Quantum communication service station key agreement method and system based on one-time asymmetric key pair and QKD

Abstract

The invention relates to a quantum communication service station key agreement method and system based on a one-time asymmetric key pair and QKD. A key card used in the method and system is independent hardware isolation equipment. The public key, the private key and other related parameters are all stored in the data security area in the key card, so that the possibility of stealing the key by malicious software or malicious operation is greatly reduced, and the key cannot be acquired and cracked by the quantum computer. Since the transmission of public and private keys and algorithm parameters is not involved in the classical network, the risk that the asymmetric key is cracked is very low, and in addition, the QKD is adopted between the service stations for key sharing, so that the security of the message is greatly guaranteed. The secret key card guarantees the communication safety of two communication parties, and also greatly improves the safety of identity authentication.

Description

technical field [0001] The present application relates to the technical field of secure communication, in particular to a quantum communication service station key agreement method and system based on a one-time asymmetric key pair and QKD. Background technique [0002] The rapid development of the Internet has brought great convenience to people's life and work. People can sit at home to send and receive e-mails, make phone calls, conduct online shopping, bank transfers and other activities through the Internet. At the same time, network information security has gradually become a potential huge problem. Generally speaking, network information faces the following security risks: network information is stolen, information is tampered with, attackers fake information, malicious damage, etc. [0003] Among them, identity authentication is one of the means to protect people's network information. Identity authentication, also known as "identity verification" or "identity auth...

AI Technical Summary

Problems solved by technology

[0010] 1. The existing identity authentication scheme based on the symmetric key pool, the symmetric key pool is used between the quantum communication service station and the quantum key card, and its capacity is huge, which puts pressure on the key storage of the quantum communication service station;

[0011] 2. The existing identity authentication scheme based on the symmetric key pool, due to the huge capacity of the symmetric key pool key, the quantum communication service station has to encrypt and store the key in an ordinary storage medium such as a hard disk, and cannot store it in the quantum communication in the key fob at the service station;

[0012] 3. The existing identity authentication scheme based on the symmetric key pool causes troubles for key backup due to the huge key capacity of the symmetric key pool;

[0013] 4. In the existing identity authentication scheme based on a symmetric key pool, each client’s key card needs to store a large number of keys, which has a large storage requirement for the client’s key card, which increases the cost of the client’s key card

Images