Quantum-based data encryption

Patent metadata

Field	Value
Publication number	US-11070369-B2
Application number	US-202016745111-A
Country	US
Kind code	B2
Filing date	Jan 16, 2020
Priority date	Sep 27, 2017
Publication date	Jul 20, 2021
Grant date	Jul 20, 2021

Abstract

A system that comprises a quantum key device configured to generate quantum information and transmit the quantum information over a first and second quantum communication channel. The system also comprises a first device, communicatively coupled to the quantum key device over the first quantum communication channel, and a second device, communicatively coupled to the quantum key device over the second quantum communication channel. The system further comprises an encryption module configured to encrypt data to create encrypted data, at the first device, using a first quantum encryption key. The system also comprises a decryption module configured to decrypt the encrypted data to create decrypted data, at the second device, using a second quantum encryption key. The first quantum encryption key is the same as the second quantum encryption key. The system further comprises a termination module configured to prevent access to the decrypted data after a predetermined period of time.

First claim

What is claimed is:

1. A system that provides quantum-based data encryption, comprising:
a quantum key device configured to generate quantum information and transmit the quantum information over a plurality of quantum communication channels, wherein a first device is communicatively coupled to the quantum key device over a first quantum communication channel of the plurality of quantum communication channels and a second device is communicatively coupled to the quantum key device over a second quantum communication channel of the plurality of quantum communication channels;
a decryption module configured to:
receive data, at the second device, that is encrypted with a first quantum encryption key at the first device, the first quantum encryption key derived at the first device from quantum information received over the first quantum communication channel; and
decrypt the encrypted data to create decrypted data, at the second device, using a second quantum encryption key, the second quantum encryption key derived at the second device from quantum information received over the second quantum communication channel, the first quantum encryption key is the same as the second quantum encryption key; and

a termination module configured to:
prevent access to the decrypted data, at the second device, after a predetermined period of time, wherein the predetermined period of time is configurable by the user; and
prevent derivation of encryption keys by ceasing transmission of the quantum information over the first and second quantum communication channels after the predetermined period of time,

wherein at least a portion of the modules comprise one or more of hardware circuits, programmable hardware devices, and executable code, the executable code stored on one or more computer readable storage media.

2. The system according to claim 1 , further comprising a third device communicatively coupled to the second device, wherein:
the decrypted data is transmittable to the third device from the second device; and
the decrypted data is accessible on the third device for the predetermined period of time.

3. The system according to claim 1 , wherein the termination module is further configured to cease transmission of the quantum information over the second quantum communication channel after the predetermined period of time.

4. The system according to claim 1 , wherein the encrypted data is received at the second device over a standard communication channel that is separate from the first and second quantum communication channels.

5. The system according to claim 1 , wherein the termination module prevents access to the decrypted data after the predetermined period of time by deleting the decrypted data.

6. The system according to claim 1 , wherein the termination module prevents access to the decrypted data after the predetermined period of time by overwriting the decrypted data with different data.

7. The system according to claim 1 , wherein the quantum information comprises a stream of entangled quantum particles such that when a state of a quantum particle of an entangled set of quantum particles is read, corresponding states of other quantum particles in the entangled set of quantum particles are determinable.

8. The system according to claim 1 , wherein the termination module is further configured to prevent access to the second quantum encryption key after the second quantum encryption key is used to decrypt the encrypted data on the second device, the termination module overwriting at least a portion of the second quantum encryption key.

9. The system according to claim 1 , further comprising an error module configured to detect an error in the quantum information transmitted over the second quantum communication channel, the error indicating that the quantum information transmitted over the second quantum communication channel has been misappropriated.

10. The system according to claim 9 , wherein the error module detects an error in the quantum information by comparing at least a portion of the first and second quantum encryption keys.

11. The system of claim 1 , wherein the decryption module is further configured to:
detect that quantum information that is transmitted over the first quantum communication channel is being read at the first device for generation of the first quantum encryption key that is used to encrypt the data; and
in response to detecting the first device reading the quantum information transmitted over the first quantum communication channel, reads quantum information that is transmitted over the second quantum communication channel for generation of the second quantum encryption key that is used to decrypt the encrypted data.

12. An apparatus that provides quantum-based data encryption, comprising:
a decryption module configured to:
receive data, at a second device, that is encrypted with a first quantum encryption key at a first device, the first quantum encryption key derived at the first device from quantum information received over a first quantum communication channel from a quantum key device; and
decrypt the encrypted data to create decrypted data, at the second device, using a second quantum encryption key, the second quantum encryption key derived at the second device from quantum information received over a second quantum communication channel from the quantum key device, the first quantum encryption key is the same as the second quantum encryption key; and
a termination module configured to:
prevent access to the decrypted data, at the second device, after a predetermined period of time, wherein the predetermined period of time is configurable by the user; and
prevent derivation of encryption keys by ceasing transmission of the quantum information over the first and second quantum communication channels after the predetermined period of time.

13. The apparatus according to claim 12 , wherein:
the decrypted data is transmittable to a third device that is communicatively coupled to the second device; and
the decrypted data is accessible on the third device for the predetermined period of time.

14. The apparatus according to claim 12 , wherein the termination module ceases transmission of the quantum information over the second quantum communication channel after the predetermined period of time.

15. The apparatus according to claim 12 , wherein the encrypted data is received at the second device over a standard communication channel that is separate from the first and second quantum communication channels.

16. The apparatus according to claim 12 , wherein the termination module prevents access to the decrypted data after the predetermined period of time by one of:
deleting the decrypted data; and
overwriting the decrypted data with different data.

17. The apparatus according to claim 12 , wherein the decrypted data is stored in volatile memory while the decrypted data is used without storing the decrypted data in non-volatile memory.

18. The apparatus according to claim 12 , wherein the termination module is further configured to prevent access to the quantum encryption key after the second quantum encryption key is used to decrypt the encrypted data on the second device, the termination module overwriting at least a portion of the second quantum encryption key.

19. The apparatus according to claim 12 , further comprising an error module configured to detect an error in the quantum information transmitted over the second quantum communication channel, the error indicating that the quantum

Assignees

• Boeing Co

Inventors

• Howe Wayne R
• Hunt Jeffrey H

Classifications

• H04L9/0858

  Details about key distillation or coding, e.g. reconciliation, error correction, privacy amplification, polarisation coding or phase coding · CPC title

• H04L9/0852 Primary

  Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03) · CPC title

• H04L1/0041

  Arrangements at the transmitter end · CPC title

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L1/00

  Arrangements for detecting or preventing errors in the information received {(correcting synchronisation H04L7/00)} · CPC title