User identity authentication system and method

Abstract

The invention discloses a user identity authentication system and a user identity authentication method. The user identity authentication system comprises quantum network service stations disposed on a network side and user ends disposed on a user side, and further comprises a quantum key card, wherein the network side generates true random numbers which are respectively stored on the quantum key card and the network side so as to generate corresponding user side secret keys, and the user side secret keys on the quantum key card and the network side are respectively used for generating authentication commands so as to perform comparison authentication. The true random numbers are generated by a certain quantum network service station on the network side, and the quantum key card and the certain quantum network service station respectively store the true random numbers so as to generate the corresponding user side secret keys. The user identity authentication method is an identity authentication method of a symmetric cryptographic system, uses the safety random keys generated by a quantum true random number generator as secret key seeds based on a mobile secret key device, is repeatedly used in identity authentication, and considers both secret key quantity and safety problems.

Description

technical field [0001] The invention relates to the technical field of quantum communication, in particular to a system and method for identity authentication based on a quantum network service station. Background technique [0002] Identity authentication is the basic technology to achieve information security. The system checks the user's identity to confirm whether the user has access and use rights to certain resources, and can also perform identity authentication between systems. [0003] The identity authentication system in the current communication network generally adopts the asymmetric cryptosystem. In the asymmetric cryptosystem, the encryption key and the decryption key are different, and the decryption key cannot be calculated from the encryption key, which ensures the security of the decryption key and enables the authentication system using the asymmetric cryptosystem to achieve reliable user authentication. Identity authentication, and the encryption key can...

AI Technical Summary

Problems solved by technology

However, the same key is used for encryption and decryption in the symmetric cryptography system, and the key cannot be disclosed, so that the authentication process using the symmetric cryptography system in a multi-user environment requires a huge amount of secret keys, and the generation, distribution and update of the authentication system key relatively difficult

In "Computer Engineering and Design" in 2013, the document "Design of Authentication System Based on Combined Symmetric Key Technology" proposed an authentication system design scheme using combined key technology on the basis of symmetric cryptosystem, using "key seed" , random parameters and key generation algorithm realize the one-time change of the key in each authentication, which effectively solves the problems of key generation, quantity, distribution, and update, but it comes from the pseudo-random number "key" generated by the software system. "Seed" is low in security and easy to leak

[0006] The patent document with the publication number CN201510881727 discloses an identity authentication method based on quantum key encryption. The key used for identity authentication is a quantum key generated by a quantum key generation device, and the absoluteness of the key is guaranteed based on the uncertainty principle. It is safe, but the quantum key is generated in real time during the identity authentication process. When the quantum key control server does not store enough quantum keys, the encryption operation of the identity authentication is in a waiting state until there is enough key amount. In the scenario where multiple users perform identity authentication at the same time, the authentication speed will be limited by the speed of quantum key generation

[0007] In the existing technology, the identity authentication method based on the symmetric cryptosystem has a large demand for keys, and the existing solutions are relatively one-sided, and there is no balance between the amount of keys and the security of keys.

Images