CN113765660B - A method for on-demand distribution of quantum keys for IoT terminal devices - Google Patents

Abstract

The invention discloses a method for on-demand distribution of quantum keys of Internet of Things terminal equipment, which comprises the following steps: according to the application program request of the Internet of Things; There are two processes: key resource allocation and key pool key resource replenishment; quantitatively consider the quantum key requirements and quantum key security requirements of key requests according to the proportion, determine the queuing response order for key requests with the same arrival time, and carry out Key resource allocation of the key pool; when the remaining amount of keys cannot respond to the key request, the key pool sends a key replenishment request, and performs key relay replenishment as needed; set the high and low thresholds of the key pool, in The free time slot dynamically replenishes the key pool key as needed. The method can reduce the time delay between the arrival of the key request of the Internet of Things application and the completion of the request response, and improve the system efficiency and the ability of the key pool to carry the key request service.

Description

A method for on-demand distribution of quantum keys for IoT terminal devices

technical field

The invention belongs to the technical field of information security, discloses the application of quantum key distribution in the new field, and particularly relates to a method for distributing quantum keys on demand for Internet of Things terminal equipment.

Background technique

In the current IoT system, the traditional cryptographic technology that ensures the security of data transmission has the risk of being cracked by quantum computers. Therefore, it is of great practical significance to apply quantum keys to IoT terminals. Quantum key distribution QKD is based on the quantum unclonable principle and quantum indivisible principle of quantum physics, which can effectively realize the secure generation and distribution of keys. By connecting multiple peer-to-peer QKD systems, a quantum key distribution network is formed, which can provide quantum key services for multiple users.

However, the QKD network will face many unconsidered problems in the application scenario of the Internet of Things. First, since the generation rate of quantum keys is generally low, in the face of a large number of quantum key requests, how to efficiently perform quantum Key resource allocation places high demands. Secondly, the terminal devices connected to the Internet of Things are many and complex, and due to the limitations of the storage and computing capabilities of many terminal devices in the Internet of Things, the efficiency of quantum key distribution in the Internet of Things and the requirements for the Internet of Things terminal devices to obtain encrypted communication The algorithms of quantum keys have put forward high requirements.

In addition, in addition to considering the problem of improving the efficiency of quantum key distribution according to the quantum key request of the application, because of the low efficiency of quantum key generation in the QKD network, the accumulation of quantum key resources will be used to meet the demand for quantum key usage , so the quantum key will be stored in the key pool. For the storage security of quantum keys in the key pool, while considering the allocation of quantum key resources, it is necessary to consider the quantum key replenishment process in the key pool. .

Therefore, reducing the quantum key request response delay according to the requirements of IoT applications, improving system efficiency and even reducing the time cost for IoT terminal devices to receive quantum keys is an urgent problem to be solved.

SUMMARY OF THE INVENTION

In order to solve the above problems, the present invention discloses that in order to efficiently utilize quantum key resources and achieve a balance between QKD network quantum key resources and IoT security requirements, the present invention proposes an on-demand distribution of quantum keys for IoT terminal devices. Method, according to the requirements of the key request, the two processes of key pool key resource allocation and key pool key resource replenishment are completely designed. A method for dynamic on-demand distribution of quantum keys for IoT end devices to respond to IoT application requests more efficiently and securely.

In order to achieve the above purpose, the technical solution adopted in the present invention is: a method for distributing quantum keys on demand for terminal equipment of the Internet of Things, comprising the following steps:

S1, in response to the application request of the Internet of Things, according to the security requirements of the application, quantitatively determine the quantum key security requirements for information encryption between the application and the server;

S2: Quantitatively consider the quantum key requirements and quantum key security requirements of the key request according to the proportion, and calculate the response weight value of the quantum key request of the Internet of Things application;

S3, according to the weight value of the quantum key request, determine the queuing response sequence of the quantum key request with the same arrival time from high to low, and perform key distribution on the remaining quantum key amount of the key pool as needed;

S4, when the remaining quantum key amount cannot respond to the key request, the key pool sends a quantum key replenishment request, and responds to the quantum key replenishment request according to the key request weight value responded by the key pool;

S5, considering the system time slice resources, set two thresholds of the key pool, high and low, when the key pool and the corresponding repeater are in the idle time slot, and the remaining quantum key is lower than the low threshold, the key pool is set. Quantum Key Supplement.

As a further improvement of the present invention, in the step S1, in response to the application program request of the Internet of Things, for the request of the Internet of Things application program, and the light-weight data processing characteristics of the Internet of Things itself, lightweight data collection and message management are adopted, According to the message application security requirements of the application, the security level of the message is classified, and according to different levels, the quantum key security requirements for information encryption between the application and the server are quantitatively determined.

As a further improvement of the present invention, the step S2 further includes:

S21, after the IoT application arrives, multiple IoT terminal devices send multiple quantum key requests to the edge gateway, and the quantum key request requirements need to include quantum key requirements, quantum key security requirements, and both parties to the session. identification and other information;

S22, according to the different requirements of the system for efficiency and security, quantitatively consider the quantum key requirement and the quantum key security requirement of the key request according to the proportion, and calculate the response weight value of the quantum key request.

As a further improvement of the present invention, the step S3 further includes:

S31, after receiving multiple quantum key requests, the edge gateway sorts the response order of the quantum key requests according to the arrival time and the priority of the key request response weight value. When the remaining quantum keys of the key pool QKP When it is sufficient and can meet the quantum key quantity requirement of the arriving key request, it will respond to the quantum key request in the order of the arrival time of the quantum key request, and if the arrival time of the quantum key request is the same, the quantum key request will be responded to the weight value key request;

S32, when the quantum remaining key quantity of the key pool QKP is insufficient and cannot meet the quantum key quantity requirement of the arriving key request, the key pool QKP sends a quantum key supplement application. After the quantum key replenishment of the key pool QKP, the quantum key distribution of the key request will be performed when the remaining quantum key volume of the key pool can meet the quantum key requirement of the key request;

S33 , after the quantum key request is responded to, the edge gateway obtains the quantum key on demand from the corresponding key pool QKP at the edge gateway, generates the wireless key through the wireless channel and encrypts it, and transmits it to the IoT terminal device.

As a further improvement of the present invention, the step S4 further includes:

S41, when the remaining key amount cannot respond to the quantum key request, the key pool sends a quantum key replenishment request, and the quantum key replenishment request needs to include the key pool information, the quantum key demand for the current key request, the quantum key replenishment request, and the quantum key replenishment request. Key security requirements, identities of both parties to the session, etc.;

S42, when the remaining quantum keys of multiple key pools QKP are not enough to provide quantum key services, because the relay keys generated between the optical line terminal OLT and the optical network unit ONU at the same time can only be used for One-to-one quantum key relay, so when processing the QKP quantum key replenishment request of the key pool that arrives at the same time, the quantum key requirements and quantum key security requirements of the key request are quantitatively considered according to the proportion. Calculate the response weight value, and determine the response order of the corresponding key pool quantum key replenishment request according to the response weight value from high to low.

As a further improvement of the present invention, the step S5 further includes:

S51, comprehensively consider the system security and efficiency requirements, and set the high and low thresholds of the quantum key pool;

S52, when the remaining quantum keys of the key pool are too small and lower than the set low threshold, in order to prevent the remaining quantum keys of the key pool QKP from being unable to meet the quantum key requirements of subsequent key requests, when the The key pool and the corresponding repeaters are in idle time slots, and quantum keys are replenished in time;

S53, when the amount of quantum keys remaining in the key pool is too large, which is greater than or equal to the set high threshold, in order to prevent the storage of too many quantum keys for a long time, the security of quantum keys will be reduced, and quantum key replenishment will be stopped. .

Compared with the prior art, the present invention proposes a method for on-demand distribution of quantum keys of Internet of Things terminal equipment. After the quantum key request of the Internet of Things application program arrives, the quantum key for information encryption between the application program and the server is determined. Key security requirements, after the IoT terminal device key request arrives, according to the requirements of the quantum key request, the two processes of key pool key resource allocation and key pool key resource replenishment are completely designed, and the matter is quantitatively considered according to the proportion. Quantum key resources are allocated according to the key requirements and key security requirements of networked application key requests. At the same time, two thresholds, high and low, of the key pool are set to dynamically supplement the quantum keys of the key pool as needed. , so that the system has more efficient key processing efficiency and higher key pool QKP key request bearing capacity, meeting the requirements of IoT applications for storage, computing power and lightweight, while realizing the QKD network quantum key Balance between resources and IoT security needs.

Description of drawings

Fig. 1 is the method step flow chart of the present invention;

Fig. 2 is the working frame diagram of the present invention;

Fig. 3 is the partial flow chart of the response quantum key request of the present invention;

Fig. 4 is the partial flow chart of the response quantum key supplementary request of the present invention;

FIG. 5 is a flow chart of the supplementary part of the quantum key of the key pool of the present invention.

Detailed ways

The present invention will be further clarified below with reference to the accompanying drawings and specific embodiments. It should be understood that the following specific embodiments are only used to illustrate the present invention and not to limit the scope of the present invention. It should be noted that the words "front", "rear", "left", "right", "upper" and "lower" used in the following description refer to the directions in the drawings, and the words "inner" and "outer" ” refer to directions towards or away from the geometric center of a particular part, respectively.

The symbols and their definitions in this scheme are shown in Table 1:

Table 1

This paper proposes an on-demand quantum key distribution method for IoT terminal devices. This method relies on the quantum key distribution QKD network to generate quantum keys to ensure the secure communication of IoT terminal devices. The access network to the edge gateway realizes key distribution based on the passive optical network. The optical line terminal OLT is arranged with a quantum receiver and a trusted quantum relay device. The quantum receiver and the trusted quantum relay device can be controlled by multiple quantum transmitters. Shared, used for key generation, the quantum transmitter is arranged at the ONU of the optical network unit; through wavelength division multiplexing technology and time division multiplexing technology, quantum key distribution is performed in the optical fiber to generate the ONU of the optical network unit and the optical line terminal OLT between the security keys.

In the quantum key distribution QKD network with trusted repeaters, the quantum key is XOR-encrypted by the relay key generated point-to-point, and the quantum key is encrypted and transmitted. The quantum key generated between the optical line terminal OLT and the optical network unit ONU is used to relay the key, and through the trusted quantum repeater, the quantum key from the quantum backbone network is finally used for the session.

The quantum key is stored in the key pool. Based on the software-defined network SDN technology, the quantum key storage device is abstracted and virtualized as a key pool QKP. The key pool QKP exists between any two QKD nodes. The nodes are managed in pairs.

Hereinafter, the technical solutions disclosed in the present invention will be further described in detail through specific steps.

As shown in Figure 1, this paper provides a method for on-demand distribution of quantum keys for IoT terminal devices, including the following steps:

(1) In response to the application request of the Internet of Things, for the request of the Internet of Things application, and the light-weight data processing characteristics of the Internet of Things itself, lightweight data collection and message management are used to classify the security level of the message. According to different levels, quantitatively determine the security requirements of quantum keys when encrypting information between applications and servers.

According to the security requirements of the application, three security levels Sec are provided, which are the lowest security level (Sec=0), the message arrives at most once, and is used for messages that can be lost; the security level is medium (Sec=1), the message is at least If it arrives once, it is guaranteed that the receiver will receive the message, but the message will be repeated; the security level is the highest (Sec=2), and the message only arrives once, which is used for very important and non-repeatable messages. According to the lightweight requirements of the Internet of Things and the consideration of system efficiency, the use of quantum keys is only for the case where the message application service quality requirements are high, that is, in the case of Sec=1 or Sec=2, between the application and the server. When the information is exchanged, the quantum key is used to encrypt the message. In other cases where the security level is low, the message is directly transmitted in plaintext.

(2) When the quantum key request of the IoT application arrives, the edge gateway determines the response sequence of the quantum key request after receiving multiple quantum key requests from the IoT terminal device.

Step (2) includes the following substeps:

(2.1) After the IoT application quantum key request K _Request arrives, multiple IoT terminal devices send multiple quantum key requests K _Request to the edge gateway G1, and the quantum key request K _Request must contain the quantum key requirements Quantum K _qua , quantum key security requirement K _sec , identities of both parties in the session, that is, the session request terminal T1, the session target terminal T2, and the edge gateway G1 corresponding to T1 and the edge gateway G2 corresponding to T2 and other information, that is, K _Request = ( _Kqua , _Ksec ,T1,T2,G1,G2).

(2.2) Because the quantum key request K _Request of the IoT terminal device arrives in a large number in a period of time, it is necessary to sort the response order of the quantum key request K _Request , and the highest priority is the quantum key request K _Request The arrival time t _arr , in the case of the same arrival time t _arr , quantitatively identifies the quantum key requirement K _qua of the quantum key request K _Request and the quantum key security K _sec with a certain response weight value est(K _i ) Requirements, the specific calculation of the weight value est(K _i ) is shown in formula (1):

est(K _i )=(1-ω)lnK _qua +ωln(10-K _sec ) (1)

In formula (2), K _sec ∈ [1,5] and K _sec ∈ N, representing the quantum key request security K _sec requirement, ω ∈ [0,1], representing the system’s response to the quantum key request K _Request The demand for quantum keys K _qua and the security of quantum key services require a trade-off degree of K _sec . Since the system has different requirements for the trade-off degree of quantum key demand and quantum key security, the weights of these two factors are It will change accordingly, by adjusting the size of ω to meet the different requirements of the system for the quantum key requirement K _qua of the quantum key request K _Request and the security requirement K _sec of the quantum key service. The weight values est(K _i ) are arranged in ascending order, the smaller the quantum key demand K _qua is, and the larger the quantum key service security requirement K _sec is, the higher the quantum key request K _Request has a higher response priority.

(3) According to the weight value of the quantum key request, determine the queuing response sequence of the quantum key request with the same arrival time, and distribute the key according to the remaining quantum key amount of the key pool as needed. The algorithm flow is shown in Figure 3.

Step (3) includes the following substeps:

(3.1) After the edge gateway G1 receives multiple key requests, according to the identities of both parties in the session in the quantum key request K _Request , the edge gateway G1 corresponding to the session request terminal T1 and the edge gateway G2 corresponding to the session target terminal T2, from The quantum key is extracted from the corresponding key pool QKP at the edge gateway, the key pool QKP is specifically identified by the index, and the key is based on the edge gateway G1 corresponding to the terminal T1 corresponding to the session application terminal T1 and the edge gateway G2 corresponding to the session target terminal T2 according to the communication request, It is placed in the VK P _1-2 corresponding to the index number, which satisfies the security requirement of one-to-one correspondence between the two communication parties for key resource allocation.

(3.2) According to the algorithm flow, the quantum key of the key pool QKP is distributed in response to the quantum key request K _Request . The response order of the quantum key request is sorted according to the arrival time and the priority of the quantum key request response weight value. When the quantum key request K _Request arrives, determine whether there is a quantum key request K _Request that arrives at the same time as the current quantum key request K _Request (i). If there is a quantum key request K _Request (i) that arrives at the same time as the current quantum key request The other quantum key requests K _Request with the same time _tarr are sorted according to the quantum key requirement K _qua of the request K _Request and the quantum key security K _sec , and the calculated response weight value est(K _i ) is then queued up Waiting for the current quantum key request K _Request (i) to wait for a response; if there is no quantum key request K _Request with the same arrival time _tarr as the current quantum key request K _Request (I), it is directly the current quantum key request K _Request (i) Waiting for a response.

(3.3) When it is the turn of the current quantum key request K _Request (I) to wait for a response, according to the situation of the time slice resources, determine whether the current key pool time slot is occupied, if the time slot where the key pool QKP is located is occupied by the previous quantum The key request K _Request (I-1) is occupied, that is, the time t _get when the last quantum key request K _Request (i-1) obtains the quantum key from the key pool QKP ≥ the current quantum key request K _Request (i) arrival time _tarr , then the current quantum key request K _Request (i) needs to be queued to wait for the time slot to be free, and queued to wait for the quantum key request K _Request (I) to get a response; if the key pool QKP is in an idle time slot, that is The time when the last quantum key request K _Request (i-1) obtained the quantum key from the key pool QKP r _get < the arrival time t _arr of the current quantum key request K _Request (I), then the current quantum key request K _Request (I) gets the response directly.

(3.4) The current quantum key request K _Request (i) is responded, and according to the remaining quantum key amount K _sur of the key pool QKP, it is judged whether the remaining quantum key amount K _sur of the key pool QKP can satisfy the current quantum encryption If the remaining quantum key quantity K _sur of the key pool QKP cannot satisfy the quantum key quantity K _qua of the current quantum key _{request K Request (} i) The requirement of _qua , that is, the quantum key demand quantity K _qua of the current quantum key request K _Request (i) > the remaining quantum key quantity K _sur of the key pool QKP, the quantum key supplement is required, and the key pool QKP sends Quantum Key Supplementary Application. After the quantum key is supplemented by the key pool QKP, the remaining quantum key quantity K _sur of the key pool can meet the quantum key requirement K qua of the current quantum key request K _Request (i), and then the current quantum key quantity K _qua The key distribution of the key request K _Request (i); if the remaining quantum key quantity K _sur of the key pool QKP can meet the requirement of the quantum key demand quantity K _qua of the current quantum key request K _Request (i), namely The quantum key demand quantity K _qua of the current quantum key request K _Request (i) ≤ the remaining quantum key quantity K _sur of the key pool QKP, then the current quantum key request K _Request (i) can be obtained from the key pool QKP Extract the quantum key of the corresponding _Kqua .

(3.5) After the quantum key request is responded to, the edge gateway obtains the quantum key on demand from the corresponding key pool QKP at the edge gateway, and generates the encryption and decryption keys by extracting the channel characteristics on the wireless channel of communication. After the key is encrypted by the encryption key, it is sent to the IoT terminal through the wireless channel, and the IoT mobile terminal obtains the quantum key after decryption.

(4) When the remaining quantum key amount cannot carry the key request, the key pool sends a quantum key supplement request, and responds to the quantum key supplement request according to the quantum key request weight value responded by the key pool.

Step (4) includes the following substeps:

(4.1) When the remaining quantum key amount K _sur of the key pool QKP cannot meet the requirement of the quantum key demand amount K _qua of the current quantum key request K _Request (i), it needs to send a message to the optical line terminal OLT and the optical network unit ONU. Quantum Key Supplement Application K _Supplement , the quantum key Supplement Application K _Supplement must include: key pool QKP information, quantum key requirement K _qua of current quantum key request K _Request (i), quantum key security Information such as K _sec , the identities of both parties in the session, that is, the session application terminal T1, the session target terminal T2, and the edge gateway G1 corresponding to T1 and the edge gateway G2 corresponding to T2 are required, that is, K _Supplement = (QKP, K _Request (K _qua , K _sec ,T1,T2,G1,G2)), wait for the relay quantum key to be generated between the optical line terminal OLT and the optical network unit ONU, and respond to the QKP's quantum key replenishment request.

(4.2) Because the quantum key supplementary request K _Supplement of the key pool QKP arrives in a large number in a period of time, it is necessary to sort the response order of the quantum key request K _Supplement , and the highest priority is the quantum key request K _Supplement When the _{arrival time Tarr is} the same, because the relay quantum key generated between the optical line terminal OLT and the optical network unit ONU at the same time can only perform one-to-one quantum key relay, When processing the quantum key supplement request K _Supplement of the key pool QKP arriving at the same time, according to the algorithm process, weigh the quantum key demand K _qua of the quantum key request K _Request and the security requirement K _sec of the quantum key service. , determine the order of quantum key supplementary consideration for the key pool QKP. A certain weight est(K _i ) is used to quantitatively identify the quantum key requirement K _qua of the quantum key request K _Request and the requirement of quantum key security K _sec . The specific calculation of the weight est(K _i ) is as shown in formula (3). Show:

est(K _i )=(1-ω)lnK _qua +ωln(10-K _sec ) (3)

In formula (3), K _sec ∈ [1,5] and K _sec ∈ N, representing the quantum key request security K _sec requirement, ω ∈ [0,1], representing the system’s response to the quantum key request K _Request The demand for quantum keys K _qua and the security of quantum key services require a trade-off degree of K _sec . Since the system has different requirements for the trade-off degree of quantum key demand and quantum key security, the weights of these two factors will be With the change, the size of ω can be adjusted to meet the different requirements of the system for the quantum key requirement K _qua of the quantum key request K _Request and the security requirement K _sec of the quantum key service. The weights est(K _i ) are arranged in ascending order, the smaller the quantum key demand K _qua is, the larger the quantum key service security requirement K _sec is, the higher the quantum key request K _Request has a higher priority, the corresponding quantum key The key supplementary request K _Supplement will be answered sooner.

(4.3) According to the algorithm flow, the quantum key of the key pool QKP is supplemented in response to the quantum key supplement request K _Supplement , and the algorithm flow is shown in Fig. 4 . According to the arrival time and the priority of the response weight value of the quantum key replenishment request, the response order of the quantum key replenishment request is sorted. When the quantum key supplement request arrives at K _Supplement , determine whether there is a quantum key request K _Supplement that arrives at the same time as the current quantum key _{supplement request K Supplement (} i). ) of other quantum key supplementary requests K _Supplement consistent with the arrival time _Tarr , and then according to the quantum key demand K _qua and quantum key security K _sec of the quantum supplementary request K _Supplement , the calculated response weight value est(K _i ) sort, then queue up to wait for the current quantum supplementary key request K _Supplement (i) to wait for a response; if there is no quantum key supplementary request K that arrives at the same time _Tarr as the current quantum key supplementary request K _Supplement (i) _Supplement , it is directly the turn of the current quantum key to request K _Supplement (i) and wait for a response.

(4.4) When it is the turn of the current quantum key request K _Supplement (i) Wait for the response, according to the time slice resources, determine whether the time slot of the current optical line terminal OLT and the ONU of the optical network unit is occupied. The time slot where the unit ONU is located is occupied by the last quantum key supplement request K _Supplement (i-1), that is, the time T _get ≥ the current quantum key obtained by the previous QKP quantum key supplement request K _Supplement (i-1) The arrival time _Tarr of the key supplement request K _Supplement (i), then the pre-quantum key request K _Supplement (i) needs to queue up to wait for the time slot to be free, and queue up to wait for the quantum key supplement request K _Supplement (i) to get a response; The idle time slot where the line terminal OLT and the ONU are located, that is, the time when the last QKP quantum key supplement request K _Supplement (i-1) obtained the quantum key T _get < the current quantum key supplement request K _Supplement (i) When the time _Tarr is reached, the current quantum key supplement request K _Supplement (i) is directly responded without waiting in line.

(4.5) The current quantum key request K _Request (i) is responded to, and the relay quantum key generated between the optical line terminal OLT and the optical network unit ONU performs a one-to-one quantum key relay to complete the key pool. Key supplement.

(5) Considering the system time slice resources, set the high and low thresholds of the key pool. When the key pool and the corresponding repeater are in idle time slots, and the remaining quantum key amount is lower than the low threshold, the key pool is executed. Quantum Key Supplement.

Step (5) includes the following sub-steps:

(5.1) When the key pool QKP, the optical line terminal OLT and the ONU of the optical network unit are in idle time slots, perform dynamic quantum key supplementation for the key pool QKP, comprehensively consider the system security and efficiency requirements, and set the key pool QKP The two thresholds, a low threshold K _{threshold_low} and a high threshold K _{threshold_high} .

(5.2) According to the algorithm flow, perform quantum key supplementation on the key pool QKP, as shown in Figure 5. According to the situation of the time slice, it is judged whether the key pool is in an idle time slot. When the key pool QKP is in an idle time slot, it is judged whether the remaining quantum quantity K _sur of the key pool QKP is lower than the low threshold K _{threshold_low} , when the remaining quantum key When the quantity K _sur is too small and is lower than the set low threshold K _{threshold_low} , in order to prevent the remaining quantum key quantity K _sur of the key pool QKP from being unable to meet the quantum key demand quantity K _qua of the subsequent quantum key request K _Request , when The key pool and the corresponding repeaters are in idle time slots, and quantum keys are replenished in time.

(5.3) After satisfying the key replenishment conditions of the key pool QKP, determine whether the current optical line terminal OLT and the ONU of the optical network unit are in idle time slots, and if the current optical line terminal OLT and the optical network unit ONU time slots are idle, perform key replenishment .

(5.4) Judging whether the remaining quantum key amount K _sur of the key pool QKP is higher than the high threshold K _{threshold_high} , when the remaining quantum key amount K _sur is too much and is higher than the set high threshold K _{threshold_high} , in order to prevent the excessively long time , too much quantum key storage will reduce the security of quantum keys, and will stop quantum key replenishment.

The technical means disclosed in the solution of the present invention are not limited to the technical means disclosed in the above embodiments, but also include technical solutions composed of any combination of the above technical features.

Claims (6)

1. a method for distributing quantum keys on demand for Internet of Things terminal equipment, is characterized in that: comprise the steps: S1, in response to the application request of the Internet of Things, according to the security requirements of the application, quantitatively determine the quantum key security requirements for information encryption between the application and the server; S2: Quantitatively consider the quantum key requirements and quantum key security requirements of the key request according to the proportion, and calculate the response weight value of the quantum key request of the Internet of Things application; S3, according to the weight value of the quantum key request, determine the queuing response sequence of the quantum key request with the same arrival time from high to low, and perform key distribution on the remaining quantum key amount of the key pool as needed; S4, when the remaining quantum key amount cannot respond to the key request, the key pool sends a quantum key replenishment request, and responds to the quantum key replenishment request according to the quantum key request weight value responded by the key pool; S5, considering the system time slice resources, set two thresholds of the key pool, high and low, when the key pool and the corresponding repeater are in the idle time slot, and the remaining quantum key is lower than the low threshold, the key pool is set. Quantum Key Supplement. 2. A method for on-demand distribution of quantum keys for Internet of Things terminal equipment as claimed in claim 1, characterized in that: in the step S1, in response to the application request of the Internet of Things, for the request of the Internet of Things application, the combination of the The networking itself has the characteristics of lightweight data processing. It adopts lightweight data collection and message management. According to the application's message application security requirements, the security level of the message is classified, and the relationship between the application and the server is quantitatively determined according to different levels. Quantum key security requirements for information encryption. 3. The method for on-demand distribution of quantum keys for Internet of Things terminal equipment as claimed in claim 1, wherein the step S2 further comprises: S21, after the IoT application arrives, multiple IoT terminal devices send multiple quantum key requests to the edge gateway. The quantum key request needs to include quantum key requirements, quantum key security requirements, and the identities of both parties to the session. identifying information; S22 , according to the different requirements of the system for efficiency and security, quantitatively consider the quantum key requirement and the quantum key security requirement of the quantum key request according to the proportion, and calculate the response weight value of the quantum key request. 4. The method for on-demand distribution of quantum keys for Internet of Things terminal equipment as claimed in claim 1, wherein the step S3 further comprises: S31, after receiving multiple quantum key requests, the edge gateway sorts the response order of the quantum key requests according to the arrival time and the priority of the key request response weight value; S32, when the remaining quantum key amount of the key pool QKP is insufficient, the edge gateway sends a quantum key replenishment request of the key pool QKP, and responds to the quantum key request when the remaining quantum key amount of the key pool QKP meets the requirements; S33, after the quantum key request is responded to, the edge gateway obtains the quantum key from the corresponding key pool QKP at the edge gateway on demand, generates the wireless key through the wireless channel, encrypts it, and transmits it to the IoT terminal device. 5. The method for on-demand distribution of quantum keys for Internet of Things terminal equipment as claimed in claim 1, wherein the step S4 further comprises: S41, when the remaining key amount cannot respond to the quantum key request, the key pool sends a quantum key replenishment request, and the quantum key replenishment request needs to include the key pool information, the quantum key demand for the current quantum key request, Quantum key security requirements, information on the identities of both parties to the session; S42, when the remaining quantum keys of multiple key pools QKP are not enough to provide quantum key services, when processing the quantum key replenishment request of the key pool QKP arriving at the same time, the key is quantitatively considered according to the proportion The requested quantum key demand and quantum key security requirements, calculate the response weight value, determine the response order of the key pool quantum key replenishment request according to the response weight value from high to low, and perform the quantum key of the key pool. Supplementary resources. 6. The method for on-demand distribution of quantum keys for Internet of Things terminal equipment as claimed in claim 1, wherein the step S5 further comprises: S51, comprehensively consider the system security and efficiency requirements, set the high and low thresholds of the quantum key pool; when the key pool QKP, the optical line terminal OLT and the optical network unit ONU are in idle time slots, perform dynamic quantum quantum analysis on the key pool QKP Key supplement, set two thresholds of the key pool QKP, a low threshold K _{threshold_low} and a high threshold K _{threshold_high} ; S52, perform quantum key supplementation on the key pool QKP, and determine whether the key pool is in an idle time slot according to the situation of the time slice, and when the key pool QKP is in an idle time slot, determine the remaining quantum quantity K _sur of the key pool QKP Whether it is lower than the low threshold K _{threshold_low} , when the remaining quantum key amount K _sur is too small and is lower than the set low threshold K _{threshold_low} , in order to prevent the remaining quantum key amount K _sur of the key pool QKP from being unable to satisfy subsequent quantum key requests The quantum key requirement of K _Request K _qua requires that when the key pool and the corresponding repeater are in the idle time slot, the quantum key is replenished in time; S53, after satisfying the key pool QKP to carry out key replenishment conditions, determine whether the current optical line terminal OLT and the optical network unit ONU are in idle time slots, and if the current optical line terminal OLT and the optical network unit ONU time slots are idle, then carry out key replenishment; S54, determine whether the remaining quantum key amount K _sur of the key pool QKP is higher than the high threshold K _{threshold_high} , when the remaining quantum key amount K _sur is too large and is higher than the set high threshold K _{threshold_high} , in order to prevent excessive time, Excessive quantum key storage will reduce quantum key security and will stop quantum key replenishment.

Images