Alerta

一种信道窃听监测方法和系统

Resumen de: CN122092984A

本申请提供了一种信道窃听监测方法和系统，其中的方法包括：设置一个控制端，并在待测光通信链路上设置至少两个对测节点；所述控制端与每个对测节点均分别通过待测光通信链路连接；控制端将光量子信号发送给对测节点；对测节点将接收到的光量子信号原路反射回控制端；控制端根据发送和接收到的光量子信号确认控制端与对测节点之间的光通信链路的安全状态。应用本申请可以实现对信道被窃听行为的实时监测。

一种面向天基轨道数据中心的后量子密码安全数据存储与传输系统

Resumen de: CN122093047A

0001 本发明涉及天基数据安全与后量子密码领域，具体公开了一种面向天基轨道数据中心的后量子密码安全数据存储与传输系统，包括：星载终端模块、地面管控模块及星间互联模块；星载终端模块配置轻量化后量子密码处理单元，采用裁剪后的格基后量子密码算法，结合数据分层存储、动态算法切换及抗辐射分片存储；星间互联模块通过ML‑KEM算法实现密钥协商，星地链路采用混合加密架构；地面管控模块负责密钥管理与数据验证。本发明有效解决了天基资源受限、极端环境及链路不稳定的问题，实现在轨数据抗量子安全存储与传输，提升系统可靠性与适配性。

Quantum security parallelizable message authentication code construction method and system

Resumen de: CN122073527A

The invention discloses a parallel message authentication code construction method and system for quantum security. The method comprises the following steps: 1) selecting an adjustable block cipher algorithm key K, nonlinear transformation theta and the length tau of a message identification code by a participant; 2) the sender executes an MAC generation scheme, takes the key K, the temporary value N and the message M as input, outputs a message identification code and sends the message identification code to the receiver; the flow of the MAC generation scheme is as follows: a) dividing a message M into a plurality of n-bit groups; b) encrypting the ith group Mi by using an algorithm, and inputting theta to obtain a state Si after the output and the state Si-1 are subjected to XOR; c) intercepting the leftmost side tau bit of the state Sm corresponding to the last group as a message identification code; and 3) the receiver executes an MAC verification scheme, and verifies whether (MAC, M) is correct or not by taking the key K, the temporary value N, the message M and the message authentication code MAC as input.

Key generation method, device and system

Resumen de: CN122073531A

The invention provides a key generation method, device and system, and relates to the technical field of networks. A first application device determines a negotiation key by performing key negotiation with a second application device. The first application device generates a target key based on the seed key and the key-derived function parameter value using the key-derived function. And the first application device encrypts key context information by using the negotiation key to obtain a key context information ciphertext, the key context information comprising a key derived function parameter value. And the first application device sends a key generation request message to the second application device, wherein the key generation request message comprises the key context information ciphertext. The key generation request message is used for requesting the second application equipment to generate a target key. The two communication parties can automatically generate the same target key. The key context information used for generating the target key is transmitted after being symmetrically encrypted by adopting the negotiation key, so that anti-quantum security in the target key generation process can be realized.

QUANTUM SECURE COMMUNICATION PROTOCOL AND DEVICE BASED ON DOUBLE-HELIX STRUCTURE COMPOSITE MULTI-LAYER ENCODING

Resumen de: WO2026106645A1

A method for secure quantum communication includes generating a photon. The method includes modulating at least two quantum state dimensions selected from the group consisting of orbital angular momentum (OAM), polarization, and phase of the photon to form a composite quantum state. The method includes directing the photon to an emission point on a helical structure having a defined spatial coordinate corresponding to classical data. The method includes emitting the photon from the emission point into a quantum channel. The composite quantum state and spatial coordinate together encode secure information.

METHOD APPARATUS SYSTEM AND COMPUTER PROGRAM FOR ROUTING QUANTUM KEY

Resumen de: KR20260073135A

0001a 본 발명은 양자키 라우팅 방법, 장치 및 컴퓨터 프로그램에 대한 것으로서, 보다 구체적으로 본 발명에서는, 컴퓨팅 장치를 이용하여, 시작 노드, 중간 노드 및 상기 시작 노드와 인접하지 않는 목적 노드를 포함하는 복수의 노드와 상기 노드를 연결하는 복수의 링크를 포함하여 구성되는 양자 암호 통신 네트워크에서 양자키 중계 경로를 라우팅하는 방법으로서, 미리 정해진 하나 이상의 척도를 기초로 아래의 후보 경로 중 하나 이상을 산출하는 단계; (i) 상기 시작 노드로부터 상기 목적 노드 방향으로 상기 노드를 연결하는 하나 이상의 링크가 순차적으로 선택되어 산출되는 정방향 후보 경로, (ii) 상기 목적 노드로부터 상기 시작 노드 방향으로 상기 노드를 연결하는 하나 이상의 링크가 순차적으로 선택되어 산출되는 역방향 후보 경로, (iii) 상기 중간 노드 또는 상기 중간 노드와 연결되는 링크 중 하나로부터, 상기 시작 노드 방향으로 하나 이상의 링크가 순차적으로 선택되고, 또한 상기 목적 노드 방향으로 하나 이상의 링크가 순차적으로 선택되어 산출되는 양방향 후보 경로, 및 상기 산출된 하나 이상의 후보 경로를 이용하여 상기 시작 노드와 상기 목적 노드에 대한 양자키 중계 경로를 도출하는 단계를 포함�

DERIVED UNIQUE KEY PER HASH ENCAPSULATED ENCRYPTED TRANSACTION (DUKPHEET)

Resumen de: US20260142830A1

0000 The arrangements disclosed herein relate to generating, by a first server, a first seed using a Hash-Based Message Authentication Code (HMAC) based at least in part on a Hash Key (HK), providing, by the first server to each of a first device and a second device, the first seed, providing, by a second server to each of the first device or the second device, a second seed. The second seed is based at least in part on a stream of photons. Each of the first device or the second device generates a Derived Key (DK) based at least in part on the first seed and the second seed. Each of the first device or the second device generates a first key based at least in part on the DK and a first random number generated by a Quantum Random Number Generator (QRNG). The first device encrypts first data using the first key to obtain first ciphertext and provides the first ciphertext to the second device. The second device derives the first key and decrypts the first ciphertext using the first key.

IDENTITY AUTHENTICATION METHOD AND SYSTEM

Resumen de: WO2026103126A1

The present application relates to an identity authentication method and system. The method comprises: a claimant determining an asymmetric digital signature algorithm and a post-quantum digital signature algorithm; generating an algorithm identifier corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm; acquiring a time-varying parameter, and generating signature data on the basis of the time-varying parameter and an identifier of a verifier; using the asymmetric digital signature algorithm to perform signing on the signature data, so as to obtain a first signature; using the post-quantum digital signature algorithm to perform signing on the signature data, so as to obtain a second signature; on the basis of the algorithm identifier, the signature data, the first signature and the second signature, generating an identity authentication string; and sending the identity authentication string to the verifier, so as to instruct the verifier to perform identity authentication on the basis of the authentication string. On the basis of conventional asymmetric cryptographic identity authentication, the method introduces a post-quantum digital signature algorithm capable of resisting quantum computation, thereby enhancing the security of two communicating parties during identity authentication and being able to resist quantum threats to a certain extent.

SYSTEM AND METHOD FOR ENCODING AND CORRECTING BB84 PROTOCOL POLARISATION STATES

Resumen de: EP4746338A1

The present invention relates to a system for encoding and correcting BB84 protocol polarisation states that implements a method for measuring polarisation error based on performing said measurement prior to the information transmission step, applicable to any system where quantum key distribution (QKD) is to be implemented.

REVEALING UNIT, COMPUTING SYSTEM AND METHOD FOR REVEALING BLINDING ATTACKS

Resumen de: EP4746337A1

A revealing unit (100) for revealing a blinding attack in a computing system (102), preferably in a Quantum Key Distribution system, is described. The revealing unit (100) comprising a revealing nanowire (104); wherein the revealing unit (100) is configured, in the event of a blinding attack, to change from a secure state to a reveal state by changing an electrical characteristic of the revealing nanowire (100) to reveal the blinding attack.

METHOD FOR DETERMINING EXISTENCE OF WIRETAPPER ON QUANTUM CHANNEL OF QUANTUM CRYPTOGRAPHY COMMUNICATION SYSTEM BY USING TDC AND QUANTUM CRYPTOGRAPHIC KEY DISTRIBUTION APPARATUS THEREFOR

Resumen de: EP4746340A1

A receiver device for a quantum key distribution system is disclosed, comprising: a detection device configured to detect a quantum signal transmitted through a quantum channel and output a data signal corresponding to the detected quantum signal; and a TDC configured to measure a generation time difference between a generation time of a first encoding pulse included in the data signal and a generation time of a first reference pulse included in a predetermined reference timing signal. If the measured generation time difference deviates from a predetermined threshold range, it is determined that an eavesdropper is present on the quantum channel.

Power transmission line extreme disaster early warning system and method based on quantum enhanced sensing

Resumen de: CN122067374A

The invention provides a power transmission line extreme disaster early warning system and method based on quantum enhanced sensing. The system comprises a quantum sensing microsystem, an unmanned aerial vehicle verification system and an intelligent early warning platform. Wherein the quantum sensing microsystem comprises a quantum illumination radar module, a superconducting single-photon detector, an NV color center sensor and a quantum signal processing unit; the unmanned aerial vehicle system comprises an unmanned aerial vehicle platform, a quantum communication terminal and a multispectral verification module; the intelligent early warning platform comprises a quantum AI analysis device and a multi-dimensional display control and disaster early warning device. The quantum sensing microsystem generates entangled photon pairs through a quantum entangled source, and realizes extremely weak signal detection by using a quantum illumination technology; the unmanned aerial vehicle system transmits verification data to a back-end platform through a quantum encryption channel; and the intelligent early warning platform performs fusion analysis on multi-source data by adopting a quantum machine learning algorithm to realize early warning of extreme disasters.

一种量子安全设备终端离线获取预置根密钥的方法及系统

Resumen de: CN122069028A

本申请公开了一种量子安全设备终端离线获取预置根密钥的方法及系统，所述方法包括：量子安全设备终端基于自身的硬件编号，经由网络通信设备向根密钥服务器发起注册申请；根密钥服务器基于所述注册申请为所述量子安全设备终端生成根密钥文件，并利用加密密钥对所述根密钥文件加密，将根密钥密文经由中间介质离线下发至量子安全设备终端；量子安全设备终端执行身份认证操作，以获取根密钥密文的解密密钥；量子安全设备终端使用接收到的解密密钥对根密钥密文执行解密操作，得到明文状态的根密钥文件，并进行本地存储。本发明通过环环相扣、纵深防御的根密钥安全获取体系，确保量子安全设备终端在入网初始化过程中的安全性、可靠性与可控性。

基于多重量子熵源的物联网安全芯片、安全认证方法、设备以及系统

Resumen de: CN122069027A

0001 本发明公开了基于多重量子熵源的物联网安全芯片、安全认证方法、设备以及系统，包括：静态预置量子熵单元；动态实时量子熵源电路；熵源融合与管理单元；其中，所述熵源融合与管理单元被配置为支持至少两种操作模式：（A）基础服务模式：基于所述静态预置量子熵单元的输出生成设备标识，或基于所述动态实时量子熵源电路的输出提供真随机数；（B）融合绑定模式：利用所述静态预置量子熵单元的输出作为设备绑定参数，对所述动态实时量子熵源电路的输出进行密码学处理，生成设备唯一绑定的密码材料；该芯片架构实现了设备身份与密码随机性的硬件级绑定，兼具高安全性、灵活配置和成本可控的优点，为构建海量、可信的物联网提供了理想的硬件信任根。

Network security emergency management system and method based on multi-source data fusion

Resumen de: CN122069075A

The invention discloses a network security emergency management system and method based on multi-source data fusion, and relates to the technical field of network security, the system comprises a collaboration server and an execution layer, the collaboration server is composed of a sensing module, a decision module, an identification module and a feedback module, the sensing module is used for data acquisition and unification, and the decision module is used for decision making; the decision-making module constructs a risk prediction model based on information collected by the sensing module, the identification module is used for dynamic threat detection, the feedback module is used for monitoring prediction deviation, disposal efficiency and synthetic data reliability, and the execution layer is used for receiving and executing information and instructions transmitted by a cooperative server. According to the method, the unified data model is designed and constructed, so that the function of efficiently accessing the multi-source data is realized, the problems that the multi-source data is difficult to unify, an identification blind area exists and low-quality data interference exists are solved, the time sequence consistency of the multi-source data can be ensured, the system false alarm rate is reduced, and the key information retention rate is improved.

양자 키 분배에서의 초기 지연 시간 단축

Resumen de: EP4510498A1

0001 The present invention relates to a QKD communication method between an emitter and a receiver comprising the steps of distilling a secret key through a Privacy Amplification characterized in that the PA size is variable so as to ramp up from a first lower value to an end greater value.

対策出力方法、対策出力装置及びプログラム

Resumen de: US20260205492A1

A measures output method is to be executed by a computer. The measures output method includes: obtaining respective importance levels of a plurality of partitions for separating a plurality of functional sections to be mounted on a vehicle, the plurality of functional sections including a first partition to which a first functional section at a source belongs, and a second partition to which a second functional section at a destination belongs; determining a security measure for a communication from the first functional section to the second functional section based on a first importance level of the first partition and a second importance level of the second partition; and outputting information on the security measure determined.

一种基于相干光通信的通密一体的密钥分发系统及方法

Resumen de: CN122053041A

本发明属于但不限于光学密钥分发技术领域，公开了一种基于信道互易性和相干光通信的通密一体的密钥分发系统及方法，利用扰偏器使时变的解偏振算法的抽头系数快速变化，进而提升密钥生成速率，并与信道互易特性相结合并运用于安全密钥分发中。本发明密钥分发和安全相干光通信可同时进行。在信号接收模块数字信号处理时：一方面进行密钥生成，另一方面进行安全光通信。通过信道的动态互易性来保证合法双方获取一致密钥，通过信道互易性和时变的正交偏振态的互相扰动保障安全性。系统无需添加额外的器件，与当前的相干通信系统高度兼容，从而可以降低密钥分发模块部署的成本。

基于嵌入式量子随机数生成器的光学装置

Resumen de: EP4745755A1

Systems and methods are provided for implementing and utilizing embedded quantum random number generator (QRNG) based devices. An optical device configured for use in quantum random number generation may have an integrated structure that includes, at least, an optical source configured to emit a light beam, a photodetector configured to detect light based on detection criteria, and a polarizer disposed between the optical source and the photodetector. The optical source, the photodetector, and the polarizer are directly integrated or embedded into the integrated structure. The polarizer is configured to process light based on polarization criteria that include passing or discarding light having a particular polarization. The optical device is configured for use in facilitating or enabling quantum random number generation based on detection of the light beam by the photodetector based on the detection criteria.

通信装置、通信方法、及び通信システム

Resumen de: US20260121844A1

It is an object of the present disclosure to appropriately perform quantum key distribution through an optical wavelength division multiplexing link. There is provided a communication apparatus that communicates an optical signal based on an electrical signal obtained by multiplexing a first control signal addressed to a second optical communication apparatus from a first optical communication apparatus and a control signal for reception signal processing from a first quantum key distribution apparatus to a second quantum key distribution apparatus.

OPTICAL PATH MONITORING APPARATUS AND PROCESS

Resumen de: US20260135617A1

0000 An optical path monitoring process, including the following steps executed by a first node of an optical network: (i) generating photons that are at least partially indistinguishable in frequency, polarization, spatial mode and temporal profile; (ii) transmitting a first photon of the generated photons to a remote node of the optical network over an optical path; (iii) receiving the first photon from the remote node over an optical path; and (iv) interfering the received first photon with a second photon of the generated photons to generate a quantum interference visibility output; and (v) assessing physical integrity of the optical path(s) on the basis of the quantum interference visibility output.

SYSTEMS AND METHODS FOR SECURE UTILIZATION OF QUICK RESPONSE CODES

Resumen de: US20260134246A1

0000 Systems, apparatuses, methods, and computer program products are disclosed for secure utilization of quick response (QR) codes. An example method includes obtaining a key known to an initiating device and a participating device, and receiving, by the communications hardware of the participating device, an indication of a secure character string extracted from a QR code. The example method further includes verifying, by security circuitry of the participating device and using the key, authenticity of the QR code, and performing by the participating device, an action set.

DRONE ELECTRONIC MESH FOR ONLINE NETWORK SERVICES (DEMONS) IMPLEMENTING CRYPTOGRAPHIC OPERATIONS

Resumen de: US20260135915A1

0000 The arrangements disclosed herein relate to systems, apparatus, methods, and non-transitory computer readable media for a network of plurality of roving cryptography devices. Each of the plurality of roving cryptography devices includes a locomotion system configured to move each of the plurality of roving cryptography devices to a respective one of a plurality of locations of the plurality of roving cryptography devices, a network interface circuit configured to provide wireless communication services to a user device of a plurality of user devices through a network of the plurality of roving cryptography devices, and a cryptography service system configured to provide cryptographic material to the user device. The plurality of roving cryptography devices at the plurality of locations form the network for providing the wireless communication services and the cryptographic materials to the plurality of user devices.

SYSTEM AND METHOD FOR PREDICTION AND MITIGATION OF A RISK EVENT

Resumen de: US20260134372A1

0000 A system for predicting and mitigating risk events is disclosed. The system includes data acquisition devices that collect first and second data sets associated with a geographical location and transmit them to a risk event mitigation server device. The risk event mitigation server device executes a dynamic threat mitigation module to generate weighted risk indicators, analyze their convergence and divergence, and compute a first risk score. A continuous automated red teaming module simulates risk events using artificial intelligence, while a machine learning adaptation module refines the score using real and simulated data to produce a second risk score. An orchestrator integrates outputs to generate mitigation recommendations, secured by a post-quantum encryption framework. A user device displays the updated risk score and recommendations and provides feedback. A recursive feedback loop continuously adjusts indicator weights based on user actions and new data, enabling adaptive, real-time risk assessment and mitigation.

Autonomous Quantum-Secure Mesh Networking System

Nº publicación: US20260135840A1 14/05/2026

Solicitante:

DSOUZA RICHARD [CA]
D'Souza Richard

Resumen de: US20260135840A1

0000 The present disclosure provides an autonomous quantum-secure mesh networking system comprising a server including a memory and a processor operatively coupled to the memory. The processor receives communication data from at least one computing device for secure transmission across a communication network, generates a symmetric quantum encryption key using a quantum key distribution process, derives a quantum identity-bound key material by combining the symmetric quantum encryption key with a quantum identity root for authenticating communication endpoints, evaluates a trust score of each available transmission path using a trust model to select a secure transmission path, encrypts communication data and associated session metadata using the symmetric quantum encryption key, records an identifier of each encrypted packet and at least one trust-related parameter of the secure transmission path on a blockchain-based distributed ledger and transmits the encrypted communication data across the selected secure transmission path.