Quantum Secure Communication Networks:

Transcription

1 QCrypt 2014 Quantum Secure Communication Networks: Products and Solutions Yong Zhao

2 1 Founda2on Ini2ally founded by the university (USTC) and private investors in 2009 Research Lab (USTC) Company (QuantumCTeK)

3 1 Founda2on Ini2ally founded by the university (USTC) and private investors in 2009 Hefei head quarter, three other branches Equip commercial fiber with QKD products Company (QuantumCTeK) Beijing Jinan Hefei Shanghai

4 Why QKD and Q- network Encryptor network Encryptor Encryptor Secure communica2on Tunnel Encryptor Key distribu2on Secure communica2on = Secure encryp2on + Secure key distribu2on

5 Why QKD and Q- network Cryptography at present For de/encrypt For key exchange Symmetric Cryptography AES IDEA Strong RC6 RSA RSA Asymmetric Cryptography ECC ECC Not Strong D- H n RSA512 is broken in 1999 n RSA768 is broken in 2009 n RSA1024 is broken in. n All Asymmetric Cryptography at present can be broken by Shor s quantum algorithm n No asymmetric Cryptography can be uncondi2onal secure

6 Why QKD and Q- network Cryptography at present For de/encrypt For key exchange Symmetric Cryptography AES One IDEA 2me pad? Strong RC6 RSA RSA Asymmetric Cryptography ECC ECC Not Strong D- H n RSA512 is broken in 1999 n RSA768 is broken in 2009 n RSA1024 is broken in. n All Asymmetric Cryptography at present can be broken by Shor s quantum algorithm n No asymmetric Cryptography can be uncondi2onal secure

7 Why QKD and Q- network Quantum key Distribu2on QKD seems to be the most outstanding Candidate for the future key infrastructure Post quantum cryptography achievable Low total cost Quantum Noise Encryp2on achievable Low cost Maybe an2- quantum afack Proved uncondi2onal security An2- quantum afack achievable Low cost

8 The goals: Secure communica2on networks over Quantum key infrastructure Service Applica2on Phone\Video\Data transmit\e- Bank\Smart Grid\... Encryp2on\Authen2ca2on\Signature\... Secure Communica2on networks Key Management QKD network Bofom tech Genera2on\distribu2on\Storage\usage\discard QLAN\QMAN\QWAN QKD Module\Convergence node\trusted Relay Op2cal Switch\Quantum Repeater Key infrastructure

9 The Roadmap of QKD network in China 2006 n World s first Decoy QKD experiment over 100km n Quantum phone network( 3- nodes) p Na2onal Quantum Backbone network (Over 2000km) n World s first Decoy QKD experiment over 200km n All pass Metro- area QKD network (5 nodes) n Hefei Metro- Quantum network(46 nodes) n Jinan Metro- Quantum network (56 nodes,>90users) 7 24 running for 9 month already S N

10 2 Product landscape and design QLAN QMAN QWAN Applica2on All- pass Op2cal Switch n 16 FC- PC op2cal interface n Op2cal loss less than 1.5dB n Ethernet Control interface QKG server Ethernet fiber fiber fiber QKD QKD. Maximally connect 16 QKD terminal QKD

11 2 Product landscape and design QLAN QMAN QWAN Applica2on Terminal QKD transceiver n BB84 Decoy state protocol n Special design for all- pass type QLAN n Higher rate and less cost n Resistant to all known quantum hacker n Fully hardware designed n Op2cal path loss tolerance up to 18dB LD OA VOA VOA OA LD Circulator Circulator EPC Bi- direc2on Quantum Channel EPC Mul2- channel SPD Mul2- channel SPD

12 2 Product landscape and design QLAN QMAN QWAN Applica2on Centralized Control Sta2on n Convergence node and trusted relay in MAN n Time Division Mul2plexing to reduce total- cost

13 2 Product landscape and design QLAN QMAN QWAN Applica2on Why trusted relay? There was a gap between the period of prac:cal Quantum computer and Quantum repeater, meanwhile the trusted relay is the best choice A huge quantum computer like this may be fatal to asymmetric cryptography But a quantum repeater of similar size can not be set up in the most today telecom carrier room

14 2 Product landscape and design QLAN QMAN QWAN Applica2on GHz QKD Module n Design for Backbone QKD network n Op2cal path Loss tolerance up to more than 25dB n Final key rate up to 1Mbps n Fully hardware designed n ATCA adapt n Easy installa2on and maintenance Data process module Single Photon Detector Module

15 2 Product landscape and design QLAN QMAN QWAN Applica2on Quantum Ethernet Encryptor n Integrated design(qkd and Encryptor in one Chassis) n Hardware(FPGA) Encryp2on up to 10Gbps n Key(128bits) refresh rate up to 1000key/s n Ethernet network interface n Comply with Chinese na2onal standards with the cer2ficate QNE- 1000D LAN QNE- 1000D QNE- 1000D LAN

16 2 Product landscape and design QLAN QMAN QWAN Applica2on Quantum VPN n Dual key(ike key and Quantum key) n encryp2on up to 10Gbps(CBC mode) n Key refresh rate up to 100key/s n Ethernet\SFP\XFP network interface n Stackable

17 3 Commercial service case Government applica2on case Government agency 1# GRE Tunnel B J B ranch SDH Link Office Quantum VPN Ethernet swi tch HA Internet (ChinaUnicom) Quantum VPN Ethernet swi tch HA Ethernet swi tch Keep al i ve HA Quantum VPN QKD and KM Client QKD and KM client QKD and KM client QMAN

18 3 Commercial service case Local bank applica2on case

19 3 Commercial service case Backbone Bank applica2on case

20 4 Collabora2on and Market CSRC

21 Thanks for your Website: info.com