Identity authentication method and system based on quantum cryptography
By using the hash value of random numbers and quantum channels for identity authentication in the quantum key allocation protocol, the problem of lack of identity authentication in the quantum key allocation protocol is solved, and the problem of quantum key allocation protocol lacks identity authentication is realized More secure and reliable communication authentication, resisting man-in-the-middle attacks and quantum computing threats.
Patent Information
- Application Number
- CN202411271302.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-11
- Publication Date
- 2024-12-20
AI Technical Summary
The quantum key allocation protocol lacks an identity authentication mechanism and cannot withstand man-in-the-middle attacks, which threatens the security of the quantum confidential communication system.
By generating a random number A and calculating its hash value h(A), safely collaborating with the authenticator, using the quantum channel to modulate the corresponding bit of h(A) into a quantum state to send, the authenticator randomly measures and publishes it. The basis is measured, and the identity authentication is completed through comparison and the non-replicability of quantum states and the unidirectionality and collision resistance of hash functions are used to ensure the security of the authentication process.
Effectively resist man-in-the-middle attacks, ensure the security of the communication environment, improve the security and reliability of identity authentication, resist quantum computing attacks, and ensure the legitimacy of the identities of both parties in the communication.
Smart Images
Figure CN119172069A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the field of quantum communication and information security technology, and specifically relates to an identity authentication method and system based on quantum cryptography technology. Background Art
[0002] Identity authentication can solve the problem of consistency between the physical and digital identities of visitors or communication parties, and is the basis for providing permission management for other security technologies. The identity authentication system is an important foundation for the information security system. Classic identity authentication schemes are usually based on algorithm complexity, but with the improvement of computer computing power, especially with the introduction of quantum computing and the development of quantum computers, classical authentication schemes will be easier to break. Quantum computing will pose a fatal blow to information security protected by traditional cryptographic systems, and pose a severe challenge to existing confidential communications.
[0003] Quantum cryptography, as an emerging technology combining quantum mechanics and cryptography, is becoming an important research branch of new cryptographic technologies. The quantum cryptography system uses quantum states as information carriers and transmits keys between legitimate users via quantum channels. The security of quantum cryptography is guaranteed by the principles of quantum mechanics.
[0004] Quantum secure communication systems also require identity authentication to provide security, but the quantum key distribution protocol does not provide an identity authentication mechanism and cannot resist man-in-the-middle attacks. Therefore, how to use quantum cryptography technology for identity authentication and ensure communication security is still an urgent problem to be solved. Summary of the invention
[0005] The purpose of the present invention is to provide an identity authentication method and system based on quantum cryptography technology to meet the demand for improving the security of identity authentication in communication systems.
[0006] In the technical solution of the present invention, the authenticated party generates a random number A and calculates its hash value h(A), and then securely collaborates with the authenticating party to generate h(A). In the authentication stage, the authenticated party selects n modulation bases based on the first n bits of A, which are used to modulate the corresponding bits of h(A) into quantum states as the compilation signal, and sends them to the authenticating party through the quantum channel; the authenticating party randomly selects a set of measurement bases C to measure the received quantum states, and then publishes the measurement base C selected by itself to the authenticated party, and then compares the correctly measured bits with the corresponding bits in h(A) in turn according to the position of the correct measurement base in C fed back by the authenticated party. If they are consistent, the identity authentication is completed.
[0007] The present invention has substantial features and improvements over the prior art, specifically: 1. The technical solution of the present invention realizes the identity authentication of the communication party based on quantum cryptography technology, and uses quantum characteristics to provide a safer and more reliable authentication method, which can effectively resist man-in-the-middle attacks. Since the authentication process uses quantum communication, the quantum state cannot be copied. When a third party wants to obtain information through the quantum state, the original quantum state will change, so that the communication party knows the existence of the third party, thereby ensuring the security of the communication environment. Realizing the mutual authentication process in a secure environment can ensure the legitimacy of the identities of the two communicating parties.
[0008] 2. The technical solution of the present invention uses the hash value of the random number A as the final authentication content. Based on the one-way and collision-resistant properties of the hash function, the authenticator or other third party cannot recover the random number A, which improves the security of the authentication. At the same time, the hash function has the ability to resist quantum computing attacks, which can be used to provide another layer of security guarantee for identity authentication, thereby further improving the security of authentication. BRIEF DESCRIPTION OF THE DRAWINGS
[0009] Figure 1 It is a schematic diagram of an identity authentication method based on quantum cryptography technology according to an embodiment of the present invention.
[0010] Figure 2 It is a schematic diagram of an identity authentication method based on quantum cryptography technology according to another embodiment of the present invention.
[0011] Figure 3 It is a schematic diagram of an identity authentication system based on quantum cryptography technology according to another embodiment of the present invention. DETAILED DESCRIPTION
[0012] Embodiment 1: This embodiment provides an identity authentication method based on quantum cryptography technology, such as Figure 1 As shown, the method includes: The first communication party generates a random number A having m bits, and uses a hash function h( ) to calculate its hash value h(A); the first communication party and the second communication party securely collaborate on h(A); wherein h(A) has n bits, n≤m; The first communication party selects n modulation bases according to the first n bits of A through a quantum cryptographic communication device, and then uses each modulation base to modulate the corresponding bit of h(A) into a quantum state as a compilation signal, and sends it to the second communication party; The second communication party randomly selects a set of measurement bases C to measure the received quantum state, obtains n-bit data B, and publishes the measurement base C selected by itself to the first communication party; wherein C includes n measurement bases; The first communication party forms a set D with the positions of the correctly selected measurement bases in C, and publishes D to the second communication party; The second communication party compares the corresponding bits in B with the corresponding bits in h(A) saved by itself according to D. If they are consistent, the second communication party completes the identity authentication of the first communication party.
[0013] In the above technical solution, the first communication party is the authenticated party, and the second communication party is the authenticator. Quantum cryptographic communication equipment includes a quantum state generator, a quantum channel, and a quantum measurement device. Quantum cryptographic communication can be carried out by optical fiber quantum communication lines and the like. The transmission of quantum states can be achieved by encoding, transmitting, and measuring photons. The random number A can be generated by a quantum random number generator or by other noise sources.
[0014] In the information presetting stage, the first communication party generates a random number A and calculates h(A), and securely collaborates with the second communication party on h(A). Both parties preset h(A) and store it securely. In the authentication stage, the first communication party modulates h(A) as a signal into a quantum state through a quantum cryptography communication device and transmits it to the second communication party. The second communication party compares its own measurement results and the correctly selected measurement basis with the corresponding bits of h(A) saved by itself to complete the authentication.
[0015] Preferably, the first communication party and the second communication party securely collaborate on h(A), including: the first communication party encrypts h(A) and sends it to the second communication party through a secure channel, and the second communication party securely stores h(A). During secure collaboration, various classical cryptographic techniques can be used to ensure communication security.
[0016] Preferably, the first communication party and the second communication party securely collaborate on h(A), including: the security center authenticates the first communication party and the second communication party respectively, and then the first communication party securely distributes h(A) to the second communication party through the security center, and the second communication party securely stores h(A).
[0017] The existence of the security center further enhances the security of security collaboration information.
[0018] Preferably, the first communication party and the second communication party pre-coordinate the hash function h( ) and the modulation base selection method for identity authentication between the two parties. The pre-coordination can also use a secure channel or coordinate through a security center.
[0019] Preferably, after the second communication party completes the identity authentication of the first communication party, the two parties exchange roles and use the same identity authentication method to complete identity mutual authentication. That is, the second communication party is transformed into the authenticated party and the first communication party is the authenticator. The second communication party generates a random number A' with m bits, calculates its hash value h(A') using the hash function h( ), and securely collaborates with the first communication party to obtain h(A'); in the authentication stage, the second communication party modulates h(A') as a signal into a quantum state through a quantum cryptography communication device and transmits it to the first communication party, thereby initiating the identity authentication of the second communication party by the first communication party. The authentication process is the same as the method used in the above process, except that the two parties exchange roles.
[0020] Optionally, the first communication party and the second communication party mutually publish information through a public channel. When using the public channel for communication, secure communication can be performed through classical cryptographic technology.
[0021] Alternatively, if Figure 2 As shown, the first communication party selects n modulation bases according to the first n bits of A, and then uses each modulation base to modulate the corresponding bit of h(A) as the compilation signal into a quantum state, specifically including: The first communication party uses the 1st, 2nd, ..., nth bits of A as random numbers for modulation base selection to select n modulation bases, and sequentially uses the selected modulation bases to modulate the 1st, 2nd, ..., nth bits of h(A) as the compilation signal into a quantum state; For example, when the i-th bit of A is "1", horizontal-vertical base polarization coding is selected, and when it is "0", diagonal base polarization coding is selected; other bits are similar; similarly, diagonal base polarization coding can also be selected when the bit is "1".
[0022] The method in which the second communication party sequentially compares the corresponding bits in B with the corresponding bits in h(A) stored by the second communication party according to D specifically includes: the second communication party compares the corresponding bits in B with the corresponding bits in h(A) stored by the second communication party according to the sequence numbers d1, d2, ..., d in C based on the correct measurement indicated in D. k , respectively, the d1, d2, ..., d k bits and d1,d2,…,d in h(A) k The bits are compared, where k ≤ n.
[0023] In this technical solution, the authenticated party generates a random number A and calculates its hash value h(A), and then securely collaborates with the authenticating party on h(A). During the authentication phase, the authenticated party selects n modulation bases based on the first n bits of A, which are used to modulate the corresponding bits of h(A) into a quantum state as a compilation signal and send it to the authenticating party; the authenticating party randomly selects a set of measurement bases C to measure the received quantum state, and then publishes the measurement base C selected by itself to the authenticated party, and then compares the correctly measured bits with the corresponding bits in h(A) in turn according to the position of the correct measurement base in C indicated by the authenticated party. If they are consistent, the identity authentication is completed. Due to the non-replicable nature of the quantum state, the security of the communication environment is guaranteed, thereby achieving a more secure and reliable identity authentication than traditional authentication methods.
[0024] Embodiment 2: This embodiment provides an identity authentication system based on quantum cryptography technology, such as Figure 3 As shown, a first communication party and a second communication party are included, the first communication party includes a first quantum cryptography communication device, and the second communication party includes a second quantum cryptography communication device; the first communication party is connected to the second communication party for communication, and the first communication party and the second communication party perform quantum cryptography communication through the first quantum cryptography communication device and the second quantum cryptography communication device; The first communication party generates a random number A having m bits, and uses a hash function h( ) to calculate its hash value h(A); the first communication party and the second communication party securely collaborate on h(A); wherein h(A) has n bits, n≤m; The first communication party selects n modulation bases according to the first n bits of A through the first quantum cryptography communication device, and then uses each modulation base to modulate the corresponding bit of h(A) into a quantum state as a compilation signal, and sends it to the second communication party; The second communication party uses the second quantum cryptography communication device to randomly select a set of measurement bases C to measure the received quantum state, obtain n-bit data B, and publish the measurement base C selected by itself to the first communication party; wherein C includes n measurement bases; The first communication party forms a set D with the positions of the correctly selected measurement bases in C, and publishes D to the second communication party; The second communication party compares the corresponding bits in B with the corresponding bits in h(A) saved by itself according to D. If they are consistent, the second communication party completes the identity authentication of the first communication party.
[0025] Preferably, the first communication party also includes a first classic cryptographic communication device, and the second communication party also includes a second classic cryptographic communication device; the first communication party and the second communication party communicate through the first classic cryptographic communication device and the second classic cryptographic communication device through a public channel to publish information and / or collaborate securely with each other.
[0026] Preferably, the identity authentication system based on quantum cryptography technology also includes a security center, which performs identity authentication on the first communication party and the second communication party respectively, and the first communication party and the second communication party perform secure information collaboration through the security center.
[0027] The above contents are only for explaining the technical idea of the present invention and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the claims of the present invention.
Claims
1. An identity authentication method based on quantum cryptography technology, characterized in that: include: The first communication party generates a random number A having m bits, and uses a hash function h( ) to calculate its hash value h(A); the first communication party and the second communication party securely collaborate on h(A); wherein h(A) has n bits, n≤m; The first communication party selects n modulation bases according to the first n bits of A through a quantum cryptography communication device, and then uses each modulation base to modulate the corresponding bit of h(A) into a quantum state as a compilation signal, and sends it to the second communication party; The second communication party randomly selects a set of measurement bases C to measure the received quantum state, obtains n-bit data B, and publishes the measurement base set C selected by itself to the first communication party; wherein the measurement base C includes n measurement bases; The first communication party forms a set D with the positions of the correctly selected measurement bases in the measurement base group C, and publishes the set D to the second communication party; The second communication party compares the corresponding bits in data B with the corresponding bits in h(A) saved by itself according to set D. If they are consistent, the second communication party completes the identity authentication of the first communication party.
2. The identity authentication method based on quantum cryptography technology according to claim 1 is characterized in that: The method for a first communication party and a second communication party to securely collaborate h(A) comprises: The first communication party encrypts h(A) and sends it to the second communication party through a secure channel, and the second communication party securely stores h(A).
3. The identity authentication method based on quantum cryptography technology according to claim 1 is characterized in that: The method for a first communication party and a second communication party to securely collaborate h(A) comprises: The security center first authenticates the first communication party and the second communication party respectively, and then the first communication party securely distributes h(A) to the second communication party through the security center, and the second communication party securely stores h(A).
4. The identity authentication method based on quantum cryptography technology according to claim 1 is characterized in that: After the second communication party completes the identity authentication of the first communication party, the two parties exchange roles and use the same identity authentication method to complete mutual identity authentication.
5. The identity authentication method based on quantum cryptography technology according to claim 1, characterized in that: The first communication party and the second communication party mutually publish information through a public channel.
6. The identity authentication method based on quantum cryptography technology according to claim 5 is characterized in that: The first communication party and the second communication party pre-coordinate a hash function h( ) and a modulation base selection method for identity authentication between the two parties.
7. The identity authentication method based on quantum cryptography technology according to claim 1 is characterized in that: Methods for modulating a programmed signal into a quantum state using a modulation basis include: The first communication party uses the 1st, 2nd, ..., nth bits of A as random numbers for modulation base selection to select n modulation bases, and sequentially uses the selected modulation bases to modulate the 1st, 2nd, ..., nth bits of h(A) as the compilation signal into a quantum state; The method of sequentially comparing corresponding bits in data B with corresponding bits in h(A) stored by the second communication party includes: The second communication party obtains the sequence number d1, d2, ..., d of the correct measurement basis indicated in the set D in the measurement basis set C. k , respectively, the d1, d2, ..., d k bits and d1,d2,…,d in h(A) k The bits are compared, where k ≤ n.
8. An identity authentication system based on quantum cryptography technology, characterized in that: comprising a first communication party and a second communication party; The first communication party includes a first quantum cryptography communication device, and the second communication party includes a second quantum cryptography communication device; the first communication party is connected to the second communication party for communication, and the first communication party and the second communication party perform quantum cryptography communication through the first quantum cryptography communication device and the second quantum cryptography communication device; The first communication party generates a random number A having m bits, and uses a hash function h( ) to calculate its hash value h(A); the first communication party and the second communication party securely collaborate on h(A); wherein h(A) has n bits, n≤m; The first communication party selects n modulation bases according to the first n bits of A through the first quantum cryptography communication device, and then uses each modulation base to modulate the corresponding bit of h(A) into a quantum state as a compilation signal, and sends it to the second communication party; The second communication party uses the second quantum cryptography communication device to randomly select a set of measurement bases C to measure the received quantum state, obtain n-bit data B, and publish the measurement base C selected by itself to the first communication party; wherein C includes n measurement bases; The first communication party forms a set D with the positions of the correctly selected measurement bases in C, and publishes D to the second communication party; The second communication party compares the corresponding bits in B with the corresponding bits in h(A) saved by itself according to D. If they are consistent, the second communication party completes the identity authentication of the first communication party.
9. The identity authentication system based on quantum cryptography technology according to claim 8, characterized in that: The first communication party also includes a first classic cryptographic communication device, and the second communication party also includes a second classic cryptographic communication device; the first communication party and the second communication party communicate through a public channel through the first classic cryptographic communication device and the second classic cryptographic communication device to publish information and / or collaborate securely with each other.
10. The identity authentication system based on quantum cryptography technology according to claim 8, characterized in that: It also includes a security center, which performs identity authentication on the first communication party and the second communication party respectively, and the first communication party and the second communication party perform security collaboration of information through the security center.