Certificate chain generation method and authentication method

Abstract

The application discloses a certificate chain generation method and authentication method, relates to the field of quantum security, and comprises a quantum root certificate, an intermediate certificate and a user certificate. The certificate chain generation method comprises the following steps: a first quantum CA certificate issuing center sends a certificate request file to a traditional CA certificate issuing center; the traditional CA certificate issuing center issues a quantum root certificate based on a local traditional root certificate; the first quantum CA certificate issuing center issues an intermediate certificate based on the quantum root certificate; and a second quantum CA certificate issuing center issues a user certificate based on the intermediate certificate. The user certificate is embedded with a one-time identity of the quantum root certificate and a one-time identity of the intermediate certificate. Therefore, the authentication method of the certificate chain is as follows: the legality of the user certificate is authenticated, and the legality of the certificate chain is authenticated. The certificate chain is authenticated as a whole, and the authentication efficiency of the certificate chain is improved.

Description

Technical Field

[0001] This invention relates to the field of quantum security technology, specifically to a method for generating and authenticating a certificate chain. Background Technology

[0002] During communication, users can use digital certificates to identify the identities of all parties involved. These digital certificates are issued by a Certificate Authority (CA). However, the development of the internet has rendered the direct issuance of digital certificates by CAs insufficient for today's network applications. Therefore, multiple levels of Certificate Authorities have emerged, including root Certificate Authorities, intermediate Certificate Authorities, and user Certificate Authorities. Correspondingly, the certificates issued include root certificates, intermediate certificates, and user certificates, with intermediate certificates potentially having multiple levels.

[0003] In the traditional certificate chain authentication process, the root certificate is used to authenticate the legitimacy of intermediate certificates, and the intermediate certificates are used to authenticate the legitimacy of user certificates. Each level of certificate needs to be authenticated once, which means that the authentication of multiple certificates in a certificate chain needs to be performed multiple times, resulting in very low authentication efficiency.

[0004] Improving the authentication efficiency of certificate chains and refining the multi-level authentication methods of certificate chains have become technical problems that need to be solved. Summary of the Invention

[0005] Purpose of the Invention: The purpose of this invention is to provide a method for generating and authenticating a certificate chain, solving the problem of low authentication efficiency caused by the current step-by-step authentication method of certificate chains. This invention improves upon the traditional step-by-step certificate authentication method by implementing authentication as a whole for the certificate chain. The certificate chain involved in the method proposed in this invention connects traditional root certificates with quantum digital certificates, achieving effective integration of traditional digital certificates and quantum digital certificates, and improving the security of the certificate chain.

[0006] Technical Solution: A method for generating a certificate chain, the certificate chain including a quantum root certificate, an intermediate certificate issued by the quantum root certificate, and a user certificate issued by the intermediate certificate, the generation method comprising the following steps:

[0007] Step 1: The first quantum CA certificate authority in the quantum CA certificate issuance system sends a certificate request file to the traditional CA certificate authority;

[0008] Step 2: The traditional CA certificate issuing center issues a quantum root certificate to the First Quantum CA certificate issuing center based on the local traditional root certificate;

[0009] Step 3: The first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center in the quantum CA certificate issuing system based on the quantum root certificate. The intermediate certificate includes the one-time identity of the quantum root certificate.

[0010] Step 4: The second quantum CA certificate issuing center issues user certificates to the third quantum CA certificate issuing center in the quantum CA certificate issuing system based on the intermediate certificate. The user certificate includes the one-time identity of the quantum root certificate and the one-time identity of the intermediate certificate.

[0011] Furthermore, steps 1 and 2 further include:

[0012] The first quantum CA certificate authority obtains a random number from its local machine, which serves as the private key of the quantum root certificate. The private key of the quantum root certificate is denoted as root.pri.key. The first quantum CA certificate authority generates a corresponding public key based on the private key root.pri.key. The first quantum CA certificate authority generates a certificate request file, which includes the public key generated by the first quantum CA certificate authority based on the private key root.pri.key. The first quantum CA certificate authority sends the certificate request file to the traditional CA certificate authority.

[0013] The traditional CA certificate authority receives the certificate request file and uses its local traditional root certificate to sign the public key generated by the first quantum CA certificate authority based on the private key root.pri.key. The signed file is then sent to the first quantum CA certificate authority as the quantum root certificate.

[0014] Furthermore, the process in step 3 where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate is as follows:

[0015] (1) The first quantum CA certificate issuing center obtains random numbers r1, s1 and u1 from the local machine, generates an irreducible polynomial p1 based on the random number r1, and generates a first hash function H based on the irreducible polynomial p1 and the random number s1. p1,s1 Using the first hash function H p1,s1 Calculate the hash value of the private key root.pri.key of the quantum root certificate to obtain H. p1,s1 (root.pri.key), hash value H using random number u1. p1,s1 Encrypt (root.pri.key) to obtain the one-time identity OTID of the quantum root certificate. root =H p1,s1 (root.pri.key)⊕u1;

[0016] (2) The first quantum CA certificate issuing center obtains a random number from the local machine, and the random number is used as the private key of the intermediate certificate. The private key of the intermediate certificate is denoted as: medi.pri.key;

[0017] (3) The first quantum CA certificate issuing center obtains random numbers r2, s2 and u2 from the local machine, generates an irreducible polynomial p2 based on the random number r2, and generates a second hash function H based on the irreducible polynomial p2 and the random number s2. p2,s2 Using the second hash function H p2,s2 Calculate the hash value of the private key medi.pri.key of the intermediate certificate to obtain H. p2,s2 (medi.pri.key), hash value H using random number u2. p2,s2 Encrypt (medi.pri.key) to obtain the one-time identity OTID of the intermediate certificate. medi =H p2,s2 (medi.pri.key)⊕u2;

[0018] (4) The first quantum CA certificate issuing center constructs an intermediate certificate, Medi.Cert, to be signed;

[0019] Medi.Cert = (tbsMediCert, OTID) medi ,OTID root );

[0020] Among them, tbsMediCert is the intermediate certificate data;

[0021] (5) The first quantum CA certificate issuing center obtains random numbers r3, s3 and t3 locally, generates an irreducible polynomial p3 based on random number r3, and generates a third hash function H based on irreducible polynomial p3 and random number s3. p3,s3 Using the third hash function H p3,s3 Calculate the hash value of the intermediate certificate Medi.Cert to obtain H. p3,s3 (Medi.Cert), using random number t3 to hash value H p3,s3 (Medi.Cert) is used for encryption to obtain the signature file Sign. medi =[H p3,s3 (Medi.Cert),p3]⊕t3;

[0022] (6) Encapsulate the intermediate certificate to obtain the intermediate certificate Signed.Medi.Cert issued by the first quantum CA certificate issuing center based on the quantum root certificate;

[0023] Signed.Medi.Cert=(Medi.Cert,Signmedi );

[0024] That is: Signed.Medi.Cert=(tbsMediCert,OTID medi ,OTID root Sign medi ).

[0025] Furthermore, in the process (1) where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate, the random numbers r1, s1, and u1 obtained by the first quantum CA certificate issuing center from its local source have the same length;

[0026] In the process (3) where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate, the random numbers r2, s2, and u2 obtained by the first quantum CA certificate issuing center from the local area have the same length.

[0027] In the process (5) where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate, the first quantum CA certificate issuing center obtains random numbers r3, s3 and t3 from its local machine. The random number r3 has the same length as the random number s3, and the length of the random number t3 is twice the length of the random number r3.

[0028] Furthermore, the process in step 4 where the second quantum CA certificate issuing center issues a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate is as follows:

[0029] (1) The second quantum CA certificate issuing center obtains a random number from the local machine, and the random number is used as the private key of the user certificate. The private key of the user certificate is denoted as: user.pri.key;

[0030] (2) The second quantum CA certificate issuing center obtains random numbers r4, s4 and u4 from the local machine, generates an irreducible polynomial p4 based on the random number r4, and generates a fourth hash function H based on the irreducible polynomial p4 and the random number s4. p4,s4 Using the fourth hash function H p4,s4 Calculate the hash value of the user certificate's private key, user.pri.key, to obtain H. p4,s4 (user.pri.key), hash value H using random number u4. p4,s4 Encrypt (user.pri.key) to obtain the user certificate's one-time identity OTID. user =H p4,s4 (user.pri.key)⊕u4;

[0031] (3) The second quantum CA certificate issuing center constructs the user certificate User.Cert to be signed;

[0032] User.Cert = (tbsUserCert, OTID) user ,OTID medi ,OTID root );

[0033] Among them, tbsUserCert contains user certificate data;

[0034] (4) The second quantum CA certificate issuing center obtains random numbers r5, s5, and t5 from the local machine, generates an irreducible polynomial p5 based on the random number r5, and generates a fifth hash function H based on the irreducible polynomial p5 and the random number s5. p5,s5 Using the fifth hash function H p5,s5 Calculate the hash value of the user certificate User.Cert to obtain H. p5,s5 (User.Cert), using a random number t5 to hash the value H p5,s5 (User.Cert) is encrypted to obtain the signature file Sign. user =[H p5,s5 (User.Cert),p5]⊕t5;

[0035] (5) Encapsulate the user certificate to obtain the user certificate Signed.User.Cert issued by the second quantum CA certificate authority based on the intermediate certificate;

[0036] Signed.User.Cert=(User.Cert,Sign user );

[0037] That is: Signed.User.Cert=(tbsUserCert,OTID user ,OTID medi ,OTID root Sign user ).

[0038] Furthermore, in the process (2) where the second quantum CA certificate issuing center issues a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate, the random numbers r4, s4, and u4 obtained by the second quantum CA certificate issuing center from the local machine have equal lengths;

[0039] In the process (4) of the second quantum CA certificate issuing center issuing a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate, the second quantum CA certificate issuing center obtains random numbers r5, s5 and t5 from the local machine. The random number r5 and the random number s5 have the same length, and the length of the random number t5 is twice the length of the random number r5.

[0040] Furthermore, tbsUserCert is user certificate data, which includes a user certificate serial number. The user certificate serial number is used as an index value to address any parameter in the user certificate generation process.

[0041] An authentication method for a certificate chain, the certificate chain including a quantum root certificate, an intermediate certificate issued by the quantum root certificate, and a user certificate issued by the intermediate certificate, the authentication method comprising the following steps:

[0042] Process 1: The authentication terminal parses the received user certificate Signed.User.Cert to obtain tbsUserCert and OTID. user OTID medi OTID root and Sign user ;

[0043] Step 2: Transfer tbsUserCert and OTID user OTID medi and OTID root Send to the Quantum CA certificate issuance system;

[0044] Step 3: The Quantum CA certificate issuing system addresses the parameters and generates an OTID. ′ user OTID ′ medi OTID ′ root The generated OTID ′ user OTID ′ medi OTID ′ root With the received OTID user OTID medi OTID root The system performs a comparison. If all values ​​match, the user certificate authentication process proceeds to the next step. Otherwise, the user certificate authentication fails.

[0045] Step 4: The Quantum CA certificate issuing system addresses the random numbers s5 and t5, and sends the addressed random numbers s5 and t5 to the authentication end;

[0046] Step 5: The authentication end uses t5 to sign the signature file. user Decrypt to obtain hash value H p5,s5 (User.Cert) and the irreducible polynomial p5;

[0047] Step 6: The authentication end generates a hash function based on the random number s5 sent by the quantum CA certificate issuance system and the decrypted irreducible polynomial p5, and uses the generated hash function to calculate the hash value of the user certificate User.Cert, obtaining H. ′ p5s5 (User.Cert);

[0048] Step 7: Calculate the hash value H obtained in Step 6. ′ p5s5 (User.Cert) and the hash value H obtained from decryption in process 5 p5,s5 The (User.Cert) is compared. If they are equal, it means that the received user certificate was obtained based on the quantum root certificate and intermediate certificate, and the certificate chain authentication is successful. Otherwise, the certificate chain authentication fails.

[0049] Furthermore, process 1 further includes:

[0050] The authentication terminal obtains the user certificate serial number based on the user certificate data tbsUserCert.

[0051] The process 2 further includes:

[0052] The authentication terminal will use the user certificate serial number and OTID. user OTID medi and OTID root Send to the Quantum CA certificate issuance system;

[0053] The process 3 further includes:

[0054] The quantum CA certificate issuance system uses the user certificate serial number as an index to address any parameter in the user certificate generation process, thereby generating an OTID. ′ user OTID ′ medi OTID ′ root ;

[0055] The process 4 further includes:

[0056] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random numbers s5 and t5 in the user certificate generation process.

[0057] Furthermore, process 3 further includes:

[0058] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number s1, random number u1, irreducible polynomial p1, and the private key root.pri.key of the quantum root certificate generated during the user certificate generation process. It generates a hash function based on the addressed random number s1 and irreducible polynomial p1, calculates the hash value of the private key root.pri.key using the hash function, and encrypts the hash value using the addressed random number u1 to obtain the one-time identity OTID of the quantum root certificate. ′ root ;

[0059] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number s2, random number u2, irreducible polynomial p2, and the private key medi.pri.key of the intermediate certificate generated during the user certificate generation process. It generates a hash function based on the addressed random number s2 and irreducible polynomial p2, calculates the hash value of the private key medi.pri.key using the hash function, and encrypts the hash value using the addressed random number u2 to obtain the one-time identity OTID of the intermediate certificate. ′ medi ;

[0060] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number s4, random number u4, irreducible polynomial p4, and the user certificate's private key user.pri.key during the user certificate generation process. It generates a hash function based on the addressed random number s4 and irreducible polynomial p4, calculates the hash value of the addressed user certificate's private key user.pri.key using the hash function generated by random number s4 and irreducible polynomial p4, and encrypts the hash value based on the user certificate's private key user.pri.key using the addressed random number u4 to obtain the user certificate's one-time identity OTID. ′ user .

[0061] The beneficial effects of this invention are:

[0062] 1. By connecting traditional root certificates with quantum digital certificates, a certificate chain based on a quantum secure network is generated. This certificate chain is then used for authentication as a whole. A single authentication action satisfies the authentication process of the entire certificate chain, thus improving the authentication efficiency of the certificate chain.

[0063] 2. The quantum root certificate, intermediate certificates, and final user certificates in the certificate chain are calculated using different hash functions constructed with different irreducible polynomials and different input random numbers. Therefore, the hash calculation between each certificate is separate, and the leakage of one certificate will not affect the security and use of another certificate. Attached Figure Description

[0064] Figure 1 This is a schematic diagram of the certificate chain of the present invention;

[0065] Figure 2 This is a schematic diagram of the quantum CA certificate issuance system of the present invention;

[0066] Figure 3 This is a flowchart illustrating the steps of a certificate chain generation method according to the present invention.

[0067] Figure 4 This is a flowchart of a certificate chain authentication method according to the present invention;

[0068] Figure 5 This is a schematic diagram illustrating the generation and authentication process of the certificate chain in this invention. Detailed Implementation

[0069] The present invention will be further described below with reference to the accompanying drawings and embodiments:

[0070] like Figure 1 , 2 As shown, traditional root certificates are issued by nationally certified traditional Certificate Authorities (CAs), which are widely present in the current internet environment. Currently, many internet participants store traditional root certificate repositories locally or connect to third-party repositories. For example, some websites require users to download a root certificate during initial registration; this downloaded certificate is generally a traditional root certificate, and actions on the website require authentication from this root certificate. Traditional root certificates are generated based on existing public-private key systems, and their security is gradually weakening under the impact of quantum computers. Quantum CA certificate issuance systems exist in quantum network environments and consist of quantum CAs at various levels; their security is based on quantum-safe cryptography.

[0071] like Figure 2As shown, the quantum CA certificate issuance system consists of multiple quantum CA certificate issuance centers, including a first quantum CA certificate issuance center, a second quantum CA certificate issuance center, and a third quantum CA certificate issuance center. The first quantum CA certificate issuance center is the superior institution of the second quantum CA certificate issuance center and is used to obtain quantum root certificates; the second quantum CA certificate issuance center is the superior institution of the third quantum CA certificate issuance center and is used to obtain intermediate certificates; the third quantum CA certificate issuance center connects with users and is used to obtain user certificates and issue the obtained user certificates to users. The certificate chain of this invention is as follows: Figure 1 As shown, these are the quantum root certificate, the intermediate certificate issued by the quantum root certificate, and the user certificate issued by the intermediate certificate.

[0072] like Figure 3 As shown, this invention proposes a method for generating a certificate chain, comprising the following steps:

[0073] Step 1: The First Quantum CA Certificate Authority sends a certificate request file to a traditional CA Certificate Authority.

[0074] When the quantum CA certificate issuance system receives a request for a user certificate, the first quantum CA certificate issuance center in the quantum CA certificate issuance system can obtain a quantum root certificate based on the traditional root certificate issued by the currently prevalent traditional CA certificate issuance centers. The format of the quantum root certificate is consistent with that of the traditional root certificate.

[0075] Step 2: The traditional CA certificate issuing center issues a quantum root certificate to the First Quantum CA certificate issuing center based on the local traditional root certificate.

[0076] The issuance process for quantum root certificates further includes:

[0077] First Quantum CA Certificate Authority (CCA) obtains a random number locally as the private key for its quantum root certificate, denoted as root.pri.key. Based on root.pri.key, CCA generates a corresponding public key and a certificate request file. This file includes the public key generated by CCA based on root.pri.key. CCA then sends the certificate request file to a traditional CA certificate authority. The traditional CA receives the certificate request file and signs the public key generated by CCA based on root.pri.key using its local traditional root certificate. The signed file is then sent back to CCA as the quantum root certificate.

[0078] Among them, the quantum root certificate corresponds to the private key root.pri.key, and the private key root.pri.key serves as the privacy identity of the first quantum CA certificate issuing center;

[0079] The signature information of the quantum root certificate is generated by a traditional CA certificate authority based on a traditional signature algorithm;

[0080] The public key generated by the First Quantum Certificate Authority based on the private key root.pri.key is generated according to asymmetric key algorithms in the traditional CA certificate system, such as RSA algorithm and DSA algorithm.

[0081] Step 3: The first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate. The intermediate certificate includes the one-time identity of the quantum root certificate.

[0082] Quantum root certificates can further issue user certificates. Due to the diversity of users, user certificates can include personal certificates, enterprise certificates, and institutional certificates. In some processes with multiple redirects, user certificates may not be directly issued by the quantum root certificate, but rather by an intermediate certificate issued by the quantum root certificate.

[0083] The process of issuing intermediate certificates based on quantum root certificates further includes:

[0084] (1) The first quantum CA certificate issuing center obtains random numbers r1, s1 and u1 from the local machine, generates an irreducible polynomial p1 based on the random number r1, and generates a first hash function H based on the irreducible polynomial p1 and the random number s1. p1,s1 Using the first hash function H p1,s1 Calculate the hash value of the private key root.pri.key of the quantum root certificate to obtain H. p1,s1 (root.pri.key), hash value H using random number u1. p1,s1 Encrypt (root.pri.key) to obtain the one-time identity OTID of the quantum root certificate. root =H p1,s1 (root.pri.key)⊕u1;

[0085] (2) The First Quantum CA Certificate Issuing Center obtains a random number from the local machine as the private key of the intermediate certificate. The private key of the intermediate certificate is denoted as medi.pri.key. The private key of the intermediate certificate can be a 256-bit random number obtained by the First Quantum CA Certificate Issuing Center from the local machine.

[0086] (3) The first quantum CA certificate issuing center obtains random numbers r2, s2 and u2 from the local machine, generates an irreducible polynomial p2 based on the random number r2, and generates a second hash function H based on the irreducible polynomial p2 and the random number s2. p2,s2 Using the second hash function H p2,s2 Calculate the hash value of the private key medi.pri.key of the intermediate certificate to obtain H. p2,s2 (medi.pri.key), hash value H using random number u2. p2,s2 Encrypt (medi.pri.key) to obtain the one-time identity OTID of the intermediate certificate. medi =H p2,s2 (medi.pri.key)⊕u2;

[0087] (4) The First Quantum CA Certificate Issuance Center constructs an intermediate certificate, Medi.Cert, to be signed;

[0088] Medi.Cert = (tbsMediCert, OTID) medi ,OTID root );

[0089] Among them, tbsMediCert is intermediate certificate data, which includes version number, intermediate certificate serial number, quantum signature / hash algorithm, certificate validity period, issuing authority information, certificate owner information, certificate purpose (e.g., this intermediate certificate is used to issue user certificates), etc. The intermediate certificate serial number can be used as an index value. Subsequently, based on the intermediate certificate serial number, any parameter in the intermediate certificate generation process, such as irreducible polynomial p1, irreducible polynomial p2, random number s1, and random number s2, can be addressed.

[0090] (5) The first quantum CA certificate issuing center obtains random numbers r3, s3, and t3 locally, generates an irreducible polynomial p3 based on random number r3, and generates a third hash function H based on irreducible polynomial p3 and random number s3. p3,s3 Using the third hash function H p3,s3 Calculate the hash value of the intermediate certificate Medi.Cert to obtain H. p3,s3 (Medi.Cert), using random number t3 to hash value H p3,s3 (Medi.Cert) is used for encryption to obtain the signature file Sign. medi =[H p3,s3 (Medi.Cert),p3]⊕t3;

[0091] (6) Encapsulate the intermediate certificate to obtain the intermediate certificate Signed.Medi.Cert issued by the First Quantum CA Certificate Issuing Center based on the quantum root certificate;

[0092] Signed.Medi.Cert=(Medi.Cert,Sign medi );

[0093] That is: Signed.Medi.Cert=(tbsMediCert,OTID medi ,OTID root Sign medi )=

[0094] (tbsMediCert,H p2,s2 (medi.pri.key)⊕u2,H p1,s1 (root.pri.key)⊕

[0095] u1,[H p3,s3 (Medi.Cert),p3]⊕t3).

[0096] The first quantum CA certificate issuing center will send the encapsulated intermediate certificate to the second quantum CA certificate issuing center.

[0097] Among them, the random numbers r1, s1, and u1 obtained locally by the first quantum CA certificate issuing center are of equal length;

[0098] The random numbers r2, s2, and u2 obtained locally by the First Quantum CA Certificate Issuance Center are of equal length.

[0099] The First Quantum CA Certificate Issuing Center obtains random numbers r3, s3, and t3 locally. Random number r3 and random number s3 have the same length, and the length of random number t3 is twice the length of random number r3.

[0100] In the process of issuing intermediate certificates based on quantum root certificates, each step uses a different hash function, thus improving the quantum security of the encapsulated intermediate certificate. A set of random numbers can also be used in the process of issuing intermediate certificates based on quantum root certificates, for example, r6, s6, u6, and t6, to generate the hash function and encapsulate the intermediate certificate. Specifically, r6 is used to generate the irreducible polynomial p6, and s6 is used as the input random number for the hash function. The quantum CA certificate issuance system generates the hash function H based on this irreducible polynomial p6 and the input random number s6. p6,s6 The hash function used to calculate the hash value in the process of issuing intermediate certificates based on quantum root certificates is H. p6,s6 The hash value is encrypted using a random number u6, and the signature is calculated using a random number t6. The final encapsulated intermediate certificate is as follows:

[0101] Signed.Medi.Cert=

[0102] (tbsMediCert,H p6,s6 (medi.pri.key)⊕u6,H p6,s6 (root.pri.key)⊕

[0103] u6,[H p6,s6 (Medi.Cert),p6]⊕t6).

[0104] Step 4: The second quantum CA certificate issuing center issues a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate. The user certificate includes the one-time identity of the quantum root certificate and the one-time identity of the intermediate certificate.

[0105] The process of issuing user certificates based on intermediate certificates further includes:

[0106] (1) The second quantum CA certificate issuing center obtains a random number from the local machine. The random number is used as the private key of the user certificate. The private key of the user certificate is recorded as: user.pri.key;

[0107] (2) The second quantum CA certificate issuing center obtains random numbers r4, s4, and u4 from the local machine, generates an irreducible polynomial p4 based on the random number r4, and generates a fourth hash function H based on the irreducible polynomial p4 and the random number s4. p4,s4 Using the fourth hash function H p4,s4 Calculate the hash value of the user certificate's private key, user.pri.key, to obtain H. p4,s4 (user.pri.key), hash value H using random number u4. p4,s4 Encrypt (user.pri.key) to obtain the user certificate's one-time identity OTID. user =H p4,s4 (user.pri.key)⊕u4;

[0108] (3) The second quantum CA certificate issuing center constructs the user certificate User.Cert to be signed;

[0109] User.Cert = (tbsUserCert, OTID) user ,OTID medi ,OTID root );

[0110] Among them, tbsUserCert is the user certificate data, which includes version number, user certificate serial number, quantum signature / hash algorithm, certificate validity period, certificate issuing authority information, certificate owner information, certificate purpose (e.g., this user certificate is used for signing or authentication), etc. The user certificate serial number can be used as an index value. Subsequently, based on the user certificate serial number, any parameter in the user certificate generation process, such as irreducible polynomial p4 and random number s4, can be addressed.

[0111] (4) The second quantum CA certificate issuing center obtains random numbers r5, s5, and t5 from the local machine, generates an irreducible polynomial p5 based on the random number r5, and generates a fifth hash function H based on the irreducible polynomial p5 and the random number s5. p5,s5 Using the fifth hash function H p5,s5 Calculate the hash value of the user certificate User.Cert to obtain H. p5,s5 (User.Cert), using a random number t5 to hash the value H p5,s5 (User.Cert) is encrypted to obtain the signature file Sign. user =[H p5,s5 (User.Cert),p5]⊕t5;

[0112] (5) Encapsulate the user certificate to obtain the user certificate Signed.User.Cert issued by the Second Quantum CA Certificate Authority based on the intermediate certificate;

[0113] Signed.User.Cert=(User.Cert,Sign user );

[0114] That is: Signed.User.Cert=(tbsUserCert,OTID user ,OTID medi ,OTID root Sign user )=

[0115] (tbsUserCert,H p4,s4 (user.pri.key)⊕u4,H p2,s2 (medi.pri.key)⊕

[0116] u2,H p1,s1 (root.pri.key)⊕u1,[H p5,s5 (User.Cert),p5]⊕t5).

[0117] The second quantum CA certificate authority will send the encapsulated user certificate to the third quantum CA certificate authority, which can then send the user certificate to the user.

[0118] Among them, the random numbers r4, s4, and u4 obtained locally by the second quantum CA certificate issuing center are of equal length;

[0119] The second quantum CA certificate issuing center obtains random numbers r5, s5, and t5 locally. Random number r5 and random number s5 have the same length, and the length of random number t5 is twice the length of random number r5.

[0120] In the process of issuing user certificates based on an intermediate certificate, each step uses a different hash function, thus improving the quantum security of the encapsulated user certificate. Alternatively, a set of random numbers can be used in the process, such as r7, s7, u7, and t7, to generate the hash function and encapsulate the user certificate. Specifically, r7 is used to generate the irreducible polynomial p7, and s7 is used as the input random number for the hash function. The quantum CA certificate issuance system generates the hash function H based on this irreducible polynomial p7 and the input random number s7. p7,s7 The hash function used to calculate the hash value during the process of issuing user certificates based on intermediate certificates is H. p7,s7 The hash value is encrypted using a random number u7, and the signature is calculated using a random number t7. The final encapsulated user certificate is as follows:

[0121] Signed.User.Cert=(tbsUserCert,OTID user ,OTID medi ,OTID root Sign user )=

[0122] (tbsUserCert,H p7,s7 (user.pri.key)⊕u7,H p7,s7 (medi.pri.key)⊕

[0123] u7,H p7,s7 (root.pri.key)⊕u7,[H p7,s7 (User.Cert),p7]⊕t7).

[0124] The quantum CA certificate issuance system, consisting of the first quantum CA certificate issuance center, the second quantum CA certificate issuance center, and the third quantum CA certificate issuance center, can issue user certificates. The user certificates, together with the intermediate certificates at the next higher level and the quantum root certificates at the next higher level, form a certificate chain of "quantum root certificate - intermediate certificate - user certificate".

[0125] The first quantum CA certificate issuing center, the second quantum CA certificate issuing center, and the third quantum CA certificate issuing center mentioned in this invention can be the CA certification center in the patent "Digital Certificate Generation, Identity Authentication Method and Quantum CA Authentication Center and System" with application number 2022101851462, or the quantum CA certificate issuing center in this invention can also obtain random numbers from an external quantum random number board.

[0126] like Figure 4 As shown, this invention proposes a certificate chain authentication method, which includes the following steps:

[0127] Process 1: The authentication terminal parses the received user certificate Signed.User.Cert to obtain tbsUserCert and OTID. user OTID medi OTID root and Sign user The user certificate data tbsUserCert includes the user certificate serial number. Using the user certificate serial number as an index value, it is possible to address any parameter in the user certificate generation process.

[0128] Step 2: Extract the user certificate serial number and OTID from the user certificate data tbsUserCert. user OTID medi and OTID root Send to the Quantum CA certificate issuance system.

[0129] Step 3: The Quantum CA certificate issuance system uses the user certificate serial number as an index to address any parameter in the user certificate generation process, thereby generating an OTID. ′ user OTID ′ medi OTID ′ root The generated OTID ′ user OTID ′ medi OTID ′ root With the received OTID user OTID medi OTID root The system performs a comparison. If all values ​​match, the user certificate authentication proceeds to the next step; otherwise, the user certificate authentication fails.

[0130] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number s1, random number u1, irreducible polynomial p1, and the private key root.pri.key of the quantum root certificate generated during the user certificate generation process. A hash function is generated based on the addressed random number s1 and irreducible polynomial p1. The hash function is then used to calculate the hash value of the private key root.pri.key. Finally, the hash value is encrypted using the addressed random number u1 to obtain the one-time identity OTID of the quantum root certificate. ′ root .

[0131] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number s2, random number u2, irreducible polynomial p2, and the private key medi.pri.key of the intermediate certificate generated during the user certificate generation process. It generates a hash function based on the addressed random number s2 and irreducible polynomial p2, calculates the hash value of the private key medi.pri.key using this hash function, and then encrypts the hash value using the addressed random number u2 to obtain the one-time identity OTID of the intermediate certificate. ′ medi .

[0132] The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number s4, random number u4, irreducible polynomial p4, and the user certificate's private key user.pri.key generated during the user certificate generation process. It then generates a hash function based on the addressed random number s4 and irreducible polynomial p4, calculates the hash value of the addressed user certificate's private key user.pri.key using the hash function generated by s4 and p4, and finally encrypts the hash value based on the user certificate's private key user.pri.key using the addressed random number u4 to obtain the user certificate's one-time identity OTID. ′ user .

[0133] Step 4: The Quantum CA certificate issuance system uses the user certificate serial number as an index to address the random numbers s5 and t5 generated during the user certificate generation process, and then sends the addressed random numbers s5 and t5 to the authentication end.

[0134] Step 5: The authentication end uses t5 to sign the signature file. user Decrypt to obtain hash value H p5,s5(User.Cert) and the irreducible polynomial p5.

[0135] Step 6: The authentication end generates a hash function based on the random number s5 sent by the quantum CA certificate issuance system and the decrypted irreducible polynomial p5, and uses the generated hash function to calculate the hash value of the user certificate User.Cert, obtaining H. ′ p5s5 (User.Cert).

[0136] Step 7: Calculate the hash value H obtained in Step 6. ′ p5s5 (User.Cert) and the hash value H obtained from decryption in process 5 p5,s5 The (User.Cert) is compared. If they are equal, it means that the received user certificate was obtained based on the quantum root certificate and intermediate certificate, and the certificate chain authentication is successful. Otherwise, the certificate chain authentication fails.

[0137] like Figure 5 As shown, User A requests a user certificate from the Quantum CA Certificate Issuance System. Responding to User A's request, the Quantum CA Certificate Issuance System issues a user certificate according to the certificate chain generation method of this invention, and sends the encapsulated user certificate (Signed.User.Cert) and the user certificate private key (user.pri.key) to User A. User A receives and downloads the user certificate and user certificate private key, and sends the user certificate to User B. User B requests authentication of the received user certificate from the Quantum CA Authentication System. User B here is the authentication end in the certificate chain authentication method of this invention. The Quantum CA Certificate Issuance System authenticates the user certificate received by User B according to the certificate chain authentication method of this invention. Successful authentication indicates that the user certificate was obtained based on the Quantum root certificate and intermediate certificates.

[0138] This invention incorporates the one-time identity OTID of the quantum root certificate into the user certificate. root One-time identity OTID with intermediate certificates medi Therefore, by verifying the legitimacy of the user certificate, the legitimacy of the certificate chain "quantum root certificate-intermediate certificate-user certificate" of this invention can be verified. A single verification action satisfies the verification process of the entire certificate chain, thereby improving the verification efficiency of the certificate chain.

[0139] All communication transmission processes in this invention are carried out in a quantum network. Different irreducible polynomials and different input random numbers are used to construct different hash functions to calculate hash values ​​for quantum root certificates, intermediate certificates, and user certificates. This ensures that the hash calculation between each certificate is separated, and the leakage of one certificate will not affect the security and use of other certificates.

Claims

1. A method for generating a certificate chain and an authentication method, characterized in that, The certificate chain includes a quantum root certificate, an intermediate certificate issued by the quantum root certificate, and a user certificate issued by the intermediate certificate. The generation method includes the following steps: Step 1: The first quantum CA certificate authority in the quantum CA certificate issuance system sends a certificate request file to the traditional CA certificate authority; Step 2: The traditional CA certificate issuing center issues a quantum root certificate to the First Quantum CA certificate issuing center based on the local traditional root certificate; Step 3: The first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center in the quantum CA certificate issuing system based on the quantum root certificate. The intermediate certificate includes the one-time identity of the quantum root certificate. Step 4: The second quantum CA certificate issuing center issues user certificates to the third quantum CA certificate issuing center in the quantum CA certificate issuing system based on the intermediate certificate. The user certificate includes the one-time identity of the quantum root certificate and the one-time identity of the intermediate certificate. Steps 1 and 2 further include: The first quantum CA certificate issuing center obtains a random number locally, and this random number serves as the private key for the quantum root certificate. The private key for the quantum root certificate is denoted as: The first quantum CA certificate issuing center is based on private keys. The first quantum CA certificate authority generates a certificate request file, which includes a public key generated by the first quantum CA certificate authority based on the private key. The first quantum CA certificate authority sends the certificate request file to the traditional CA certificate authority after generating the public key. The traditional CA certificate authority receives the certificate request file and uses its local traditional root certificate to authenticate the first quantum CA certificate authority based on its private key. The generated public key is used to sign the certificate, and the signed file is sent as the quantum root certificate to the first quantum CA certificate issuing center. The process by which the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate in step 3 is as follows: (1) The first quantum CA certificate issuing center obtains random numbers from the local machine. , and Based on random numbers Generating irreducible polynomials Based on irreducible polynomials and random numbers Generate the first hash function Using the first hash function Computing the private key of a quantum root certificate The hash value is obtained. Use random numbers For hash value Encryption is performed to obtain a one-time identity using a quantum root certificate. ; (2) The first quantum CA certificate issuing center obtains a random number from its local machine. The random number is used as the private key of the intermediate certificate. The private key of the intermediate certificate is denoted as: ; (3) The first quantum CA certificate issuing center obtains random numbers from the local machine. , and Based on random numbers Generating irreducible polynomials Based on irreducible polynomials and random numbers Generate a second hash function Using the second hash function Calculate the private key of the intermediate certificate The hash value is obtained. Use random numbers For hash value Encryption is performed to obtain a one-time identity from an intermediate certificate. ; (4) The first quantum CA certificate issuing center constructs an intermediate certificate to be signed. ; ;in, For intermediate certificate data; (5) The first quantum CA certificate issuing center obtains a random number from the local machine. , and Based on random numbers Generating irreducible polynomials Based on irreducible polynomials and random numbers Generate a third hash function Using a third hash function Calculate intermediate certificates The hash value is obtained. Use random numbers For hash value Encryption is performed to obtain the signature file. = ; (6) Encapsulate the intermediate certificate to obtain the intermediate certificate issued by the first quantum CA certificate issuing center based on the quantum root certificate. ; ;Right now: ; The process by which the second quantum CA certificate issuing center issues a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate in step 4 is as follows: (1) The second quantum CA certificate issuing center obtains a random number from its local machine. The random number is used as the private key of the user certificate. The private key of the user certificate is denoted as: ; (2) The second quantum CA certificate issuing center obtains random numbers from the local machine. , and Based on random numbers Generating irreducible polynomials Based on irreducible polynomials and random numbers Generate the fourth hash function Using the fourth hash function Calculate the private key of the user certificate The hash value is obtained. Use random numbers For hash value Encryption is performed to obtain the one-time identity of the user certificate. ; (3) The second quantum CA certificate issuing center constructs the user certificate to be signed. ; ;in, For user certificate data; (4) The second quantum CA certificate issuing center obtains a random number from the local machine. , and Based on random numbers Generating irreducible polynomials Based on irreducible polynomials and random numbers Generate the fifth hash function Using the fifth hash function Calculate user certificate The hash value is obtained. Use random numbers For hash value Encryption is performed to obtain the signature file. = ; (5) Encapsulate the user certificate to obtain the user certificate issued by the second quantum CA certificate issuing center based on the intermediate certificate. ; ;Right now: ; The authentication method includes the following process: Process 1: The authentication terminal verifies the received user certificate. After analysis, we obtain , , , and ; Step 2, will , , and Send to the Quantum CA certificate issuance system; Step 3: The Quantum CA certificate issuing system addresses the parameters and generates... , , , will generate , , With received , , The system performs a comparison. If all values ​​match, the user certificate authentication process proceeds to the next step. Otherwise, the user certificate authentication fails. Step 4: The Quantum CA certificate issuing system addresses to a random number. and and the address of the random number , Send to the authentication end; Step 5: Authentication terminal usage For the signature file Decrypt to obtain the hash value. and irreducible polynomials ; Step 6: The authentication end uses the random number sent by the Quantum CA certificate issuance system. The irreducible polynomial p5 obtained from decryption is used to generate a hash function, and the generated hash function is used to calculate the user certificate. The hash value is obtained. ; Step 7: Calculate the hash value obtained in Step 6. The hash value obtained by decryption in process 5 The comparison is performed. If the comparison is equal, it means that the received user certificate is obtained based on the quantum root certificate and intermediate certificate, and the certificate chain authentication is successful. Otherwise, the certificate chain authentication fails.

2. The certificate chain generation method and authentication method according to claim 1, characterized in that, In the process (1) where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate, the first quantum CA certificate issuing center obtains a random number from its local machine. , , They are of equal length; In the process (3) where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate, the first quantum CA certificate issuing center obtains a random number from its local machine. , , They are of equal length; In the process (5) where the first quantum CA certificate issuing center issues an intermediate certificate to the second quantum CA certificate issuing center based on the quantum root certificate, the first quantum CA certificate issuing center obtains a random number from its local machine. , and , among which, random number With random numbers Equal length, random number The length is a random number Twice the length.

3. The certificate chain generation method and authentication method according to claim 1, characterized in that, In the process (2) where the second quantum CA certificate issuing center issues a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate, the second quantum CA certificate issuing center obtains a random number from its local machine. , , They are of equal length; In the process (4) where the second quantum CA certificate issuing center issues a user certificate to the third quantum CA certificate issuing center based on the intermediate certificate, the second quantum CA certificate issuing center obtains a random number from its local machine. , and , among which, random number With random numbers Equal length, random number The length is a random number Twice the length.

4. The certificate chain generation method and authentication method according to claim 1, characterized in that, The user certificate data includes a user certificate serial number, which is used as an index to address any parameter in the user certificate generation process.

5. The certificate chain generation method and authentication method according to claim 1, characterized in that, The process 1 further includes: The authentication terminal is based on user certificate data. Obtain the user certificate serial number; The second process further includes: the authentication terminal will process the user certificate serial number, , and Send to the Quantum CA certificate issuance system; The process 3 further includes: the quantum CA certificate issuance system uses the user certificate serial number as an index value to address any parameter in the user certificate generation process, thereby generating... , , ; The process 4 further includes: the quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number generated during the user certificate generation process. and .

6. The method for generating a certificate chain and the authentication method according to claim 5, characterized in that, The process 3 further includes: The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number generated during the user certificate generation process. Random numbers Irreducible polynomials and the private key of the quantum root certificate Based on the addressed random number and the irreducible polynomials addressed Generate a hash function and use a random number-based hash function. Irreducible polynomials The generated hash function calculates the private key of the addressed quantum root certificate. The hash value, using the address of the random number. For private keys based on quantum root certificates The hash value is encrypted to obtain the one-time identity of the quantum root certificate. ; The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number generated during the user certificate generation process. Random numbers Irreducible polynomials and the private key of the intermediate certificate Based on the addressed random number and the irreducible polynomials addressed Generate a hash function and use a random number-based hash function. Irreducible polynomials The generated hash function calculates the private key of the intermediate certificate addressed to it. The hash value, using the address of the random number. Private keys based on intermediate certificates The hash value is encrypted to obtain the one-time identity of the intermediate certificate. ; The quantum CA certificate issuance system uses the user certificate serial number as an index to address the random number generated during the user certificate generation process. Random numbers Irreducible polynomials and the private key of the user certificate Based on the addressed random number and the irreducible polynomials addressed Generate a hash function and use random numbers. Irreducible polynomials The generated hash function calculates the private key of the user certificate addressed to it. The hash value, using the address of the random number. For private keys based on user certificates The hash value is encrypted to obtain the one-time identity of the user certificate. .

Images