融合量子密钥的内网文件加密系统

随着量子计算技术快速发展,基于计算复杂性的加密技术正面临着巨大的威胁,单一的防火墙技术无法完全阻止黑客的侵入和发自内网的攻击。采用防火墙与量子保密通信技术相结合的策略,能够有效解决上述问题。文中设计了一种基于量子密钥的局域网内文件安全系统,使用量子密钥并结合"一次一密"的方式对局域网内部隐私文件进行加密,能够有效防范文件失窃带来的损失。系统包括2个部分：以文件处理单元为核心的客户端软件,以加/解密信息管理模块为核心部件的服务器。为了增加密文的复杂性、密钥的存储安全性、计算可行性,提出了密文混合拼接、弱口令错位置乱、密钥智能匹配3种密钥处理方法,有效提高了系统的整体安全性。经系统功能测试与网络仿真分析,验证了系统的有效性、安全性及可行性。

Intranet file encryption system fused with quantum key

With the rapid development of quantum computing technology, encryption technology based on computational complexity is facing a huge threat, and single firewall technology cannot completely prevent hackers from intruding and attacks from the Intranet. The strategy which combines the firewall and quantum private communication technology can solve the above problems effectively. This paper designs a file security system in LAN based on quantum key, using quantum key to encrypt the internal privacy files of the LAN and one-time-pad encryption method can effectively prevent the loss caused by file stolen. The system is composed of two parts:the client software with the file processing unit as the core, and the server with the encryption/decryption information management module as the core component. In order to increase the complexity of ciphertext, the security of key store and the calculation feasibility, this paper proposes three key processing methods:mixed ciphertext splicing, misplaced mixing of weak password and intelligent matching of quantum key, which effectively improve overall security of the system. The effectiveness, security and feasibility of the system are verified by the system function test and network simulation analysis.