Alerta

METHOD AND SYSTEM TO ESTIMATE RISK FOR A SOFTWARE APPLICATION DUE TO QUANTUM THREAT

Resumen de: EP4773541A1

Conventional risk estimation techniques perform dynamic analysis of application or use models which require training data. Present disclosure provides method and system to estimate risk for a software application due to quantum threat by static analysis. A set of records pertaining to the application is received and parsed to obtain application, crypto and platform parameters. In addition, list of quantum vulnerable algorithms, number of Qubits required to break a cryptographic algorithm used by the application and a current Qubit number are also received. Then, value of Quantum Day is determined based on the current Qubit number and the number of Qubits required to break the cryptographic algorithm used by the application. Further, SOD (Severity, Occurrence, Detection) scores are calculated for each parameter, and they are multiplied to determine Risk Priority Number (RPN) for each parameter. Finally, RPNs of all parameters are summed up to estimate overall risk of the application.

一种基于纠缠态与稳定子码的高效量子密钥生成方法

Resumen de: CN122513093A

本申请是关于一种基于纠缠态与稳定子码的高效量子密钥生成方法，包括：构建多组原始GHZ纠缠态，将第一粒子序列和第二粒子序列分发给发送方，将第三粒子序列分发给接收方；对第一粒子序列与第二粒子序列中的每个粒子分别施加第一酉操作与第二酉操作，并与第三粒子序列组成可区分GHZ纠缠态；制备多个校验粒子，得到校验序列与对应的制备基，并进行配对，形成多个复合粒子组；通过量子纠错码对每个复合粒子组进行编码，得到复合量子系统；通过量子纠错码对复合量子系统进行解码，保留有效粒子组进行GHZ基测量，生成最终密钥。本申请能够提升密钥生成效率，并且具备单比特纠错能力，抗噪声强，同时窃听检测简捷高效。

하드웨어 보안 시스템 및 이의 동작 방법

Resumen de: WO2025125334A1

The present invention generally relates to a hardware security system (1000) comprising a first hardware security module (1110), configured to store a secret, a second hardware security module (1120), configured to store the secret, a quantum key distribution network (1200) comprising a first quantum key distribution node (1210), a second quantum key distribution node (1220) and a quantum encrypted channel (1230), wherein the first quantum key distribution node (1210) is connected to the first hardware security module (1110), and wherein the second quantum key distribution node (1220) is connected to the second hardware security module (1120). The invention further relates to method for operating the hardware security system (1000).

一种用于量子网络中图态高效分发的启发式路径搜索方法

Resumen de: CN122513090A

本发明提出一种用于量子网络中图态高效分发的启发式路径搜索方法。所述方法包括：定义量子网络中图态的经典存储方法，并将量子网络中的图态用经典方法存储；定义量子网络中图态变换的经典操作集合；计算量子图态操作上界以及在搜索过程中剪枝超过操作上界的集合；设计启发式搜索函数，使得在搜索过程中可以稳定地朝着目标图态进行搜索；执行搜索算法以找到从初始图态变换到目标图态的操作序列。本发明通过引入经典启发式搜索算法，对图态分发的操作序列进行智能的优化，减少图态分发过程中不必要的纠缠产生与消耗，从而提高资源的利用效率。

一种国密标准后量子密码算法纯硬件加速电路及装置

Resumen de: CN122513088A

本申请公开了一种国密标准后量子密码算法纯硬件加速电路及装置，属于密码学与集成电路安全技术领域。所述电路包括密钥生成模块、签名生成模块与签名验证模块，全部采用纯硬件集成电路实现，内置国密标准后量子密码算法专用运算子单元，可完成密钥封装、数字签名与验证运算。本申请无需软件处理器参与，运算速度快、安全性高，符合国家密码管理相关标准要求，适用于各类需要抗量子计算攻击的民用电子设备。

一种SSL/TLS深度检测方法、装置及设备

Resumen de: CN122513176A

本申请公开了一种SSL/TLS深度检测方法、装置及设备，包括：建立TCP连接后，生成两个PQC密钥封装机制的KEM密钥对；接收客户端的第一报文，回复携带第一KEM密钥对的公钥的第一响应报文，接收客户端基于公钥封装后返回的密文，利用私钥解封装，协商得到第一会话密钥；将第一报文中的密钥共享扩展key_share字段替换为第二KEM密钥对的公钥，并保留第一报文中的supported_groups扩展字段生成第二报文；向服务器发送第二报文协商得到第二会话密钥；利用第一会话密钥解密客户端的密文数据并进行DPI，利用第二会话密钥加密后传输。以此解决SSL检测存在的握手协议不兼容和密钥材料不可提取的问题。

量子加密方法、量子解密方法及装置

Resumen de: CN122513085A

本发明提供一种量子加密方法、量子解密方法及装置，涉及信息安全技术领域，该方法包括通过客户端与服务端交互生成公共矩阵，并由双方分别生成各自的私钥分片和公钥分量，最终合成完整公钥，实现了私钥的分散存储。基于此，客户端利用合成后的公钥对明文进行加密，确保了加密过程的安全性。该方案无需依赖额外的硬件安全设备，仅通过软件协同方式即可将私钥分散存储于两端，有效避免了私钥在单一终端内存中存储易被窃取的风险，即使客户端设备丢失或服务端被攻击，攻击者也无法获取完整私钥，提升了私钥存储的安全性，同时兼顾了用户使用的便捷性。同时，通过客户端与服务端协同完成解密操作，有效防止了私钥单点泄露导致的数据安全风险。

一种基于集成光量子芯片的纠缠-干涉互补性验证装置及方法

Resumen de: CN122513022A

本发明提供一种基于集成光量子芯片的纠缠‑干涉互补性验证装置及方法，装置包括：片上量子比特干涉单元、路径探测器单元和测量单元；片上量子比特干涉单元包括依次分布在目标量子比特的光子传播路径上的第一分束器、相位调制器和第二分束器；路径探测器单元包括依次分布在路径探测器的光子传播路径上的第三分束器和可调耦合器；测量单元包括相互连接的单光子探测器阵列和数据采集与处理模块；其中，片上量子比特干涉单元的输出端和路径探测器单元的输出端分别连接至测量单元的输入端。本发明在集成光量子芯片上验证纠缠与干涉的互补关系，为片上量子计量和信息处理提供了核心器件。

兼容国际标准的双轨制可重构后量子密码处理方法、装置及存储介质

Resumen de: CN122513078A

本发明公开了一种兼容国际标准的双轨制可重构后量子密码处理方法、装置及存储介质，处理方法包括：根据上层握手协议指令动态配置可重构计算阵列的标准轨模式或高防轨模式；前者，配置互连网络为全局蝶形交叉拓扑，执行基于素数模的多项式运算；后者，配置互连网络为局部二维网格拓扑，针对模数执行加法‑乘法全域混合盲化并利用多相分解完成局部短卷积运算；两种模式的底层流水线寄存器均由同一扩频多相交织时钟网络提供时序驱动。本发明在晶体管级别复用了底层乘加单元，通过路由重构实现数论变换与脉动阵列的纳秒级切换，并利用扩频多相交织时钟对双轨进行无差别的物理能量平摊防护，克服了标准合规与极限物理防御的技术矛盾。

一种基于抗量子算法的国密IPSec协议实现方法及系统

Resumen de: CN122513082A

本发明公开了一种基于抗量子算法的国密IPSec协议实现方法及系统，包括：发起方向响应方发送第一消息，第一消息为封装有建议载荷的SA载荷，建议载荷中包含有抗量子算法标识的变换载荷；响应方向发起方发送第二消息，所述第二消息为响应方接受的SA载荷，以及响应方的抗量子签名密钥、加密密钥的证书载荷；发起方和响应方交换数据，形成第三消息和第四消息，所述第三消息和第四消息包括nonce和身份标识ID载荷，均采用临时密钥Sk进行国密对称算法进行加密保护，并各自使用抗量子签名密钥进行签名；发起方与响应方交换经国密对称算法加密的鉴别数据，形成第五消息和第六消息，并使用对方的抗量子签名密钥进行签名验证。提供抵抗量子计算威胁的安全网络通信。

一种基于融合累加与递归分治的格密码多项式运算加速方法、系统及存储介质

Resumen de: CN122513081A

0001 本发明属于后量子密码学与信息安全技术领域，涉及一种基于融合累加与递归分治的格密码多项式运算加速方法、系统及存储介质，包括，获取待运算多项式，对多项式运算类型进行判定，根据判定结果，选择对应的运算方法，生成对应类型的合成长多项式，合成长多项式被连续写入共享累加缓冲区；从共享累加缓冲区读取合成长多项式，进行多项式折叠与模约减，生成多项式运算结果分量，并将多项式运算结果分量输出至下一级存储单元。本发明解决了现有传统矩阵‑向量乘法中，每次子多项式相乘后立即进行模约减和折叠，导致极高的内存读写带宽消耗和冗余算力开销与现有NTT加速方案严格受限特定模数结构，算法敏捷性差的技术问题。

Content delivery network (CDN) back-to-source method, system and equipment with enhanced security and storage medium

Resumen de: CN122496227A

The invention provides a security-enhanced CDN back-to-source method, system and device and a storage medium, and relates to the technical field of communication, and the method comprises the steps: generating a link fingerprint based on the physical layer characteristics of a quantum channel, so as to carry out the identity authentication of the quantum channel; after the identity authentication is passed, dynamically selecting an encryption strategy through a multi-target reinforcement learning model according to the state of the quantum channel and the security level of the to-be-back-to-source data; when a quantum encryption strategy is selected, dividing data to be back to a source into a control frame and a data frame, encrypting the control frame by adopting a one-time pad encryption mode, and encrypting the data frame by adopting a key negotiated by an anti-quantum algorithm to generate a hybrid ciphertext packet; and transmitting the hybrid ciphertext packet through a quantum channel. Through quantum channel construction, dynamic encryption strategy selection and frame-level hybrid encryption, quantum security enhancement of CDN back-to-source traffic is realized, quantum computing attacks are effectively resisted, and back-to-source transmission security is improved.

Anti-interference power time synchronization method and system fusing quantum random number and atomic clock timekeeping

Resumen de: CN122496138A

The invention relates to the technical field of time synchronization of a power system, in particular to an anti-interference power time synchronization method and system fusing a quantum random number and atomic clock timekeeping, and the method comprises the steps: generating a PTP message anti-counterfeiting mark based on the quantum random number and a local timestamp of a main clock, and completing anti-replay authentication; processing an original time deviation sequence of the PTP message based on a QNR model, calculating an absolute deviation value for each deviation, eliminating delay jitter and interference outliers through adaptive weighted filtering, and outputting an optimal estimation time deviation; a phase and frequency deviation real-time monitoring model and an atomic clock frequency drift prediction model are established, soft switching between a time service mode and a time keeping mode is completed based on the models, and seamless time keeping during external signal loss and recovery is achieved; multi-source data fusion is carried out, and global unified time signals are output through extended Kalman filtering, so that the anti-attack and anti-interference capabilities and the punctuality continuity of the power time synchronization system are effectively improved.

Anti-quantum symmetric cipher migration method and system

Resumen de: CN122496201A

The invention discloses an anti-quantum symmetric cryptography migration method and system, and belongs to the technical field of information security, and the method comprises the steps: determining the number of cascading rounds and a cascading mode according to a security target and hardware performance; partitioning the plaintext, filling and endowing the plaintext with a unique grouping ID; an operation core is configured according to a cascading mode, a working key is dynamically or statically distributed for each group, cascading encryption is executed in parallel in a pipeline mode, and input, parallel processing and ciphertext group output are synchronously completed in each clock period; recombining the ciphertext, generating a cascade integrity verification code by using the encrypted intermediate state sampling value, and packaging and sending the cascade integrity verification code; and the decryption end reproduces the key sequence according to the synchronization parameter, carries out decryption by using a symmetric and opposite configuration reverse pipeline, and outputs a plaintext or triggers abnormity after comparing the integrity verification code. According to the method, the quantum attack resistance is improved, meanwhile, high performance is kept, smooth migration and dynamic adjustment and optimization during operation are supported, and the engineering transformation cost and compliance risk are reduced.

Coprocessor for post quantum cryptographic operation and computing equipment

Resumen de: CN122496199A

The invention discloses a coprocessor and computing equipment for post-quantum cryptography operation, and belongs to the technical field of post-quantum. The coprocessor is connected with a main processor and used for converting an expansion instruction in a bus signal transmitted by the main processor into a control signal; and according to the control signal and the corresponding read-write request, the to-be-calculated data is read from the storage module and fed back to the calculation module, so that the calculation module reads various operation parameters required by the post quantum cryptographic operation from the special function register, and then the post quantum cryptographic operation is performed on the to-be-calculated data to obtain an operation result. The coprocessor provided by the invention provides efficient computing power for the main processor, and after-quantum cryptography operation can be carried out only based on the extended instruction set provided by the main processor for a post-quantum cryptography operation scene with high computing complexity on the premise of not occupying computing resources of the main processor; and high-timeliness, low-power consumption, low-overhead and high-security post quantum cryptography hardware acceleration is realized.

집적 양자 키 분배 송신기

Resumen de: EP4572187A1

0001 The present invention relates to a transmitter (1000) for a BB84 protocol, comprising a laser (1100) configured to generate a first light pulse (P<1>) having a first duration (T), a modulator (1200) configured to modulate an intensity of the first light pulse (P<1>) so as to obtain a second light pulse (P<2>) having a second duration (T) smaller than the first duration (T) and/or a third light pulse (P<3>) having a third duration (T) smaller than the first duration (T). Further embodiments relate to methods for operating the transmitter (1000).

High-speed quantum random number implementation system based on multi-source fusion

Resumen de: CN122496203A

The invention relates to the field of quantum information, and discloses a high-speed quantum random number implementation system based on multi-source fusion. The invention provides a high-speed, high-quality and high-security random number generation method by integrating various random number sources, particularly true random numbers generated by a quantum chip and combining priority scheduling, automatic switching and multi-source combination strategies. The method is suitable for application scenes with strict requirements on random number quality, such as quantum key distribution, secure communication, financial encryption and the like. Compared with the prior art, unified management and intelligent scheduling of various random number sources are realized; high availability of the system is ensured through priority configuration and an automatic switching mechanism; multi-source combination and key derivation function (KDF) processing are utilized to improve the quality and security of the random number; and a uniform API interface is provided, so that external application integration and use are facilitated.

Data processing method and related device

Resumen de: CN122496185A

The invention discloses a data processing method and a related device, and relates to the technical field of quantum encryption, after an identity verification instruction generated by a first application is detected, an information input interface provided by a trusted application can be displayed, and after a user inputs first identity information, the trusted application can be displayed; and if yes, encrypting the first identity information by using the first hybrid encryption algorithm and the first quantum random number to obtain a first ciphertext, and sending the first ciphertext to the first server for identity verification. And the first hybrid encryption algorithm comprises a post-quantum encryption algorithm, so that the obtained first ciphertext can resist attack of a quantum computer, and the security of using the first application by the user can be ensured.

Quantum security digital asset object number fusion terminal, system, method and medium

Resumen de: CN122496187A

The invention discloses an object number fusion terminal, system and method of quantum security digital assets and a medium, and belongs to the crossing field of quantum information technology, financial science and technology and information security. The terminal comprises a shell, a processor and a security chip, the interior of the security chip is divided into an entropy source acquisition area and a security calculation area which are isolated by hardware; a quantum random number generation unit, a physical unclonable function unit and a biological characteristic acquisition and living body detection unit are integrated in the entropy source acquisition area; and a security fusion engine is integrated in the security computing area. The terminal triggers a hardware-level global synchronization event in response to an asset generation instruction, and synchronously drives the three units to obtain a quantum random entropy value, a hardware fingerprint entropy value and a living body biological characteristic entropy value; generating an intermediate fusion value through a cryptographic fusion function; obtaining a space-time voucher containing a signature timestamp and geographical location information; and fusing the intermediate fusion value and the space-time voucher to generate a digital asset seed, and further generating a unique identifier of the digital asset. According to the terminal, through hardware-level synchronous triggering and space-time anchoring, deep b

Basic error correction method, quantum key distribution system and storage medium

Resumen de: CN122496204A

The invention discloses a pair base error correction method, a quantum key distribution system and a storage medium, and relates to the technical field of quantum key distribution. The base correction method comprises the following steps: a sending end prepares a quantum optical signal carrying first key information and first sending end base information; the receiving end decodes the quantum optical signal to obtain a first detection result and a second detection result which carry second key information; the receiving end performs base matching on the first detection result and the second detection result to obtain a first base matching result; the sending end carries out base matching on a receiving end measurement base in the first base matching result and first sending end base information to obtain a second base matching result; the receiving end carries out base matching on the second base matching result and the first base matching result; and the sending end obtains a syndrome according to the third key information, and the receiving end performs error correction on the second key information according to the syndrome so as to obtain fourth key information after error correction. According to the base error correction method, the base error correction rate is improved.

METHOD AND SYSTEM FOR APPLYING POST-QUANTUM CRYPTOGRAPHY TO ENHANCE SECURITY OF PRODUCTION AND LOGISTICS DATA IN TERMS OF GLOBAL SUPPLY CHAIN MANAGEMENT

Resumen de: KR20260118575A

0001a 본 개시는 글로벌 공급망 관리 측면에서 생산 및 물류 데이터의 보안성 강화를 위한 양자내성암호 적용 방법 및 그 시스템을 제공한다. 본 개시에서, 품질관리 시스템은, 품질 데이터를 수집하고, 품질 데이터를 양자내성암호 키로 암호화하도록 구성되는 현장 계층 모듈, 품질 데이터를 검증하고, 양자내성암호 키로 품질 데이터에 대해 중간 보안 처리를 수행하도록 구성되는 엣지 계층 모듈, 및 품질 데이터에 대해 고급 분석을 수행하고, 품질 데이터를 통합 보안 관리하도록 구성되는 클라우드 계층 모듈을 포함할 수 있다.

Quantum key management method, system, device and medium

Resumen de: CN122496205A

The invention relates to the technical field of quantum key distribution, in particular to a quantum key management method, system and device and a medium. The first process receives a first message sent by the user terminal, the first message carries first information indicating a service type of a service to be executed by the user terminal and second information indicating a quantum key needing to be acquired, and the service type indicated by the first information belongs to a service type associated with the first process; the first process detects whether response to the first message is supported or not; and under the condition that the first process does not support the response to the first message, the first message is forwarded to the lower layer process layer by layer until the first message is forwarded to the local process supporting the response to the first message so as to support the local process supporting the response to the first message, and obtaining the quantum key from a local adjacent key pool corresponding to the process according to the second information, and sending the quantum key to the user terminal. The time delay is reduced, the response efficiency is improved, and the user experience is improved.

Intelligent network security risk assessment method based on quantum state feature extraction

Resumen de: CN122496198A

The invention belongs to the technical field of quantum computing and network security, is used for solving the problem that a coding process cannot be adaptive to non-semantic change of a field sequence on the basis of keeping quantum coding static realizability in the prior art, and particularly relates to a network security risk intelligent assessment method based on quantum state feature extraction. Comprising the following steps: acquiring a field set of a network data packet; based on the Hash fingerprint and the current phase modulation parameter, executing controlled phase entanglement operation on the main quantum state, and generating an entanglement state containing Hash binding information; performing first measurement on the entangled state to obtain a risk score; performing second measurement on the entangled state to obtain a phase mismatch degree; when the phase mismatch degree exceeds a first preset threshold value, the highest risk level is directly output; according to the method, the field set is mapped into the sequence-independent Hash fingerprints through static standardization processing, so that the possibility that an attacker changes a coding subspace by rearranging fields or inserting redundant fields is eliminated.

대역폭이 증가된 양자 키 분배 시스템 및 방법

Resumen de: EP4550716A1

The present invention relates to a Quantum Key Distribution system comprising an emitter and a receiver adapted to exchange QKD-based key through a service continuity mode comprising: starting (S100) the process and triggering (S101) QKD-based key exchange between the emitter and the receiver, exchanging (S102) a first key K1 between the emitter and the receiver, generating (S103) a second key K2 at the emitter via its QRNG, and encrypting (S104) K2 with K1 as a message C, and send it to the receiver, decrypting (S105) message C with K1 to obtain K2 at the receiver, and delivering (S106, S106') K2 to the respective consumers, characterized in that the QKD exchanged key K1 is a single key with fixed size, and the encrypting and decrypting procedures of K2 are using a symmetric encryption scheme.

METHOD AND APPARATUS FOR CONTROLLING MOBILE QUANTUM KEY DISTRIBUTION FOR MULTI-USER QUANTUM CRYPTOGRAPHY COMMUNICATION

Nº publicación: US20260222188A1 30/07/2026

Solicitante:

QSIMPLUS CO LTD [KR]
QSIMPLUS CO., LTD.

Resumen de: US20260222188A1

0000 A quantum key distribution (QKD) control apparatus may receive, from a first node in a first node group, a request for QKD with a second node in a second node group. The apparatus obtains information about an external QKD control apparatus managing the second node and determines a third node within the first node group that can connect to the second node. By requesting QKD between the second and third nodes through the external control apparatus, a first quantum key is generated. A mobile node is then moved to the third node to generate a first combined key and subsequently to the first node to generate a second combined key, enabling secure key sharing between the nodes.