【摘要】：量子密鑰分發(fā)系統(tǒng)是量子物理原理在密碼學(xué)領(lǐng)域獲得實用化應(yīng)用最早的-個研究領(lǐng)域。它分發(fā)的密鑰具有“絕對安全”的特性,這個特性來源于量子力學(xué)中的不可克隆原理和測量塌縮理論,具有很高的軍事和民用價值。1991年誕生了世界上第一個QKD系統(tǒng)原型,它只是一個簡單的演示系統(tǒng),由Bennette等人完成。隨后出現(xiàn)更為復(fù)雜和完善的QKD系統(tǒng),QKD的通訊距離和密鑰生成速率都在不斷的提高。QKD系統(tǒng)發(fā)展到現(xiàn)在,已經(jīng)進入到了多用戶互聯(lián)的QKD網(wǎng)絡(luò)時代,而QKD網(wǎng)絡(luò)的結(jié)構(gòu)也在不停的優(yōu)化和升級當中。當今QKD網(wǎng)絡(luò)的杰出代表有歐洲的SECOQC量子網(wǎng),日本的東京高速量子網(wǎng),和中國的全通型量子通話網(wǎng)以及“合肥—六安—舒城”的城域量子通信網(wǎng)絡(luò)。 QKD系統(tǒng)的發(fā)展已經(jīng)進入了高速(高密鑰生成速率)的階段,應(yīng)用最新的半導(dǎo)體工藝技術(shù),采用1GHz以上發(fā)射頻率的激光器,使用探測效率極高的超導(dǎo)探測器,獲得成碼率更高的QKD系統(tǒng)。QKD系統(tǒng)實時處理的壓力在于QKD后處理過程,因為它是QKD系統(tǒng)電子學(xué)處理延遲最大的模塊。QKD后處理過程是為了消除Alice和Bob密鑰的不同和提高安全性采取一系列操作,它包括四個步驟：基矢比對,身份認證,糾錯和隱私放大。本文以滿足高速Q(mào)KD系統(tǒng)為目標,重點研究了QKD后處理過程中的實時技術(shù)。從實現(xiàn)實時技術(shù)的平臺方面考慮,隨著對QKD系統(tǒng)設(shè)備的小型化和便攜性需求方面的提高,同時結(jié)合近些年發(fā)展迅速的Field Programmable Gate Array (FPGA)技術(shù),本文重點研究了基于FPGA的QKD實時處理技術(shù)。QKD系統(tǒng)實時處理技術(shù)在硬件內(nèi)的實現(xiàn)具有特定的優(yōu)勢,可以省去QKD設(shè)備和電腦通訊的數(shù)據(jù)帶寬壓力,充分利用后處理過程中的并行潛力提高處理速度。以QKD系統(tǒng)實時處理技術(shù)為主線,本文的研究內(nèi)容包括：高效快速的糾錯算法,高數(shù)據(jù)吞吐量的身份認證和高速數(shù)據(jù)交換的經(jīng)典通道。 對于糾錯模塊,我們設(shè)計和實現(xiàn)了兩種不同的方案：基于Winnow的快速糾錯算法和基于LDPC糾錯碼的快速糾錯算法。其中基于Winnow的糾錯算法在糾錯效率和速度方面都有不錯的表現(xiàn),是我們目前中低速的QKD系統(tǒng)中成功應(yīng)用的算法。而基于LDPC糾錯碼的糾錯算法,糾錯時候只需要交互一次信息,在傳輸延遲大的系統(tǒng)實現(xiàn)優(yōu)勢最大,另外它在糾錯效率和速度方面都有可以大幅提升的潛力,是后續(xù)高速Q(mào)KD系統(tǒng)中有望廣泛采用的算法�；赪innow的快速糾錯算法的采用的基本糾錯碼是Hamming碼,從Winnow的基本思想出發(fā),我們在段長選取,循環(huán)次數(shù)設(shè)置等方面進行優(yōu)化,并且提出了使用雙線性移位寄存器(LFSR)的隨機置換方案,可以獲得和使用真隨機數(shù)一樣的“打亂”效果�；贚DPC糾錯碼的快速糾錯算法采用QC-LDPC作為校驗矩陣,應(yīng)用半串行解碼算法,該算法的算法結(jié)構(gòu)簡單,沒有復(fù)雜的雙曲函數(shù)運算和乘除運算,適合硬件結(jié)構(gòu)實現(xiàn),另外該算法相對于傳統(tǒng)的BP解碼算法可以節(jié)省大部分的存儲資源。在算法結(jié)構(gòu)方面,我們提出了一個新穎的信息鉗位功能函數(shù),實現(xiàn)簡單,可以極大的提升糾錯性能。 對于身份認證模塊,我們實現(xiàn)了基于LFSR的Toeplitz矩陣的身份認證方案。QKD系統(tǒng)的最核心特征是它的“絕對安全”性質(zhì),基于LFSR的Toeplitz矩陣的身份認證具備“絕對安全”的特性。在模塊設(shè)計和實現(xiàn)方面,對算法結(jié)構(gòu)做了優(yōu)化,提高并行度以實現(xiàn)速度的提升。該身份認證算法的實質(zhì)是高維度的矩陣乘法,分別從優(yōu)化矩陣乘法行方向和列方向的運算提出了一次并行化結(jié)構(gòu)和二次并行化結(jié)構(gòu),實現(xiàn)了高度并行化的身份認證計算模塊。 對于高速數(shù)據(jù)交互的經(jīng)典通道,選擇USB3.0作為實現(xiàn)高速數(shù)據(jù)通道的接口總線。該數(shù)據(jù)通道中需要傳輸?shù)腝KD系統(tǒng)的經(jīng)典信息包括：基矢比對信息,糾錯信息,身份認證碼。我們使用Cypress公司生產(chǎn)的FX3芯片作為USB3.0的協(xié)議芯片,應(yīng)用該芯片提供的從FIFO工作模式。設(shè)計了相應(yīng)的固件,在FPGA中設(shè)計了硬件接口模塊,在PC上設(shè)計了客戶端程序,實際測試速率達1.79Gbit/s。 文針對處于國際前沿的量子保密通訊中的量子密鑰分發(fā)系統(tǒng)后處理技術(shù)進行探索性研究,研究內(nèi)容包括高效快速的糾錯算法,高數(shù)據(jù)吞吐量的身份認證和高速數(shù)據(jù)交換的經(jīng)典通道,其研究成果將直接提升QKD的后處理性能,并成功用于城域量子通信試驗示范網(wǎng),并將在應(yīng)用在后續(xù)的城際高速量子通訊網(wǎng)中。選題不僅具有理論研究價值,而且具有實際應(yīng)用價值。 本論文的主要創(chuàng)新點如下： 1.針對不同密鑰生成速率,完成了2種不同的實時糾錯方案。對于低速和中速密鑰生成速率,基于Winnow糾錯算法修改完成了一個適合于FPGA的快速并行設(shè)計,并成功應(yīng)用于城域量子通信試驗示范網(wǎng)；對于高速及超高速密鑰生成速率,進行了基于LDPC糾錯碼的快速糾錯算法的研究,完成了基于QC-LDPC使用串行解碼算法的硬件解碼器,能適應(yīng)于GHz發(fā)射頻率的QKD系統(tǒng)中。 2.針對QKD的安全性要求,開展了實時身份認證技術(shù)的研究,實現(xiàn)了適合于FPGA實現(xiàn)的基于LFSR的Toeplitz矩陣的身份認證方案,該方案具有“絕對安全”和高度并行化的特性,并成功應(yīng)用于量子保密通訊試驗網(wǎng)。 3.針對高速量子密鑰分發(fā)系統(tǒng)中,大量經(jīng)典數(shù)據(jù)實時交互的需求,展開對高速數(shù)據(jù)通道的研究,完成了基于USB3.0和千兆網(wǎng)構(gòu)成了高速數(shù)據(jù)通道,將用于后續(xù)的高速量子密鑰分發(fā)系統(tǒng)中。
[Abstract]:The quantum key distribution system is the first to be used in the field of cryptography in the field of cryptography. The key to which it is distributed has the characteristics of "absolute safety", which is derived from the non-cloning principle in quantum mechanics and the theory of measurement and collapse, and has a high military and civilian value. The first QKD system prototype in the world was born in 1991, and it is just a simple demonstration system. It's done by Bennett et al. The communication distance and key generation rate of the QKD system, QKD, and QKD, which are more complex and perfect, are constantly increasing. The QKD system has been developed to the QKD network era of multi-user interconnection, and the structure of the QKD network is also constantly optimized and upgraded. The outstanding representative of the QKD network is the SECOQC quantum network in Europe, the Tokyo high-speed quantum network in Japan, and the China's all-pass quantum communication network and the "Shuicheng, Liuliang, Hefei" 's metro quantum communication network. The development of the QKD system has entered a high-speed (high-key generation rate) stage, and the latest semiconductor technology is applied, and the high-efficiency superconducting detector is used to obtain the QKD system with higher code rate by using the super-conducting detector with extremely high detection efficiency. The pressure of real-time processing of the QKD system is the post-QKD process, because it is the most delayed mode in the electronic processing of the QKD system. The post-QKD process is a series of actions to eliminate the differences in Alice and Bob's keys and to improve security, which includes four steps: base-to-target, identity authentication, error correction, and privacy In order to meet the high-speed QKD system, this paper focuses on the real-time technology in the post-QKD process. In view of the development of the platform of real-time technology, the QKD real-time processing technology based on FPGA is studied in this paper with the improvement of the miniaturization and the portability requirement of the QKD system equipment, and combining with the field Programmable Gate Array (FPGA) technology developed in recent years. The realization of the QKD system real-time processing technology in the hardware has specific advantages, the data bandwidth pressure of the QKD equipment and the computer communication can be saved, the parallel potential in the post-processing process can be fully utilized to improve the processing speed, Based on the QKD system real-time processing technology, the research contents of this paper are: efficient and fast error correction algorithm, high data throughput identity authentication and high-speed data exchange. We design and implement two different schemes for error correction module: fast error correction algorithm based on Winnow and fast error correction based on LDPC error correction code The error correction algorithm based on Winnow has good performance in error correction efficiency and speed, and is a successful application in the low-speed QKD system at present. And the error correction algorithm based on the LDPC error correction code only needs interactive information at the time of error correction, has the greatest advantage in a system with large transmission delay, and has the potential of greatly improving the error correction efficiency and speed, and is expected to be widely adopted in the subsequent high-speed QKD system. The basic error correction code used in the fast error correction algorithm based on Winnow is the Hamming code. From the basic idea of Winnow, we optimize the selection of the segment length and the number of cycles, and put forward the random setting using the bilinear shift register (LFSR). Alternatively, you can obtain and use the "to upset" Effect. The fast error correction algorithm based on the LDPC is used as the check matrix and the semi-serial decoding algorithm is applied. The algorithm has the advantages of simple structure, no complex hyperbolic function operation and multiplication operation, and is suitable for hardware junction. In addition, the algorithm can save most of the memory with respect to the traditional BP decoding algorithm. In terms of the structure of the algorithm, a novel information clamping function is proposed, which is simple and can be greatly improved. Error performance. For identity authentication module, we realized the body of the Toeplitz matrix based on LFSR The most core feature of the QKD system is its "absolute safety" property, and the identity authentication of the Toeplitz matrix based on the LFSR has the

"absolute safety" . In the aspect of module design and implementation, the structure of the algorithm is optimized, and the parallelism is improved to realize The essence of the identity authentication algorithm is a high-dimensional matrix multiplication, and a parallelization structure and a secondary parallelization structure are proposed from the operation of the optimization matrix multiplication row direction and the column direction, respectively, and the identity recognition of the height parallelization is realized. For the classical channel of high-speed data interaction, the USB 3.0 is selected as the high-speed data. The interface bus of the channel. The classical information of the QKD system to be transmitted in the data channel includes: the base-to-vector comparison information, the error correction letter, Interest, identity authentication code. We use the FX3 chip produced by the Cypress company as the protocol chip of USB 3.0, and apply the F 3 chip provided by the chip from F IFO operation mode. The corresponding firmware is designed. The hardware interface module is designed in the FPGA. The client program is designed on the PC. The actual test rate is up to 1.7. 9 Gbit/ s. The paper explores the post-processing technology of quantum key distribution system in quantum secret communication at the international front, which includes efficient and fast error correction algorithm, high data throughput identity authentication and high speed The classic channel of data exchange, the research results will directly improve the post-processing performance of QKD and successfully used in the Metro quantum communication test demonstration network, and will be applied in the following city in that inter-high-speed quantum communication network, the topic not only has the theoretical research value, but also And has practical application value. The main innovation points of this thesis are as follows:1. The rate of generation of different keys is finished. Two different real-time error correction schemes have been developed. For low-speed and medium-speed key generation rates, a fast and parallel design suitable for FPGA is completed based on Winnow error correction algorithm, and it is successfully applied to the Metro quantum communication test demonstration network; for low-speed and medium-speed key generation rate, On the basis of the high-speed and super-high-speed key generation rate, the fast error correction algorithm based on the LDPC error-correcting code is studied, and the hardware decoder based on the use of the serial decoding algorithm based on the QC-LDPC is completed, which can be adapted to the G. 2. In the QKD system of Hz transmission frequency,2. The research of real-time identity authentication technology is carried out aiming at the safety requirement of QKD, and the identity authentication scheme of the LFSR-based Toeplitz matrix which is suitable for FPGA implementation is realized, and the scheme has the characteristics of high "absolute safety" and high parallelism, in that high-speed quantum key distribution system, a large amount of the requirement of real-time interaction of the classical data and the research of the high-speed data channel are carried out, and a high-speed data channel based on the USB 3.0 and the gigabit network is completed,
【學(xué)位授予單位】：中國科學(xué)技術(shù)大學(xué)
【學(xué)位級別】：博士
【學(xué)位授予年份】：2014
【分類號】：TN918.4

【參考文獻】

相關(guān)期刊論文 前1條

1 崔珂;張鴻飛;羅春麗;梁昊;金革;王堅;;基于USB的量子密鑰分發(fā)系統(tǒng)中高速數(shù)據(jù)通道的設(shè)計[J];光電子.激光;2012年04期

相關(guān)博士學(xué)位論文 前1條

1 劉洋;遠距離量子密鑰分發(fā)系統(tǒng)的相關(guān)研究[D];中國科學(xué)技術(shù)大學(xué);2012年

，

本文編號：2491253