Abstract: According to an embodiment, a communication device includes one or more processors. The processors share encryption keys with a plurality of external communication devices. The processors, based on residual quantities of the encryption keys, decide on a route for sending transmission data. The processors encrypt, for each external communication device of one or more external communication devices included in the route, a header in which the external communication device is set as a destination, using an encryption key shared with the external communication device. The processors generate a packet that includes the transmission data and encrypted headers for the one or more external communication devices. The processors send the generated packet along the route.

Abstract: According to an embodiment, a quantum key distribution (QKD) apparatus includes one or more hardware processors configured to: perform inter-QKD-apparatus connection authentication indicating authentication processing with an opposing QKD apparatus, and key manager (KM)-QKD connection authentication indicating authentication processing with an opposing KM apparatus; and enable a QKD function in a case where the inter-QKD-apparatus connection authentication is successful and the KM-QKD connection authentication is successful.

Abstract: According to an embodiment, a key manager (KM) apparatus includes one or more hardware processors configured to: perform inter-KM-apparatus connection authentication indicating authentication processing with an opposing KM apparatus, and KM-quantum key distribution (QKD) connection authentication indicating authentication processing with an opposing QKD apparatus; and enable a KM function in a case where the inter-KM-apparatus connection authentication is successful and the KM-QKD connection authentication is successful.

Abstract: According to one embodiment, a QKD system includes transmitters configured to transmit quantum signals and classical signals. An electronic apparatus receives transmission statuses of optical fibers. The optical fibers includes a first optical fiber in which the quantum signals are wavelength-multiplexed and a second optical fiber in which the classical signals are wavelength-multiplexed. The electronic apparatus receives a transmission status of the quantum signals flowing through the first optical fiber and a transmission status of the classical signals flowing through the second optical fiber, and issues, to at least one of a first multiplexing apparatus and the second multiplexing apparatus, an instruction to switch the first optical fiber or the second optical fiber to another optical fiber selected from the optical fibers according to a receiving result.

Abstract: According to an embodiment, a communication device includes a plurality of communication processors, and one or more processors. Each of the communication processors is configured to generate an encryption key by quantum key distribution with an external communication device, encrypt data by using the generated encryption key, and transmit the data to the external communication device. The one or more processors are configured to: divide data requested to be transmitted by an application into a plurality of pieces of transmission data; and determine, from among the plurality of communication processors, one or more communication processors to be used for transmission of the divided plurality of pieces of the transmission data.

Abstract: A key management device according to an embodiment includes one or more hardware processors configured to function as a determination unit, a generation unit, and a supply unit. The determination unit determines a type of request data requested by a request message transmitted from an application that performs encrypted data communication. The generation unit generates a response message including at least one of a random number and an encryption key shared by quantum key distribution (QKD) via a communication network according to a type of the request data. The supply unit supplies the response message to the application.

Abstract: According to an embodiment, a quantum cryptographic communication system includes a first quantum key distribution (QKD) device, and a first key management device. The first QKD device that shares a quantum encryption key with a second QKD device through QKD. The first key management device includes a reception unit and a first hardware security module (HSM). The reception unit receives the quantum encryption key from the first QKD device. The first HSM includes a storage unit, a generation unit, and a first encryption unit. The storage unit stores a first encryption key therein. The generation unit generates an application key used in an encryption process by a cryptographic application. The first encryption unit that encrypts, with the first encryption key, the application key transmitted to a second key management device connected to the second QKD device.

Abstract: A key management device according to an embodiment is for managing an application key used for encrypting communication of a user network including cryptographic applications. The key management device includes a plan acquisition unit, a plan execution unit, a communication unit, and a provision unit. The plan acquisition unit acquires a key distribution plan formulated based on state information indicating a state of the user network. The plan execution unit determines a distribution amount of the application key for each key sharing destination corresponding to a destination cryptographic application based on the key distribution plan. The communication unit encrypts the application key using a link key generated by QKD, and transmits the encrypted application key to the key sharing destination. The provision unit provides the application key in response to a request from the cryptographic application.

Abstract: A key management device according to an embodiment is a key management device managing an application key for encrypting a communication in an application network including a plurality of applications. The key management device includes a hardware processor configured to function as a collection unit, a calculation unit, a determination unit, and a communication unit. The collection unit collects, using quantum key distribution (QKD), resource information indicating a resource of a link for which a link key is generated. The calculation unit calculates metric for a key relay route including the link on the basis of the resource information. The determination unit determines a key relay route from among a plurality of key relay routes on the basis of the metric. The communication unit uses the key relay route determined by the determination unit to send, to a destination, an application key encrypted with the link key.

Abstract: According to an embodiment, an application-key management system includes a plurality of application-key management devices and a comprehensive management device. The application-key management devices each include: a first memory configured to store an application key in one or more separated logical drives for each sharing destination of the application key shared by quantum cryptographic communication; and a first processor coupled to the first memory. The first processor is configured to: receive, from the comprehensive management device, a deletion request of specifying a logical drive storing the application key to be deleted among the logical drives; and delete the application key stored in the logical drive specified by the deletion request.

Abstract: According to an embodiment, a quantum cryptography storage system includes a plurality of storage, a distribution control device, and a distribution device. The plurality of storage devices are connected via a communication network. The distribution control device determines a distribution mode of shares into which data is distributed, based on quantum key distribution network (QKDN) information. The generation device generates an encryption key and a decryption key by using a quantum key shared by using a QKDN. The distribution device distributes the data into the shares, based on the distribution mode. When receiving a share encrypted using the encryption key via the communication network, each of the plurality of storage devices that stores the shares in a distributed manner decrypts the share encrypted with the decryption key and stores a share decrypted.

Abstract: According to an embodiment, a communication device includes one or more processors. The processors share encryption keys with a plurality of external communication devices. The processors, based on residual quantities of the encryption keys, decide on a route for sending transmission data. The processors encrypt, for each external communication device of one or more external communication devices included in the route, a header in which the external communication device is set as a destination, using an encryption key shared with the external communication device. The processors generate a packet that includes the transmission data and encrypted headers for the one or more external communication devices. The processors send the generated packet along the route.

Abstract: According to an embodiment, a quantum cryptography communication system includes a quantum cryptography communication device and a key management device. The quantum cryptography communication system includes a generated information supply unit, a reception unit, a determination unit, and a global key supply unit. The generated information supply unit is configured to supply generated information generated by quantum key distribution processing, to the key management device. The reception unit is configured to receive the generated information from the quantum cryptography communication device. The determination unit is configured to determine a ratio at which the generated information is used for a global key random number for each encrypted data communication destination. The global key supply unit is configured to supply a global key generated from the global key random number to an application connected to the key management device.

Abstract: A communication device includes a plurality of key distributing units, a plurality of communicating units, a monitoring unit, and a switching unit. The plurality of key distributing units have a quantum key distribution function for sharing a quantum key with an external distribution device. The plurality of communicating units communicate with an external communication device using the quantum key. The monitoring unit monitors operational status indicating at least one of transmission-reception status of photons in the quantum key distribution function, generation status of generating the quantum key, and obtaining status of obtaining the quantum key. The switching unit switches a control target, which either represents one of the key distributing units or represents one of the communicating units, from a first control target to a second control target other than the first control target according to the operational status.

Abstract: A quantum-cryptographic-communication system according to an embodiment includes a key-integrated-management device, quantum-cryptography devices, and key-management-inspection devices. An inspection-target-value-calculating unit calculates an inspection-target value based on quantum-cryptography-device information related to a quantum-cryptography device. An expected-value-calculating unit calculates an expected value based on at least one of wiring information of a QKD link connected to the inspection-target-quantum-cryptography device; weather information of the site installed with the inspection-target-quantum-cryptography device; and the quantum-cryptography-device information. A permissible-value-calculating unit calculates a permissible value based on at least one of the wiring information, the weather information, and the quantum-cryptography-device information.

Abstract: According to an embodiment, a forwarding device, which is connected to a key management server device configured to generate a decryption key by using quantum key distribution, includes a memory and one or more processors coupled to the memory. The one or more processors are configured to: receive information specifying a decryption target packet from a mobile phone network management server device; receive a reception packet; decrypt the reception packet when the reception packet is the decryption target packet specified from the mobile phone network management server device; and forward the decrypted reception packet or the undecrypted reception packet.

Abstract: According to an embodiment, a communication device includes a plurality of communication processors, and one or more processors. Each of the communication processors is configured to generate an encryption key by quantum key distribution with an external communication device, encrypt data by using the generated encryption key, and transmit the data to the external communication device. The one or more processors are configured to: divide data requested to be transmitted by an application into a plurality of pieces of transmission data; and determine, from among the plurality of communication processors, one or more communication processors to be used for transmission of the divided plurality of pieces of the transmission data.

Abstract: According to an embodiment, a quantum communication device is adapted to correct first sift key data acquired by performing sift processing with respect to a quantum bit string received from a transmission device via a quantum communication path. The quantum communication device includes a determination unit and a correction unit. The determination unit determines setting information of error correction on the first sift key data from an estimated error rate of the first sift key data and a margin of the estimated error rate. The correction unit generates corrected key data by performing the error correction with the setting information.

Abstract: According to an embodiment, a communication system includes a key management server device including a first processor and a router including a second processor. The first processor is configured to: share a bit string by quantum key distribution; receive a control signal including key identification information and a key length; generate a decryption key corresponding to the encryption key from the bit string based on the key identification information and key length upon receiving the control signal without waiting for a request to generate the decryption key from the router; and supply the decryption key to the router. The second processor is configured to: receive a packet encrypted with the encryption key; and decrypt the packet by using the decryption key supplied from the key management server device without requesting the key management server device to generate the decryption key.

Abstract: According to an embodiment, an application-key management system includes a plurality of application-key management devices and a comprehensive management device. The application-key management devices each include: a first memory configured to store an application key in one or more separated logical drives for each sharing destination of the application key shared by quantum cryptographic communication; and a first processor coupled to the first memory. The first processor is configured to: receive, from the comprehensive management device, a deletion request of specifying a logical drive storing the application key to be deleted among the logical drives; and delete the application key stored in the logical drive specified by the deletion request.