Key management and user authentication for quantum cryptography networks
    1.
    发明授权
    Key management and user authentication for quantum cryptography networks 有权
    量子加密网络的密钥管理和用户认证

    公开(公告)号:US08340298B2

    公开(公告)日:2012-12-25

    申请号:US12225560

    申请日:2007-04-16

    CPC classification number: H04L9/3263 H04L9/006 H04L9/0855

    Abstract: Key management and user authentication systems and methods for quantum cryptography networks that allow for users securely communicate over a traditional communication link (TC-link). The method includes securely linking a centralized quantum key certificate authority (QKCA) to each network user via respective secure quantum links or “Q-links” that encrypt and decrypt data based on quantum keys (“Q-keys”). When two users (Alice and Bob) wish to communicate, the QKCA sends a set of true random bits (R) to each user over the respective Q-links. They then use R as a key to encode and decode data they send to each other over the TC-link.

    Abstract translation: 用于允许用户通过传统通信链路(TC链路)进行安全通信的量子加密网络的密钥管理和用户认证系统和方法。 该方法包括通过基于量子密钥(Q-key)加密和解密数据的相应的安全量子链路或Q链路将每个网络用户的集中量子密钥认证机构(QKCA)安全地链接。 当两个用户(Alice和Bob)希望通信时,QKCA通过各个Q链路向每个用户发送一组真随机比特(R)。 然后,他们使用R作为密钥对通过TC链路彼此发送的数据进行编码和解码。

    Frame synchronization method for QKD systems
    2.
    发明授权
    Frame synchronization method for QKD systems 有权
    QKD系统的帧同步方法

    公开(公告)号:US07539314B2

    公开(公告)日:2009-05-26

    申请号:US11503774

    申请日:2006-08-14

    CPC classification number: H04L9/0852 H04L9/12

    Abstract: Systems and methods for exchanging and processing encoded quantum signals in quantum key distribution (QKD) systems in real time. A stream of quantum signals is sent from Alice to Bob. Alice only encodes sets or “frames” of the streamed quantum signals based on receiving a “ready” message from Bob. This allows for Bob to finish processing the previous frame of data by allowing different bit buffers to fill and then be used for data processing. This approach results in gaps in between frames wherein quantum signals in the stream are sent unencoded and ignored by Bob. However, those quantum signals that are encoded for the given frame are efficiently processed, which on the whole is better than missing encoded quantum signals because Bob is not ready to receive and process them.

    Abstract translation: 在量子密钥分配(QKD)系统中实时交换和处理编码量子信号的系统和方法。 量子信号流从爱丽丝发送到鲍勃。 基于从Bob接收到“准备”消息,爱丽丝只对流量子信号的集合或“帧”进行编码。 这允许Bob通过允许不同的位缓冲器填充然后用于数据处理来完成对前一帧数据的处理。 这种方法导致帧之间的间隙,其中流中的量子信号被未被编码并由Bob忽略。 然而,对于给定帧编码的那些量子信号被有效地处理,由于Bob没有准备好接收和处理这些量子信号,所以总体上比编码的量子信号更好。

    Key expansion for qkd
    3.
    发明申请
    Key expansion for qkd 审中-公开
    qkd的关键扩展

    公开(公告)号:US20060059343A1

    公开(公告)日:2006-03-16

    申请号:US10544172

    申请日:2004-02-05

    CPC classification number: H04L7/0008 H04L7/0075 H04L9/0858

    Abstract: A method of encrypting information using an encryption pad based on keys exchanged between quantum key distribution (QKD) stations is disclosed. The method includes establishing raw keys between two stations using QKD, processing the keys to establish a plurality of matching privacy amplified keys at each station and buffering the keys in a shared key schedule. The method also includes the option of expanding one or more of the keys in the shared key schedule using a stream cipher to create a supply of expanded keys that serve as pads for one-time-pad encryption.

    Abstract translation: 公开了使用基于在量子密钥分发(QKD)站之间交换的密钥的加密垫来加密信息的方法。 该方法包括使用QKD在两个站之间建立原始密钥,处理密钥以在每个站建立多个匹配的隐私放大密钥,并以共享密钥调度缓冲密钥。 该方法还包括使用流密码扩展共享密钥调度中的一个或多个密钥以创建用作一次性密码加密的填充的扩展密钥的供应的选项。

    Medic voice data system
    4.
    发明申请
    Medic voice data system 有权
    医疗语音数据系统

    公开(公告)号:US20110103597A1

    公开(公告)日:2011-05-05

    申请号:US12798974

    申请日:2010-04-15

    CPC classification number: G06F19/3418 G06F19/00 G10L15/26 G16H10/60

    Abstract: A medical voice data system includes a hand-held recording device, an electronic information carrier (EIC), and a host station. The hand-held device records medical information from a user that is examining a person in an extreme environment such as battlefield or disaster area. EICs are stored within a housing interior and can be dispensed therefrom by the user. Recording electronics within the housing interior are operably connected to at least one of the EICs. A microphone is operably connected to the recording electronics to record on a EIC medical information about the injured person. The EIC is configured to be attached to and travel with the person as they are evacuated so that the recorded medical information is immediately available to medical personnel at a care center via the host station. The medical voice data system may also employ a wireless EIC. A host station is used to receive and process the recorded information and convert it to text-based medical record.

    Abstract translation: 医疗语音数据系统包括手持式记录装置,电子信息载体(EIC)和主机站。 手持设备记录正在检查诸如战场或灾区等极端环境中的人的用户的医疗信息。 EIC存储在壳体内部并且可以由用户从其中分配。 在壳体内部的记录电子装置可操作地连接到至少一个EIC。 麦克风可操作地连接到记录电子装置,以记录关于受伤者的EIC医疗信息。 EIC配置为在人员撤离时与人员连接并行进,以便通过主机站立即向医护人员提供所记录的医疗信息。 医疗语音数据系统也可以使用无线EIC。 主站用于接收和处理记录的信息并将其转换为基于文本的医疗记录。

    Method of integrating QKD with IPSec
    5.
    发明申请
    Method of integrating QKD with IPSec 失效
    将QKD与IPSec集成的方法

    公开(公告)号:US20060212936A1

    公开(公告)日:2006-09-21

    申请号:US11082068

    申请日:2005-03-16

    CPC classification number: H04L63/061 H04L9/0852 H04L63/164

    Abstract: A method of integrating quantum key distribution (QKD) with Internet protocol security (IPSec) to improve the security of IPSec. Standard IPSec protocols impose limits on the frequency at which keys can be changed. This makes efforts to improve the security of IPSec by employing quantum keys problematic. The method includes increasing the size of the Security Association (SA) Table in a manner that enables a high key change rate so that the quantum keys can be combined with the classical keys generated by Internet Key Exchange (IKE). The invention includes a method of creating the SA Table by combining quantum keys generated by the QKD process with classical keys generated by the IKE process, thereby enabling QKD-based IPSec.

    Abstract translation: 将量子密钥分发(QKD)与互联网协议安全(IPSec)进行整合,提高IPSec的安全性。 标准IPSec协议对可以更改密钥的频率施加限制。 这使得通过使用量子钥匙来提高IPSec的安全性。 该方法包括以能够实现高密钥变化率的方式增加安全关联(SA)表的大小,使得量子密钥可以与因特网密钥交换(IKE)生成的经典密钥组合。 本发明包括一种通过将由QKD处理产生的量子密钥与IKE过程产生的经典密钥相结合来创建SA表的方法,由此实现基于QKD的IPSec。

    Medic voice data system
    6.
    发明授权
    Medic voice data system 有权
    医疗语音数据系统

    公开(公告)号:US08233631B2

    公开(公告)日:2012-07-31

    申请号:US12798974

    申请日:2010-04-15

    CPC classification number: G06F19/3418 G06F19/00 G10L15/26 G16H10/60

    Abstract: A medical voice data system includes a hand-held recording device, an electronic information carrier (EIC), and a host station. The hand-held device records medical information from a user that is examining a person in an extreme environment such as battlefield or disaster area. EICs are stored within a housing interior and can be dispensed therefrom by the user. Recording electronics within the housing interior are operably connected to at least one of the EICs. A microphone is operably connected to the recording electronics to record on a EIC medical information about the injured person. The EIC is configured to be attached to and travel with the person as they are evacuated so that the recorded medical information is immediately available to medical personnel at a care center via the host station. The medical voice data system may also employ a wireless EIC. A host station is used to receive and process the recorded information and convert it to text-based medical record.

    Abstract translation: 医疗语音数据系统包括手持式记录装置,电子信息载体(EIC)和主机站。 手持设备记录正在检查诸如战场或灾区等极端环境中的人的用户的医疗信息。 EIC存储在壳体内部并且可以由用户从其中分配。 在壳体内部的记录电子装置可操作地连接到至少一个EIC。 麦克风可操作地连接到记录电子装置,以记录关于受伤者的EIC医疗信息。 EIC配置为在人员撤离时与人员连接并行进,以便通过主机站立即向医护人员提供所记录的医疗信息。 医疗语音数据系统也可以使用无线EIC。 主站用于接收和处理记录的信息并将其转换为基于文本的医疗记录。

    QKD with classical bit encryption
    7.
    发明授权
    QKD with classical bit encryption 失效
    QKD与经典位加密

    公开(公告)号:US07620182B2

    公开(公告)日:2009-11-17

    申请号:US10577625

    申请日:2004-02-13

    CPC classification number: H04L9/0858 H04L9/065

    Abstract: A method for enhancing the security of a quantum key distribution (QKD) system having QKD stations Alice and Bob. The method includes encrypting key bits generated by a true random number generator (TRNG) and sent to a polarization or phase modulator to encode weak optical pulses as qubits to be shared between Alice and Bob. Key bit encryption is achieved by using a shared password and a stream cipher. Bob obtains at least a subset of the original key bits used by Alice by utilizing the same stream cipher and the shared password.

    Abstract translation: 一种用于增强具有QKD站Alice和Bob的量子密钥分发(QKD)系统的安全性的方法。 该方法包括对由真实随机数发生器(TRNG)生成的密钥进行加密,并将其发送到偏振或相位调制器以将弱光脉冲编码为在Alice和Bob之间共享的量子位。 密钥位加密通过使用共享密码和流密码来实现。 Bob通过利用相同的流密码和共享密码获得Alice使用的原始密钥位的至少一个子集。

    Key Management and User Authentication for Quantum Cryptography Networks
    8.
    发明申请
    Key Management and User Authentication for Quantum Cryptography Networks 有权
    量子密码学网络的密钥管理和用户认证

    公开(公告)号:US20090175452A1

    公开(公告)日:2009-07-09

    申请号:US12225560

    申请日:2007-04-16

    CPC classification number: H04L9/3263 H04L9/006 H04L9/0855

    Abstract: Key management and user authentication systems and methods for quantum cryptography networks that allow for users securely communicate over a traditional communication link (TC-link). The method includes securely linking a centralized quantum key certificate authority (QKCA) to each network user via respective secure quantum links or “Q-links” that encrypt and decrypt data based on quantum keys (“Q-keys”). When two users (Alice and Bob) wish to communicate, the QKCA sends a set of true random bits (R) to each user over the respective Q-links. They then use R as a key to encode and decode data they send to each other over the TC-link.

    Abstract translation: 用于允许用户通过传统通信链路(TC链路)进行安全通信的量子加密网络的密钥管理和用户认证系统和方法。 该方法包括通过相应的安全量子链路或基于量子密钥(“Q-keys”)加密和解密数据的“Q链路”将每个网络用户的集中量子密钥证书颁发机构(QKCA)安全地链接到每个网络用户。 当两个用户(Alice和Bob)希望通信时,QKCA通过各个Q链路向每个用户发送一组真随机比特(R)。 然后,他们使用R作为密钥对通过TC链路彼此发送的数据进行编码和解码。

    Qkd Cascaded Network with Loop-Back Capability
    9.
    发明申请
    Qkd Cascaded Network with Loop-Back Capability 有权
    QKD级联网络具有环回功能

    公开(公告)号:US20080292095A1

    公开(公告)日:2008-11-27

    申请号:US11629247

    申请日:2005-06-30

    CPC classification number: H04L9/0855 H04B10/70

    Abstract: A QKD cascaded network (5) with loop-back capability is disclosed. The QKD system network includes a plurality of cascaded QKD relays (10, 20, 30) each having two QKD stations Alice (A) and Bob (B) therein. Each QKD relay also includes an optical switch (50). The optical switch is optically coupled to each QKD station in the relay, as well as to the input ports (PI) of the relay. In a first position, the optical switch allows for communication between adjacent relays. In a second position, the optical switch allows for pass-through communication between the QKD relays (10 and 30) that are adjacent the relay whose switch is in the first position. Also in the second position, the optical switch allows for communication between the QKD stations A and B within the relay. This, in turn, allows for diagnostic measurements to be made of one or both of the QKD stations via an optical path (90) that is entirely within the relay station enclosure (12, 22, 32).

    Abstract translation: 公开了具有回环能力的QKD级联网络(5)。 QKD系统网络包括多个级联的QKD继电器(10,20,30),每个QKD继电器在其中具有两个QKD站Alice(A)和Bob(B)。 每个QKD继电器还包括光开关(50)。 光开关光耦合到继电器中的每个QKD站以及继电器的输入端口(PI)。 在第一位置,光开关允许相邻继电器之间的通信。 在第二位置,光开关允许与开关处于第一位置的继电器相邻的QKD继电器(10和30)之间的通过通信。 同样在第二位置,光开关允许继电器内的QKD站A和B之间的通信。 这反过来又允许通过完全在中继站外壳(12,22,32)内的光路(90)来对QKD站中的一个或两个进行诊断测量。

    Systems and methods for enhanced quantum key formation using an actively compensated QKD system
    10.
    发明授权
    Systems and methods for enhanced quantum key formation using an actively compensated QKD system 有权
    使用积极补偿的QKD系统增强量子密钥形成的系统和方法

    公开(公告)号:US07853020B2

    公开(公告)日:2010-12-14

    申请号:US11901773

    申请日:2007-09-19

    CPC classification number: H04L9/0858

    Abstract: Systems and methods for enhanced quantum key distribution (QKD) using an actively compensated QKD system. The method includes exchanging quantum signals between first and second QKD stations and measuring the quantum signal error. An error signal SE representative of the system visibility error is then generated. An error-signal threshold STH that defines a system visibility error limit is then selected. Those qubits measured with the condition SE>STH are called “above-threshold” qubits, while those qubits measured with the condition SE≦STH are called “below-threshold” qubits. Only below-threshold qubits are stored and used to form the final quantum key. This is accomplished by sending a blanking signal SB to the memory unit where the qubits are stored. The blanking signal prevents above-threshold qubits from being stored therein. The raw quantum key so formed has few errors and thus forms a longer final quantum key for a given number of exchanged quantum signals.

    Abstract translation: 使用积极补偿的QKD系统来增强量子密钥分配(QKD)的系统和方法。 该方法包括在第一和第二QKD站之间交换量子信号并测量量子信号误差。 然后产生代表系统可见性错误的错误信号SE。 然后选择定义系统可见性错误极限的误差信号阈值STH。 以条件SE> STH测量的量子位称为“高于阈值”量子位,而用条件SE≦̸ STH测量的量子位称为“低于阈值”量子位。 只有低于阈值的量子位被存储并用于形成最终量子密钥。 这通过将消隐信号SB发送到存储量子位的存储器单元来实现。 消隐信号防止存储高于阈值的量子位。 如此形成的原始量子密钥具有很少的误差,因此对于给定数量的交换量子信号形成更长的最终量子密钥。

Patent Agency Ranking