This invention discloses an identity
authentication method integrating
quantum-resistant signatures and the X.509 format, relating to the field of
data security technology. The method includes: S1, CA generates and publishes globally public parameters; S2, EE1 and EE2 obtain Cert1 and Cert2; S3, EE1 and EE2 perform bidirectional
authentication and
session key negotiation, and communicate using the
session key; constructing a
quantum-resistant
digital identity certificate to ensure the long-term security and
traceability of registration information; during the registration phase, the SLH-DSA
algorithm is used to sign the user-submitted registration information to ensure the long-term validity and strong anchoring of the identity
certificate, while the ML-DSA
algorithm is reused to sign the registration information for rapid
verification scenarios; during the
authentication interaction phase, the ML-KEM
quantum-resistant
algorithm is used to implement a dual-path quantum-resistant DKE
key exchange protocol to generate a
session key, and the ML-DSA algorithm, with higher signature and
verification performance, is used to digitally sign and verify the authentication message, achieving identity confirmation and communication integrity protection for both parties, and improving the performance of establishing a secure session link.