Forwarding device, key management server device, communication system, forwarding method, and computer program product

Patent metadata

Field	Value
Publication number	US-2022150059-A1
Application number	US-202117463238-A
Country	US
Kind code	A1
Filing date	Aug 31, 2021
Priority date	Nov 6, 2020
Publication date	May 12, 2022
Grant date	—

Abstract

According to an embodiment, a forwarding device, which is connected to a key management server device configured to generate a decryption key by using quantum key distribution, includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: receive information specifying a decryption target packet from a mobile phone network management server device; receive a reception packet; decrypt the reception packet when the reception packet is the decryption target packet specified from the mobile phone network management server device; and forward the decrypted reception packet or the undecrypted reception packet.

First claim

What is claimed:

1 . A forwarding device connected to a key management server device configured to generate a decryption key by using quantum key distribution, the forwarding device comprising
a memory; and one or more processors coupled to the memory and configured to: receive information specifying a decryption target packet from a mobile phone network management server device; receive a reception packet; decrypt the reception packet when the reception packet is the decryption target packet specified from the mobile phone network management server device; and forward the decrypted reception packet or the undecrypted reception packet.

2 . The device according to claim 1 , wherein
the one or more processors are configured to decrypt the reception packet by using a decryption key supplied from the key management server device without transmitting a request to generate the decryption key to the key management server device when the reception packet is the decryption target packet.

3 . The device according to claim 1 , wherein
the mobile phone network management server device is a core network device included in backhaul in a mobile phone network.

4 . The device according to claim 3 , wherein
the one or more processors are configured to receive the information specifying the decryption target packet as some of Quality of Service (QoS) parameters of packet communication from the mobile phone network management server device.

5 . A forwarding device connected to a key management server device configured to generate an encryption key by using quantum key distribution, the forwarding device comprising:
a memory; and one or more processors coupled to the memory and configured to: receive information specifying an encryption target packet from a mobile phone network management server device; receive a reception packet; transmit a request to generate an encryption key to the key management server device and encrypt the reception packet by using the encryption key supplied from the key management server device, when the reception packet is the encryption target packet; and forward the encrypted reception packet or the unencrypted reception packet.

6 . A key management server device connected to a forwarding device, the key management server device comprising:
a memory; and one or more processors coupled to the memory and configured to: share a bit string by quantum key distribution; generate an encryption key for encrypting an encryption target packet from the bit string in response to a request to generate the encryption key transmitted from the forwarding device when a mobile phone network management server device specifies the encryption target packet for the forwarding device; and transmit a control signal including key identification information identifying the encryption key and a key length indicating a length of the encryption key to a counterpart key management server device.

7 . A communication system comprising:
a mobile phone network management server device; a first key management server device; a second key management server device; a first forwarding device; and a second forwarding device, the first forwarding device comprising:
a first memory; and
one or more first processors coupled to the first memory and configured to:
receive information specifying an encryption target packet from the mobile phone network management server device;
receive a first reception packet through a first network;
transmit a request to generate an encryption key to the first key management server device and encrypt the first reception packet by using the encryption key supplied from the first key management server device, when the first reception packet is the encryption target packet; and
forward the encrypted first reception packet or the unencrypted first reception packet to the second forwarding device through a second network,
the first key management server device comprising:
a second memory; and
one or more second processors coupled to the second memory and configured to:
share a bit string by quantum key distribution;
generate the encryption key for encrypting the encryption target packet from the bit string in response to the request to generate the encryption key transmitted from the first forwarding device when the mobile phone network management server device specifies the encryption target packet for the first forwarding device; and
transmit a control signal including key identification information identifying the encryption key and a key length indicating a length of the encryption key to the second key management server device,
the second forwarding device comprising:
a third memory; and
one or more third processors coupled to the third memory and configured to:
receive a second reception packet through the second network;
decrypt the second reception packet when the second reception packet is a decryption target packet; and
forward the decrypted second reception packet or the undecrypted second reception packet, and
the second key management server device comprising:
a fourth memory; and
one or more fourth processors coupled to the fourth memory and configured to:
share the bit string by quantum key distribution;
receive the control signal;
generate a decryption key corresponding to the encryption key from the bit string based on the key identification information and the key length, upon receiving the control signal without waiting for a request to generate the decryption key from the second forwarding device; and
supply the decryption key to the second forwarding device.

8 . A computer program product comprising a non-transitory computer-readable medium including programmed instructions, the instructions causing a forwarding device, which is connected to a key management server device configured to generate a decryption key by using quantum key distribution, to execute:
receiving information specifying a decryption target packet from a mobile phone network management server device; receiving a reception packet; decrypting the reception packet when the reception packet is the decryption target packet specified from the mobile phone network management server device; and forwarding the decrypted reception packet or the undecrypted reception packet.

Assignees

• Toshiba Kk

Inventors

• Tanaka Yasuyuki
• Yamaura Takahiro
• Tanizawa Yoshimichi

Classifications

• H04L9/0855

  involving additional nodes, e.g. quantum relays, repeaters, intermediate nodes or remote nodes · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• H04W12/009

  specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks · CPC title

• H04L9/0852 Primary

  Quantum cryptography (transmission systems employing electromagnetic waves other than radio waves, e.g. light, infrared H04B10/00; wavelength-division multiplex systems H04J14/02; WDM arrangements H04J14/03) · CPC title

• H04L47/24

  Traffic characterised by specific attributes, e.g. priority or QoS · CPC title