Method and system for quantum key distribution based on trusted computing
One embodiment described herein provides a system and method for negotiating quantum data keys between first and second entities. During operation, the system performs a mutual authentication between the first and second entities. In response to the mutual authentication succeeding, the first entity receives one or more sets of key-generation parameters from the second entity. In response to validating the sets of key-generation parameters, the first entity sends an acknowledgment message to the second entity, and extracts, from a quantum string shared between the first and second entities, one or more quantum data keys based on the key-generation parameters. A respective quantum data key comprises a number of bits extracted from the quantum string.
1. A computer-implemented method for negotiating quantum data keys between first and second entities, the method comprising:
performing a mutual authentication between the first and second entities;
in response to the mutual authentication succeeding, receiving, by the first entity, one or more sets of key-generation parameters from the second entity;
in response to validating the sets of key-generation parameters, sending an acknowledgment message to the second entity;
extracting, from a quantum string shared between the first and second entities, one or more quantum data keys based on the key-generation parameters, wherein a respective quantum data key comprises a number of bits extracted from the quantum string; and
establishing a quantum-enhanced secure communication channel between the first and second entities.
2. The computer-implemented method of claim 1 , wherein the first and second entities are each equipped with a trusted-computing module, and wherein performing the mutual authentication comprises exchanging a trusted measurement report associated with each of the first and second entities.
3. The computer-implemented method of claim 2 , further comprising storing the extracted quantum data keys within the trusted-computing module.
4. The computer-implemented method of claim 1 , wherein the quantum string shared between the first and second entities is obtained via a quantum key distribution (QKD) process.
5. The computer-implemented method of claim 1 , wherein a respective set of key-generation parameters specifies a plurality of keys having a same length, and wherein the set of key-generation parameters comprises:
a number parameter specifying a number of keys to be generated;
a length parameter specifying a bit length of the to-be-generated keys; and
a position parameter specifying a starting position of an initial to-be-generated key within the quantum string shared between the first and second entities.
6. The computer-implemented method of claim 1 , wherein a respective set of key-generation parameters specifies a single to-be-generated key, and wherein the set of key-generation parameters indicates the length of the single to-be-generated key and the starting position of the single to-be-generated key.
7. The computer-implemented method of claim 6 , wherein the lengths and starting positions of at least two keys are specified such that the two keys partially overlap, thereby resulting in a total number of bits in the extracted quantum data keys being more than a total number of bits in the quantum string shared between the first and second entities.
8. The computer-implemented method of claim 1 , wherein while receiving the one or more sets of key-generation parameters, the first entity is configured to receive a hash function calculated by the second entity based on the key-generation parameters and a shared secret; and
wherein validating the sets of key-generation parameters comprises comparing the received hash function with a hash function calculated by the first entity.
9. The computer-implemented method of claim 1 , wherein sending the acknowledgment message comprises:
calculating a variation of at least one key-generation parameter;
encrypting, using an encryption key, the calculated variation to obtain an encrypted message; and
sending the encrypted message.
10. The computer-implemented method of claim 1 , wherein the received one or more sets of key-generation parameters are encrypted using an encryption key associated with the first entity.
11. The computer-implemented method of claim 1 , wherein the first and second entities belong to a cloud computing system, and wherein the first or second entity comprises one of:
a piece of equipment provided by a cloud provider; and
a piece of equipment provided by a cloud client.
12. The computer-implemented method of claim 11 , wherein the first and second entities each receive a trusted certificate and equipment private key from a trusted authorization center associated with the cloud computing system.
13. The computer-implemented method of claim 12 , further comprising:
sending, by the first entity to the trusted authorization center, an authorization request, wherein the trusted authorization center comprises a plurality of trusted control nodes, and wherein a respective trusted control node maintains a share of a system private key;
receiving from the trusted control nodes a set of subkeys, wherein a respective subkey received from a particular trusted control node is generated based on identity information associated with the first entity, trusted-computing platform information associated with the first entity, and a share of the system private key stored in the particular trusted control node; and
generating an equipment private key specific to the first entity based on the received set of subkeys.
14. A network entity, comprising:
a processor; and
a storage device coupled to the processor and storing instructions which when executed by the processor cause the processor to perform a method for negotiating quantum data keys between the network entity and a second network entity, wherein the method comprises:
performing a mutual authentication between the network entity and the second network entity;
in response to the mutual authentication succeeding, receiving one or more sets of key-generation parameters from the second network entity;
in response to validating the sets of key-generation parameters, sending an acknowledgment message to the second network entity;
extracting, from a quantum string shared between the network entity and the second network entity, one or more quantum data keys based on the key-generation parameters, wherein a respective quantum data key comprises a number of bits extracted from the quantum string; and
establishing a quantum-enhanced secure communication channel between the first and second entities.
15. The network entity of claim 14 , wherein the network entity and the second network entity are each equipped with a trusted-computing module, and wherein performing the mutual authentication comprises exchanging a trusted measurement report associated with each of the network entity and the second network entity.
16. The network entity of claim 15 , wherein the method further comprises storing the extracted quantum data keys within the trusted-computing module.
17. The network entity of claim 14 , wherein the quantum string shared between the network entity and the second network entity is obtained via a quantum key distribution (QKD) process.
18. The network entity of claim 14 , wherein a respective set of key-generation parameters specifies a plurality of keys having a same length, and wherein the set of key-generation parameters comprises:
a number parameter specifying a number of keys to be generated;
a length parameter specifying a bit length of the to-be-generated keys; and
a position parameter specifying a starting position of an initial to-be-generated key within the quantum string shared between the network entity and the second network entity.
19. The network entity of claim 14 , wherein a respective set of key-generation parameters specifies a single to-be-generated key, and wherein the set of key-generation parameters indicates the length of the single to-be-generated key and the starting position of the single to-be-generated key.
20. The network entity of claim 19 , wherein the lengths and starting positions of at least two keys are specified such that the two keys partially overlap, thereby resulting in a total number of bits in the extracted quantum data keys being more than a total number of bits in the quantum string shared between the network entity and the second network entity.
21. The network entity of claim 14 , wherein receiving the one or more sets of key-generation parameters further comprises receiving a hash function calculated by the second network entity based on the key-generation parameters and a shared secret, and
wherein validating the sets of key-generation parameters comprises comparing the received hash function with a hash function calculated by the network entity.
22. The network entity of claim 14 , wherein sending the acknowledgment message comprises:
calculating a variation of at least one key-generation parameter;
encrypting, using an encryption key, the calculated variation to obtain an encrypted message; and
sending the encrypted message.
23. The network entity of claim 14 , wherein the received one or more sets of key-generation parameters are encrypted using an encryption key associated with the network entity.
24. The network entity of claim 14 , wherein the network entity and the second network entity belong to a cloud computing system, and wherein the network entity or the second network entity comprises one of:
a piece of equipment provided by a cloud provider; and
a piece of equipment provided by a cloud client.
25. The network entity of claim 24 , wherein the network entity and the second network entity each receive a trusted certificate and equipment private key from a trusted authorization center associated with the cloud computing system.
26. The network entity of claim 25 , wherein the method further comprise:
sending, by the network entity to the trusted authorization center, an authorization request, wherein the trusted authorization center comprises a plurality of trusted control nodes, and wherein a respective trusted control node maintains a share of a system private key; receiving from the trusted control nodes a set of subkeys, wherein a respective subkey received from a particular trusted control node is generated based on identity information associated with the network entity, trusted-computing platform information associated with the network entity, and a share of the system private key stored in the particular trusted control node; and
generating an equipment private key specific to the network entity based on the received set of subkeys.