Distributed Symmetric Key Exchange (DSKE) Network
Distributed Symmetric Key Exchange (DSKE) Network
批准号:
10077122
负责人:
金额:
$57.34万
依托单位国家:
英国
项目类别:
Collaborative R&D
财政年份:
2023
资助国家:
英国
项目状态:
未结题
起止时间:
2023 至 --
中文摘要
加密相关量子计算机(crqc)对网络安全构成严重威胁,因为它们将能够破解目前用于保护互联网通信的大多数非对称加密技术。随着技术的快速发展,为避免巨大的经济损失,向具有量子弹性的密码系统迁移是非常重要的。例如,加拿大的国家量子战略就认识到这一点,其中一项关键任务是“通过国家安全量子通信网络和后量子密码学倡议,确保加拿大人在量子世界中的隐私和网络安全。”然而,目前可用于执行量子安全密钥分发的现有技术,如公钥基础设施(PKI)、量子密钥分发(QKD)和预共享密钥(PSK),在可扩展性和成本效益(QKD和PSK)或安全性(PKI)方面存在局限性。为了解决这些限制,2017年,量子桥引入了分布式对称密钥交换(DSKE)。DSKE实现了像PSK和QKD一样的信息理论上的安全性,但保持了与PKI相似的可伸缩性属性。虽然DSKE的最初开发是基于a)客户端和安全中心之间PSK的交付以及b)秘密共享的概念,但将QKD集成到DSKE中可以实现DSKE基础设施的完全自动化。同时,DSKE和QKD将共同为未来的量子互联网铺平道路。由此产生的系统名为DSKENet,将集成到现有的基础设施中,以最大限度地降低行业采用该技术的成本。该项目旨在通过Quantum Bridge和东芝的合作,将QKD链路(由东芝提供)纳入DSKE系统(由Quantum Bridge提供),将DSKENet推向市场。DSKENet是迈向量子安全通信技术商业化的重要一步。一方面,DSKENet完全消除了crqc带来的威胁,提供了一种解决方案,可以抵御任何经典或量子计算攻击的安全证明。另一方面,DSKENet为建立一个成熟的量子互联网奠定了基础。当量子中继器可用时,它们在DSKENet中的集成将为其用户提供一套新的服务,这些服务是纯经典技术无法实现的。
英文摘要
Cryptographically Relevant Quantum Computers (CRQCs) pose a serious threat to cybersecurity, as they will be able to break most of the current asymmetric cryptography used to protect internet communication. As the technology is advancing quickly, it is important to migrate towards cryptographic systems that are quantum-resilient to avoid enormous economic losses. This is recognized, for example, in Canada's National Quantum Strategy, where one of the critical missions is to "ensure the privacy and cyber-security of Canadians in a quantum-enabled world through a national secure quantum communications network and a post-quantum cryptography initiative." However, the existing technologies that are currently available to perform quantum-safe key distribution, such as Public Key Infrastructure (PKI), Quantum Key Distribution (QKD), and Pre-Shared Keys (PSK), have limitations in terms of scalability and cost-effectiveness (QKD and PSK), or security (PKI).To address these limitations, in 2017, Quantum Bridge introduced Distributed Symmetric Key Exchange (DSKE). DSKE achieves information-theoretic security, like PSK and QKD, but maintains similar scalability properties to PKI. While an initial development of DSKE was based on a) the delivery of PSK between clients and security hubs and b) the concept of secret sharing, the integration of QKD into DSKE allows for full automation of the DSKE infrastructure. At the same time, DSKE and QKD together will pave the way for a future quantum internet. The resulting system, named DSKENet, will be integrated into existing infrastructure to minimise the cost of adoption of the technology by the industry.This project aims to bring the DSKENet to market in a collaboration between Quantum Bridge and Toshiba, by including QKD links (provided by Toshiba) in the DSKE system (provided by Quantum Bridge).DSKENet represents a fundamental step towards the commercialization of quantum-secure communication technologies. On one hand, DSKENet completely eliminates the threat posed by CRQCs, providing a solution that comes with a security proof against any classical or quantum computational attack. On the other hand, DSKENet lays the foundation to build a fully fledged quantum internet. When quantum repeaters will become available, their integration in DSKENet will provide its users with a new set of services which are not possible with purely classical technologies.
期刊论文(0)
专著(0)
科研奖励(0)
会议论文
海外基金