Kabushiki Kaisha Toshiba

Yoshimichi Tanizawa

Ririka Takahashi

Hideaki Sato

Naoki Esaka

Akira Murakami

Kazuaki Doi

Tsutomu Shibata

Shinichi Baba

Alex Dixon

Shinichi Kawamura

Takeshi Ishihara

Kotaro Ise

Yasuyuki Tanaka

Eiji Kamagata

Mamiko Kujiraoka

Shinya Murai

Masataka Goto

Takaomi Murakami

Yuichiro Oyama

Yasuhiro Fujiyoshi

Yu Yu

Masahiro Takagi

Yasuhiro Katsube

Takahiro Yamaura

Mari Matsumoto

Masashi Ito

Tsuyoshi Kogawa

Keisuke Mera

Katsuyuki Kimura

Koji Kanazawa

Naohisa Shibuya

Alexander Dixon

Toshiki Nakashima

Mitsuru Kanada

Yoshihiko Kashio

According to an embodiment, a forwarding device, which is connected to a key management server device configured to generate a decryption key by using quantum key distribution, includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: receive information specifying a decryption target packet from a mobile phone network management server device; receive a reception packet; decrypt the reception packet when the reception packet is the decryption target packet specified from the mobile phone network management server device; and forward the decrypted reception packet or the undecrypted reception packet.

Forwarding device, key management server device, communication system, forwarding method, and computer program product

A key management device according to an embodiment includes one or more hardware processors configured to function as a determination unit, a generation unit, and a supply unit. The determination unit determines a type of request data requested by a request message transmitted from an application that performs encrypted data communication. The generation unit generates a response message including at least one of a random number and an encryption key shared by quantum key distribution (QKD) via a communication network according to a type of the request data. The supply unit supplies the response message to the application.

Key management device, quantum cryptography communication system, and computer program product

According to an embodiment, a quantum cryptography communication system includes a quantum cryptography communication device and a key management device. The quantum cryptography communication system includes a generated information supply unit, a reception unit, a determination unit, and a global key supply unit. The generated information supply unit is configured to supply generated information generated by quantum key distribution processing, to the key management device. The reception unit is configured to receive the generated information from the quantum cryptography communication device. The determination unit is configured to determine a ratio at which the generated information is used for a global key random number for each encrypted data communication destination. The global key supply unit is configured to supply a global key generated from the global key random number to an application connected to the key management device.

Quantum cryptography communication system, quantum cryptography communication device, key management device, and computer program product

A key management device according to an embodiment is for managing an application key used for encrypting communication of a user network including cryptographic applications. The key management device includes a plan acquisition unit, a plan execution unit, a communication unit, and a provision unit. The plan acquisition unit acquires a key distribution plan formulated based on state information indicating a state of the user network. The plan execution unit determines a distribution amount of the application key for each key sharing destination corresponding to a destination cryptographic application based on the key distribution plan. The communication unit encrypts the application key using a link key generated by QKD, and transmits the encrypted application key to the key sharing destination. The provision unit provides the application key in response to a request from the cryptographic application.

Key management device, quantum cryptography communication system, and program

A key management device according to an embodiment is a key management device managing an application key for encrypting a communication in an application network including a plurality of applications. The key management device includes a hardware processor configured to function as a collection unit, a calculation unit, a determination unit, and a communication unit. The collection unit collects, using quantum key distribution (QKD), resource information indicating a resource of a link for which a link key is generated. The calculation unit calculates metric for a key relay route including the link on the basis of the resource information. The determination unit determines a key relay route from among a plurality of key relay routes on the basis of the metric. The communication unit uses the key relay route determined by the determination unit to send, to a destination, an application key encrypted with the link key.

According to an embodiment, a quantum cryptography storage system includes a plurality of storage, a distribution control device, and a distribution device. The plurality of storage devices are connected via a communication network. The distribution control device determines a distribution mode of shares into which data is distributed, based on quantum key distribution network (QKDN) information. The generation device generates an encryption key and a decryption key by using a quantum key shared by using a QKDN. The distribution device distributes the data into the shares, based on the distribution mode. When receiving a share encrypted using the encryption key via the communication network, each of the plurality of storage devices that stores the shares in a distributed manner decrypts the share encrypted with the decryption key and stores a share decrypted.

Quantum cryptography storage system, distribution control device, and computer program product

According to an embodiment, a quantum cryptographic device includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: tabulate information on an application key transmitted and received by using a quantum cryptographic key and output an application-key information tabulation result; calculate a unit price of the application key based on the application-key information tabulation result; and display information that is display information including the unit price of the application key.

Quantum cryptographic device, quantum cryptographic communication fee calculation system, and quantum cryptographic communication fee calculation method

A quantum-cryptographic-communication system according to an embodiment includes a key-integrated-management device, quantum-cryptography devices, and key-management-inspection devices. An inspection-target-value-calculating unit calculates an inspection-target value based on quantum-cryptography-device information related to a quantum-cryptography device. An expected-value-calculating unit calculates an expected value based on at least one of wiring information of a QKD link connected to the inspection-target-quantum-cryptography device; weather information of the site installed with the inspection-target-quantum-cryptography device; and the quantum-cryptography-device information. A permissible-value-calculating unit calculates a permissible value based on at least one of the wiring information, the weather information, and the quantum-cryptography-device information. A determining unit determines whether the inspection-target value is within the range of (expected value)−(permissible value) and within the range of (expected value)+(permissible value); and, when the inspection-target value is outside the range of (expected value)−(permissible value) and outside the range of (expected value)+(permissible value), transmits anomaly detection to a key integrated management device.

Quantum cryptographic communication system, key management inspection device, key management inspection method, and computer program product

According to an embodiment, a communication device includes one or more processors. The processors share encryption keys with a plurality of external communication devices. The processors, based on residual quantities of the encryption keys, decide on a route for sending transmission data. The processors encrypt, for each external communication device of one or more external communication devices included in the route, a header in which the external communication device is set as a destination, using an encryption key shared with the external communication device. The processors generate a packet that includes the transmission data and encrypted headers for the one or more external communication devices. The processors send the generated packet along the route.

Communication device, communication method, and communication system

According to an embodiment, a communication device includes a plurality of communication processors, and one or more processors. Each of the communication processors is configured to generate an encryption key by quantum key distribution with an external communication device, encrypt data by using the generated encryption key, and transmit the data to the external communication device. The one or more processors are configured to: divide data requested to be transmitted by an application into a plurality of pieces of transmission data; and determine, from among the plurality of communication processors, one or more communication processors to be used for transmission of the divided plurality of pieces of the transmission data.

Communication device, computer program product, and communication system using quantum key distribution

According to an embodiment, an application-key management system includes a plurality of application-key management devices and a comprehensive management device. The application-key management devices each include: a first memory configured to store an application key in one or more separated logical drives for each sharing destination of the application key shared by quantum cryptographic communication; and a first processor coupled to the first memory. The first processor is configured to: receive, from the comprehensive management device, a deletion request of specifying a logical drive storing the application key to be deleted among the logical drives; and delete the application key stored in the logical drive specified by the deletion request.

Application-key management system, application-key management device, application-key management method, and computer program product

A communication device includes a plurality of key distributing units, a plurality of communicating units, a monitoring unit, and a switching unit. The plurality of key distributing units have a quantum key distribution function for sharing a quantum key with an external distribution device. The plurality of communicating units communicate with an external communication device using the quantum key. The monitoring unit monitors operational status indicating at least one of transmission-reception status of photons in the quantum key distribution function, generation status of generating the quantum key, and obtaining status of obtaining the quantum key. The switching unit switches a control target, which either represents one of the key distributing units or represents one of the communicating units, from a first control target to a second control target other than the first control target according to the operational status.

Communication device, communication method, and communication method for performing communication using shared quantum key

According to an embodiment, a quantum communication device is adapted to correct first sift key data acquired by performing sift processing with respect to a quantum bit string received from a transmission device via a quantum communication path. The quantum communication device includes a determination unit and a correction unit. The determination unit determines setting information of error correction on the first sift key data from an estimated error rate of the first sift key data and a margin of the estimated error rate. The correction unit generates corrected key data by performing the error correction with the setting information.

Quantum communication device, quantum communication system, and quantum communication method

According to an embodiment, an information processor includes a memory and one or more hardware processors coupled to the memory. The one or more hardware processors are configured to function as a calculating unit, a determining unit, and a generating unit. The calculating unit is configured to calculate a key length. The determining unit is configured to determine a block size corresponding to a unit of processing in key generation and an outputtable size indicating the size of a key outputtable by the key generation. The generating unit is configured to generate a key having the key length by a hash operation using a matrix having a size determined by the block size and the outputtable size.

Growing community of inventors

Yokohama, Japan

Yoshimichi Tanizawa