Post-quantum-resistant cryptographic system and methods

Patent metadata

Field	Value
Publication number	US-12206702-B2
Application number	US-202318181324-A
Country	US
Kind code	B2
Filing date	Mar 9, 2023
Priority date	Mar 9, 2023
Publication date	Jan 21, 2025
Grant date	Jan 21, 2025

Abstract

Aspects of the subject disclosure may include, for example, a device that has a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations of performing a packet analysis of protocol data unit (PDU) headers of inbound Internet and non-Internet traffic; determining whether the PDU headers identify the presence of a quantum payload and/or via deep packet inspection; detecting a presence of attack vectors in the quantum payload responsive to a determination that the PDU headers identify the presence of the quantum payload, wherein the attack vectors originate from a quantum computer, and wherein the attack vectors are cryptanalytically relevant; generating an alert responsive to detecting the presence of the attack vectors; and isolating compromised network elements, sets of elements, and/or other network components and/or subsystems, and route traffic around the compromised network elements, sets of elements, and/or other network components and/or subsystems. Other embodiments are disclosed.

First claim

What is claimed is:

1. A device, comprising:
a processing system including a processor; and
a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:
performing a packet analysis of protocol data unit (PDU) headers of inbound Internet and non-Internet traffic;
determining whether the PDU headers identify a presence of a quantum payload;
detecting a presence of attack vectors in the quantum payload responsive to a determination that the PDU headers identify the presence of the quantum payload and/or via deep packet inspection, wherein the attack vectors originate from a quantum computer, and wherein the attack vectors are cryptanalytically relevant;
generating an alert responsive to detecting the presence of the attack vectors; and
isolating compromised network elements, sets of elements, and/or other network components and/or subsystems, and route traffic around the compromised network elements, sets of elements, and/or other network components and/or subsystems.

2. The device of claim 1 , wherein the processing system comprises quantum processors.

3. The device of claim 1 , wherein the inbound Internet and non-Internet traffic is conveyed over quantum-classical photonic information channels.

4. The device of claim 1 , wherein the inbound Internet and non-Internet traffic is conveyed over quantum-classical electronic information channels.

5. The device of claim 1 , wherein the PDU headers reflect a plurality of PDU architectural layers.

6. The device of claim 5 , wherein the determining further comprises one or more of handshake, connection establishment, data transfer, retransmission, quantum error correction, and quantum error avoidance patterns that are distinct from classical layer internet and non-internet protocol exchanges and timing.

7. The device of claim 6 , wherein the detecting further comprises artificial intelligence reinforcement learning of attack vectors.

8. The device of claim 7 , wherein the operations further comprise storing the attack vectors detected in a quantum blockchain ledger.

9. A machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
determining whether protocol data unit (PDU) headers received from Internet and non-Internet traffic identify a presence of a quantum payload;
detecting a presence of attack vectors in the quantum payload responsive to a determination that the PDU headers identify the presence of the quantum payload and/or via deep packet inspection, wherein the attack vectors originate from a quantum computer, and wherein the attack vectors are cryptanalytically relevant;
generating an alert responsive to detecting the presence of the attack vectors; and
isolating compromised network elements, sets of elements, and/or other network components and/or subsystems, and route traffic around the compromised network elements, sets of elements, and/or other network components and/or subsystems.

10. The machine-readable medium of claim 9 , wherein the processing system comprises a plurality of processors operating in a distributed computing environment.

11. The machine-readable medium of claim 10 , wherein the processing system comprises quantum processors.

12. The machine-readable medium of claim 9 , wherein the Internet and non-Internet traffic is conveyed over quantum-classical photonic information channels.

13. The machine-readable medium of claim 9 , wherein the Internet and non-Internet traffic is conveyed over quantum-classical electronic information channels.

14. The machine-readable medium of claim 9 , wherein the PDU headers reflect a plurality of PDU architectural layers.

15. The machine-readable medium of claim 14 , wherein the determining further comprises identifying patterns, wherein the patterns are one or more of handshake, connection establishment, data transfer, retransmission, quantum error correction, and quantum error avoidance.

16. The machine-readable medium of claim 15 , wherein the patterns are distinct from classical layer internet and non-internet protocol exchanges and timing.

17. The machine-readable medium of claim 16 , wherein the detecting further comprises artificial intelligence reinforcement learning of attack vectors.

18. The machine-readable medium of claim 17 , wherein the operations further comprise storing the attack vectors detected in a quantum blockchain ledger.

19. A method, comprising:
receiving, by a processing system including a processor, Internet and non-Internet traffic;
determining, by the processing system, whether protocol data unit (PDU) headers of packets in the Internet and non-Internet traffic identify a presence of a quantum payload, wherein the determining performs a packet analysis of the packets;
detecting, by the processing system, a presence of attack vectors in the quantum payload responsive to a determination that the PDU headers identify the presence of the quantum payload and/or via deep packet inspection, wherein the attack vectors originate from a quantum computer and are cryptanalytically relevant, wherein the attack vectors comprise patterns, and wherein the patterns are one or more of handshake, connection establishment, data transfer, retransmission, quantum error correction, and quantum error avoidance;
reporting, by the processing system, an alert responsive to detecting the presence of the attack vectors; and
isolating compromised network elements, sets of elements, and/or other network components and/or subsystems, and route traffic around the compromised network elements, sets of elements, and/or other network components and/or subsystems.

20. The method of claim 19 , wherein the processing system uses artificial intelligence reinforcement to detect unique attack signatures; and wherein quantum federal reinforcement learning agents, responsive to detecting an attack, isolate compromised network elements, sets of elements, and/or other network components and/or subsystems, and route the traffic around the compromised network elements, sets of elements, and/or other network components and/or subsystems.

Assignees

• At & T Ip I Lp
• At & T Mobility Ii Llc

Inventors

• Routt Thomas J
• Stockert Mark

Classifications

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• H04L63/1441 Primary

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title