搜索

x
中国物理学会期刊

基于本地真随机相位键控的信道互易性密钥分发

Channel Reciprocity Key Distribution Based on Local True Random Phase-keying

PDF
导出引用
  • 密钥的安全分发是保障加密通信安全的核心前提.与依赖计算复杂度的密码算法不同,物理层密钥分发技术利用物理随机过程构建密钥,为安全通信提供了新途径.本文提出并实验证明了一种基于本地真随机相位键控的信道互易性密钥分发方案.该方案利用宽带光载波与非对称马赫-曾德尔干涉仪构建相位隐藏传输结构,由本地端的物理随机数发生器产生密钥并对宽带光载波进行相位键控;采用时延补偿技术确保双向传输的信道互易性,使通信双方获得高相关的干涉信号;再通过无源相位解调算法从干涉信号中提取随机相位键控码,实现密钥共享.实验结果表明,在25 km的标准单模光纤传输链路上,利用该方法可实现1 Gbit/s速率的安全密钥分发,误码率低至2.4‰,满足光通信中常用的硬判决前向纠错(HD-FEC)阈值要求.该方案无须预先共享熵源信息及可信第三方,在保障密钥分发安全性的同时,具有兼容现有光纤通信设施的应用潜力.

    In the era of exponentially growing sensitive data, secure key distribution mechanisms are urgently needed to establish reliable encrypted communication links. Channel reciprocity-based key distribution technologies possess significant advantages in compatibility with existing fiber-optic infrastructures, as they can share the same fiber channel with data transmission. However, constrained by the bandwidth of environmental fluctuations, such technologies generally suffer from low key generation rates, typically on the order of kbit/s. Although active channel scrambling schemes can increase the key distribution rate to the Gbit/s level, they require pre-shared pseudo-random algorithms or the introduction of trusted third parties, thus posing potential security vulnerabilities.
    In this paper, a novel channel reciprocity scheme based on local true random phase-keying is proposed for high-speed secure key distribution. The scheme establishes a phase-concealed transmission structure using a broadband optical carrier and an asymmetric Mach-Zehnder interferometer. It employs a physical random number generator at the local end to generate random keys and performs phase-keying modulation on the broadband optical carrier. Time-delay compensation technology is adopted to ensure channel reciprocity during bidirectional transmission, enabling both communication parties to obtain highly correlated interference signals. Subsequently, a passive phase demodulation algorithm is used to extract the random phase-keying codes from the interference signals to achieve key sharing. Experimental results over a 25 km standard single-mode fiber link demonstrate that the proposed scheme achieves a secure key distribution rate of 1 Gbit/s at a phase-keying modulation frequency of 500 MHz. The bit error rate is as low as 2.4‰, which is well below the threshold of hard-decision forward error correction (3.8‰) widely adopted in commercial optical communication systems.

    目录

    返回文章
    返回