Identity authentication system based on quantum key card

Abstract

The invention discloses an identity authentication system based on a quantum key card, which comprises a client A, a client B and a quantum network service station, wherein the client A applies for TGT(A) to the quantum network service station and obtains TGT(B) via the client B; and the client A applies for a corresponding Ticket to the quantum network service station according to the TGT(A) andthe TGT(B), and accesses to the client B by using the obtained Ticket. Each client is respectively configured with a quantum key card, and a corresponding quantum key is stored between the quantum keycard and the quantum network service station; and identity authentication is performed by using the configured quantum key cards when communication is performed between the client A and the quantum network service station and between the two clients. The identity authentication system uses a quantum true random number to replace a timestamp in the prior art, and solves the possibility of replay attacks. The quantum key card is independent hardware equipment, and the possibility of key stealing is greatly reduced. In addition, the key can be frequently changed, so that the security is greatlyimproved.

Description

technical field [0001] The invention relates to the technical field of quantum communication, in particular to an identity authentication system based on a quantum key card. Background technique [0002] Identity authentication is the basic technology to achieve information security. The system checks the user's identity to confirm whether the user has access and use rights to certain resources, and can also perform identity authentication between systems. [0003] Currently, the identity authentication system in the communication network generally adopts the Kerberos authentication scheme. Kerberos is a network authentication protocol designed to provide strong authentication services for client / server applications through a key system. The realization of the authentication process does not depend on the authentication of the host operating system, does not require trust based on the host address, does not require the physical security of all hosts on the network, and assu...

AI Technical Summary

Problems solved by technology

[0007] (1) Existing identity authentication technology based on the Kerberos authentication scheme uses time stamps, resulting in the possibility of replay attacks

[0008] (2) The requirements of the Kerberos protocol are based on clock synchronization in the network, which has high requirements for time synchronization of the entire system, and is difficult to achieve in large-scale distributed systems

[0009] (3) In the prior art, the client key is stored in the client memory and can be stolen by malicious software or malicious operations

[0010] (4) In the existing technology, the long-term key of the client is unchanged, and the security is not high enough

Images