An experimental demonstration of long-haul public-channel key distribution using matched superlattice physical unclonable function pairs  

基于超晶格PUF孪生子的公共信道远距离密钥分发实验验证

作　　者：Han Wu Zhizhen Yin Xinhai Tong Peng Ding Jianguo Xie Liubao Wang Peihua Liu Helun Song Xiaoming Chen Liwei Xu Shu Xu Yaohui Zhang 吴涵;殷志珍;童新海;丁朋;解建国;王留宝;刘佩华;宋贺伦;陈小明;徐莉伟;徐述;张耀辉(School of Nano Technology and Nano Bionics,University of Science and Technology of China,Hefei 230026,China;Key Laboratory of Nanodevices and Applications,Suzhou Institute of Nano-Tech and Nano-Bionics,Chinese Academy of Sciences(CAS),Suzhou 215123,China;Beijing Electronic Science and Technology Institute,Beijing 100070,China;North Institute of Information Technology,Beijing 100072,China)

机构地区：[1]School of Nano Technology and Nano Bionics,University of Science and Technology of China,Hefei 230026,China [2]Key Laboratory of Nanodevices and Applications,Suzhou Institute of Nano-Tech and Nano-Bionics,Chinese Academy of Sciences(CAS),Suzhou 215123,China [3]Beijing Electronic Science and Technology Institute,Beijing 100070,China [4]North Institute of Information Technology,Beijing 100072,China

出　　处：《Science Bulletin》2020年第11期879-882,M0003,共5页科学通报（英文版）

基　　金：This work was supported by the National Key Research and Development Program of China(2016YFE0129400);Youth Innovation Promotion Association(2016290);Strategic Priority Research Program of the Chinese Academy of Sciences(XDC02010800);National Cryptography Development Fund during the 13th Five-Year Plan Period(MMJJ20180112).

摘　　要：In a perfect security case of symmetric encryption,the secure key is generated from a true random number generator and cannot be reused.Moreover,it has the same code length as the total message.Furthermore,we require the secure key to be distributed by employing unconditionally secure methods.Apart from quantum secure direct communication(QSDC)that directly achieves the confidential transmission of secure information over a quantum channel without key distribution procedure[1–3],secure key generation and secure key distribution(SKD)are the two most remarkable challenges restricting the efficiency and security of a cryptosystem[4]in conventional secure communication systems.半导体超晶格具备物理不可克隆函数(PUF)特性和孪生特性.由配对的超晶格PUF孪生子搭建的超晶格密钥分发系统,包括密钥产生和密钥重建两部分.原始密钥由超晶格PUF孪生子分别在本地生成,仅借助公共信道即可实现异地间的密钥完全一致共享.将超晶格密钥分发系统部署在北京和苏州,利用互联网实现两地间的密钥产生和密钥重建功能,系统安全成码率超过7 Mbps,密钥通过了NIST随机性测试套件的全部测试项.基于超晶格PUF孪生子的密钥分发仅利用公共信道便可实现远距离两地间的随机数产生和排他性共享,密钥分发速率达到Mbps量级,且仍具备很大提升潜力.这种基于物理内秉安全因子的密钥分发方法可降低密钥管理风险,与其他对称密钥分发方法相比,具备较高的实用性和性价比.

关 键 词：密钥分发 密钥管理 测试套件 系统安全 公共信道 超晶格 安全因子 孪生子 

分 类 号：TN918.1[电子电信—通信与信息系统]