CN115833986A - Clock synchronization safety monitoring method, device, system and medium - Google Patents

Clock synchronization safety monitoring method, device, system and medium Download PDF

Info

Publication number
CN115833986A
CN115833986A CN202211662784.5A CN202211662784A CN115833986A CN 115833986 A CN115833986 A CN 115833986A CN 202211662784 A CN202211662784 A CN 202211662784A CN 115833986 A CN115833986 A CN 115833986A
Authority
CN
China
Prior art keywords
clock synchronization
quantum
synchronization signal
state optical
equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202211662784.5A
Other languages
Chinese (zh)
Inventor
屈文秀
王光全
张贺
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202211662784.5A priority Critical patent/CN115833986A/en
Publication of CN115833986A publication Critical patent/CN115833986A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Optical Communication System (AREA)

Abstract

The invention provides a clock synchronization safety monitoring method, equipment, a system and a medium, which relate to the technical field of communication safety and are used for solving the problem that the time service result of a clock synchronization system is possibly inaccurate due to attack influence, wherein the method comprises the following steps: acquiring simultaneous driving information according to a clock synchronization signal sent by a clock synchronization signal sending device to a clock synchronization signal receiving device; and sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and acquires monitoring information whether the clock synchronization signal is attacked or not according to the quantum state optical signal. The invention can obtain the safety monitoring information of the clock synchronization signal in time, so that the clock synchronization signal sending equipment and the clock synchronization signal receiving equipment of the clock synchronization system can receive and send the safe clock synchronization signal, thereby obtaining an accurate time service result.

Description

Clock synchronization safety monitoring method, device, system and medium
Technical Field
The present invention relates to the field of communication security technologies, and in particular, to a method, device, system, and computer readable storage medium for monitoring clock synchronization security.
Background
Clock synchronization technology is an important component of applications such as power, communication, industry and finance, and therefore, the safety of clock synchronization is particularly important in the industry fields with clock sensitivity such as production and life and financial government affairs. The existing clock synchronization method adopts a mode of encryption transmission for safety defense in order to ensure safety, however, the traditional key encryption mode is based on the complexity of mathematical computation, and has a defect in dealing with the threat brought by super computing capability, and the time service result of the clock synchronization system is still inaccurate. In addition, at present, no effective defense scheme is still available when the system is faced with physical layer attacks such as delay attack and the like.
Disclosure of Invention
The present invention provides a clock synchronization security monitoring method, device, system and computer readable storage medium, aiming at the above-mentioned deficiencies in the prior art, so as to solve the problems that the prior art is deficient in dealing with the threat brought by super computing capability, and the lack of dealing with the physical layer delay attack may cause inaccurate time service result of the clock synchronization system.
In a first aspect, the present invention provides a clock synchronization security monitoring method, which is applied to a quantum sending end device, and the method includes:
acquiring simultaneous driving information according to a clock synchronization signal sent by a clock synchronization signal sending device to a clock synchronization signal receiving device;
and sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and acquires monitoring information whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Optionally, the acquiring simultaneous driving information according to the clock synchronization signal sent by the clock synchronization signal sending device to the clock synchronization signal receiving device specifically includes:
acquiring simultaneous driving information according to a clock synchronization signal sent by a master device of a clock synchronization system to a slave device of the clock synchronization system; alternatively, the first and second electrodes may be,
and acquiring simultaneous driving information according to a clock synchronization signal sent by the slave device of the clock synchronization system to the master device of the clock synchronization system.
Optionally, the sending of the quantum-state optical signal synchronously transmitted with the clock synchronization signal to the sub-receiving end device according to the simultaneous driving information vector specifically includes:
randomly selecting basis vectors according to the simultaneous driving information to generate quantum state optical signals;
and sending the quantum state optical signal to first wavelength division multiplexing equipment, so that the first wavelength division multiplexing equipment multiplexes the quantum state optical signal and the clock synchronization signal in the same transmission channel and synchronously transmits the signals to second wavelength division multiplexing equipment, and the second wavelength division multiplexing equipment sends the quantum state optical signal to quantum receiving end equipment and sends the clock synchronization signal to clock synchronization signal receiving equipment.
In a second aspect, the present invention provides a clock synchronization security monitoring method, which is applied to quantum receiving end equipment, and the method includes:
receiving a quantum state optical signal synchronously transmitted with a clock synchronization signal, wherein the quantum state optical signal is sent by quantum sending end equipment according to simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end equipment according to the clock synchronization signal sent by the clock synchronization signal sending equipment to clock synchronization signal receiving equipment;
and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Optionally, receiving the quantum-state optical signal transmitted synchronously with the clock synchronization signal specifically includes:
and randomly selecting a basis vector to receive a quantum state optical signal which is transmitted by the second wavelength division multiplexing equipment in synchronization with the clock synchronization signal, wherein the quantum state optical signal is transmitted to the first wavelength division multiplexing equipment by the quantum transmitting terminal equipment, and the quantum state optical signal and the clock synchronization signal are multiplexed in the same transmission channel by the first wavelength division multiplexing equipment and are transmitted to the second wavelength division multiplexing equipment in synchronization.
Optionally, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum-state optical signal specifically includes:
acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum state optical signal; and/or the presence of a gas in the atmosphere,
and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal.
Optionally, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum-state optical signal, specifically including:
negotiating with quantum sending end equipment through a preset quantum key distribution protocol to calculate the bit error rate of the quantum state optical signal;
judging whether the error rate is greater than an error rate threshold value obtained according to parameter estimation of a quantum key distribution protocol;
and if the error rate is greater than the error rate threshold value, generating first alarm monitoring information that the clock synchronization signal is attacked.
Optionally, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to a time difference between an arrival time of the quantum-state optical signal and an arrival time of the clock synchronization signal, specifically including:
when receiving and obtaining the quantum state optical signal, obtaining the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal received by the clock synchronization signal receiving equipment from the clock synchronization signal receiving equipment;
calculating the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal, and judging whether the time difference is greater than a time difference threshold value obtained by statistics according to multiple time difference calculation results in advance;
and if the time difference is larger than the time difference threshold value, second alarm monitoring information that the clock synchronization signal is attacked is generated.
In a third aspect, the present invention provides a quantum transmitting end device, including:
the driving module is used for acquiring simultaneous driving information according to the clock synchronization signal sent by the clock synchronization signal sending equipment to the clock synchronization signal receiving equipment;
and the quantum sending module is connected with the driving module and used for sending the quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and acquires monitoring information about whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
In a fourth aspect, the present invention provides a quantum receiving end apparatus, including:
the quantum receiving module is used for receiving a quantum state optical signal synchronously transmitted with the clock synchronization signal, wherein the quantum state optical signal is sent by the quantum sending end device according to the simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end device according to the clock synchronization signal sent by the clock synchronization signal sending device to the clock synchronization signal receiving device;
and the monitoring module is connected with the quantum receiving module and is used for acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
In a fifth aspect, the present invention provides a clock synchronization security monitoring system, including:
the quantum sending end equipment is used for obtaining simultaneous driving information according to the clock synchronization signal sent to the clock synchronization signal receiving equipment by the clock synchronization signal sending equipment, and sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information;
and the quantum receiving end equipment is connected with the quantum sending end equipment and used for receiving the quantum state optical signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
In a sixth aspect, the present invention provides a secure clock synchronization transmission system, including:
the clock synchronization signal sending equipment is used for sending a clock synchronization signal to the clock synchronization signal receiving equipment;
and the quantum sending end equipment is connected with the clock synchronization signal sending equipment and is used for obtaining the simultaneous driving information according to the clock synchronization signal and sending the quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and obtains monitoring information about whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
In a seventh aspect, the present invention provides a secure clock synchronization receiving system, including:
the quantum receiving end equipment is used for receiving a quantum state optical signal synchronously transmitted with the clock synchronization signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal, wherein the quantum state optical signal is transmitted by the quantum transmitting end equipment according to the simultaneous driving information, and the simultaneous driving information is acquired by the quantum transmitting end equipment according to the clock synchronization signal transmitted by the clock synchronization signal transmitting equipment to the clock synchronization signal receiving equipment;
and the clock synchronization signal receiving equipment is connected with the quantum receiving end equipment and is used for receiving the clock synchronization signal.
In an eighth aspect, the present invention provides a secure clock synchronization system, comprising:
the clock synchronization signal sending equipment is connected with the clock synchronization signal receiving equipment and is used for sending clock synchronization signals to the clock synchronization signal receiving equipment;
the quantum sending end equipment is connected with the clock synchronization signal sending equipment and used for obtaining simultaneous driving information according to the clock synchronization signal and sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information;
the quantum receiving end equipment is connected with the quantum sending end equipment and is used for receiving the quantum state optical signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal;
and the clock synchronization signal receiving equipment is connected with the quantum receiving end equipment and is used for receiving the clock synchronization signal.
In a ninth aspect, the present invention provides a computer-readable storage medium, in which a computer program is stored, and when the computer program is executed by a processor, the clock synchronization security monitoring method as described above is implemented.
The invention provides a clock synchronization safety monitoring method, a device, a system and a computer readable storage medium, wherein a quantum state optical signal synchronously transmitted with a clock synchronization signal is sent by a quantum sending end device, and whether the clock synchronization signal is attacked or not is judged by a quantum receiving end device according to the received quantum state optical signal, so that safety monitoring information of the clock synchronization signal is obtained in time, the clock synchronization signal is safely sent and received between the clock synchronization signal sending device and the clock synchronization signal receiving device of a clock synchronization system, and an accurate time service result is obtained.
Drawings
Fig. 1 is a flowchart of a clock synchronization security monitoring method according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a secure clock synchronization system according to an embodiment of the present invention;
FIG. 3 is a flow chart of another clock synchronization security monitoring method according to an embodiment of the present invention;
fig. 4 is a flowchart of another clock synchronization security monitoring method according to an embodiment of the present invention.
Fig. 5 is a schematic structural diagram of a quantum transmitting end device according to an embodiment of the present invention;
FIG. 6 is a schematic structural diagram of a quantum receiving end device according to an embodiment of the present invention;
FIG. 7 is a flow chart of another clock synchronization security monitoring method according to an embodiment of the present invention;
FIG. 8 is a block diagram of another secure clock synchronization system in accordance with an embodiment of the present invention;
FIG. 9 is a schematic diagram of a secure clock synchronization system according to an embodiment of the present invention;
FIG. 10 is a schematic diagram of a secure clock synchronization system according to an embodiment of the present invention;
fig. 11 is a schematic structural diagram of a secure clock synchronization system according to an embodiment of the present invention.
Detailed Description
In order to make those skilled in the art better understand the technical solution of the present invention, the following detailed description will be made with reference to the accompanying drawings.
It is to be understood that the specific embodiments and figures described herein are merely illustrative of the invention and are not to be considered as limiting.
It is to be understood that the embodiments and features of the embodiments can be combined with each other without conflict.
It is to be understood that, for the convenience of description, only parts related to the present invention are shown in the drawings of the present invention, and parts not related to the present invention are not shown in the drawings.
It should be understood that each unit and module related in the embodiments of the present invention may correspond to only one physical structure, may also be composed of multiple physical structures, or multiple units and modules may also be integrated into one physical structure.
It will be understood that, without conflict, the functions, steps, etc. noted in the flowchart and block diagrams of the present invention may occur out of the order noted in the figures.
It is to be understood that the flowchart and block diagrams of the present invention illustrate the architecture, functionality, and operation of possible implementations of systems, apparatuses, devices and methods according to various embodiments of the present invention. Each block in the flowchart or block diagrams may represent a unit, module, segment, code, which comprises executable instructions for implementing the specified function(s). Furthermore, each block or combination of blocks in the block diagrams and flowchart illustrations can be implemented by a hardware-based system that performs the specified functions or by a combination of hardware and computer instructions.
It should be understood that the units and modules referred to in the embodiments of the present invention may be implemented by software, or may be implemented by hardware, for example, the units and modules may be located in a processor.
In order to facilitate understanding of the present invention, first, the attack faced by the clock synchronization technology and the inventive idea of the present invention will be described.
The security threats faced by the current clock synchronization technology mainly include message attacks and delay attacks. The message attack is a type of attack mode that an attacker acquires a clock synchronization protocol message from a network, modifies a message field and then retransmits the message to a user of the clock synchronization protocol, so that the time difference calculation is deviated, and finally the clock synchronization precision is reduced; aiming at message attack, security defense is mainly performed by information encryption at present, but the traditional key encryption mode is based on the complexity of mathematical computation and cannot deal with the huge threat brought by the super computing capacity of a quantum computer. In the time delay attack, an attacker inserts asymmetric time delay into a unidirectional link to cause time difference calculation deviation, so that the clock synchronization precision is reduced; since an attacker does not need to identify a specific protocol message or field, and only needs to insert all messages on the link into a delay, the attacker cannot defend the link in a correction mode.
With the development of quantum technology, it is possible to improve the security of clock synchronization technology by introducing quantum technology. One idea is to use quantum key distribution to generate keys to encrypt and transmit clock data, because clock signals in a clock synchronization system are afraid of not eavesdropping but tampering, the clock synchronization really concerns about the accuracy of a final time service result, and any attack existing in the middle process can be reflected on the time service result to damage the clock precision, so that if the attack can be monitored to ensure the accuracy of the time service result, the clock data can be encrypted without being encrypted. Another idea is that measuring the arrival clock of the quantum clock signal is used for correcting the local high-precision clock, the precision of the quantum clock needs to be higher than that of the local high-precision clock, and the quantum clock signal needs to be measured in a bidirectional clock manner, which results in higher equipment cost of the quantum system.
The invention provides a clock synchronization safety monitoring method, equipment, a system and a computer readable storage medium, wherein the final purpose is to cause the precision of a clock synchronization system to be degraded or even to refuse service, and the attacks existing in any intermediate process can be reflected on the final time service result, so that the attack aiming at clock synchronization signals is monitored by utilizing the principle of quantum mechanics such as inaccurate Heisenberg measurement and quantum unclonable, namely that the quantum states are changed due to the eavesdropping behavior in the quantum state transmission process, so that correct information carried by the quantum states cannot be obtained, and whether a higher attack mode exists is detected by counting the deviation between the clock signals and the clocks reached by the quantum states.
Example 1:
as shown in fig. 1, the present invention provides a clock synchronization security monitoring method, which is applied to the quantum transmitting end device 2 shown in fig. 2, and the method includes step S21 and step S22.
Specifically, in this embodiment, the clock synchronization security monitoring method utilizes quantum mechanics principles such as quantum state heisenberg inaccurate measurement and quantum unclonable to perform security monitoring on a clock synchronization system, firstly constructs a secure clock synchronization system as shown in fig. 2, and monitors the security of the clock synchronization system by using the quantum security monitoring system, where the system includes: the system comprises a clock synchronization signal sending device 1 to be monitored safely, a quantum sending end device 2 of the clock synchronization signal sending device 1 to be monitored, a clock synchronization signal receiving device 4 to be monitored safely and a quantum receiving end device 3 of the clock synchronization signal receiving device 4 to be monitored. As shown in fig. 2, in the secure clock synchronization system, the clock synchronization signal sending device 1, the quantum sending end device 2, the quantum receiving end device 3, and the clock synchronization signal receiving device 4 may be one or more physical entities, or a plurality of devices may be combined into one physical entity or one system; as shown in fig. 2, the quantum transmitting end device 2 and the quantum receiving end device 3 may form a clock synchronization security monitoring system 01, which may be added to an existing clock synchronization system to implement security monitoring of clock synchronization signals, the clock synchronization signal transmitting device 1 and the quantum transmitting end device 2 may form a secure clock synchronization transmitting system 02 for securely transmitting clock synchronization signals, and the quantum receiving end device 3 and the clock synchronization signal receiving device 4 may form a secure clock synchronization receiving system 03 for securely receiving clock synchronization signals.
The clock synchronization security monitoring method of the secure clock synchronization system shown in fig. 2 is shown in fig. 3, and includes: s1, sending a clock synchronization signal to a clock synchronization signal receiving device 4 by a clock synchronization signal sending device 1; s2, the quantum sending end device 2 obtains simultaneous driving information according to the clock synchronization signal, and sends a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end device 3 according to the simultaneous driving information; s3, receiving the quantum state optical signal by the quantum receiving end equipment 3, and acquiring monitoring information whether the clock synchronization signal is attacked or not according to the quantum state optical signal; s4, receiving a clock synchronization signal by the clock synchronization signal receiving equipment 4; wherein, the steps S1 and S2 are performed synchronously, and the steps S3 and S4 are performed synchronously.
According to the clock synchronization security monitoring method of the secure clock synchronization system shown in fig. 3, it can be known that the clock synchronization security monitoring method of the quantum sending end device 2 is shown in fig. 1, and includes:
s21, acquiring simultaneous driving information according to the clock synchronization signal sent by the clock synchronization signal sending equipment 1 to the clock synchronization signal receiving equipment 4;
and S22, sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end device 3 according to the simultaneous driving information, so that the quantum receiving end device 3 receives the quantum state optical signal and acquires monitoring information about whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
It can also be known that the clock synchronization security monitoring method of the quantum receiving end device 3 is shown in fig. 4, and includes:
s31, receiving a quantum state optical signal synchronously transmitted with a clock synchronization signal, where the quantum state optical signal is sent by the quantum sending end device 2 according to the simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end device 2 according to the clock synchronization signal sent by the clock synchronization signal sending device 1 to the clock synchronization signal receiving device 4;
and S32, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Specifically, in this embodiment, the clock synchronization security monitoring method applied to the quantum transmitting end device 2, the quantum receiving end device 3, and the secure clock synchronization system all transmits a quantum state optical signal transmitted synchronously with the clock synchronization signal through the quantum transmitting end device 2, and the quantum receiving end device 3 determines whether the clock synchronization signal is attacked according to the received quantum state optical signal, so as to obtain security monitoring information of the clock synchronization signal in time, so that the secure clock synchronization signal is transmitted and received between the clock synchronization signal transmitting device 1 and the clock synchronization signal receiving device 4 of the clock synchronization system, and thus an accurate time service result is obtained.
Optionally, as in the method shown in fig. 1, acquiring simultaneous driving information according to the clock synchronization signal sent by the clock synchronization signal sending device 1 to the clock synchronization signal receiving device 4 specifically includes:
acquiring simultaneous driving information according to a clock synchronization signal sent by a master device of a clock synchronization system to a slave device of the clock synchronization system; alternatively, the first and second electrodes may be,
and acquiring simultaneous driving information according to a clock synchronization signal sent by the slave device of the clock synchronization system to the master device of the clock synchronization system.
Optionally, as in the method shown in fig. 1, the sending, according to the simultaneous driving information vector, the quantum-state optical signal transmitted synchronously with the clock synchronization signal to the sub-receiving end device 3 specifically includes:
randomly selecting basis vectors according to the simultaneous driving information to generate quantum state optical signals;
the quantum state optical signal is sent to the first wavelength division multiplexing device, so that the first wavelength division multiplexing device multiplexes the quantum state optical signal and the clock synchronization signal in the same transmission channel and synchronously transmits the signals to the second wavelength division multiplexing device, the second wavelength division multiplexing device sends the quantum state optical signal to the quantum receiving end device 3, and the clock synchronization signal to the clock synchronization signal receiving device 4.
Optionally, as in the method shown in fig. 4, receiving the quantum-state optical signal transmitted in synchronization with the clock synchronization signal specifically includes:
and randomly selecting a basis vector to receive a quantum state optical signal which is sent by the second wavelength division multiplexing equipment and is synchronously transmitted with the clock synchronization signal, wherein the quantum state optical signal is sent to the first wavelength division multiplexing equipment by the quantum sending end equipment 2, and the quantum state optical signal and the clock synchronization signal are multiplexed in the same transmission channel by the first wavelength division multiplexing equipment and are synchronously transmitted to the second wavelength division multiplexing equipment.
Optionally, as in the method shown in fig. 4, acquiring monitoring information of whether the clock synchronization signal is attacked according to the quantum-state optical signal specifically includes:
acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum state optical signal; and/or the presence of a gas in the gas,
and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal.
Optionally, as in the method shown in fig. 4, acquiring monitoring information of whether the clock synchronization signal is attacked according to the bit error rate of the quantum-state optical signal specifically includes:
negotiating with the quantum sending terminal equipment 2 through a preset quantum key distribution protocol to calculate the bit error rate of the quantum state optical signal;
judging whether the error rate is greater than an error rate threshold value obtained according to parameter estimation of a quantum key distribution protocol;
and if the error rate is greater than the error rate threshold value, first alarm monitoring information that the clock synchronization signal is attacked is generated.
Optionally, as in the method shown in fig. 4, acquiring monitoring information of whether the clock synchronization signal is attacked according to a time difference between an arrival time of the quantum-state optical signal and an arrival time of the clock synchronization signal, specifically including:
acquiring the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal received by the clock synchronization signal receiving device 4;
calculating the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal;
judging whether the time difference is larger than a time difference threshold value obtained by counting according to multiple time difference calculation results in advance;
and if the time difference is larger than the time difference threshold value, generating second alarm monitoring information that the clock synchronization signal is attacked.
Optionally, as in the method shown in fig. 4, the method further includes:
the clock synchronization signal reception device 4 is informed of the monitoring information so that the clock synchronization signal reception device 4 processes the clock synchronization signal according to the monitoring information.
Specifically, in the present embodiment, the clock synchronization signal transmitting apparatus 1 shown in fig. 2 may be a master or a slave of a clock synchronization system (also referred to as a time synchronization system), and correspondingly, the clock synchronization signal receiving apparatus 4 may be a slave or a master of the clock synchronization system; the quantum transmitting end device 2 may be as shown in fig. 5, and includes: a driving module 21 for performing step S21 of the method shown in fig. 1, and a quantum transmission module 22 for performing step S22 of the method shown in fig. 1; the quantum receiving end device 3 may be as shown in fig. 6, and includes: the quantum receiving module 31 is configured to execute step S31 of the method shown in fig. 4, and the monitoring module 32 is configured to execute step S32 of the method shown in fig. 4.
As a more specific example, as shown in fig. 7-11, a secure clock synchronization system may comprise 5:
the Time Synchronization system master device includes a local clock at the location of the master device, and is configured to perform clock Synchronization Time service to the Time Synchronization system slave device to be safely monitored through a clock Synchronization Protocol (e.g., PTP Protocol);
0, the time synchronization system slave device which is safely monitored comprises a local clock at the location of the slave device, and is used for performing clock synchronization calibration by taking a clock granted by the time synchronization system master device which is safely monitored as a reference through a clock synchronization protocol (such as a PTP protocol);
the quantum transmitting end equipment is used for receiving a local clock signal of the time synchronization system master equipment or slave equipment which is monitored safely, randomly selecting a base 5 vector according to the driving of the local clock signal, generating quantum state optical signal pulses and transmitting the quantum state optical signal pulses to the quantum receiving end equipment;
the quantum receiving end equipment is used for receiving quantum state optical signal pulses sent by the quantum sending end equipment, randomly selecting basis vectors, measuring quantum state optical signals, measuring quantum state arrival time and negotiating with the quantum sending end equipment through a quantum key distribution protocol to calculate an error rate;
0 time difference measuring equipment for measuring the time difference between the quantum state arrival time and the local clock signal of the slave equipment or the master equipment of the time synchronization system which is safely monitored;
and the safety alarm device is used for estimating a bit error rate threshold value according to the quantum key distribution system parameters, counting time difference threshold values according to multiple time difference measurement results, judging whether the bit error rate calculated by the quantum receiving end device is greater than the bit error rate threshold value, judging that safety attack exists and sending out an alarm if the bit error rate is greater than 5 bit error rate threshold values, and further judging whether the time difference is greater than the time difference threshold value, and judging that safety attack exists and sending out an alarm if the time difference is greater than the time difference threshold value.
The time synchronization system master device may be used as the clock synchronization signal sending device 1, the time synchronization system slave device may be used as the clock synchronization signal receiving device 4 (as shown in fig. 8 and 10), or the time synchronization system slave device may be used as the clock synchronization signal sending device 1, the time synchronization system master device may be used as the clock synchronization signal receiving device 4 (as shown in fig. 9 and 11), the quantum transmitting end device may be used as the quantum transmitting end device 2, and the quantum receiving end device, the time difference measuring device, and the security alarm device may be used as the quantum receiving end device 3.
A specific connection relationship of the secure clock synchronization system is shown in fig. 8 or 9, and includes: the quantum transmitting-end equipment is connected with the time synchronization system master equipment (or slave equipment) to be monitored safely and is connected to receive a local clock signal; the quantum receiving end equipment is connected with the time difference measuring equipment and is used for sending quantum state reaching time; the quantum receiving end equipment is connected with the alarm equipment and is used for sending the bit error rate; the time difference measuring equipment is connected with the slave equipment (or the master equipment) of the time synchronization system which is monitored safely, and is connected to receive a local clock signal; the safety alarm device is connected with the time measuring device and used for receiving the time difference between the quantum state arrival time and a local clock signal of a slave device end (or a master device end) of the time synchronization system to be safely monitored; the quantum transmitting end equipment is connected with the quantum receiving end equipment and is connected for transmitting quantum states; the time synchronization system master device which is monitored safely is connected with the slave device and is connected with the slave device for transmitting clock synchronization signals; the quantum state transmission channel and the clock synchronization signal transmission channel are multiplexed in the same transmission channel through wavelength division multiplexing equipment, the wavelength division multiplexing equipment is respectively arranged at a signal sending end and a signal receiving end, the wavelength division multiplexing equipment arranged at the sending end can be named as first wavelength division multiplexing equipment, and the wavelength division multiplexing equipment arranged at the receiving end is named as second wavelength division multiplexing equipment so as to distinguish.
Wherein, when the time synchronization system master device or the slave device is used as the clock synchronization signal sending device 1, on the basis of the function of sending a local clock signal as a clock synchronization signal to the time synchronization system slave device or the master device, the function of simultaneously sending the local clock signal to the quantum transmitting end device is added, the quantum transmitting end device is driven by the local clock signal to send a synchronous quantum state signal, when the quantum transmitting end device is used as the quantum transmitting end device 2, on the basis of the function of sending the quantum state signal, the function of receiving the local clock signal as a driving signal for sending the synchronous quantum state signal is added, and when the quantum receiving end device, the time difference measuring device and the safety alarm device are used as the quantum receiving end device 3, the quantum receiving end device is used on the basis of the function of receiving the quantum state signal, the quantum state arrival time and the error rate of the quantum state signal are increased, and sending the quantum state arrival time to a time difference measuring device, and sending the bit error rate to a security alarm device, wherein the time difference device receives the quantum state arrival time sent by a quantum receiving end device, and acquires a local clock signal from a time synchronization system slave device or a master device, the local clock signal reflects the arrival time of a local clock signal sent by the time synchronization system master device or the time synchronization system slave device, both arrival times can be obtained by taking a local clock of a clock synchronization signal receiving device 4 as a reference, the time difference device calculates the time difference based on the two arrival times, and then sends the time difference to the security alarm device, the security alarm device firstly judges whether the bit error rate exceeds a normal bit error rate threshold range obtained in advance, if so, the quantum state signal is attacked in the transmission process, and the clock synchronization signal and the quantum state signal are synchronously transmitted, the attack is actually directed at the clock synchronization signal, so that alarm information is sent out, if the bit error rate does not exceed the bit error rate threshold, whether the time difference exceeds the time difference threshold measured by multiple times of normal synchronous transmission of the quantum state signal and the clock synchronization signal is further judged, if the time difference exceeds the time difference threshold, a higher-level attack mode possibly exists, the accuracy of a time service result is influenced, and therefore the alarm information is also sent out; the alarm information can be directly sent to the time synchronization system slave equipment or the time synchronization system master equipment to be switched to the standby clock, or the alarm information can be informed to the time synchronization system slave equipment or the time synchronization system master equipment in other modes, so that the slave equipment or the master equipment can take corresponding measures to cope with attacks.
A specific execution flow of the clock synchronization security monitoring method is shown in fig. 7, and includes: s01: a master device end (or a slave device end) of a time synchronization system which is monitored safely sends a local clock signal to drive quantum transmitting-end equipment; s02: the quantum transmitting terminal equipment receives the local clock signal, randomly selects a basis vector to generate a quantum state optical signal and transmits the quantum state optical signal to the quantum receiving terminal equipment; s03: randomly selecting a basis vector by quantum receiving end equipment, measuring a quantum state optical signal and measuring quantum state arrival time, and negotiating with quantum transmitting end equipment through a quantum key distribution protocol to calculate an error rate; s04: the time difference measuring device measures the time difference between the quantum state arrival time and a local clock signal of a slave device end (or a master device end) of the time synchronization system which is monitored safely; s05: the safety alarm device estimates the parameters of the quantum key distribution system to obtain an error rate threshold value, and counts the time difference threshold value according to multiple time difference measurement results; s06: the safety alarm equipment judges whether the error rate is greater than the error rate threshold value, if so, the safety attack is judged to exist and a warning is sent out; otherwise, S07: and the safety alarm equipment judges whether the time difference is greater than a time difference threshold value, if so, the safety attack exists and a warning is sent out, otherwise, the synchronous system works normally.
The time difference threshold may be obtained by statistics of measurement results, the measurement results in the statistical sample are only the time difference corresponding to the bit error rate lower than the bit error rate threshold, and the calculation of the time difference threshold may preferably adopt a 3sigma principle (which may be simply described as that, if the data obeys positive-error distribution, an abnormal value is defined as a value having a deviation from the mean value of a group of result values exceeding three times of a standard deviation) outlier processing, so as to eliminate an abnormal error value. The security alarm device may be independently arranged (as shown in fig. 8, 9, and 11), or may be arranged in the time difference measurement device or the quantum receiving end device as a module (as shown in fig. 10), the time difference measurement device may also be arranged in the quantum receiving end device as a module, the bit error rate threshold may be estimated by the quantum receiving end device according to parameters of the quantum key distribution system, and the quantum receiving end device determines whether the bit error rate of the quantum state optical signal is greater than the bit error rate threshold, and determines that a security attack exists and issues an alarm if the bit error rate is greater than the bit error rate threshold, and then only sends the quantum state arrival time corresponding to the bit error rate lower than the bit error rate threshold to the time difference measurement device, at this time, the quantum receiving end device is not connected to the security alarm device, and the security alarm device is only used to statistically obtain a time difference threshold according to multiple time difference measurement results, and determines whether the time difference is greater than the time difference threshold, and determines that a security attack exists and issues an alarm if the time difference is greater than the threshold, and the calculation and the bit error rate determination alarm function of the security alarm device is placed in the quantum receiving end device (as shown in fig. 11). After the bit error rate calculation and bit error rate determination alarm functions are set in the quantum receiving end device, the time difference between the quantum state arrival time and the local clock signal of the slave device or the master device of the time synchronization system to be safely monitored can be measured by the time difference measuring device, a time difference threshold value is obtained through statistics according to multiple time difference measuring results, whether the time difference is larger than the time difference threshold value or not is judged, if the time difference is larger than the time difference threshold value, safety attack is judged to exist and warning is given out, at the moment, the safety alarm device and the connection between the safety alarm device and the time difference measuring device and the quantum receiving end device can be removed, the bit error rate threshold calculation and bit error rate determination alarm functions of the safety alarm device are placed in the quantum receiving end device, and the time difference threshold calculation and time difference determination alarm functions are placed in the time difference measuring device (as shown in fig. 10).
Taking the secure clock synchronization system shown in fig. 8 as an example, the primary clock synchronization security monitoring includes: the time synchronization system main equipment which is monitored safely sends a local clock signal to drive quantum transmitting end equipment; the quantum transmitting end equipment receives the local clock signal, randomly selects a basis vector to generate a quantum state optical signal and transmits the quantum state optical signal to the quantum receiving end equipment; randomly selecting a basis vector by quantum receiving end equipment, measuring a quantum state optical signal and measuring quantum state arrival time, negotiating with quantum transmitting end equipment through a quantum key distribution protocol to calculate an error rate, transmitting the quantum state arrival time to time difference measuring equipment, and transmitting the error rate to safety alarm equipment; the time difference measuring equipment measures the time difference between the quantum state arrival time and a local clock signal of a slave equipment end of the time synchronization system to be safely monitored, and sends the time difference to the safety alarm equipment; the safety alarm device estimates an error rate threshold value according to parameters of the quantum key distribution system, counts a time difference threshold value according to a plurality of time difference measurement results when the error rate is lower than the error rate threshold value, judges whether the error rate is greater than the error rate threshold value, if the error rate is greater than the error rate threshold value, judges that safety attack exists and sends out an alarm, if the error rate is smaller than the error rate threshold value, further judges whether the time difference is greater than the time difference threshold value, if the error rate is greater than the error rate threshold value, judges that the safety attack exists and sends out the alarm, and if the error rate is smaller than the error rate threshold value, the synchronous system works normally.
Taking the secure clock synchronization system shown in fig. 10 as an example, the primary clock synchronization security monitoring includes: the time synchronization system main equipment which is monitored safely sends a local clock signal to drive quantum transmitting end equipment; the quantum transmitting terminal equipment receives the local clock signal, randomly selects a basis vector to generate a quantum state optical signal and transmits the quantum state optical signal to the quantum receiving terminal equipment; randomly selecting a base vector by quantum receiving end equipment, measuring a quantum state optical signal and measuring quantum state arrival time, negotiating with quantum transmitting end equipment through a quantum key distribution protocol to calculate an error rate, estimating according to quantum key distribution system parameters to obtain an error rate threshold value, judging whether the error rate calculated by the quantum receiving end equipment is greater than the threshold value, if so, judging that safety attack exists and sending out a warning, and sending the corresponding quantum state arrival time when the error rate is lower than the error rate threshold value to time difference measuring equipment; the time difference measuring device measures the time difference between the quantum state arrival time and the local clock signal of the slave device of the time synchronization system which is monitored safely, the time difference threshold value is obtained through statistics according to the time difference measuring results for a plurality of times, whether the time difference is greater than the time difference threshold value or not is judged, if the time difference is greater than the time difference threshold value, safety attack is judged to exist, a warning is sent out, and if the time difference is smaller than the time difference threshold value, the synchronous system works normally.
Taking the secure clock synchronization system shown in fig. 11 as an example, the primary clock synchronization security monitoring includes: a time synchronization system which is monitored safely sends a local clock signal from equipment to drive quantum sending-end equipment; the quantum transmitting terminal equipment receives the local clock signal, randomly selects a basis vector to generate a quantum state optical signal and transmits the quantum state optical signal to the quantum receiving terminal equipment; randomly selecting a base vector by quantum receiving end equipment, measuring a quantum state optical signal and measuring quantum state arrival time, negotiating with quantum transmitting end equipment through a quantum key distribution protocol to calculate an error rate, estimating according to quantum key distribution system parameters to obtain an error rate threshold value and judging whether the error rate calculated by the quantum receiving end equipment is greater than the error rate threshold value, if so, judging that safety attack exists and sending out a warning, and sending the corresponding quantum state arrival time when the error rate is lower than the error rate threshold value to a time difference measuring device; the time difference measuring equipment measures the time difference between the quantum state arrival time and a local clock signal of a main equipment end of the time synchronization system to be safely monitored, and sends the time difference to the safety alarm equipment; and the safety alarm equipment counts to obtain a time difference threshold value according to a plurality of time difference measurement results when the error rate is lower than the error rate threshold value, judges whether the time difference is greater than the time difference threshold value, judges that safety attack exists and sends out an alarm if the time difference is greater than the time difference threshold value, and indicates that the synchronous system works normally if the time difference is smaller than the time difference threshold value.
The principle of the technical scheme is that a principle of equivalent quantum mechanics of inaccurate Heisebarg measurement and quantum unclonable is that quantum state changes due to eavesdropping in a quantum state transmission process, so that correct information carried by the quantum state cannot be obtained, when a quantum state transmission channel and a clock synchronization signal transmission channel are multiplexed in the same transmission channel, the quantum state changes due to security attack in the transmission channel, and a bit error rate obtained by measurement is larger than a bit error rate threshold value due to the fact that correct information carried by the quantum state cannot be obtained by a quantum receiving end device, so that whether a clock synchronization system has delay attack or not can be monitored by judging the bit error rate; when a transmission channel is safe, message attack by using clock synchronization auxiliary information (such as negotiation messages) except a physical layer is not excluded, so that monitoring is further performed based on a final time service result, and the accuracy of a clock synchronization system is deteriorated due to the final purposes of the message attack and the time delay attack, so that whether the message attack exists in the clock synchronization system can be effectively monitored by judging the time difference; in conclusion, the time synchronization system can be effectively and safely monitored by sequentially judging the error rate and the time difference.
Example 2:
as shown in fig. 4, embodiment 2 of the present invention provides a clock synchronization security monitoring method applied to a quantum receiving device, where the method includes:
s31, receiving a quantum state optical signal synchronously transmitted with a clock synchronization signal, wherein the quantum state optical signal is sent by a quantum sending end device according to simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end device according to the clock synchronization signal sent by the clock synchronization signal sending device to a clock synchronization signal receiving device;
and S32, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Optionally, receiving the quantum-state optical signal transmitted in synchronization with the clock synchronization signal specifically includes:
and randomly selecting a basis vector to receive a quantum state optical signal which is transmitted by the second wavelength division multiplexing equipment in synchronization with the clock synchronization signal, wherein the quantum state optical signal is transmitted to the first wavelength division multiplexing equipment by the quantum transmitting terminal equipment, and the quantum state optical signal and the clock synchronization signal are multiplexed in the same transmission channel by the first wavelength division multiplexing equipment and are transmitted to the second wavelength division multiplexing equipment in synchronization.
Optionally, obtaining monitoring information of whether the clock synchronization signal is attacked or not according to the quantum-state optical signal specifically includes:
acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum state optical signal; and/or the presence of a gas in the gas,
and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal.
Optionally, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum-state optical signal, specifically including:
negotiating with quantum sending end equipment through a preset quantum key distribution protocol to calculate the bit error rate of the quantum state optical signal;
judging whether the error rate is greater than an error rate threshold value obtained according to parameter estimation of a quantum key distribution protocol;
and if the error rate is greater than the error rate threshold value, generating first alarm monitoring information that the clock synchronization signal is attacked.
Optionally, acquiring monitoring information of whether the clock synchronization signal is attacked or not according to a time difference between an arrival time of the quantum-state optical signal and an arrival time of the clock synchronization signal, specifically including:
when receiving and obtaining the quantum state optical signal, obtaining the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal received by the clock synchronization signal receiving equipment from the clock synchronization signal receiving equipment;
calculating the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal, and judging whether the time difference is greater than a time difference threshold value obtained by statistics according to multiple time difference calculation results in advance;
and if the time difference is larger than the time difference threshold value, generating second alarm monitoring information that the clock synchronization signal is attacked.
Example 3:
as shown in fig. 5, embodiment 3 of the present invention provides a quantum transmitting end device, including:
the driving module 21 is configured to obtain simultaneous driving information according to a clock synchronization signal sent by a clock synchronization signal sending device to a clock synchronization signal receiving device;
and the quantum sending module 22 is connected to the driving module 21, and configured to send a quantum state optical signal that is transmitted synchronously with the clock synchronization signal to the quantum receiving end device according to the simultaneous driving information, so that the quantum receiving end device receives the quantum state optical signal and obtains monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Optionally, the driving module 21 is specifically configured to:
acquiring simultaneous driving information according to a clock synchronization signal sent by a master device of a clock synchronization system to a slave device of the clock synchronization system; alternatively, the first and second electrodes may be,
and acquiring simultaneous driving information according to a clock synchronization signal sent by the slave device of the clock synchronization system to the master device of the clock synchronization system.
Optionally, the quantum transmission module 22 specifically includes:
a signal generating unit for randomly selecting basis vectors according to the simultaneous driving information to generate quantum state optical signals;
and the signal sending unit is connected with the signal generating unit and used for sending the quantum state optical signal to the first wavelength division multiplexing equipment, so that the first wavelength division multiplexing equipment multiplexes the quantum state optical signal and the clock synchronization signal in the same transmission channel and synchronously transmits the signals to the second wavelength division multiplexing equipment, and the second wavelength division multiplexing equipment sends the quantum state optical signal to the quantum receiving end equipment and sends the clock synchronization signal to the clock synchronization signal receiving equipment.
Example 4:
as shown in fig. 6, embodiment 4 of the present invention provides a quantum receiving end device, including:
the quantum receiving module 31 is configured to receive a quantum state optical signal transmitted in synchronization with a clock synchronization signal, where the quantum state optical signal is sent by a quantum sending end device according to simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end device according to the clock synchronization signal sent by the clock synchronization signal sending device to a clock synchronization signal receiving device;
and the monitoring module 32 is connected with the quantum receiving module 31 and is used for acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Optionally, the quantum receiving module 31 is specifically configured to:
and randomly selecting a basis vector to receive a quantum state optical signal which is sent by the second wavelength division multiplexing equipment and synchronously transmitted with the clock synchronization signal, wherein the quantum state optical signal is sent to the first wavelength division multiplexing equipment by the quantum sending end equipment, and the quantum state optical signal and the clock synchronization signal are multiplexed in the same transmission channel by the first wavelength division multiplexing equipment and synchronously transmitted to the second wavelength division multiplexing equipment.
Optionally, the monitoring module 32 specifically includes:
the first monitoring unit is used for acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum state optical signal; and/or the presence of a gas in the gas,
and the second monitoring unit is used for acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal.
Optionally, the first monitoring unit specifically includes:
the first calculating subunit is used for negotiating with quantum sending end equipment to calculate the bit error rate of the quantum state optical signal through a preset quantum key distribution protocol;
the first judgment subunit is used for judging whether the error rate is greater than an error rate threshold value obtained according to parameter estimation of a quantum key distribution protocol;
and the first alarm subunit is used for generating first alarm monitoring information that the clock synchronization signal is attacked if the bit error rate is greater than the bit error rate threshold.
Optionally, the second monitoring unit specifically includes:
the second acquisition subunit is used for acquiring the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal received by the clock synchronization signal receiving equipment;
the second calculating subunit is used for calculating the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal;
the second judgment subunit is used for judging whether the time difference is greater than a time difference threshold value obtained by statistics according to multiple time difference calculation results in advance;
and the second alarm subunit is used for generating second alarm monitoring information that the clock synchronization signal is attacked if the time difference is greater than the time difference threshold.
Example 5:
as shown in fig. 2, embodiment 5 of the present invention provides a clock synchronization security monitoring system 01, including:
the quantum sending end device 2 is configured to obtain simultaneous driving information according to a clock synchronization signal sent by the clock synchronization signal sending device to the clock synchronization signal receiving device, and send a quantum state optical signal transmitted synchronously with the clock synchronization signal to the quantum receiving end device according to the simultaneous driving information;
and the quantum receiving end device 3 is connected with the quantum sending end device 2 and is used for receiving the quantum state optical signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Example 6:
as shown in fig. 2, embodiment 6 of the present invention provides a secure clock synchronization transmission system 02 including:
a clock synchronization signal transmitting device 1 for transmitting a clock synchronization signal to a clock synchronization signal receiving device;
and the quantum sending end device 2 is connected with the clock synchronization signal 1 sending device and is used for obtaining the simultaneous driving information according to the clock synchronization signal and sending the quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end device according to the simultaneous driving information, so that the quantum receiving end device receives the quantum state optical signal and obtains monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
Example 7
As shown in fig. 2, an embodiment 7 of the present invention provides a secure clock synchronization receiving system 03, including:
the quantum receiving end device 3 is configured to receive a quantum state optical signal transmitted in synchronization with the clock synchronization signal, and obtain monitoring information on whether the clock synchronization signal is attacked or not according to the quantum state optical signal, where the quantum state optical signal is sent by the quantum sending end device according to the simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end device according to the clock synchronization signal sent by the clock synchronization signal sending device to the clock synchronization signal receiving device;
and the clock synchronization signal receiving device 4 is connected with the quantum receiving end device 3 and is used for receiving the clock synchronization signal and the monitoring information.
Example 8:
as shown in fig. 2, an embodiment 8 of the present invention provides a secure clock synchronization system, including:
the clock synchronization signal sending device 1 is connected with the clock synchronization signal receiving device 4 and used for sending clock synchronization signals to the clock synchronization signal receiving device;
the quantum transmitting terminal device 2 is connected with the clock synchronization signal transmitting device 1 and used for acquiring simultaneous driving information according to the clock synchronization signal and transmitting a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving terminal device according to the simultaneous driving information;
the quantum receiving end device 3 is connected with the quantum sending end device 2 and used for receiving the quantum state optical signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal;
and the clock synchronization signal receiving device 4 is connected with the quantum receiving end device 3 and is used for receiving the clock synchronization signal and the monitoring information.
Example 9:
embodiment 9 of the present invention provides a computer-readable storage medium, where a computer program is stored, and when the computer program is executed by a processor, the clock synchronization security monitoring method according to embodiment 1 or 2 is implemented.
The computer-readable storage media include volatile or nonvolatile, removable or non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, computer program modules or other data. Computer-readable storage media include, but are not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), flash Memory or other Memory technology, CD-ROM
(Compact Disc Read-Only Memory), digital Versatile Disc (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other 5 magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by a computer.
Embodiments 1 to 9 of the present invention provide a clock synchronization security monitoring method, a device, a system, and a computer readable storage medium, where a quantum sending end device sends a quantum state optical signal transmitted in synchronization with a clock synchronization signal, and a quantum receiving end device determines whether the clock synchronization signal is attacked or not according to the received 0 quantum state optical signal, so as to obtain security monitoring information for the clock synchronization signal in time, so that a safe clock synchronization signal is sent and received between a clock synchronization signal sending device and a clock synchronization signal receiving device of a clock synchronization system, and an accurate time service result is obtained.
It is to be understood that the above embodiments are merely exemplary embodiments that are employed to illustrate the principles 5 of the present invention, and that the present invention is not limited thereto. It will be apparent to those skilled in the art that various modifications and improvements can be made without departing from the spirit and substance of the invention, and these modifications and improvements are also considered to be within the scope of the invention.

Claims (15)

1. A clock synchronization safety monitoring method is applied to quantum sending end equipment and is characterized by comprising the following steps:
acquiring simultaneous driving information according to a clock synchronization signal sent by a clock synchronization signal sending device to a clock synchronization signal receiving device;
and sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and acquires monitoring information whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
2. The method according to claim 1, wherein acquiring the simultaneous driving information according to the clock synchronization signal transmitted from the clock synchronization signal transmitting device to the clock synchronization signal receiving device includes:
acquiring simultaneous driving information according to a clock synchronization signal sent by a master device of a clock synchronization system to a slave device of the clock synchronization system; alternatively, the first and second electrodes may be,
and acquiring simultaneous driving information according to a clock synchronization signal sent by the slave device of the clock synchronization system to the master device of the clock synchronization system.
3. The method according to claim 1 or 2, wherein the sending of the quantum-state optical signal transmitted in synchronization with the clock synchronization signal to the sub-receiving end device according to the simultaneous driving information vector specifically comprises:
randomly selecting basis vectors according to the simultaneous driving information to generate quantum state optical signals;
and sending the quantum state optical signal to first wavelength division multiplexing equipment, so that the first wavelength division multiplexing equipment multiplexes the quantum state optical signal and the clock synchronization signal in the same transmission channel and synchronously transmits the signals to second wavelength division multiplexing equipment, and the second wavelength division multiplexing equipment sends the quantum state optical signal to quantum receiving end equipment and sends the clock synchronization signal to clock synchronization signal receiving equipment.
4. A clock synchronization safety monitoring method is applied to quantum receiving end equipment and is characterized by comprising the following steps:
receiving a quantum state optical signal synchronously transmitted with a clock synchronization signal, wherein the quantum state optical signal is sent by quantum sending end equipment according to simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end equipment according to the clock synchronization signal sent by the clock synchronization signal sending equipment to clock synchronization signal receiving equipment;
and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
5. The method of claim 4, wherein receiving the quantum state optical signal transmitted synchronously with the clock synchronization signal comprises:
and randomly selecting a basis vector to receive a quantum state optical signal which is sent by the second wavelength division multiplexing equipment and synchronously transmitted with the clock synchronization signal, wherein the quantum state optical signal is sent to the first wavelength division multiplexing equipment by the quantum sending end equipment, and the quantum state optical signal and the clock synchronization signal are multiplexed in the same transmission channel by the first wavelength division multiplexing equipment and synchronously transmitted to the second wavelength division multiplexing equipment.
6. The method according to claim 4 or 5, wherein acquiring the monitoring information of whether the clock synchronization signal is attacked or not according to the quantum-state optical signal specifically comprises:
acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum state optical signal; and/or the presence of a gas in the gas,
and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal.
7. The method according to claim 6, wherein acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the bit error rate of the quantum state optical signal specifically comprises:
negotiating with quantum sending end equipment through a preset quantum key distribution protocol to calculate the bit error rate of the quantum state optical signal;
judging whether the error rate is greater than an error rate threshold value obtained according to parameter estimation of a quantum key distribution protocol;
and if the error rate is greater than the error rate threshold value, generating first alarm monitoring information that the clock synchronization signal is attacked.
8. The method according to claim 6, wherein acquiring monitoring information of whether the clock synchronization signal is attacked or not according to a time difference between an arrival time of the quantum state optical signal and an arrival time of the clock synchronization signal specifically comprises:
when receiving and obtaining the quantum state optical signal, obtaining the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal received by the clock synchronization signal receiving equipment from the clock synchronization signal receiving equipment;
calculating the time difference between the arrival time of the quantum state optical signal and the arrival time of the clock synchronization signal, and judging whether the time difference is greater than a time difference threshold value obtained by statistics according to multiple time difference calculation results in advance;
and if the time difference is larger than the time difference threshold value, generating second alarm monitoring information that the clock synchronization signal is attacked.
9. A quantum transmitting terminal device, comprising:
the driving module is used for acquiring simultaneous driving information according to the clock synchronization signal sent by the clock synchronization signal sending equipment to the clock synchronization signal receiving equipment;
and the quantum transmitting module is connected with the driving module and used for transmitting the quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and acquires monitoring information about whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
10. A quantum receiving end apparatus, comprising:
the quantum receiving module is used for receiving a quantum state optical signal synchronously transmitted with the clock synchronization signal, wherein the quantum state optical signal is sent by the quantum sending end device according to the simultaneous driving information, and the simultaneous driving information is obtained by the quantum sending end device according to the clock synchronization signal sent by the clock synchronization signal sending device to the clock synchronization signal receiving device;
and the monitoring module is connected with the quantum receiving module and used for acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
11. A clock synchronization security monitoring system, comprising:
the quantum sending end equipment is used for obtaining simultaneous driving information according to the clock synchronizing signal sent by the clock synchronizing signal sending equipment to the clock synchronizing signal receiving equipment and sending a quantum state optical signal synchronously transmitted with the clock synchronizing signal to the quantum receiving end equipment according to the simultaneous driving information;
and the quantum receiving end equipment is connected with the quantum sending end equipment and used for receiving the quantum state optical signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
12. A secure clock-synchronized transmission system, comprising:
the clock synchronization signal sending equipment is used for sending a clock synchronization signal to the clock synchronization signal receiving equipment;
and the quantum sending end equipment is connected with the clock synchronization signal sending equipment and is used for obtaining the simultaneous driving information according to the clock synchronization signal and sending the quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information, so that the quantum receiving end equipment receives the quantum state optical signal and obtains monitoring information about whether the clock synchronization signal is attacked or not according to the quantum state optical signal.
13. A secure clock synchronous reception system, comprising:
the quantum receiving end equipment is used for receiving a quantum state optical signal synchronously transmitted with the clock synchronization signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal, wherein the quantum state optical signal is transmitted by the quantum transmitting end equipment according to the simultaneous driving information, and the simultaneous driving information is acquired by the quantum transmitting end equipment according to the clock synchronization signal transmitted by the clock synchronization signal transmitting equipment to the clock synchronization signal receiving equipment;
and the clock synchronization signal receiving equipment is connected with the quantum receiving end equipment and is used for receiving the clock synchronization signal.
14. A secure clock synchronization system, comprising:
the clock synchronization signal sending equipment is connected with the clock synchronization signal receiving equipment and is used for sending clock synchronization signals to the clock synchronization signal receiving equipment;
the quantum sending end equipment is connected with the clock synchronization signal sending equipment and used for obtaining simultaneous driving information according to the clock synchronization signal and sending a quantum state optical signal synchronously transmitted with the clock synchronization signal to the quantum receiving end equipment according to the simultaneous driving information;
the quantum receiving end equipment is connected with the quantum sending end equipment and used for receiving the quantum state optical signal and acquiring monitoring information of whether the clock synchronization signal is attacked or not according to the quantum state optical signal;
and the clock synchronization signal receiving equipment is connected with the quantum receiving end equipment and is used for receiving the clock synchronization signal.
15. A computer-readable storage medium, in which a computer program is stored which, when being executed by a processor, carries out a clock synchronization security monitoring method according to any one of claims 1 to 3 or 4 to 8.
CN202211662784.5A 2022-12-23 2022-12-23 Clock synchronization safety monitoring method, device, system and medium Pending CN115833986A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211662784.5A CN115833986A (en) 2022-12-23 2022-12-23 Clock synchronization safety monitoring method, device, system and medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211662784.5A CN115833986A (en) 2022-12-23 2022-12-23 Clock synchronization safety monitoring method, device, system and medium

Publications (1)

Publication Number Publication Date
CN115833986A true CN115833986A (en) 2023-03-21

Family

ID=85517957

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211662784.5A Pending CN115833986A (en) 2022-12-23 2022-12-23 Clock synchronization safety monitoring method, device, system and medium

Country Status (1)

Country Link
CN (1) CN115833986A (en)

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110167299A1 (en) * 2005-07-08 2011-07-07 Akihiro Tanaka Communication system and method for controlling the same
CN102938678A (en) * 2012-12-04 2013-02-20 上海朗研光电科技有限公司 Clock synchronization device applicable to quantum communication system
US20170317814A1 (en) * 2016-05-02 2017-11-02 Ut-Battelle, Llc Quantum-authenticated clock signal
CN107370546A (en) * 2016-05-11 2017-11-21 阿里巴巴集团控股有限公司 Eavesdrop detection method, data transmission method for uplink, apparatus and system
CN107508675A (en) * 2017-09-20 2017-12-22 安徽问天量子科技股份有限公司 Sychronisation and synchronous method for quantum key distribution system
CN110518984A (en) * 2018-05-21 2019-11-29 科大国盾量子技术股份有限公司 Method for synchronizing time and system in a kind of quantum secret communication
CN111526001A (en) * 2020-05-06 2020-08-11 中国信息通信研究院 Clock synchronization method, device and system
WO2021227367A1 (en) * 2020-05-09 2021-11-18 中国科学技术大学 Secure time transfer method and system based on two-way quantum key distribution
CN215268303U (en) * 2020-10-09 2021-12-21 广东国科量子通信网络有限公司 Quantum key distribution system with safe time synchronization

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110167299A1 (en) * 2005-07-08 2011-07-07 Akihiro Tanaka Communication system and method for controlling the same
CN102938678A (en) * 2012-12-04 2013-02-20 上海朗研光电科技有限公司 Clock synchronization device applicable to quantum communication system
US20170317814A1 (en) * 2016-05-02 2017-11-02 Ut-Battelle, Llc Quantum-authenticated clock signal
CN107370546A (en) * 2016-05-11 2017-11-21 阿里巴巴集团控股有限公司 Eavesdrop detection method, data transmission method for uplink, apparatus and system
CN107508675A (en) * 2017-09-20 2017-12-22 安徽问天量子科技股份有限公司 Sychronisation and synchronous method for quantum key distribution system
CN110518984A (en) * 2018-05-21 2019-11-29 科大国盾量子技术股份有限公司 Method for synchronizing time and system in a kind of quantum secret communication
CN111526001A (en) * 2020-05-06 2020-08-11 中国信息通信研究院 Clock synchronization method, device and system
WO2021227367A1 (en) * 2020-05-09 2021-11-18 中国科学技术大学 Secure time transfer method and system based on two-way quantum key distribution
CN215268303U (en) * 2020-10-09 2021-12-21 广东国科量子通信网络有限公司 Quantum key distribution system with safe time synchronization

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
BASSAM MOUSSA等: ""A Detection and Mitigation Model for PTP Delay Attack in an IEC 61850 Substation"", 《IEEE》, 23 December 2016 (2016-12-23) *
钱懿;林翔宇;王东;胡小豹;陈金剑;陈文皓;: "量子密钥分发和经典光通信波分复用共纤传输研究", 电信科学, no. 09, 20 September 2018 (2018-09-20) *

Similar Documents

Publication Publication Date Title
CN107370546B (en) Eavesdropping detection method, data sending method, device and system
US8171354B2 (en) Communication system and method for controlling the same
US9800595B2 (en) Methods, systems, and computer readable media for detecting physical link intrusions
US12003992B2 (en) Passive determination of pairing and channel parameters for short-range wireless communications
US10523429B2 (en) Method and device for synchronizing quantum data start points in quantum key distribution system
CN110024350B (en) Time synchronization method, device and system
WO2013037062A1 (en) System and method for quantum key distribution
US20170279540A1 (en) Communication device, quantum key distribution system, quantum key distribution method, and computer program product
US11251996B2 (en) Modulating signal level transitions to increase data throughput over communication channels
JP7100654B2 (en) Methods and equipment for transmitting encrypted data and methods and equipment for extracting data
US20170171749A1 (en) Method for generating a secret sequence of values in a device as a function of measured physical properties of a transmission channel
CN115104282B (en) Key updating method and related device
EP1406412B1 (en) Shared data refining device and shared data refining method
CN109921903B (en) System, method and device for detecting quantum key code rate authenticity
US20160373253A1 (en) Communication device, communication system, communication method, and computer program product
CN115833986A (en) Clock synchronization safety monitoring method, device, system and medium
CN113271612B (en) Reporting method and device for flow information telemetry iFIT detection information
CN115362693A (en) Wireless protocol for sensing systems
CN110351074B (en) Synchronous correction method and controller for quantum key distribution system
EP3955149A1 (en) Method and apparatus for securing real-time data transfer from a device
CN105099667A (en) Method for generating shared key in network and network users set therefor
CN109617676A (en) A kind of cryptosync method, communication node
US8036383B2 (en) Method and apparatus for secure communication between cryptographic systems using real time clock
KR101726085B1 (en) Wireless networks system of physical layer security under hardware impairments
CN117675161A (en) Quantum security detection method, quantum security detection device, electronic equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination