bound by deterministic structural markers to create a tamper-evident chain. A Final Seed, derived from high-resolution timestamps and a hardware-anchored Personal Key, seeds a permutation function to shuffle the fragments. The system then applies a Quantum Lattice Transform to a subsequently derived MasterSeed, generating a post-quantum resilient symmetric key. This MasterSeed-derived key encrypts the permuted and bound fragments into a final secure payload. Decryption requires regenerating the exact permutation map and verifying the structural marker chain, ensuring data is protected against memory scraping and unauthorized access in decentralized environments.
Resumen de: WO2026209124A1
Provided is a method of providing quantum keys between two ground stations, the method comprising the steps of a) performing pairwise sharing of a first quantum key between the two ground stations using satellite-based quantum key distribution; b) generating, by a first ground station of the two ground stations, first further quantum keys; c) encrypting, by the first ground station, the first further quantum keys using the first shared quantum key; d) transmitting, by the first ground station, the encrypted first further quantum keys to a second ground station of the two ground stations, the second ground station being different from the first ground station; and e ) decrypting, by the second ground station, the encrypted first further quantum keys, thereby providing the quantum keys between the two ground stations.
Resumen de: US20260312795A1
The inventors have developed methods and systems to address the above challenges using entangled photons with multiple colors transmitted with a classical data stream as a technique to detect eavesdropping on the data stream and to prevent reverse engineering for demodulating the entangled bits from the data stream. In some embodiments, a time gate is used to interleave the quantum and classic signals to provide quantum encryption of fiber optic communication protocols.
Resumen de: US20260312794A1
0000 A system and a method for randomness extraction for quantum cryptography and a method of performing quantum cryptography between two or more parties. The system for randomness extraction for quantum cryptography comprises a sampling module configured to sample a cryptographic key to generate one or more sub-blocks; an entropy module configured to determine a lower bound of the entropy in each sub-block, wherein the determining of the lower bound comprises consideration of correlations between each sub-block and unsampled bits of the cryptographic key and/or other sub-blocks; and a hashing module configured to hash each sub-block for randomness extraction on each sub-block.
Resumen de: WO2026209233A1
Example embodiments of the present disclosure are directed to quantum random number generation (QRNG) capability verification. In a method, an apparatus receives, from a network entity, a request for checking QRNG support of the apparatus. The apparatus obtains capability information about the QRNG support of the apparatus, the capability information being generated in a trusted execution environment (TEE) of the apparatus. The apparatus transmits, to the network entity, a response to the request, the response including the capability information.
Resumen de: WO2026209236A1
Example embodiments of the present disclosure are directed to quantum random number generation (QRNG) capability verification. In a method, an apparatus obtains capability information about QRNG support of the apparatus. The capability information is generated in a trusted execution environment (TEE) of the apparatus. The apparatus transmits, to a device, a message including the capability information about the QRNG support of the apparatus. The message includes a TEE transparent container associated with the capability information.
Resumen de: EP4819151A1
0001 An Al-driven system and method for dynamic digital legacy preservation and multi-generational knowledge transfer, addressing the challenge of secure, emotionally intelligent legacy preservation across generations. 0002 The system integrates Adaptive Al Twins, a Quantum-Secured Legacy Vault with lattice-based cryptography, and virtual reality (VR) environments to enable posthumous Al evolution, milestone-based memory unlocking, and therapeutic memory retrieval. Key features include an Al-Guided Emotional Memory Structuring System for subconscious memory retrieval using NLP-based regression therapy, an Al-Driven Multi-Generational Knowledge Transfer System for real-time holographic interactions, and accessibility interfaces (e.g., EEG neuro-interfaces) for inclusive use. 0003 The system evolves through a continuous framework, from memory capture to a Mournalverse ecosystem, and supports lifelong Al Twin companionship for emotional coaching. It facilitates therapeutic memory retrieval, provides real-time mentorship, and ensures long-term legacy preservation, with scalability for future technologies like brain-computer interfaces.
Resumen de: US20250175795A1
0000 Techniques and architecture are described for reauthentication of two IPsec peers, during a key refresh process. The peers may reauthenticate each other based upon a shared secret, which in configurations, is a PPK. In configurations the PPKs are stirred (mixed with DH/ECDH) during key derivation while refreshing the session keys during IKE_v2 and IPsec rekey. This may involve communicating the PPK-ID from a rekey initiator to a rekey responder by adding a PPK_ID payload in the rekey message exchange. This enables stronger quantum safe session keys, when dynamic PPK is used or when the manual PPK is rotated frequently. In configurations, the knowledge of the shared PPK is proved by having both peers exchange authentication payloads signed with a PPK. This involves exchanging a IKEv2 NOTIFY payload “AUTH_PPK” to carry PPK-signed authentication data. This serves the purpose of frequent re-authentication of the peers as part of the key refreshes.
Resumen de: EP4819535A1
The present invention relates to the field of security protocols. Disclosed are a packed secret sharing-based general non-interactive zero-knowledge proof method and system. The method comprises: at a pre-computation stage, a prover and a verifier run a pre-processing algorithm to generate a verifiable random linear transformation pair required in a proof stage; in the proof stage, the prover runs a proof algorithm, computes a proof π, and sends the proof π to the verifier; and in a verification stage, the verifier runs a verification algorithm on the basis of the proof π and a corresponding common input, and verifies the correctness of execution of an arithmetic circuit C(w, x). According to the present invention, only an underlying MPC protocol needs to be run once, and the protocol can resist quantum computer attacks and does not depend on any algebraic structure. In addition, the protocol design scheme of the present invention is efficient and achievable, the proof time of the key knowledge proof of a lattice-based key encapsulation mechanism Kyber512 is only 1.08 seconds, the preprocessing time is 1.3 seconds, and the verification time is 1.16 seconds.
Resumen de: FI132245B1
Disclosed is a method for establishing communication session between client (102, 202, 214, 216, 400) and server (104, 204, 212, 300), by producing session-specific secret. The method comprises: (i) sending identification credential (AuthId) and ephemeral public keys (CeDhPk, CeKemPk) of client, to server; (ii) generating ephemeral public key of server; (iii) computing first classical shared secret (SsDh), at server; (iv) producing first post-quantum shared secret (SsKem) and encapsulated shared secret (EncKemSs), at server; (v) digitally signing context at server, and sending signed context to client; (vi) verifying authenticity of signed context at client; (vii) computing second classical shared secret (authSsDh) and second post-quantum shared secret (authSsKem), said secrets being identical to corresponding secrets computed at server; (viii) generating input keying material (IKM) from shared secrets and long-term secret (SS(client<->server)); and (ix) deriving pseudorandom key (PRK) as session-specific secret, using key derivation function utilising input keying material and nonce (Nonce) from context.
Resumen de: US20260303326A1
According to one embodiment, in an encryption communication system, a first device and a second device that execute encryption communication via a first network share an encryption key used for the encryption communication via a second network including a plurality of nodes. The first device generates n pieces of first data used for generating the encryption key, transmits the n pieces of first data to the second device by distributing the n pieces of first data to n nodes among the nodes and sending the n pieces of first data to the second network, and generates the encryption key by using the n pieces of first data. The second device receives the n pieces of first data from n nodes among the nodes, and generates the encryption key by using the n pieces of first data.
Resumen de: US20260303333A1
0000 The first information processing device includes: a first acquisition unit that acquires key data from the key supplying base; a generation unit that encrypts first data by means of the key data and generates second data by adding attribute information related to encryption to the encrypted first data; and a transmission unit that uploads the second data to an external device. The second information processing device includes: a second acquisition unit that acquires the key data from the key supplying base; a reception unit that downloads the second data from the external device; and a decryption unit that identifies the key data on the basis of the attribute information included in the second data and decrypts the first data included in the second data by means of the key data.
Resumen de: US20260303332A1
0000 Disclosed herein is an apparatus and method for key agreement based on quantum states. The apparatus divides multiple users into two groups, generates GHZ states modified according to different bases corresponding to the respective groups, shares a secret value with the multiple users using the modified GHZ states, and transmits information for generating a session key to users who request generation of the session key based on the secret value.
Resumen de: US20260304111A1
0000 A network node may receive a message. The message may include PQC key, for example from a second network node. The network node may determine, for example based on the PQC key, a master shared secret key (MSSK), and/or encapsulate the MSSK into a ciphertext. The network node may send the ciphertext comprising the MSSK, for example to the second network node. The network node may determine, for example based on the MSSK, a second key. The network node may establish and/or modify, for example based on the second key, a secure E2E connection with the second network node for communications. The network node may determine to use the MSSK as a pre-shared key (PSK). The network node may establish and/or modify a communication protocol with the second network node, for example using the PSK.
Resumen de: US20260303355A1
The arrangements disclosed herein relate to generating, by a first server, a first seed using a Hash-Based Message Authentication Code (HMAC) based at least in part on a Hash Key (HK), providing, by the first server to each of a first device and a second device, the first seed, providing, by a second server to each of the first device or the second device, a second seed. The second seed is based at least in part on a stream of photons. Each of the first device or the second device generates a Derived Key (DK) based at least in part on the first seed and the second seed. Each of the first device or the second device generates a first key based at least in part on the DK and a first random number generated by a Quantum Random Number Generator (QRNG). The first device encrypts first data using the first key to obtain first ciphertext and provides the first ciphertext to the second device. The second device derives the first key and decrypts the first ciphertext using the first key.
Resumen de: US20260303339A1
0000 Systems and techniques may generally be used for modifying quantum entangled bit communication. An example technique may include generating, at a first node in a computing network, a random number using a quantum derived seed as input to a random number generator; modifying a program using the random number while maintaining a function output of the program for a given input; receiving, at the first node from a second node, an input based on the random number; and executing the modified program at the first node using the input to obtain an output consistent with the program in an unmodified state.
Resumen de: EP4815342A1
0001 A quantum transmitter for use in a quantum communication system is provided, the transmitter comprising: a plurality of quantum state encoders, each encoder configured to emit portions of light, each portion encoded with a respective quantum state; and a beam combining module configured to receive portions of light emitted from each quantum state encoder, and combine the received portions to produce output light comprising a sequence of successive portions of light emitted by each encoder. A corresponding quantum communication system is also provided.
Resumen de: EP4815362A1
A communication method includes: generating a key (first key) including a private key and a public key using a random seed stored in advance (S202); creating, using the key generated, a digital certificate for the key (S203); and transmitting the digital certificate created to a connected device (200), the connected device (200) storing in advance a random seed identical to the random seed and generating, using the random seed stored in the connected device (200), a key (second key) identical to the key generated (S204).
Resumen de: EP4815363A1
0001 A sender apparatus determining the existence of an eavesdropper present on a quantum channel in a plug-and-play type QKD system is disclosed. The sender apparatus is configured to detect a continuous pair of laser pulses delivered through the quantum channel, and includes a photodetector outputting a laser pulse detection signal including a continuous pair of electrical pulses corresponding to the detected pair of laser pulses, and a TDC measuring the time interval between the pair of electrical pulses. Information regarding the measured time interval is used to determine whether an eavesdropper exists on the quantum channel.
Resumen de: EP4510498A1
0001 The present invention relates to a QKD communication method between an emitter and a receiver comprising the steps of distilling a secret key through a Privacy Amplification characterized in that the PA size is variable so as to ramp up from a first lower value to an end greater value.
Resumen de: US20260291984A1
A network security system and method integrate generative artificial intelligence, dynamic firewall management, quantum processing, simulation, and quantum key distribution to protect digital infrastructure. The generative AI scans internet data to identify malicious URLs, generating dynamic deny and allow lists for a firewall that updates rules in real time, monitors traffic, and mitigates DDoS attacks. A quantum firewall inspects packets using a quantum processor, producing prioritized quantum rules, while a doppelganger system simulates packet effects on a mirrored network with a quantum simulator, preemptively determining outcomes. Quantum key distribution employs photon polarization to generate keys, validating traffic and detecting eavesdropping, with the firewall rerouting traffic and adjusting update frequency based on threat levels. Historical traffic analysis predicts threats, and internal communications are encrypted, ensuring comprehensive, adaptive security through interconnected components managed by a central network manager.
Nº publicación: WO2026194891A1 24/09/2026
Solicitante:
CHINA UNITED NETWORK COMMUNICATIONS GROUP CO LIMITED [CN]
\u4E2D\u56FD\u8054\u5408\u7F51\u7EDC\u901A\u4FE1\u96C6\u56E2\u6709\u9650\u516C\u53F8
Resumen de: WO2026194891A1
Provided is a key distribution method, which is applied to a sending node. The method comprises: acquiring a first raw key of a sending node and a first raw key of a relay node; determining a first intermediate key of the sending node on the basis of the first raw key of the sending node and the first raw key of the relay node; acquiring a first intermediate key of a receiving node; and determining a first target key on the basis of the first intermediate key of the sending node and the first intermediate key of the receiving node, the first target key being used for the sending node to communicate with the receiving node by means of the relay node.