Granted Patent B1

US 12,200,114 · App. 17/451,800 · Granted Jan 14, 2025

Inventor: Jeff J. Stapleton (O'Fallon, MO)

Assignee: Wells Fargo Bank, N.A.

H04L9/0852H04L9/0825H04L9/0861

Abstract

Claims (83)

1. A method for mobile quantum key distribution, the method comprising:

establishing, by communications hardware of a mobile quantum key distribution (MQKD) device when located at a first location of a first device, a first connection between the MQKD device and the first device;

determining, by quantum analysis circuitry of the MQKD device, whether the first device is quantum-enabled;

generating, by entangled particles generation hardware of the MQKD device, a pair of entangled particles;

injecting, by the communications hardware of the MQKD device when located at the first location, first quantum data that is based on a first particle of the pair of entangled particles into the first device via the first connection between the MQKD device and the first device, wherein injecting the first quantum data into the first device comprises:

in response to determining that the first device is quantum-enabled:

transmitting, by the communications hardware of the MQKD device, the first particle of the pair of entangled particles to the first device, or

in response to determining that the first device is not quantum-enabled:

generating, by a secure key generator of the MQKD device, a first secure key based on the first particle of the pair of entangled particles; and

transmitting, by the communications hardware of the MQKD device, the first secure key to the first device;

establishing, by the communications hardware of the MQKD device when located at a second location of a host device, a second connection between the MQKD device and the host device; and

injecting, by the communications hardware of the MQKD device when located at the second location, second quantum data that is based on a second particle of the pair of entangled particles into the host device via the second connection between the MQKD device and the host device to facilitate secure communication between the host device and the first device based at least on the pair of entangled particles.

2. The method of claim 1 , further comprising:

determining, by quantum analysis circuitry of the MQKD device, whether the host device is quantum-enabled,

wherein, in response to determining that the host device is not quantum-enabled, injecting the second quantum data into the host device comprises:

generating, by a secure key generator of the MQKD device, a second secure key based on the second particle of the pair of entangled particles; and

transmitting, by the communications hardware of the MQKD device, the second secure key to the host device, and

wherein, in response to determining that the host device is quantum-enabled, injecting the second quantum data into the host device comprises transmitting, by the communications hardware of the MQKD device, the second particle of the pair of entangled particles to the host device.

3. The method of claim 1 , further comprising:

generating, by recordation circuitry of the MQKD device, a log file relating to the injection of the first quantum data into the first device and the injection of the second quantum data into the host device.

4. The method of claim 1 , further comprising:

receiving, by the communications hardware of the MQKD device, and in response to injecting the first quantum data into the first device, a first key check value from the first device, wherein the first key check value is based on the first quantum data;

receiving, by the communications hardware of the MQKD device and in response to injecting the second quantum data into the host device, a second key check value from the host device, wherein the second key check value is based on the second quantum data;

comparing, by key check value circuitry of the MQKD device, the first key check value and the second key check value; and

determining, by the key check value circuitry of the MQKD device and based on the comparison, whether the first key check value satisfies the second key check value.

5. The method of claim 4 , further comprising, in response to determining that the first key check value does not satisfy the second key check value:

causing, by the communications hardware of the MQKD device, transmission of a warning message indicating a discrepancy between the first key check value and the second key check value.

6. The method of claim 4 , further comprising, in response to determining that the first key check value satisfies the second key check value:

causing, by the communications hardware of the MQKD device, transmission of a confirmation message indicating the first key check value satisfies the second key check value.

7. The method of claim 1 , wherein the MQKD device is embodied by a drone.

8. The method of claim 1 , further comprising:

zeroizing, by a secure key generator, the first quantum data and the second quantum data and cryptographic material related to the first quantum data and the second quantum data at the MQKD device.

9. A mobile quantum key distribution (MQKD) device comprising:

entangled particles generation hardware configured to:

generate a pair of entangled particles;

quantum analysis circuitry configured to:

determine whether a first device is quantum enabled;

a secure key generator configured to:

in response to determining that the first device is not quantum-enabled, generate a first secure key based on the first particle of the pair of entangled particles; and

communications hardware configured to:

establish, when the MQKD device is located at a first location of the first device, a first connection between the MQKD device and the first device;

inject, when the MQKD device is located at the first location, first quantum data that is based on a first particle of the pair of entangled particles into the first device via the first connection between the MQKD device and the first device,

wherein the communications hardware is configured to, in response to determining that the first device is not quantum-enabled, inject the first quantum data into the first device by transmitting the first secure key to the first device, and

wherein the communications hardware is configured to, in response to determining that the first device is quantum-enabled, inject the first quantum data into the first device by transmitting the first particle of the pair of entangled particles to the first device;

establish, when the MQKD device is located at a second location of a host device, a second connection between the MQKD device and the host device; and

inject, when the MQKD device is located at the second location, second quantum data that is based on a second particle of the pair of entangled particles into the host device via the second connection between the MQKD device and the host device to facilitate secure communication between the host device and the first device based at least on the pair of entangled particles.

10. The MQKD device of claim 9 , further comprising:

quantum analysis circuitry configured to:

determine whether the host device is quantum enabled; and

a secure key generator configured to:

in response to determining that the host device is not quantum-enabled, generate a second secure key based on the second particle of the pair of entangled particles,

wherein the communications hardware is configured to, in response to determining that the host device is not quantum-enabled, inject the second quantum data into the host device by transmitting the second secure key to the host device, and

wherein the communications hardware is configured to, in response to determining that the host device is quantum-enabled, inject the second quantum data into the host device by transmitting the second particle of the pair of entangled particles to the host device.

11. The MQKD device of claim 9 , further comprising:

recordation circuitry configured to:

generate a log file relating to the injection of the first quantum data into the first device and the injection of the second quantum data into the host device.

12. The MQKD device of claim 11 , wherein the communications hardware is further configured to cause transmission of the log file to a second device for validation.

13. The MQKD device of claim 9 , wherein the communications hardware is further configured to:

receive in response to injecting the first quantum data into the first device, a first key check value from the first device, wherein the first key check value is based on the first quantum data; and

receive, in response to injecting the second quantum data into the host device, a second key check value from the host device, wherein the second key check value is based on the second quantum data; and

wherein the MQKD device further comprises key check value circuitry configured to:

compare the first key check value and the second key check value; and

determine, based on the comparison, whether the first key check value satisfies the second key check value.

14. The MQKD device of claim 13 , wherein the communications hardware is further configured to, in response to determining that the first key check value does not satisfy the second key check value:

cause transmission of a warning message indicating a discrepancy between the first key check value and the second key check value.

15. The MQKD device of claim 13 , wherein the communications hardware is further configured to, in response to determining that the first key check value satisfies the second key check value:

cause transmission of a confirmation message indicating the first key check value satisfies the second key check value.

16. The MQKD device of claim 9 , wherein the MQKD device is embodied by a drone.

17. The MQKD device of claim 9 , further comprising:

a secure key generator configured to:

zeroize the first quantum data and the second quantum data and cryptographic material related to the first quantum data and the second quantum data at the MQKD device.

18. A mobile quantum key distribution (MQKD) device comprising:

means for establishing, when the MQKD device is located at a first location of a first device, a first connection between the MQKD device and the first device;

means for determining whether the first device is quantum-enabled;

means for generating a pair of entangled particles;

means for injecting, when the MQKD device is located at the first location, first quantum data that is based on a first particle of the pair of entangled particles into the first device via the first connection between the MQKD device and the first device, wherein injecting the first quantum data into the first device comprises:

in response to determining that the first device is quantum-enabled:

transmitting the first particle of the pair of entangled particles to the first device, or

in response to determining that the first device is not quantum-enabled:

generating a first secure key based on the first particle of the pair of entangled particles; and

transmitting the first secure key to the first device;

means for establishing, when the MQKD device is located at a second location of a host device, a second connection between the MQKD device and the host device; and

means for injecting, when the MQKD device is located at the second location, second quantum data that is based on a second particle of the pair of entangled particles into the host device via the second connection between the MQKD device and the host device to facilitate secure communication between the host device and the first device based at least on the pair of entangled particles.

Assignments (1)

References Cited (26)

Cited By (2)

US 12,640,916 US 12,744,682