QUANTUM KEY DISTRIBUTION DEVICE, QUANTUM KEY DISTRIBUTION SYSTEM, AND QUANTUM KEY DISTRIBUTION METHOD

• US 20150236852A1
• Filed: 02/13/2015
• Published: 08/20/2015
• Est. Priority Date: 02/17/2014
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: TANIZAWA, Yoshimichi
• Granted Patent: US 9,503,257 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 9/0852 Quantum cryptography transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03
• CPC Class Codes: H04L 9/0858 Details about key distillation or coding, e.g. reconciliation, error correction, privacy amplification, polarisation coding or phase coding

Abstract

According to an embodiment, a quantum key distribution device includes a key sharing unit, a correcting unit, a compressor, and a controller. The key sharing unit is configured to generate a shared bit string by using quantum key distribution performed with another quantum key distribution device via a quantum communication channel. The correcting unit is configured to generate a corrected bit string through an error correction process with respect to the shared bit string. The compressor is configured to generate an encryption key through a key compression process with respect to the corrected bit string. The controller is configured to perform a restraining operation in which the total number of bits of encryption keys generated per unit time by the compressor is smaller than the total number of bits of the encryption keys generated per unit time by the compressor in the case of not performing the restraining operation.

Claims

1. A quantum key distribution device that is connected to another quantum key distribution device via a quantum communication channel and that generates and shares an identical encryption key with the another quantum key distribution device, the quantum key distribution device comprising:

a quantum key sharing unit configured to generate a shared bit string by using quantum key distribution performed with the another quantum key distribution device via the quantum communication channel;

a correcting unit configured to receive the shared bit string from the quantum key sharing unit and generate a corrected bit string through an error correction process with respect to the shared bit string;

a compressor configured to receive the corrected bit string from the correcting unit and generate an encryption key through a key compression process with respect to the corrected bit string; and

a controller configured to perform a restraining operation in which the total number of bits of one or more encryption keys generated per unit time by the compressor is smaller than the total number of bits of the one or more encryption keys generated per unit time by the compressor in the case of not performing the restraining operation.

2. The device according to claim 1, wherein the restraining operation to be performed by the controller includes reducing frequency at which the quantum key sharing unit sends the shared bit string to the correcting unit to a lower level than the frequency in the case of not performing the restraining operation, or deleting one, some, or all bits of the shared bit string.

3. The device according to claim 1, wherein the restraining operation to be performed by the controller includes reducing frequency at which the correcting unit sends the corrected bit string to the compressor to a lower level than the frequency in the case of not performing the restraining operation, or deleting one, some, or all bits of the corrected bit string.

4. The device according to claim 1, wherein the restraining operation to be performed by the controller includes reducing frequency at which the compressor stores the encryption key in a storage to a lower level than the frequency in the case of not performing the restraining operation, or deleting one, some, or all bits of the encryption key.

5. The device according to claim 1, wherein

the restraining operation to be performed by the controller includes sharing, with the another quantum key distribution device, a length of the encryption key calculated by either one of the quantum key distribution device and the another quantum key distribution device based on a parameter related to the quantum key distribution device and the another quantum key distribution device, and

the compressor is configured to generate the encryption key from the corrected bit string so that the encryption key has the length shared by the controller.

6. The device according to claim 5, wherein, the length of the encryption key is calculated based on, as the parameter, an error rate that represents percentage of bits estimated to be errors in the shared bit string, an error correction efficiency, and at least one of a priority for a combination of the quantum key distribution device and the another quantum key distribution device, a priority for an application that receives the encryption key from the quantum key distribution device, an execution count of the application, a usage frequency of the encryption key, an available space in a storage, and a storage volume of the encryption key.

7. The device according to claim 1, wherein the controller is configured to adjust a restraining amount for the restraining operation based on the parameter related to the quantum key distribution device.

8. The device according to claim 7, wherein,

the controller is configured to determine, based on a comparison between the parameter and a first threshold value, whether to perform the restraining operation, and

the controller is configured to determine, based on a comparison between the parameter and a second threshold value, whether to stop the restraining operation.

9. The device according to claim 7, wherein, the parameter is at least one of a priority for a combination of the quantum key distribution device and the another quantum key distribution device, a priority for an application that receives the encryption key from the quantum key distribution device, an execution count of the application, a usage frequency of the encryption key, an available space in a storage, and a storage volume of the encryption key.

10. A quantum key distribution system comprising a plurality of quantum key distribution devices, each corresponding to the quantum key distribution device according to claim 1, wherein

the plurality of quantum key distribution devices are connected by the quantum communication channel and generate the identical encryption key through the restraining operation in a mutually corresponding manner.

12. The device according to claim 2, wherein either one of the error correction process performed by the correcting unit or the key compression process performed by the compressor is stopped when the controller deletes all of the shared bit strings.

13. The device according to claim 3, wherein the compressor configured to stop to perform the key compression process, when the controller deletes all of the corrected bit strings.

11. A quantum key distribution method implemented in a quantum key distribution device that is connected to another quantum key distribution device via a quantum communication channel and that generates and shares an identical encryption key with the another quantum key distribution device, the method comprising:

generating a shared bit string by using quantum key distribution performed with the another quantum key distribution device via the quantum communication channel;

generating a corrected bit string through an error correction process with respect to the shared bit string;

generating an encryption key through a key compression process with respect to the corrected bit string; and

performing a restraining operation in which the total number of bits of one or more encryption keys generated per unit time by the compressor is smaller than the total number of bits of the one or more encryption keys generated per unit time by the compressor in the case of not performing the restraining operation.