Identity authentication method and system based on quantum cryptography
By applying quantum cryptography technology to the authentication method between the receiver and the sender, reliable third-party authentication is achieved, solving the security and uniqueness problems of authentication in existing technologies, and improving the security of data transmission and the privacy of authentication.
Patent Information
- Application Number
- CN202511625031.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-11-07
- Publication Date
- 2026-01-02
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
Existing technologies for identity authentication require solutions. One key technical challenge is how to apply quantum cryptography to identity authentication methods and systems.
By recording the sender's identity information authorized by the receiver into the identity authentication server, the identity authentication server verifies the sender's identity information and generates a random number. After encrypting the random number with a private key, it is sent to the receiver. The receiver verifies the random number with a public key and generates a sequence number. The sender sends the sequence number to the receiver. The receiver sends a photon beam to the sender and saves the measurement basis of the photon beam. The sender signs the transmitted data using post-quantum digital signature technology and encodes it into the photon beam before sending it to the receiver. The quantum polarization state of each photon switches according to the sequence number. The receiver uses the measurement basis to decode the encoded photon beam and obtain the transmitted data.
It achieves reliable third-party authentication based on quantum cryptography, which improves the security and uniqueness of data transmission, reduces data cracking time, and enhances the privacy and security of identity verification.
Smart Images
Figure CN121261995A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of quantum cryptography, in particular to an identity authentication method and system based on quantum cryptography. BACKGROUND
[0002] With the rapid development of Internet technology, network security is paid more and more attention. In the communication process, the attacker often tampers with the transmitted data, thereby obtaining illegal benefits. Therefore, how to ensure the legitimacy and security of information becomes crucial in the communication process. The existing security authentication technology adopts the way of authentication through authorization mechanism, so that the user needs to go through multiple authentication authorization to access when accessing, which is cumbersome to operate and difficult to cope with quantum computer attacks. In the quantum key distribution scheme, the information of both parties is symbiotic, and the key is also matched, but there is a lack of reliable third-party authentication. Therefore, at present, it is necessary to design an identity authentication method based on quantum cryptography, which can apply quantum cryptography to meet the data transmission of the sending end and the receiving end, and realize reliable three-party authentication. SUMMARY
[0003] The technical problem to be solved by the present application is how to apply quantum cryptography to meet the data transmission of the sending end and the receiving end, and realize reliable three-party authentication, and the purpose is to provide an identity authentication method and system based on quantum cryptography, which solves the above technical problems.
[0004] The present application is realized by the following technical scheme: An identity authentication method based on quantum cryptography, comprising: Identity information of a sending end authorized to access by a receiving end is input to an identity authentication service end; When the receiving end initiates an access request to the sending end, the identity authentication service end verifies the identity information of the sending end and generates a random number; the random number is encrypted by a private key and then sent to the receiving end; The receiving end generates a sequence number after verifying the random number by a public key and sends it to the sending end for verification; The receiving end sends a photon beam to the sending end and saves the measurement base of the photon beam; The sending end encodes the transmission data in the photon beam after signing the transmission data by a post-quantum digital signature technology and sends it to the receiving end; the quantum polarization state of each photon is switched according to the change of the sequence number; The receiving end decodes the encoded photon beam using the measurement base and obtains the transmission data using the change of the quantum polarization state.
[0005] When the identity information of the sending end authorized to access the receiving end is input to the identity authentication server, the identity authentication server updates the identity information according to the access validity time of each sending end; Further comprising: the public-private key management system generates a new public-private key pair for each updated client and assigns it to the identity authentication server and the receiving end.
[0006] The identity authentication server verifies the identity information of the sending end and generates a random number, comprising: The identity authentication server verifies the IP address, user authority and access validity period of the sending end; when the verification is passed, a random number is generated by performing column transposition cipher calculation according to the verification time, specifically comprising: The hour, minute and second of the verification time are divided into three columns, and after rearranging according to the numerical order of each row, they are combined according to the random column order.
[0007] When the receiving end initiates an access request to the sending end, the access request is sequentially put into a processing sequence to obtain an initial sequence number; After the receiving end verifies the random number through the public key, it generates a sequence number and sends it to the sending end, including: removing the access request with failed random number verification from the processing sequence, and renumbering the initial sequence number to obtain the sequence number when the random number verification is successful.
[0008] When the receiving end generates a photon beam, the quantum polarization state of each photon is random; The sending end signs the transmission data through post-quantum digital signature technology, encodes it in the photon beam and sends it to the receiving end, including: The signature key is used to sign the transmission data through quantum network distribution; each photon is converted into phase encoding through a polarization beam splitter; during the conversion process, the phase encoder modulates the photons on two sub-light paths using differential phase shift keying, and the phase difference between adjacent symbols represents the information to be transmitted; the quantum polarization state of the encoded photons is switched according to the change of the sequence number through a beam combiner, and the photons whose phase difference before and after switching does not change are recombined into the same one.
[0009] When the quantum polarization state of each photon is switched according to the change of the sequence number, the Bell state measurement in the BB84 protocol is used to switch the four maximum entangled states of the two-qubit system; The receiving end decodes the encoded photon beam using the measurement basis, and obtains the transmission data using the change of the quantum polarization state, including: By comparing the measurement basis with the encoded photon beam, the original quantum information is recovered; The position of each sequence number is obtained by using the change of the quantum polarization state, and the preset encoding polarization analyzer is obtained by each sequence number to sequentially analyze the photon beam to obtain the transmission data.
[0010] After the photon beam encoded by the measurement base is decoded at the receiving end, and the transmission data is obtained by using the change of the quantum polarization state, the method further comprises: The receiving end sends response information to the sending end, and the response information comprises the transmission data obtained by the receiving end and a session identifier; the sending end compares the transmission data of the response information with local data; and the session identifier and the comparison result are fed back to the receiving end.
[0011] An identity authentication system based on quantum cryptography technology, comprising: An identity information input module: inputting the identity information of the sending end authorized to access the receiving end to an identity authentication server; An identity information verification module: when the receiving end initiates an access request to the sending end, the identity authentication server verifies the identity information of the sending end and generates a random number; the random number is encrypted by a private key and then sent to the receiving end; A sequence number verification module: after the receiving end verifies the random number by a public key, a sequence number is generated and sent to the sending end; the sending end sends the sequence number to the receiving end for verification; A photon beam initialization module: the receiving end sends a photon beam to the sending end and saves the measurement base of the photon beam; A photon beam encoding module: the sending end encodes the transmission data in the photon beam after signing the transmission data by a post-quantum digital signature technology and sends the photon beam to the receiving end; the quantum polarization state of each photon is switched with the change of the sequence number; A photon beam decoding module: the receiving end decodes the encoded photon beam by using the measurement base and obtains the transmission data by using the change of the quantum polarization state.
[0012] An electronic device, comprising a memory, a processor and a computer program running on the processor, wherein the processor implements the steps of the identity authentication method based on quantum cryptography technology when executing the computer program.
[0013] A computer readable storage medium, the computer readable storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the identity authentication method based on quantum cryptography technology.
[0014] Compared with the prior art, the present application has the following advantages and beneficial effects: The application provides an identity authentication method based on quantum cryptography technology, identity information of a sending terminal authorized to access a receiving terminal is input to an identity authentication service terminal; when the sending terminal sends an access request, the identity authentication service terminal verifies the identity information of the sending terminal and generates a random number; the random number is encrypted by a private key and then sent to the receiving terminal; the receiving terminal verifies the random number by a public key, generates a serial number and sends it to the sending terminal; the sending terminal verifies the serial number; the receiving terminal sends a photon beam to the sending terminal and saves a measurement base of the photon beam; the sending terminal signs transmission data by a post-quantum digital signature technology, encodes the photon beam and sends it to the receiving terminal; quantum polarization states of each photon are switched according to changes in the serial number; the receiving terminal decodes the encoded photon beam by the measurement base and obtains the transmission data by changes in the quantum polarization states. The application can meet data transmission of the sending terminal and the receiving terminal by applying quantum cryptography technology, and realize reliable three-party authentication. Moreover, the application verifies the identity of the sending terminal first, then verifies it by asymmetric key double verification, and then uses post-quantum cryptography technology, so that the quantum polarization states of each photon are switched according to changes in the serial number generated in the verification process, so that each communication content has uniqueness, and the purpose of one-time one-key one-sequence number can be realized, and the application is safer. BRIEF DESCRIPTION OF DRAWINGS
[0015] In order to more clearly illustrate the technical solutions of the example embodiments of the application, the following will briefly introduce the drawings needed to be used in the embodiments. It should be understood that the following drawings only show some of the embodiments of the application, and therefore should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can also be obtained without creative labor. In the drawings: Figure 1 The flowchart of the identity authentication method based on quantum cryptography technology of the embodiments of the application. DETAILED DESCRIPTION
[0016] In order to make the purpose, technical solutions and advantages of the application more clear, the following will further describe the application in combination with the embodiments and drawings. The illustrative embodiments of the application and their descriptions are only used to explain the application, and should not be regarded as a limitation on the application. EMBODIMENT
[0017] As shown in Figure 1 The embodiments of the application provide an identity authentication method based on quantum cryptography technology, which comprises: Identity information of a sending terminal authorized to access a receiving terminal is input to an identity authentication service terminal; When the receiving terminal initiates an access request to the sending terminal, the identity authentication service terminal verifies the identity information of the sending terminal and generates a random number; the random number is encrypted by a private key and then sent to the receiving terminal; The receiving end generates a sequence number and sends it to the sending end after verifying the random number by the public key; the sending end sends the sequence number to the receiving end for verification; The receiving end sends a photon beam to the sending end and saves the measurement base of the photon beam; The sending end encodes the transmission data in the photon beam after signing it by the post-quantum digital signature technology and sends it to the receiving end; the quantum polarization state of each photon is switched according to the sequence number; The receiving end decodes the encoded photon beam using the measurement base and obtains the transmission data using the change in the quantum polarization state.
[0018] The identity authentication server intercepts the access request initiated by the receiving end to the sending end, generates a random number after verifying the identity of the sending end, and then encrypts and verifies it by the private key. The receiving end generates a sequence number according to the message sequence and feeds it back to the sending end. After the identity verification, the sending end sends the sequence number to the receiving end for verification. The receiving end distributes the generated initial photon beam to the sending end, and the sending end signs the transmission data by the post-quantum digital signature technology, eliminating the process of encrypting and decrypting the data, which is relatively more time-saving in data cracking and improves security; the quantum polarization state of each photon changes with the sequence number, so that the photon beam is set using the message sequence after the client verification is successful, meeting the needs of the receiving end to read the transmission data of the sending end multiple times through each photon.
[0019] When the identity information of the sending end authorized to access the receiving end is entered into the identity authentication server, the identity authentication server updates the identity information according to the access validity time of each sending end; It also includes a public and private key management system that generates new public and private key pairs for each updated client and distributes them to the identity authentication server and the receiving end.
[0020] The identity information authenticated by the identity authentication server is updated using the recorded authorized validity time of the sending end, and the public and private key management system distributes new public and private key pairs after updating the authentication status of the client, so that the identity authentication server encrypts the verified information and prevents the sending end from malicious tampering, thereby providing the receiving end with the security identity of the sending end for review.
[0021] The identity authentication server verifies the identity information of the sending end and generates a random number, including: The identity authentication server verifies the IP address, user rights, and access validity period of the sending end; when the verification is passed, a random number is generated according to the verification time by performing a transposition cipher calculation, specifically including: The hour number, minute number and second number of the above verification passing time are divided into three columns, and rearranged according to the numerical order of each row, and combined according to the random column order.
[0022] According to the verification of the identity information, the random number is generated according to the ip address and user related information, so as to generate a corresponding unique random number according to the random column transposition password. According to the verification time, the random number is randomly generated, which can facilitate and improve the privacy of the identity verification process.
[0023] When the above receiving end initiates an access request to the above sending end, the above access request is sequentially put into the processing sequence to obtain an initial sequence number; After the above receiving end verifies the above random number by public key, the sequence number is generated and sent to the above sending end, including: moving the above access request with the above random number verification failure out of the above processing sequence, and renumbering the above initial sequence number to obtain the sequence number when the above random number verification is successful.
[0024] When the receiving end initiates an access request to the sending end, the access request is sequentially put into the processing sequence to obtain a sequence number, and the access request with the random number verification success is renumbered, so as to encode the photon beam by using the verification result of the regenerated sequence number, so as to arrange and switch different transmission data, facilitate the direct acquisition of transmission data, and retain the data integrity.
[0025] When the above receiving end generates the photon beam, the quantum polarization state of each photon is random; The sending end encodes the transmission data in the photon beam and sends it to the receiving end after signing the transmission data by the post quantum digital signature technology, including: The signature key distributed by the quantum network is used to sign the transmission data; each photon is converted into phase encoding by a polarization beam splitter; in the conversion process, the phase encoder modulates the photon on two sub optical paths by differential phase shift keying respectively, and the phase difference between adjacent symbols is used to represent the information transmission; the quantum polarization state of the encoded photon is switched according to the change of the above sequence number by a beam combiner, and the photons with unchanged phase difference before and after switching are recombined into the same one.
[0026] The phase coding conversion of the content of the transmission data is encoded into each photon after the transmission data is signed by the quantum key pair, so that the phase is used to transmit information about the phase difference between adjacent symbols of the photon pair, and then the photons are re-integrated according to the phase difference of the serial number, thereby reducing the noise influence of the data transmission interruption caused by network instability, data loss, verification timeliness and the like. Among them, the quantum polarization state is switched to facilitate data reading, and the photons with a phase difference of 0 before and after switching are fused to facilitate data searching and verification. Among them, the photons are modulated by differential phase shift keying, and the information is transmitted through the phase difference between adjacent symbols (such as 0° representing 0 and 180° representing 1), which effectively realizes polarization and phase conversion, is suitable for quantum entanglement distribution and key distribution, and improves the security and reliability of quantum communication.
[0027] When the quantum polarization state of each photon is switched according to the change of the serial number, the Bell state measurement in the BB84 protocol is used to switch four maximum entangled states of the two-qubit system; The receiving end decodes the encoded photon beam using the measurement base, and obtains the transmission data using the change of the quantum polarization state, including: By comparing the measurement base with the encoded photon beam, the original quantum information is recovered; The position of each serial number is obtained by using the change of the quantum polarization state, and the preset encoding polarization analyzer is obtained through each serial number to sequentially analyze the photon beam to obtain the transmission data.
[0028] After the receiving end decodes the encoded photon beam using the measurement base, and obtains the transmission data using the change of the quantum polarization state, including: The receiving end sends response information to the sending end, and the response information includes the transmission data obtained by the receiving end and a session identifier; the sending end compares the transmission data of the response information with local data; and the session identifier and the comparison result are fed back to the receiving end.
[0029] The receiving end feeds back response information to the sending end after obtaining the transmission data, so that the sending end compares the analysis result of the transmission data and feeds back to the receiving end. The receiving end finds the winning transmission data according to the sent session identifier for confirmation or modification, and the comparison result can be the content to be modified.
[0030] In summary, the identity authentication method and system based on quantum cryptography technology are provided. This invention provides an identity authentication method based on quantum cryptography. The method involves recording the identity information of the sender authorized by the receiver into an identity authentication server. When the sender sends an access request, the authentication server verifies the sender's identity information and generates a random number. This random number is then encrypted with a private key and sent to the receiver. The receiver verifies the random number with a public key, generates a sequence number, and sends it to the sender. The sender sends the sequence number to the receiver, which verifies the sequence number. The receiver sends a photon beam to the sender and stores the measurement basis of the photon beam. The sender signs the transmitted data using post-quantum digital signature technology, encodes it in the photon beam, and sends it to the receiver. The quantum polarization state of each photon switches according to the sequence number. The receiver decodes the encoded photon beam using the measurement basis and obtains the transmitted data by utilizing the changes in the quantum polarization state. This invention can use quantum cryptography to satisfy data transmission between the sender and receiver, achieving reliable three-way authentication. Furthermore, this invention verifies the sender's identity first, then performs dual verification using an asymmetric key, and finally employs post-quantum cryptography. The quantum polarization state of each photon switches according to the sequence number generated during the verification process, ensuring that each communication is unique. This achieves the purpose of one key and one sequence number per communication, making it more secure.
[0031] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.
Claims
1. An identity authentication method based on quantum cryptography, characterized in that, include: The identity information of the sender that the receiver is authorized to access is entered into the identity authentication server. When the receiving end initiates an access request to the sending end, the identity authentication server verifies the identity information of the sending end and generates a random number; the random number is then encrypted with a private key and sent to the receiving end. After verifying the random number using a public key, the receiving end generates a sequence number and sends it to the sending end; the sending end then sends the sequence number to the receiving end for verification. The receiving end sends the photon beam to the transmitting end and saves the measurement basis of the photon beam; The transmitting end signs the transmitted data using post-quantum digital signature technology, encodes it in the photon beam, and sends it to the receiving end; the quantum polarization state of each photon switches according to the sequence number. The receiving end uses the measurement base to decode the encoded photon beam and uses the change in the quantum polarization state to obtain the transmitted data.
2. The identity authentication method based on quantum cryptography according to claim 1, characterized in that, When the identity information of the sending end authorized by the receiving end is entered into the identity authentication server, the identity authentication server updates the identity information according to the access validity time of each sending end; It also includes: the public-private key management system generates new public-private key pairs for each updated client and distributes them to the identity authentication server and the receiving end.
3. The identity authentication method based on quantum cryptography according to claim 1, characterized in that, The identity authentication server verifies the sender's identity information and generates a random number, including: The identity authentication server verifies the sender's IP address, user permissions, and access validity period. Upon successful verification, it generates a random number based on the verification time using a column-transformed password calculation, specifically including: The verification time (hours, minutes, and seconds) is divided into three columns, rearranged according to the numerical order of each row, and then combined according to the random column order.
4. The identity authentication method based on quantum cryptography according to claim 1, characterized in that, When the receiving end initiates an access request to the sending end, the access request is sequentially placed into a processing sequence to obtain an initial sequence number; After the receiving end verifies the random number using the public key, it generates a sequence number and sends it to the sending end. This includes removing the access request that fails to verify the random number from the processing sequence and renumbering the initial sequence number to obtain the sequence number when the random number is successfully verified.
5. The identity authentication method based on quantum cryptography according to claim 1, characterized in that, When the receiver generates a photon beam, the quantum polarization state of each photon is random. The transmitting end signs the transmitted data using post-quantum digital signature technology, encodes it in the photon beam, and sends it to the receiving end, including: The transmitted data is signed using a signature key distributed by a quantum network; each photon is converted into a phase code using a polarization beam splitter; during the conversion process, the phase encoder modulates the photons separately on two sub-optical paths using differential phase shift keying, and the information is transmitted by the phase difference between adjacent symbols; the quantum polarization state of the encoded photons is switched according to the change of the sequence number using a beam combiner, and photons whose phase difference does not change before and after the switch are recombined into the same one.
6. The identity authentication method based on quantum cryptography according to claim 1, characterized in that, When the quantum polarization state of each photon switches with the change of the sequence number, the Bell state measurement in the BB84 protocol is used to switch the four maximum entangled states of the two-qubit system. The receiving end decodes the encoded photon beam using the measurement basis and obtains the transmitted data using the change in the quantum polarization state, including: The original quantum information is recovered by comparing the measurement basis with the encoded photon beam. The position of each sequence number is obtained by utilizing the change in the quantum polarization state, and a preset coded polarization analyzer is obtained through each sequence number to sequentially parse the photon beam and acquire the transmitted data.
7. The identity authentication method based on quantum cryptography according to claim 6, characterized in that, After decoding the encoded photon beam using the measurement basis at the receiving end and obtaining the transmitted data using the change in the quantum polarization state, the process includes: The receiving end sends a response message to the sending end, the response message including the transmission data and session identifier obtained by the receiving end; the sending end compares the transmission data of the response message with local data; and feeds back the session identifier and comparison result to the receiving end.
8. An identity authentication system based on quantum cryptography, characterized in that, include: Identity information entry module: Enters the identity information of the sender that the receiver has authorized to access into the identity authentication server; Identity verification module: When the receiving end initiates an access request to the sending end, the identity authentication server verifies the identity information of the sending end and generates a random number; the random number is then encrypted with a private key and sent to the receiving end. Serial number verification module: After the receiving end verifies the random number using a public key, it generates a serial number and sends it to the sending end; the sending end then sends the serial number to the receiving end for verification. Photon beam initialization module: The receiver sends the photon beam to the transmitter and saves the measurement basis of the photon beam; Photon beam encoding module: The transmitting end signs the transmitted data using post-quantum digital signature technology, encodes it in the photon beam, and sends it to the receiving end; the quantum polarization state of each photon switches according to the sequence number. Photon beam decoding module: The receiving end uses the measurement base to decode the encoded photon beam and uses the change in the quantum polarization state to obtain the transmitted data.
9. An electronic device comprising a memory, a processor, and a computer program running on the processor, characterized in that: When the processor executes the computer program, it implements the steps of an identity authentication method based on quantum cryptography as described in any one of claims 1 to 7.
10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by the processor, it implements the steps of the identity authentication method based on quantum cryptography as described in any one of claims 1 to 7.