Extensible quantum random number generation
Systems, apparatuses, methods, and computer program products are disclosed for securing communications between devices. An example method includes obtaining a quantum random number (QRN) from a remote QRN source using a secure communication channel between the initiating device and the remote QRN source. The QRN may be a true random number. The example method may also include using the QRN to participate in computer implemented services with the participating device that received the QRN from the remote QRN source.
1. A method comprising:
generating, by security circuitry of a first device, authentication data using a quantum random number (QRN);
providing, by the security circuitry of the first device, the authentication data to an authentication service to authenticate the first device;
obtaining, by the security circuitry of the first device, a request from a second device for computer-implemented services from the first device;
providing, by the security circuitry of the first device, an authentication request for the second device to the authentication service in response to the request from the second device;
receiving, by the security circuitry of the first device, an authentication response for the second device from the authentication service as a response to the authentication request; and
sending, by the security circuitry of the first device and to the second device, a response to the request from the second device, wherein, in an instance in which the authentication response indicates that the second device is authenticated, the response to the request from the second device facilitates completion of the computer-implemented services,
wherein, in an instance in which the authentication response indicates that the second device is not authenticated, the response to the request from the second device limits completion of the computer-implemented services.
2. The method of claim 1 , wherein the QRN is distributed to the first device, the second device, and the authentication service via a remote quantum random number (QRN) source.
3. The method of claim 2 , wherein the QRN is distributed by the remote QRN source to the first device over a first secure communication channel, and
wherein the QRN is distributed by the remote QRN source to the second device over a second secure communication channel.
4. The method of claim 3 , further comprising:
establishing, by quantum random number (QRN) management circuitry of the first device, the first secure communication channel between the first device and the remote QRN source; and
obtaining, by the QRN management circuitry of the first device, the QRN from the remote QRN source using the first secure communication channel between the first device and the remote QRN source.
5. The method of claim 3 , wherein the QRN is distributed by the remote QRN source to the authentication service over a third secure communication channel.
6. The method of claim 1 , wherein the authentication response indicates an authentication of the second device based on second authentication data provided to the authentication service by the second device.
7. The method of claim 6 , wherein the second authentication data is generated using the QRN.
8. The method of claim 1 , wherein the authentication data comprises a bit sequence derived from the QRN.
9. The method of claim 1 , wherein the QRN is a true random number.
10. The method of claim 1 , further comprising:
generating, by the security circuitry of the first device and with a portion of the QRN, a symmetric key;
obtaining, by the security circuitry of the first device, encrypted data from the second device;
decrypting, by the security circuitry of the first device with the symmetric key, a portion of the encrypted data to obtain decrypted data; and
performing, by the security circuitry, at least one action for the computer-implemented services based on the decrypted data.
11. A device comprising:
security circuitry configured to:
generate authentication data using a quantum random number (QRN);
provide the authentication data to an authentication service to authenticate the device;
obtain a request from a second device for computer-implemented services from the device;
provide an authentication request for the second device to the authentication service in response to the request from the second device;
receive an authentication response for the second device from the authentication service as a response to the authentication request; and
send, to the second device, a response to the request from the second device, wherein, in an instance in which the authentication response indicates that the second device is authenticated, the response to the request from the second device facilitates completion of the computer-implemented services,
wherein, in an instance in which the authentication response indicates that the second device is not authenticated, the response to the request from the second device limits completion of the computer-implemented services.
12. The device of claim 11 , wherein the QRN is distributed to the device, the second device, and the authentication service via a remote quantum random number (QRN) source.
13. The device of claim 12 , wherein the QRN is distributed by the remote QRN source to the device over a first secure communication channel, and
wherein the QRN is distributed by the remote QRN source to the second device over a second secure communication channel.
14. The device of claim 13 , further comprising quantum random number (QRN) circuitry configured to:
establish the first secure communication channel between the device and the remote QRN source; and
obtain the QRN from the remote QRN source using the first secure communication channel between the device and the remote QRN source.
15. The device of claim 13 , wherein the QRN is distributed by the remote QRN source to the authentication service over a third secure communication channel.
16. The device of claim 11 , wherein the authentication response indicates an authentication of the second device based on second authentication data provided to the authentication service by the second device.
17. The device of claim 16 , wherein the second authentication data is generated using the QRN.
18. The device of claim 11 , wherein the authentication data comprises a bit sequence derived from the QRN.
19. The device of claim 11 , wherein the QRN is a true random number.
20. The device of claim 11 , wherein the security circuitry is further configured to:
generate, with a portion of the QRN, a symmetric key;
obtain encrypted data from the second device;
decrypt, with the symmetric key, a portion of the encrypted data to obtain decrypted data; and
perform at least one action for the computer-implemented services based on the decrypted data.