Communication method for quantum security and communication device supporting the same
There is provided a communication device. The communication device may comprise one or more processors; a communication interface; and a memory that stores a computer program executed by the one or more processors, wherein the computer program includes instructions for operations of: forming a general security channel according to a first transport layer security (TLS) protocol that does not support a post-quantum cryptography algorithm with another communication device; forming a communication channel of an application layer (L 7 ) with another communication device through the general security channel; forming a quantum security channel by performing a handshake procedure according to a second TLS protocol that supports the post-quantum cryptography algorithm with another communication device through the communication channel; and communicating with another communication device through the quantum security channel.
1 . A communication method for quantum security performed by a first communication device, the communication method comprising:
forming a general security channel according to a first transport layer security (TLS) protocol that does not support a post-quantum cryptography algorithm with a second communication device;
forming a communication channel of an application layer L 7 with the second communication device through the general security channel;
forming a quantum security channel by performing a handshake procedure according to a second TLS protocol that supports the post-quantum cryptography algorithm with the second communication device through the communication channel; and
communicating with the second communication device through the quantum security channel,
wherein an intermediate communication device that supports only the first TLS protocol among the first TLS protocol and the second TLS protocol exists in a network section between the first communication device and the second communication device, and
wherein the intermediate communication device is a device belonging to a layer L 5 or higher.
2 . The communication method of claim 1 , wherein the forming of the communication channel includes forming the communication channel by performing a handshake procedure according to a web socket protocol.
3 . The communication method of claim 1 , wherein the first communication device is a client device that uses a web service through a web browser,
the second communication device is a server device that provides the web service, and
at least some of data exchanged between the web browser and the second communication device is exchanged through the quantum security channel.
4 . The communication method of claim 3 , wherein a module supporting the second TLS protocol is implemented as a web assembly or a plug-in for the web browser and is installed in the first communication device.
5 . The communication method of claim 1 , wherein the first communication device is a client device that uses a service through an app,
the second communication device is a server device that provides the service, and
at least some of data exchanged between the app and the second communication device is exchanged through the quantum security channel.
6 . The communication method of claim 1 , wherein the forming of the communication channel includes:
determining whether or not the intermediate communication device that supports only the first TLS protocol among the first TLS protocol and the second TLS protocol exists in the network section between the first communication device and the second communication device; and
initiating a handshake procedure for forming the communication channel based on determining that the intermediate communication device exists.
7 . The communication method of claim 6 , wherein the determining of whether the intermediate communication device exists includes determining that the intermediate communication device exists, when the general security channel according to the first TLS protocol is formed as a result of performing a handshake procedure according to the second TLS protocol with the second communication device.
8 . The communication method of claim 1 , wherein the communicating with the second communication device includes transmitting target data to the second communication device through the quantum security channel based on a determination that the target data corresponds to predefined important data.
9 . A communication device comprising:
one or more processors;
a communication interface; and
a memory that stores a computer program executed by the one or more processors,
wherein the computer program includes instructions for operations of:
forming a general security channel according to a first transport layer security (TLS) protocol that does not support a post-quantum cryptography algorithm with a second communication device;
forming a communication channel of an application layer (L 7 ) with the second communication device through the general security channel;
forming a quantum security channel by performing a handshake procedure according to a second TLS protocol that supports the post-quantum cryptography algorithm with the second communication device through the communication channel; and
communicating with the second communication device through the quantum security channel,
wherein an intermediate communication device that supports only the first TLS protocol among the first TLS protocol and the second TLS protocol exists in a network section between the communication device and the second communication device, and
wherein the intermediate communication device is a device belonging to a layer L 5 or higher.
10 . The communication device of claim 9 , wherein the operation of forming of the communication channel includes an operation of forming the communication channel by performing a handshake procedure according to a web socket protocol.
11 . The communication device of claim 9 , wherein the communication device is a client device that uses a web service through a web browser,
the second communication device is a server device that provides the web service, and
at least some of data exchanged between the web browser and the second communication device is exchanged through the quantum security channel.
12 . The communication device of claim 11 , wherein a module supporting the second TLS protocol is implemented as a web assembly or a plug-in for the web browser and is installed in the communication device.
13 . The communication device of claim 9 , wherein the communication device is a client device that uses a service through an app,
the second communication device is a server device that provides the service, and
at least some of data exchanged between the app and the second communication device is exchanged through the quantum security channel.
14 . The communication device of claim 9 , wherein the operation of forming of the communication channel includes:
an operation of determining whether or not the intermediate communication device that supports only the first TLS protocol among the first TLS protocol and the second TLS protocol exists in the network section between the communication device and the second communication device; and
an operation of initiating a handshake procedure for forming the communication channel based on determining that the intermediate communication device exists.
15 . The communication device of claim 14 , wherein the operation of determining of whether the intermediate communication device exists includes an operation of determining that the intermediate communication device exists, when the general security channel according to the first TLS protocol is formed as a result of performing a handshake procedure according to the second TLS protocol with the second communication device.
16 . The communication device of claim 9 , wherein the operation of communicating with the second communication device includes an operation of transmitting target data to the second communication device through the quantum security channel based on a determination that the target data corresponds to predefined important data.
17 . A non-transitory computer-readable record medium storing a computer program coupled to a first communication device, the computer program being executable by at least one processor to execute operations of:
forming a general security channel through a first transport layer security (TLS) protocol that does not support a post-quantum cryptography algorithm with a second communication device;
forming an application communication channel by performing a handshake procedure according to a communication protocol of a layer 7 with the second communication device through the general security channel;
forming a quantum security channel by performing a handshake procedure according to a second TLS protocol that supports the post-quantum cryptography algorithm with the second communication device through the application communication channel; and
communicating with the second communication device through the quantum security channel,
wherein an intermediate communication device that supports only the first TLS protocol among the first TLS protocol and the second TLS protocol exists in a network section between the first communication device and the second communication device, and
wherein the intermediate communication device is a device belonging to a layer L 5 or higher.