基于量子密钥分发系统的TCP/IP模块实现  

An Implementation of TCP/IP Module Based on Quantum Key Distribution System

作　　者：林弘伟 杨灿美 林福江[1] LIN Hong-wei;YANG Can-mei;LIN Fu-jiang(Micro-/Nano-Electronic System Integration Center,University of Science and Technology of China, Hefei 230026,China;QuantumCTek Co.,Ltd.,Hefei 230088,China)

机构地区：[1]中国科学技术大学微纳电子系统集成研究中心,安徽合肥230026 [2]科大国盾量子技术股份有限公司,安徽合肥230088

出　　处：《微电子学与计算机》2019年第1期74-78,共5页Microelectronics & Computer

摘　　要：量子保密通信设备集成化是目前的趋势,而量子密钥分发系统是其中的关键.本文针对该系统中对安全性和系统性能的需求,提出了一种基于硬件的TCP/IP协议处理结构.该结构采用数字电路设计方法,实现了TCP/IP协议中网络层和传输层的相关功能,并通过AHB接口集成到系统芯片中.该结构作为独立的网络数据处理模块能够减轻CPU的计算负担,同时设置该模块以自定义端口方式工作,将量子域与经典网络隔离,降低密钥泄露风险.测试结果显示该结构可达到450Mbps的数据吞吐率,能够满足量子密钥分发中网络带宽的需求.The integration of the quantum cryptography communication devices is a current trend,and quantum key distribution system is a crucial part.In this paper,a hardware based TCP/IP protocol processing structure is proposed to meet the requirements of the security and system performance in the design of quantum key distribution chip.The structure realizes the functions of the network layer and transport layer in the TCP/IP protocol by digital circuit design method,and it can be integrated into the system chip through the AHB interface.As an independent network processing module,this structure can reduce the computing burden of CPU.At the same time,by setting the module to work in a custom port mode and isolating the quantum domain from the classical network,the risk of key disclosure will be reduced.The test results show that the structure can achieve data throughput of 450 Mbps, and it can meet the demand of network bandwidth in quantum key distribution.

关 键 词：TCP/IP协议 硬件实现 保密通信 量子密钥分发 

分 类 号：TN492[电子电信—微电子学与固体电子学]