A quantum anonymous secret sharing method and system for sharing classical secrets

Abstract

The present invention discloses a quantum anonymous secret sharing method and system for sharing classical secrets, the method comprising the following steps: S1: the secret distributor shares an identity authentication key with the participant and transmits a particle sequence to the participant; S2: the secret distributor performs channel eavesdropping detection on the participant based on the identity authentication key and the particle sequence to obtain a set of receivers; S3: anonymous entanglement is constructed between the secret distributor and the receiver; S4: the secret distributor performs secret decomposition based on the anonymous entanglement to obtain the receiver's secret share; S5: the secret reconstruction agent completes secret reconstruction based on the secret share and the particle measurement results of the secret distributor. The proposal of the present invention is an active exploration of quantum information science in protecting user privacy and ensuring information security, and also provides a new opportunity for communication schemes in future quantum networks.

Description

Technical Field

[0001] The present invention belongs to the technical field of quantum communication and information security, and in particular relates to a quantum anonymous secret sharing method and system for sharing classical secrets. Background Art

[0002] Secret sharing is an important research branch in modern cryptography, which can provide a secure and reliable key management solution among multiple participants. As an important means of information protection, secret sharing is also known as password split storage technology. Its main idea is to split a secret into several sub-shares through a certain decomposition algorithm and distribute them to different participants to ensure that no participant can reconstruct the secret. Only qualified participants (constituting the authorized subset) can work together to restore the initial secret.

[0003] Most existing quantum secret sharing schemes focus on how to improve the security, efficiency and feasibility of the scheme, but rarely pay attention to how to protect the identity information security of the participants. However, in some special application scenarios, such as military, finance and other related fields, it is necessary not only to ensure that the transmitted secrets are not leaked, but also to protect the anonymity of the identity of the secret recipient.

[0004] Therefore, in order to meet the anonymity requirements of the secret recipient's identity in special application scenarios, the present invention summarizes that the quantum anonymous secret sharing scheme should have the following properties: (1) Recoverability, that is, the secret can be recovered for the set of participants belonging to the authorized subset. (2) Security, that is, the secret cannot be recovered for any set of participants that do not belong to the authorized subset. (3) Anonymity, that is, when there are some malicious participants in the participant set, these malicious participants cannot obtain useful information about the recipient set when they obtain some information or quantum states on the public channel. In summary, the existing quantum secret sharing scheme implementation methods are different, but there are still some defects, such as the inability to guarantee the anonymity of the secret recipient's identity. This quantum secret sharing scheme will improve this problem. Summary of the invention

[0005] The present invention aims to solve the deficiencies of the prior art and propose a quantum anonymous secret sharing method and system for sharing classical secrets. The purpose is to solve the deficiencies in the existing quantum secret sharing schemes, give a definition of quantum anonymous secret sharing schemes, and propose a verifiable quantum anonymous secret sharing scheme for sharing classical secrets. This scheme uses n+1 particles for n participants and m anonymous recipients. The sharing of classic secrets is completed. The receiver can effectively share and recover secret information while maintaining anonymity, that is, the scheme is more secure and has a higher level of privacy protection.

[0006] To achieve the above object, the present invention provides the following solutions:

[0007] A quantum anonymous secret sharing method for sharing a classical secret comprises the following steps:

[0008] S1: The secret distributor shares the identity authentication key with the participant and transmits the particle sequence to the participant; the secret distributor includes the secret information holder, and the participant includes the secret information transmitter;

[0009] S2: The secret distributor performs channel eavesdropping detection on the participant based on the identity authentication key and the particle sequence to obtain a set of receivers; the receivers include secret information receivers;

[0010] S3: An anonymous entanglement is established between the secret distributor and the receiver;

[0011] S4: The secret distributor performs secret decomposition based on the anonymous entanglement to obtain the secret share of the recipient;

[0012] S5: The secret reconstruction agent completes the secret reconstruction based on the secret share and the particle measurement result of the secret distributor, and the secret reconstruction agent includes a secret information decryption party.

[0013] Preferably, in step S1, the secret distributor shares the identity authentication key with the participant, and transmits the particle sequence to the participant in the following manner:

[0014] The secret distributor distributes the identity authentication key to each of the participants based on an unconditionally secure quantum key distribution scheme to complete the sharing of the identity authentication key;

[0015] The secret distributor obtains the particle sequence by preparing the particle GHZ state; wherein, if the participant is a receiver selected by the secret distributor, a notification particle with a state of |0> is prepared for the receiver; if the participant is not a receiver selected by the secret distributor, a notification particle with a state of |1> is prepared for the non-receiver;

[0016] The secret distributor inserts the notification particle into a random position of the particle sequence, and prepares a decoy particle under the measurement basis and inserts it into a random position of the particle sequence to obtain a particle sequence Wherein, the measurement basis includes an X basis and a Z basis;

[0017] The secret distributor distributes the particles in the sequence Distribute to the participants, retaining S in the particle sequence A , completing the transmission of the particle sequence; In this case, 1≤i≤n.

[0018] Preferably, the particle GHZ state is L+ξ+η ordered n+1 particle GHZ states, where L are used for sharing secrets, ξ are used for entanglement verification, and η are used for identity verification. The form of each particle GHZ state is:

[0019]

[0020] Where i=1, 2,..., L+ξ+η.

[0021] Preferably, in step S2, the method for performing channel eavesdropping detection is:

[0022] The secret distributor publishes the positions and measurement bases of the decoy particles in all particle sequences;

[0023] The participant measures all the decoy particles based on the positions of the decoy particles and the measurement basis and randomly publishes half of the particle measurement results, and the secret distributor publishes the particle measurement results of the other half of the decoy particles;

[0024] Compare the particle measurement results of the participant and the particle measurement results of the secret distributor with the initial state of the decoy particle to obtain a comparison result; if the comparison results are consistent, the secret distributor considers that the quantum channel is safe and performs the next operation; if the comparison results are inconsistent, terminate;

[0025] After the secret distributor and the participant remove all decoy particles from the particle sequences they hold, the secret distributor performs identity authentication on the participant;

[0026] After the participant passes the identity authentication, the secret distributor discloses the insertion position of the notification particle. The participant who passes the identity authentication measures the notification particle with a known insertion position under the Z basis. If the measurement result is |0>, the participant is the receiver; if the measurement result is |1>, the participant is a non-receiver.

[0027] Preferably, in step S3, the method for constructing the anonymous entanglement is:

[0028] The non-receiver performs H operation on the particles it holds and uses Z basis to measure the particles to obtain measurement results. The secret distributor collects the measurement results of the non-receiver and performs calculations to obtain calculation results; wherein,

[0029] The secret distributor performs Z on the particles it holds based on the calculation result. d operation, and constructing the anonymous entanglement with the recipient; wherein,

[0030] The secret distributor randomly selects the anonymous entanglement for entanglement verification, and determines whether to abandon the communication based on the entanglement verification result.

[0031] Preferably, in step S4, the method for performing secret decomposition is:

[0032] The secret distributor and the receiver each hold a particle in each anonymous entanglement. When the secret shared by the secret distributor meets the preset conditions, the Z operation is performed on the held particle, otherwise the I operation is performed, where:

[0033] The secret distributor uses the X basis to measure the particles that have completed the Z operation or the I operation and obtains the measurement result. The receiver uses the X basis to measure the particles it holds and obtains the secret share

[0034] Based on the measurement results of the secret distributor and the secret share Complete the secret decomposition.

[0035] The present invention also provides a quantum anonymous secret sharing system for sharing classical secrets, which is used to implement the quantum anonymous secret sharing method for sharing classical secrets, comprising:

[0036] A preparation module is used for a secret distributor to share an identity authentication key with a participant and transmit a particle sequence to the participant; the secret distributor includes a secret information holder, and the participant includes a secret information transmitter;

[0037] An eavesdropping detection module is used for the secret distributor to perform channel eavesdropping detection on the participant based on the identity authentication key and the particle sequence to obtain a set of receivers; the receivers include secret information receivers;

[0038] An anonymous entanglement construction module, used to construct anonymous entanglement between the secret distributor and the receiver;

[0039] A decryption module, used for the secret distributor to perform secret decomposition based on the anonymous entanglement to obtain the secret share of the recipient;

[0040] A secret reconstruction module is used for the secret reconstruction agent to complete secret reconstruction based on the secret share and the particle measurement result of the secret distributor, and the secret reconstruction agent includes a secret information decryption party.

[0041] Preferably, the preparation module includes:

[0042] A key sharing unit, used by the secret distributor to distribute the identity authentication key to each of the participants based on an unconditionally secure quantum key distribution scheme to complete the sharing of the identity authentication key;

[0043] A particle sequence preparation unit, used for the secret distributor to obtain the particle sequence by preparing a particle GHZ state; wherein, if the participant is a receiver selected by the secret distributor, a notification particle with a state of |0> is prepared for the receiver; if the participant is not a receiver selected by the secret distributor, a notification particle with a state of |1> is prepared for the non-receiver;

[0044] A particle insertion unit is used for the secret distributor to insert the notification particle into a random position of the particle sequence, and to prepare a decoy particle under the measurement basis and insert it into a random position of the particle sequence to obtain a particle sequence. Wherein, the measurement basis includes an X basis and a Z basis;

[0045] A particle transmission unit is used for the secret distributor to transmit the particle sequence Distribute to the participants, retaining S in the particle sequence A , completing the transmission of the particle sequence; In this case, 1≤i≤n.

[0046] Compared with the prior art, the present invention has the following beneficial effects:

[0047] The present invention integrates the anonymity principle and quantum secret sharing technology to construct an innovative quantum anonymous secret sharing scheme for sharing classical secrets. Unlike existing quantum secret sharing schemes that mainly focus on protecting secret information, this scheme focuses on protecting the confidentiality of information and the anonymity of the recipient at the same time to provide a more secure secret sharing scheme with a higher privacy level. In this scheme, the receiver and the secret distributor (secret reconstructor) construct anonymous entanglement and utilize the correlation of the measurement results of the n+1 particle GHZ state in the X basis and the Z basis, so that the recipient can effectively share and recover the classical secret while maintaining anonymity. The proposal of the present invention is an active exploration of quantum information science in protecting user privacy and ensuring information security, and it also provides a new opportunity for communication schemes in future quantum networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the technical solution of the present invention, the following briefly introduces the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0049] Figure 1Distributing a resource map for a secret distributor in an embodiment of the present invention;

[0050] Figure 2 Schematic diagram of step 1 of quantum anonymous secret sharing for sharing classical secrets in an embodiment of the present invention;

[0051] Figure 3 Schematic diagram of step 2 of quantum anonymous secret sharing for sharing classical secrets in an embodiment of the present invention;

[0052] Figure 4 This is a schematic diagram of step 3 of quantum anonymous secret sharing for sharing classical secrets in an embodiment of the present invention;

[0053] Figure 5 Schematic diagram of step 4 of quantum anonymous secret sharing for sharing classical secrets in an embodiment of the present invention;

[0054] Figure 6 Schematic diagram of step 5 of quantum anonymous secret sharing for sharing classical secrets in an embodiment of the present invention;

[0055] Figure 7 This is a flow chart of a quantum anonymous secret sharing method for sharing classical secrets in an embodiment of the present invention. DETAILED DESCRIPTION

[0056] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0057] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0058] Embodiment 1

[0059] A quantum anonymous secret sharing method for sharing classical secrets focuses on protecting the confidentiality of information and the anonymity of the recipient to provide a more secure secret sharing scheme with a higher level of privacy. The receiver and the secret distributor (secret reconstructor) construct anonymous entanglement and use the correlation of the measurement results of the n+1 particle GHZ state in the X basis and the Z basis, so that the receiver can effectively share and recover the classical secret while maintaining anonymity.

[0060] Background: The scheme includes Alice, the secret distributor, and n participants, Bob. i (1≤i≤n) and the secret reconstruction agent CharIie. Among them, n participants Bobi There are m secret receivers R = [R1, R2, ..., R m ], the rest are non-acceptors N = [N1, N2, ..., N (n-m) The secret distributor Alice holds a string of L classical bits consisting of information C = [c1, c2, ..., c L ], Alice needs to decompose the classical key and distribute the secret shares to m secret receivers. In the secret reconstruction phase, all receivers can provide their secret shares anonymously without revealing their identity information. When the secret reconstruction agent Charlie collects all the secret shares, the key can be restored. Assuming that all participants use the same classical broadcast channel for information transmission, any information transmitted in the channel cannot be tampered with.

[0061] Quantum resources used in the scheme: n+1 particle GHZ state and single photons {|+>, |->, |0>, |1>}, where the n+1 particle GHZ state has the following properties:

[0062] (1) All particles have the same measurement results in the Z basis;

[0063] (2) All particles are measured in the X basis, and the number of |-> in the result is an even number.

[0064] Quantum operations used in the scheme:

[0065] (1)I:

[0066]

[0067] (2) Pauli-Z(σ Z ):

[0068]

[0069] (3)Hardmard(H):

[0070]

[0071] The following steps are involved:

[0072] S1: Secret distributor Alice and participant Bob i (1≤i≤n) shared authentication key BK i , and transmits the particle sequence to the participants; the secret distributor includes the secret information holder, and the participants include the secret information transmitter;

[0073] A further implementation method is that in step S1, the secret distributor shares the identity authentication key with the participant, and the method of transmitting the particle sequence to the participant is:

[0074] The secret distributor Alice, based on the unconditionally secure quantum key distribution scheme (QKD), sends each participant Bob i Distribute identity authentication keys to complete identity authentication key sharing;

[0075] BK i (1≤i≤n)=[bk i,1 ,...,bk i，2 ,...,bk i，η ], bk i，j ∈{0,1}(1≤j≤η).

[0076] The secret distributor obtains a particle sequence by preparing the particle GHZ state. If the participant is the receiver selected by the secret distributor, a notification particle t with a state of |0> is prepared for the receiver. i ; If the participant is not the recipient selected by the secret distributor, a notification particle t with state |1> is prepared for the non-receiver i ;

[0077] A further implementation method is that the particle GHZ state is L+ξ+η ordered n+1 particle GHZ states, where L are used for sharing secrets, ξ are used for entanglement verification, and η are used for identity verification. The form of each particle GHZ state is:

[0078]

[0079] Where i=1, 2,...,L+ξ+η.

[0080] Alice takes the first particle from each GHZ state to form a sequence S A =[s 1，0 ,s 2，0 , ..., s L+ξ+η，0 ], take out the second particle to form the sequence S1 = [s 1，1 ,s 2，1 , ..., s L+ξ+η，1 ], the remaining particles form the sequence S2,...S n The detailed particle distribution is shown in Table 1.

[0081] Table 1

[0082]

[0083] The secret distributor inserts the notification particle into a random position k (1≤k≤L+ξ) of the particle sequence and inserts the prepared notification particle into the corresponding sequence S i After the kth particle, a decoy particle is prepared under the measurement basis and inserted into a random position of the particle sequence to obtain a particle sequence The measurement basis includes X basis and Z basis. Specifically, the secret distributor Alice has i (1≤i≤n), Alice randomly prepares δ decoy particles in the X basis and Z basis, and these particles are randomly in any state of {|0>, |1>, |+>, |->}. Alice inserts δ decoy particles into S i At this time, all particle sequences are recorded as Alice will Distribute to Bob i , Alice keeps S A sequence.

[0084] The secret distributor distributes the particles in the sequence Distribute to participants, retaining S in the particle sequence A , complete the transmission of particle sequence; In the equation, 1≤i≤n.

[0085] S2: The secret distributor performs channel eavesdropping detection on the participants based on the identity authentication key and the particle sequence to obtain a set of receivers; the receivers include the recipients of the secret information; that is, after confirming that each participant Bob i All received the corresponding particle sequence After that, Alice starts to detect the eavesdropping of the channel.

[0086] A further implementation method is that in step S2, the method for performing channel eavesdropping detection is:

[0087] The secret distributor publishes the positions and measurement basis of the decoy particles in all particle sequences;

[0088] Based on the positions and measurement basis of the decoy particles, the participants measure all the decoy particles and randomly publish half of the particle measurement results. The secret distributor publishes the particle measurement results of the other half of the decoy particles.

[0089] The particle measurement results of the participants and the particle measurement results of the secret distributor are compared with the initial state of the bait particle to obtain the comparison results; if the comparison results are consistent, the secret distributor believes that the quantum channel is secure and executes the next step; if the comparison results are inconsistent, the process is terminated;

[0090] After the secret distributor and the participant remove all the decoy particles from the particle sequences they hold, the secret distributor authenticates the participant. After the participant passes the authentication, the secret distributor publicly announces the insertion position of the notification particle. The authenticated participant measures the notification particle with a known insertion position in the Z basis. If the measurement result is |0>, the participant is a receiver; if the measurement result is |1>, the participant is a non-receiver.

[0091] Specifically, each participant Bob i After removing all the decoy particles in the particle sequence, arrange them in the original order and extract the last n particle sequence, which is recorded as Q i (1≤i≤n)=[q i，1 ,q i，2 , ..., q i，η ], and the remaining particles are arranged in the original order and recorded as Similarly, Alice records the last n particles in the sequence she owns as Q A =[q A，1 ,q A，2 , ..., q A，η ], and the remaining particle sequence is recorded in the original order as Bob i and Alice on the sequence Q i (Q A ) state particle performs H operation to obtain Q′ i (Q′ A )=[q′ i，1 , q′ i，2 , ..., q′ i，η ]([q′ A，1 , q′ A，2 , ..., q′ A，η ]). Then, Alice sends a i Perform η rounds of identity authentication. In the jth (1≤i≤η) round of identity authentication, Alice randomly selects a particle at a position, and all participants Bob i Alice and Alice measure the particle at this position in the X basis and obtain the measurement result |+> or |-). If the measurement result is |+>, then record rs i，j (rs A，j )=1 otherwise it is recorded as 0. Participant Bob i The measurement result is combined with its identity key bk i，j Add them together to get rs i，j , that is, rs i，j =rs i，j +bk i，j , participants publish their results in the order requested by Alice. Only when rs i，j =rs A，j +bki，j When η rounds of identity authentication are all passed, Alice authenticates the identities of all participants and proceeds to the next step; otherwise, Alice believes that there may be illegal participants and terminates the scheme.

[0092] After the secret distributor Alice completes the i After authenticating her identity, Alice publicly notifies Bob of the particle's insertion position k. i Measure the notification particle in the Z basis. If the measurement result is |0>, Bob i is a secret receiver; if the result is |1>, it is not a secret receiver. Let the set of all secret receivers be R = {R1, R2, ..., R m}, the non-receiver set is recorded as N = {N1, N2, ..., N (n-m)}.

[0093] S3: Anonymous entanglement is established between the secret distributor and the receiver;

[0094] A further implementation method is that in step S3, the method for constructing anonymous entanglement is:

[0095] The non-receiver performs H operation on the particle he holds and uses Z basis to measure the particle to obtain the measurement result. The secret distributor collects the measurement results of the non-receiver and performs calculation to obtain the calculation result. Specifically, after ensuring that there are no eavesdroppers and that all participants have passed identity authentication, Alice builds anonymous entanglement with all recipients. First, all non-receivers perform H operations on their own particles, and then use the Z basis to measure the particles they hold and obtain the measurement results. Alice and the receiver do not operate on their own particles, and the receiver randomly selects a result 1≤j≤m. All participants broadcast their measurement results on a public channel.

[0096] The secret distributor performs Z on the particles it holds based on the calculation results. d Operation, that is, Alice collects the measurement results of all non-receivers and calculates Build an anonymous entanglement with the recipient;

[0097] At this point, an anonymous entanglement is established between Alice and all recipients in the following form:

[0098]

[0099] The secret distributor randomly selects anonymous entanglements for entanglement verification, and based on the entanglement verification results, determines whether to abandon the communication.

[0100] Specifically, Alice randomly selects ξ from all anonymous entanglements for entanglement verification. At the verification position, Alice and all receivers measure their own particles using either the X basis or the Z basis, and notify Alice of the measurement results through an anonymous broadcast protocol. Alice considers that the anonymous entanglement has been successfully constructed if and only if the following two situations occur:

[0101] (1) All Z-based measurements are selected, and Alice's measurement results are consistent with those of all receivers.

[0102] (2) All X-based measurements are selected. Alice counts the measurement results of herself and all receivers, and all the measured |-> results are even numbers.

[0103] When any set of anonymous entanglement measurement results does not belong to the above two situations, Alice believes that the construction of anonymous entanglement has failed, and Alice abandons the communication.

[0104] S4: The secret distributor decomposes the secret based on anonymous entanglement and obtains the receiver's secret share;

[0105] A further implementation method is that in step S4, the method for performing secret decomposition is:

[0106] Secret distributor Alice and receiver R i (1≤i≤n) holds one particle in each anonymous entanglement respectively. When the secret distributor shares the secret C = [c1, c2, ..., c L ](confidential binary information string) satisfies the preset conditions, that is, without loss of generality, to share c j For example, when c j When it is 1, the Z operation is performed on the held particle, otherwise the I operation is performed, where:

[0107] The secret distributor uses the X basis to measure the particles that have completed the Z operation or the I operation. When the measurement result is |+>, it is recorded as 0, and when the measurement result is |->, it is recorded as 1. Get the measurement result The recipient uses the X basis to measure the particles he holds and obtains the secret share.

[0108] Since when Alice performs operation I on her particle (c j =0),

[0109]

[0110] When Alice performs the Z operation on her particle (cj =1):

[0111]

[0112] That is, each GHZ state can decompose 1 bit of classical secret.

[0113] Based on the measurement results of the secret distributor and secret share Complete the secret decomposition.

[0114] S5: The secret reconstruction agent completes the secret reconstruction based on the secret share and the particle measurement result of the secret distributor. The secret reconstruction agent includes a secret information decryptor.

[0115] Step 5.1: The secret reconstruction agent Charlie prepares the L+ξ group |GHZ n+1 > state, Charlie retains the sequence S consisting of the first GHZ state particles C =[s c，0 ,s c，1 , ..., s c，L+ξ ], and insert a decoy particle into the sequence consisting of the i+1th GHZ state particle, denoted as Then the particle sequence Distribute to participant Bob i . Bob i The eavesdropping detection and entanglement verification are performed in the same way as Alice, and the ξ group of particles is selected for entanglement verification.

[0116] Step 5.2: After completing eavesdropping detection and entanglement verification, for each anonymous entanglement, the secret reconstruction agent Charlie and each participant Bob i (1≤i≤n) holds one of the particles. If the currently reconstructed secret bit is c j , Bob i Use the X basis to measure the jth (1≤j≤L) particle in the sequence you hold, and record the measurement result as (When the measurement result is |+> |->Time ). Similarly, the secret reconstruction agent Charlie measures the jth (1≤j≤L) particle in the sequence and records the result as

[0117] Step 5.3: If Bob i For the receiver, according to the secret share he holds Perform a modulo-2 sum operation on your own measurement results to get the result Right now All participants send their measurement results publicly on a public channel.

[0118] Step 5.6: Charlie collects all the results and measures the corresponding bits according to the information published by Alice. Calculate the secret bit

[0119]

[0120] Repeat the above steps L times to reconstruct the secret C = [c1, c2, ..., c L ].

[0121] Implementation column 2

[0122] like Figure 1 As shown, in the preparation phase, the secret distributor Alice sends each participant Bob through the quantum channel i (1≤i≤n) distributes the authentication key BK i =[bk i，1 , ..., bk i，2 , ..., bk i，η ] and contains n+1 particle GHZ state, decoy particle, notification particle t i particle sequence

[0123] The process of a 5-participant authentic quantum anonymous secret sharing scheme, where Alice is the secret distributor and holds the secret C =

[1001] . 5 participants Bob i In (1≤i≤5), Bob1 and Bob4 are the selected secret receivers. Charlie is the secret reconstruction agent.

[0124] like Figure 2 As shown, step 1: the secret distributor Alice prepares the particle sequence Distribute to participants (Bob i (1≤i≤n)), including GHZ state particles, notification particles t i After participant Bobi receives the particle sequence, Alice starts to detect the eavesdropping of the channel. Alice publishes the position and measurement basis of the decoy particles in all sequences, and Bob i All decoy particles are measured and half of the results are randomly published. Alice publishes the initial state of the remaining half of the decoy particles. Both parties compare whether the measurement results are consistent with the initial state of the particles. If there is a difference, the scheme is terminated and the particle sequence is redistributed; otherwise, Alice believes that the quantum channel is secure and the scheme proceeds to the next step.

[0125] like Figure 3As shown, step 2: This step performs participant identity authentication. Each participant Bob i After removing all the decoy particles in the particle sequence, arrange them in the original order and extract the last 4 particle sequences, which are recorded as Q i (1≤i≤5)=[q i，1 ,q i，2 ,q i，3 ,q i，4 ], and the remaining particles are arranged in the original order and recorded as Similarly, Alice records the last four particles in the sequence she owns as Q A =[q A，1 ,q A，2 ,q A，3 ,q A，4 ], and the remaining particle sequence is recorded in the original order as Bob i and Alice on the sequence Q i (Q A ) performs H operation to obtain Q′ i (Q′ A ). Then, Alice sends a i Perform 4 rounds of identity authentication. In the jth (1≤j≤4) round of identity authentication, Alice randomly selects a particle at a position, and all participants Bob i Alice and I measure the particle at this position in the X basis and get the measurement result |+> or |->. If the measurement result is |+>, it is recorded as rs i，j (rs A，j )=1, otherwise it is recorded as 0. Participant Bob i The measurement result is combined with its identity key bk i，j Add them together to get rs i，j , that is, rs' i，j =rs i，j +bk i，j , participants publish their results in the order requested by Alice. Only when rs i，j =rs A，j +bk i，j When all four rounds of identity authentication are passed, Alice authenticates the identities of all participants and proceeds to the next step; otherwise, Alice believes that there may be illegal participants and terminates the scheme.

[0126] After all participants have passed identity authentication, they measure the notification particles to find out whether they are the secret recipients.

[0127] like Figure 4As shown in Figure 3, step 3: All non-receivers perform H operation on their own particles, then use Z basis to measure the particles they hold and publish the measurement results. Alice and the receiver do not perform any operation on their own particles, and the receiver randomly selects a result to publish. Alice collects the measurement results of all non-receivers and calculates their modulo 2 sum d. Based on the calculation results, Alice performs Z on her own particle. d operate,

[0128] At this point, Alice has established anonymous entanglement with all receivers Bob1 and Bob4. Alice selects four sets of entanglement for verification. She determines whether the entanglement is successful based on whether the measurement results of the entangled particles in the Z basis (X basis) are the same (|-> the number is). Only when all entanglements are verified, will the next step be continued; otherwise, it means that the anonymous entanglement construction has failed and the scheme is terminated.

[0129] like Figure 5 As shown, step 4: the secret distributor Alice performs Z(I) operation on the anonymous entangled particles she holds according to the secret C=

[1001] . Then, Alice and the receivers Bob1 and Bob4 measure their particles in the X basis, and Bob1 and Bob4 obtain the secret shares, denoted as m. r1 , m r2 Alice publishes the measurement result m A .

[0130] like Figure 6 As shown, step 5: After the secret reconstruction agent Charlie completes particle distribution, eavesdropping detection and entanglement verification, he and all participants measure the GHZ state particles they own in the X basis and obtain the result m C , r i (1≤i≤5). Receivers Bob1 and Bob4 send the results r1 and r4 together with their secret share m. r1 , m r2 After doing modular 2 addition, we get r'1, r'4. All participants publish the results r'1, r2, r3, r'4, r5. Charlie collects the results and compares them with m A , m C Do modular 2 addition and reconstruct the secret C =

[1001] .

[0131] Embodiment 3

[0132] like Figure 7 As shown in FIG. 1 , a quantum anonymous secret sharing method for sharing classical secrets is shown in FIG. 1 : The secret distributor Alice sends a secret to the participant Bob. i Distribute authentication key BK i .

[0133] Process 2: The secret distributor Alice prepares and distributes a sequence S containing GHZ state particles, decoy particles, and notification particles i .

[0134] Process 3: The secret distributor Alice performs eavesdropping detection on the channel. Participant Bob i After receiving the particle sequence, Alice starts the channel eavesdropping detection. Alice publishes the position and measurement basis of all decoy particles in the sequence, and Bob i All decoy particles are measured and half of the results are randomly published. Alice publishes the initial state of the remaining half of the decoy particles. Both parties compare whether the measurement results are consistent with the initial state of the particles. If there is a difference, the scheme is terminated and the particle sequence is redistributed; otherwise, Alice believes that the quantum channel is secure and the scheme proceeds to the next step.

[0135] Process 4: The participant Bob i and the secret distributor Alice on the sequence Q i (Q A ) performs H operation to obtain Q′ i (Q′ A ).

[0136] Process 5: The secret distributor Alice sends the secret to the participant Bob i Perform η rounds of identity authentication. In the jth (1≤i≤η) round of identity authentication, Alice randomly selects a particle at a position, and all participants Bob i Alice and I measure the particle at this position in the X basis and get the measurement result |+> or |->. If the measurement result is |+>, it is recorded as rs i，j (rs A，j )=1, otherwise it is recorded as 0. Participant Bob i The measurement result is combined with its identity key bk i，j Add them together to get rs i，j , that is, rs i，j =rs i，j +bk i，j .

[0137] Process 6: The participants publish the results in the order requested by Alice. i，j =rs A，j +bk i，j When η rounds of identity authentication are all passed, Alice authenticates the identities of all participants and proceeds to the next step; otherwise, Alice believes that there may be illegal participants and terminates the scheme.

[0138] Process 7: Each participant Bob iThe measurement tells the particle its identity.

[0139] Process 8: L anonymous entanglements are constructed between the secret distributor Alice and all secret receivers R.

[0140] Process 9: The secret distributor Alice selects ξ entanglements for verification. Only when all the selected entanglements pass the verification can the next step be continued. Otherwise, it is considered that the anonymous entanglement construction has failed and the scheme is terminated.

[0141] Process 10: The secret distributor Alice performs Z(I) operation on the anonymous entangled particles she holds according to the secret C. Then, Alice and the receiver measure their particles in the X basis, and the receiver can obtain the secret share.

[0142] Process 11: The secret reconstruction agent Charlie prepares and distributes quantum resources in a similar way to Alice to perform channel eavesdropping detection and entanglement verification.

[0143] Process 12: All participants Bob i The reconstruction agent Charlie measures the GHZ state particle in the Z basis. The non-secret receiver N publishes the measurement result, and the secret receiver R publishes the measurement result after adding the measurement result to his own secret share modulo 2. After Charlie collects the results published by the participants, he reconstructs the secret C based on the information published by Alice and his own measurement results.

[0144] Embodiment 4

[0145] The present invention also provides a quantum anonymous secret sharing system for sharing classical secrets, which is used to implement a quantum anonymous secret sharing method for sharing classical secrets, comprising:

[0146] A preparation module is used for a secret distributor to share an identity authentication key with a participant and transmit a particle sequence to the participant; the secret distributor includes a secret information holder, and the participant includes a secret information transmitter;

[0147] The eavesdropping detection module is used for the secret distributor to perform channel eavesdropping detection on the participants based on the identity authentication key and the particle sequence to obtain a set of receivers; the receivers include the secret information receivers;

[0148] Anonymous entanglement building module, used to build anonymous entanglement between secret distributors and receivers;

[0149] A decryption module, which is used by the secret distributor to decompose the secret based on anonymous entanglement and obtain the receiver's secret share;

[0150] The secret reconstruction module is used for the secret reconstruction agent to complete the secret reconstruction based on the secret share and the particle measurement result of the secret distributor. The secret reconstruction agent includes a secret information decryptor.

[0151] A further embodiment is that the preparation module comprises:

[0152] The key sharing unit is used by the secret distributor to distribute the identity authentication key to each participant based on the unconditionally secure quantum key distribution scheme to complete the sharing of the identity authentication key;

[0153] The particle sequence preparation unit is used for the secret distributor to obtain a particle sequence by preparing a particle GHZ state; if the participant is a receiver selected by the secret distributor, a notification particle with a state of |0> is prepared for the receiver; if the participant is not a receiver selected by the secret distributor, a notification particle with a state of |1> is prepared for the non-receiver;

[0154] The particle insertion unit is used for the secret distributor to insert the notification particle into the random position of the particle sequence, and prepare the decoy particle under the measurement basis to insert it into the random position of the particle sequence to obtain the particle sequence. Among them, the measurement basis includes X basis and Z basis;

[0155] The particle transmission unit is used by the secret distributor to transfer the particles in the sequence Distribute to participants, retaining S in the particle sequence A , complete the transmission of particle sequence; In the equation, 1≤i≤n.

[0156] The embodiments described above are only descriptions of the preferred embodiments of the present invention and are not intended to limit the scope of the present invention. Without departing from the design spirit of the present invention, various modifications and improvements made to the technical solutions of the present invention by ordinary technicians in this field should all fall within the protection scope determined by the claims of the present invention.

Claims

1. A quantum anonymous secret sharing method for sharing classical secrets, characterized in that: The following steps are involved: S1: The secret distributor shares the identity authentication key with the participant and transmits the particle sequence to the participant; the secret distributor includes the secret information holder, and the participant includes the secret information transmitter; in step S1, the secret distributor shares the identity authentication key with the participant and transmits the particle sequence to the participant in the following manner: The secret distributor distributes the identity authentication key to each of the participants based on an unconditionally secure quantum key distribution scheme to complete the sharing of the identity authentication key; The secret distributor obtains a particle sequence by preparing GHZ state particles, decoy particles and notification particles; wherein the decoy particle sequence is prepared in the X basis and the Z basis to realize identity authentication and channel eavesdropping detection; if the key value of the corresponding position is 0, the prepared decoy particle is |0> or |1>; if the key value of the corresponding position is 1, the prepared decoy particle is |+> or |->; If the participant is a recipient selected by the secret distributor, a notification particle with a state of |0> is prepared for the recipient; if the participant is not a recipient selected by the secret distributor, a notification particle with a state of |1> is prepared for the non-receiver; The secret distributor inserts the decoy particles and notification particles into random positions of the GHZ state particle sequence to obtain a particle sequence Among them, the measurement basis includes X basis and Z basis; The secret distributor distributes the particles in the sequence Distribute to the participants, retaining the GHZ state particle sequence S A , completing the transmission of the particle sequence; In, 1≤i≤n; S2: The secret distributor performs identity authentication and channel eavesdropping detection on the participants based on the identity authentication key and the particle sequence to obtain a set of legal participants; the receiver includes a secret information receiver; the method for performing identity authentication and channel eavesdropping detection is: The secret distributor publishes the positions of the decoy particles in all particle sequences; The participant selects a measurement base to measure all the decoy particles and publishes all the measurement results based on the position of the decoy particles and the identity authentication key; The secret distributor compares the particle measurement results of the participants and the initial state of the decoy particles to obtain comparison results; if the comparison results are consistent, the secret distributor considers that the identity of the participants is legitimate and the quantum channel is secure, and executes the next step; if the comparison results are inconsistent, the process is terminated; After the secret distributor and the participant remove all decoy particles from the particle sequences held by each of them, the participant learns the identity; The secret distributor discloses the insertion position of the notification particle, and the participant who has passed identity authentication measures the notification particle with a known insertion position in the Z basis. If the measurement result is |0>, the participant is the receiver; if the measurement result is |1>, the participant is a non-receiver; Let the set of all secret receivers be R = {R1, R2, ..., R m }, the non-receiver set is recorded as N = {N1, N2, ..., N (n-m) }; S3: An anonymous entanglement is established between the secret distributor and the receiver. In step S3, the method of establishing the anonymous entanglement is: The non-receiver performs H operation on the GHZ state particle held by the non-receiver and uses the Z basis to measure the particle to obtain a measurement result, and the secret distributor collects the measurement results of the non-receiver and performs calculation to obtain a calculation result; wherein, The secret distributor performs Z on the particles it holds based on the calculation result. d operation, and constructing the anonymous entanglement with the recipient; wherein, The secret distributor randomly selects the anonymous entanglement for entanglement verification, and determines whether to abandon the communication based on the entanglement verification result; S4: The secret distributor performs secret decomposition based on the anonymous entanglement to obtain the secret share of the receiver; in step S4, the method for performing secret decomposition is: The secret distributor and the receiver each hold a particle in each anonymous entanglement. When the secret shared by the secret distributor meets the preset conditions, the Z operation is performed on the held particle, otherwise the I operation is performed, where: The secret distributor uses the X basis to measure the particles that have completed the Z operation or the I operation and obtains the measurement result. The receiver uses the X basis to measure the particles it holds and obtains the secret share Based on the measurement results of the secret distributor and the secret share Complete secret decomposition; S5: The secret reconstruction agent completes secret reconstruction based on the secret share and the particle measurement result of the secret distributor, and the secret reconstruction agent includes a secret information decryption party; The complete process of the quantum anonymous secret sharing method for sharing classical secrets is as follows: In the preparation phase, the secret distributor Alice sends each participant Bob i (1≤i≤n) distributes the authentication key BK i =[bk i,1 ,bk i,2 ,…,bk i,η ] and contains n+1 particle GHZ state, decoy particle, notification particle t i particle sequence The process of the authentic quantum anonymous secret sharing scheme with 5 participants, where Alice is the secret distributor and holds the secret C = [1001]; 5 participants Bob i (1≤i≤5) where Bod1 and Bod4 are selected secret receivers; Charlie is the secret reconstruction agent; Step 1: The secret distributor Alice sends the prepared particle sequence Distribute to participants (Bob i (1≤i≤n)), including GHZ state particles, notification particles t i and decoy particles; participant Bob i After receiving the particle sequence, Alice starts to authenticate the participants and detect eavesdropping on the channel. Alice publishes the positions of all decoy particles in the sequence, and Bob i According to the identity authentication key, Alice selects a measurement base and measures all decoy particles, and publishes the results. Alice compares the measurement results with the initial state of the particles to see if they are consistent. If there is a difference, the scheme is terminated. Otherwise, Alice believes that Bob i The identity is legitimate and the quantum channel is secure, so the solution proceeds to the next step; Step 2: After all participants have passed identity authentication, they measure the notification particles to find out whether they are the secret recipients; Step 3: All non-receivers perform H operation on their own particles, then use Z basis to measure their own particles and publish the measurement results; Alice and the receiver do not perform any operation on their own particles, and the receiver randomly selects a result to publish; Alice collects the measurement results of all non-receivers and calculates their modulo 2 sum d; based on the calculated result, Alice performs Z on her own particle d operate, At this point, Alice has established anonymous entanglement with all receivers Bob1 and Bob4. Alice selects four sets of entanglement for verification. She determines whether the entanglement is successful based on whether the measurement results of the entangled particles in the Z basis and the X basis are the same. Only when the entanglement passes the verification, will she proceed to the next step; otherwise, it means that the anonymous entanglement construction has failed and the scheme is terminated. Step 4: The secret distributor Alice performs Z(I) operation on the anonymous entangled particles she holds according to the secret C=[1001]. Then, Alice and the receivers Bob1 and Bob4 measure their particles in the X basis, and Bob1 and Bob4 obtain the secret shares, denoted as m. r1 ,m r2 ; Alice publishes the measurement result m A ; Step 5: After the secret reconstruction agent Charlie completes particle distribution, eavesdropping detection, and entanglement verification, he and all participants measure the GHZ state particles they own in the X basis and obtain the result m C ,r i (1≤i≤5); Receivers Bod1 and Bod4 send the results r1, r4 to their secret share m r1 ,m r2 After doing modular 2 addition, we get r'1, r'4; all participants publish the results r'1, r2, r3, r'4, r5; Charlie collects the results and compares them with m A ,m C Do modular 2 addition and reconstruct the secret C = [1001].

2. The quantum anonymous secret sharing method for sharing classical secrets according to claim 1, characterized in that: The particle GHZ state is L+ξ ordered n+1 particle GHZ states, of which L are used for sharing secrets and ξ for entanglement verification. The form of each particle GHZ state is: Where i=1,2,…,L+ξ.

3. A quantum anonymous secret sharing system for sharing classical secrets, characterized in that: The method for sharing a quantum anonymous secret by implementing the shared classical secret of any one of claims 1 to 2 comprises: A preparation module is used for a secret distributor to share an identity authentication key with a participant and transmit a particle sequence to the participant; the secret distributor includes a secret information holder, and the participant includes a secret information transmitter; An eavesdropping detection module, used for the secret distributor to perform identity authentication and channel eavesdropping detection on the participant based on the identity authentication key and the particle sequence, and obtain a set of legal participants; the legal participants include secret information receivers; An anonymous entanglement construction module, used to construct anonymous entanglement between the secret distributor and the receiver; A decryption module, used for the secret distributor to perform secret decomposition based on the anonymous entanglement to obtain the secret share of the recipient; A secret reconstruction module is used for the secret reconstruction agent to complete secret reconstruction based on the secret share and the particle measurement result of the secret distributor, and the secret reconstruction agent includes a secret information decryption party.

4. The quantum anonymous secret sharing system for sharing classical secrets according to claim 3, characterized in that: The preparation module comprises: A key sharing unit, used by the secret distributor to distribute the identity authentication key to each of the participants based on an unconditionally secure quantum key distribution scheme to complete the sharing of the identity authentication key; A particle sequence preparation unit is used for the secret distributor to obtain the particle sequence by preparing GHZ state particles, decoy particles and notification particles; prepare decoy particle sequences under X basis and Z basis to realize identity authentication and channel eavesdropping detection; if the key value of the corresponding position is 0, the prepared decoy particle is |0> or |1>; if the key value of the corresponding position is 1, the prepared decoy particle is |+> or |->; if the participant is a recipient selected by the secret distributor, prepare notification particles with a state of |0> for the recipient; if the participant is not a recipient selected by the secret distributor, prepare notification particles with a state of |1> for non-receivers; A particle insertion unit is used for the secret distributor to insert the bait particles and the notification particles into the random positions of the GHZ state particle sequence to obtain the particle sequence Among them, the measurement basis includes X basis and Z basis; A particle transmission unit is used for the secret distributor to transmit the particle sequence Distribute to the participants, retaining S in the GHZ state particle sequence A , completing the transmission of the particle sequence; In this case, 1≤i≤n.

Images