Quantum identity authentication method and system based on data pre-sharing and entangled state distribution
Through the quantum identity authentication method based on data pre-sharing and entangled state distribution, the problem of transmission single-bit particles and quantum resources in the prior art is solved, and high-security quantum identity authentication is realized, ensuring information confidentiality and communication Safety.
Patent Information
- Application Number
- CN202411149920.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-21
- Publication Date
- 2024-12-31
AI Technical Summary
The existing quantum identity authentication methods have the problem that only single-bit particles can be transmitted and require the consumption of quantum gates and qubit resources to prepare transmission keys, which affects the security of network communication.
Using the quantum identity authentication method based on data pre-sharing and entangled state distribution, the three-particle entangled state is prepared by a third party and distributed to the user end. The user end performs phase movement and collective measurement, and determines that the identity authentication has passed or failed to ensure the confidentiality of the information. and security.
High-security information exchange and data transmission are realized. Through data pre-sharing and entangled state distribution technology, the confidentiality and security of the identity authentication process between the two parties of the communication are ensured, and the privacy of information transmission is improved.
Smart Images

Figure CN119232368A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to quantum identity authentication technology, and in particular to a quantum identity authentication method and system based on data pre-sharing and entangled state distribution. Background Art
[0002] Cryptography technology has advanced rapidly and has been applied in many fields. Quantum cryptography, as a cutting-edge branch of cryptography, especially quantum authentication technology, is receiving more and more attention. The identity authentication of both communicating parties is an important source of information privacy leakage. Therefore, quantum identity authentication is the basis for ensuring the security of network communications. It constitutes a vital line of defense in the network defense system. However, the current quantum identity authentication methods, such as CN109462473A and CN116996221B, have the problem of only being able to transmit single-bit particles, and also consuming quantum gates and quantum bit resources to prepare transmission keys. Summary of the invention
[0003] In view of the problems existing in the prior art, the purpose of the present invention is to provide a quantum identity authentication method and system based on data pre-sharing and entangled state distribution.
[0004] In order to achieve the above-mentioned object of the invention, the present invention provides the following technical solutions:
[0005] A quantum identity authentication method based on data pre-sharing and entangled state distribution includes the following steps:
[0006] (1) The first user terminal and the second user terminal pre-share and store a key sequence including n keys respectively;
[0007] (2) The third party prepares n three-particle entangled states, and forms particle sequences with two different particles in all three-particle entangled states, respectively, and sends them to the first user terminal and the second user terminal, and the remaining particles form particle sequences and are stored locally;
[0008] (3) The first user terminal, the second user terminal and the third party jointly detect whether the channel is eavesdropped. If no eavesdropping occurs, step (4) is executed; otherwise, the process returns to step (2);
[0009] (4) The first user end and the second user end respectively perform modulo-2 processing on each key in the stored key sequence to obtain a binary bit key sequence;
[0010] (5) The first user end and the second user end use the binary bit key sequence as a shift reference to perform phase shift on the received particle sequence, generate a phase-shifted particle sequence, and send it to a third party;
[0011] (6) The first user terminal, the second user terminal and the third party jointly detect whether the channel is eavesdropped. If no eavesdropping occurs, step (7) is executed; otherwise, the process returns to step (2);
[0012] (7) The third party collectively measures the phase-shifted particle sequences sent by the first user terminal and the second user terminal and the particle sequence stored locally. If the measurement results are all positive numbers, it is determined that the identity authentication of the first user terminal and the second user terminal is successful; otherwise, it is determined that the identity authentication fails.
[0013] Furthermore, step (2) specifically includes:
[0014] (2.1) A third party prepares n three-particle entangled states, specifically:
[0015]
[0016] In the formula, represents the i-th three-particle entangled state, d = 2N is the preset dimension, N is a positive integer greater than the threshold, and the keys in the key sequence M are all less than N, |k> 1,i 、|k> 2,i 、|k> 3,i They represent the 1st, 2nd, and 3rd particles in the i-th three-particle entangled state respectively;
[0017] (2.2) Select the second particle |k> from each three-particle entangled state 2,i , forming a sequence SA = {|k> 2,i |i=1,…,n}, and randomly insert decoy photons into the sequence SA to form a particle sequence SA′ and send it to the first user end;
[0018] (2.3) Select the third particle |k> from each three-particle entangled state 3,i , forming a sequence SB = {|k> 3,i |i=1,…,n}, and randomly insert decoy photons into the sequence SB to form a particle sequence SB′ and send it to the second user end;
[0019] (2.4) Select the first particle |k> from each three-particle entangled state 1,i , forming a sequence SC = {|k> 1,i |i=1,…,n} is stored locally.
[0020] Furthermore, step (3) specifically includes:
[0021] (3.1) The first user terminal and the second user terminal publish a confirmation receipt indication after receiving the particles sent by the third party, and the third party publishes the position of the decoy photon and the corresponding measurement basis after receiving the confirmation receipt indication;
[0022] (3.2) The first user end and the second user end respectively take out decoy photons from the received particle sequence according to the positions of the decoy photons to obtain a net particle sequence;
[0023] (3.3) The first user terminal and the second user terminal measure the net particle sequence according to the measurement basis and publish the measurement results. If the measurement error rate is less than a preset threshold, it is determined that eavesdropping has not occurred and step (4) is executed. Otherwise, it is determined that eavesdropping has occurred and the process returns to step (2).
[0024] Furthermore, step (5) specifically includes:
[0025] (5.1) The first user terminal performs phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generates a first phase-shifted particle sequence, which is sent to the third party;
[0026]
[0027] In the formula, |α> i represents the i-th particle in the first phase-shifted particle sequence, sa i represents the i-th particle after the decoy photon is taken out from the particle sequence received by the first user end, d is the preset dimension, θ=2π / d represents the phase, a i represents the i-th key in the key sequence stored by the first user, a′ i represents the i-th key in the binary bit key sequence of the first user terminal;
[0028] (5.2) The second user terminal performs phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generates a second phase-shifted particle sequence, which is sent to the third party;
[0029]
[0030] In the formula, |β> i represents the i-th particle in the second phase-shifted particle sequence, that is, the particle after the i-th particle in the particle sequence received by the second user terminal is phase-shifted, sb i represents the i-th particle after the decoy photon is removed from the particle sequence received by the second user end, b i represents the ith key in the key sequence stored by the second user, b ′ i represents the i-th key in the binary bit key sequence of the second user terminal.
[0031] Furthermore, step (6) specifically includes:
[0032] (6.1) The first user terminal and the second user terminal publish a confirmation receipt indication after receiving the particles sent by the third party, and the third party publishes the corresponding measurement basis after receiving the confirmation receipt indication;
[0033] (6.2) The first user terminal and the second user terminal measure the net particle sequence according to the measurement basis respectively and publish the measurement results. If the measurement error rate is less than the preset threshold, it is determined that eavesdropping has not occurred and step (7) is executed. Otherwise, it is determined that eavesdropping has occurred and the process returns to step (2).
[0034] Furthermore, step (7) specifically includes:
[0035] (7.1) The third party aggregates the phase-shifted particle sequences received from the first user end and the second user end, as well as the locally stored particle sequences, and obtains the n three-particle entangled states to be measured as:
[0036]
[0037] In the formula, is the i-th three-particle entangled state to be measured, d is the preset dimension, θ=2π / d represents the phase, |α> i represents the i-th particle in the first phase-shifted particle sequence sent by the first user, |β> i represents the i-th particle in the second phase-shifted particle sequence sent by the second user end, sc i represents the i-th particle of the particle sequence stored locally by the third party;
[0038] (7.2) According to the following formula Perform collective measurement and obtain the measurement result X i :
[0039]
[0040] (7.3) If X is satisfied i >0, i=1,…,n, it is determined that the identity authentication between the first user terminal and the second user terminal is successful, otherwise it is determined that the identity authentication fails.
[0041] Furthermore, the decoy photon is specifically any one of {|0>,|1>,|+>,|->}.
[0042] A quantum identity authentication system based on data pre-sharing and entangled state distribution includes a first user terminal, a second user terminal and a third party, wherein:
[0043] The first user terminal and the second user terminal respectively include:
[0044] A key pre-sharing module, used to pre-share and store a key sequence containing n keys with other users;
[0045] The eavesdropping detection module is used to detect whether the channel is eavesdropped together with other users and third parties. If eavesdropping occurs, identity authentication is performed again;
[0046] A key processing module, used for performing modulo 2 processing on each key in the stored key sequence to obtain a binary bit key sequence;
[0047] A phase shift module, used to perform phase shift on the received particle sequence based on the binary bit key sequence as a shift reference, generate a phase-shifted particle sequence, and send it to a third party;
[0048] Third parties include:
[0049] A particle sequence preparation module is used to prepare n three-particle entangled states, and form particle sequences with two different particles in all three-particle entangled states, respectively, and send them to the first user terminal and the second user terminal, and the remaining particles form particle sequences and store them locally;
[0050] The collective measurement module is used to collectively measure the phase-shifted particle sequences sent by the first user terminal and the second user terminal and the particle sequence stored locally. If the measurement results are all positive numbers, it is determined that the identity authentication of the first user terminal and the second user terminal is passed, otherwise it is determined that the identity authentication fails.
[0051] Furthermore, the phase shift module of the first user terminal is specifically used to perform phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generate a first phase-shifted particle sequence, and send it to the third party;
[0052]
[0053] In the formula, |α> i represents the i-th particle in the first phase-shifted particle sequence, sa i represents the i-th particle after the decoy photon is taken out from the particle sequence received by the first user end, d is the preset dimension, θ=2π / d represents the phase, a i represents the i-th key in the key sequence stored by the first user, a′ i represents the i-th key in the binary bit key sequence of the first user terminal;
[0054] The phase shift module of the second user terminal is specifically used to perform phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generate a second phase-shifted particle sequence, and send it to a third party;
[0055]
[0056] In the formula, |β> irepresents the i-th particle in the second phase-shifted particle sequence, that is, the particle after the i-th particle in the particle sequence received by the second user terminal is phase-shifted, sb i represents the i-th particle after the decoy photon is removed from the particle sequence received by the second user end, b i represents the ith key in the key sequence stored by the second user, b ′ i represents the ith key in the binary bit key sequence of the second user terminal. Further, the collective measurement module specifically includes:
[0057] The summarizing unit is used to summarize the phase-shifted particle sequences received from the first user end and the second user end, and the particle sequence stored locally, and obtain the n three-particle entangled states to be measured as follows:
[0058]
[0059] In the formula, is the i-th three-particle entangled state to be measured, d is the preset dimension, θ=2π / d represents the phase, |α> i represents the i-th particle in the first phase-shifted particle sequence sent by the first user, |β> i represents the i-th particle in the second phase-shifted particle sequence sent by the second user end, sc i represents the i-th particle of the particle sequence stored locally by the third party;
[0060] Measuring unit for Perform collective measurement and obtain the measurement result X i :
[0061]
[0062] Identity authentication unit, used if X is met i >0, i=1,…,n, it is determined that the identity authentication between the first user terminal and the second user terminal is successful, otherwise it is determined that the identity authentication fails.
[0063] Compared with the prior art, the present invention has the following beneficial effects:
[0064] 1. The present invention designs a quantum identity authentication protocol based on data pre-sharing and entangled state distribution technology. Data pre-sharing means that the two participants have some shared information before the protocol is carried out, and the authenticity of the identities of both parties is determined by verifying whether the information in the hands of both parties is consistent. A semi-honest third party is used as the center of information processing. After the entangled state is prepared, the particle components in it are distributed to both parties. Finally, the phase shift results of the two parties are detected to verify whether they are consistent to authenticate both parties, ensuring the confidentiality of useful information, thereby achieving highly secure information exchange and data transmission;
[0065] 2. In the present invention, both communication parties perform phase shifting on the received particle sequence according to the binary bit key sequence after modulo-2 processing to generate a phase-shifted particle sequence. This operation not only transmits data information but also increases the transmission dimension of information through the change of phase, making the data more private and secure. BRIEF DESCRIPTION OF THE DRAWINGS
[0066] Figure 1 is a schematic flowchart of a quantum identity authentication method based on data pre-sharing and entangled state distribution provided by an embodiment of the present invention;
[0067] Figure 2 is a schematic diagram of entangled state distribution. DETAILED DESCRIPTION OF THE EMBODIMENTS
[0068] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention.
[0069] Embodiment 1
[0070] An embodiment of the present invention provides a quantum identity authentication method based on data pre-sharing and entangled state distribution, as Figure 1 shown, including the following steps:
[0071] S1. The first user terminal and the second user terminal respectively pre-share and store a key sequence including n keys.
[0072] Among them, assume that the first user terminal is Alice, the second user terminal is Bob, both are legitimate user terminals, and the third party is a semi-honest third party Trent, who will strictly execute according to the protocol steps, as Figure 2 shown. The key sequence is pre-shared before the protocol and stored locally. Then the key sequence stored locally by Alice is A = (a1, a2,..., a n ), and the key sequence stored locally by Bob is B = (b1, b2,..., b n ), A = B, 1 < a i , b i < N, i = 1, 2,..., n. However, if it is an eavesdropper or other illegal user, then it cannot know the key sequence and can only use a false sequence C, C ≠ A, C ≠ B. For example, when n = 3, assume that the key sequence pre-shared by Alice and Bob is (2, 3, 7). Then the key sequence stored locally by Alice is A = (a1, a2, a3), a1 = 2, a2 = 3, a3 = 7, and the key sequence stored locally by Bob is B = (b1, b2, b3), b1 = 2, b2 = 3, b3 = 7.
[0073] S2. The third party prepares n three-particle entangled states, and forms particle sequences with two different particles in all three-particle entangled states, respectively, and sends them to the first user terminal and the second user terminal, and the remaining particles form particle sequences and are stored locally.
[0074] In specific implementation, the steps include:
[0075] S21. The third party prepares n three-particle entangled states, specifically:
[0076]
[0077] In the formula, represents the i-th three-particle entangled state, d = 2N is the preset dimension, N is a positive integer greater than the threshold, and the keys in the key sequence M are all less than N, |k> 1,i 、|k> 2,i 、|k> 3,i They represent the 1st, 2nd, and 3rd particles in the i-th three-particle entangled state respectively;
[0078] S22. Select the second particle from each three-particle entangled state |k> 2,i , forming a sequence SA = {|k> 2,i |i=1,…,n}, and randomly insert decoy photons into the sequence SA to form a particle sequence SA′ and send it to the first user end;
[0079] S23. Select the third particle from each three-particle entangled state |k> 3,i , forming a sequence SB = {|k> 3,i |i=1,…,n}, and randomly insert decoy photons into the sequence SB to form a particle sequence SB′ and send it to the second user end;
[0080] S24. Select the first particle |k> from each three-particle entangled state 1,i , forming a sequence SC = {|k> 1,i |i=1,…,n} is stored locally.
[0081] The decoy photon is specifically any one of {|0>,|1>,|+>,|->}.
[0082] S3: The first user terminal, the second user terminal and the third party jointly detect whether the channel is eavesdropped. If no eavesdropping occurs, execute step S4; otherwise, return to execute step S2.
[0083] In specific implementation, the steps include:
[0084] S31, the first user end and the second user end publish a confirmation receipt indication after receiving the particles sent by the third party, and the third party publishes the position of the decoy photon and the corresponding measurement basis after receiving the confirmation receipt indication;
[0085] S32, the first user end and the second user end respectively take out decoy photons from the received particle sequence according to the positions of the decoy photons to obtain a net particle sequence;
[0086] S33, the first user terminal and the second user terminal measure the net particle sequence according to the measurement basis and publish the measurement results. If the measurement error rate is less than the preset threshold, it is determined that eavesdropping has not occurred and step S4 is executed. Otherwise, it is determined that eavesdropping has occurred and the process returns to step S2.
[0087] S4. The first user end and the second user end respectively perform modulo 2 processing on each key in the stored key sequence to obtain a binary bit key sequence.
[0088] Specifically, Alice and Bob respectively perform a n ) and B=(b1,b2,…,b n ) perform the same modulo 2 processing and obtain the results A ′ =(a ′ 1,a ′ 2,…,a ′ n ),B′=(b′1,b′2,…,b′ n ),a ′ i =a i mod 2∈{0,1},b ′ i =b i mod 2∈{0,1}. For example, when A=B=(2,3,7), A ′ =B ′ =(0,1,1). However, the sequence C after modulo 2 processing by other eavesdroppers or illegal users ′ ≠A ′ , C ′ ≠B ′ .
[0089] S5. The first user end and the second user end use the binary bit key sequence as a shift reference to perform phase shift on the received particle sequence, generate a phase-shifted particle sequence, and send it to a third party.
[0090] In specific implementation, the steps include:
[0091] S51, the first user terminal performs phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generates a first phase-shifted particle sequence, and sends it to the third party;
[0092]
[0093] In the formula, |α> i represents the i-th particle in the first phase-shifted particle sequence, sa i represents the i-th particle of the net particle sequence after the decoy photon is removed from the particle sequence received by the first user end, d is the preset dimension, θ=2π / d represents the phase, a i represents the i-th key in the key sequence stored by the first user, a ′ i represents the i-th key in the binary bit key sequence of the first user terminal; according to step S2, sa i =|k> 2,i ,therefore,
[0094] S52, the second user terminal performs phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generates a second phase-shifted particle sequence, and sends it to the third party;
[0095]
[0096] In the formula, |β> i represents the i-th particle in the second phase-shifted particle sequence, that is, the particle after the i-th particle in the particle sequence received by the second user terminal is phase-shifted, sb i represents the i-th particle in the net particle sequence after the decoy photon is removed from the particle sequence received by the second user end, b i represents the ith key in the key sequence stored by the second user, b′ i represents the ith key in the binary bit key sequence of the second user terminal; according to step S2, sb i =|k> 3,i ,therefore,
[0097] S6. The first user terminal, the second user terminal and the third party jointly detect whether the channel is eavesdropped. If no eavesdropping occurs, execute step S7; otherwise, return to execute step S2.
[0098] In specific implementation, the steps include:
[0099] S61, the first user terminal and the second user terminal publish a confirmation receipt indication after receiving particles sent by the third party, and the third party publishes a corresponding measurement basis after receiving the confirmation receipt indication;
[0100] S62, the first user terminal and the second user terminal respectively measure the net particle sequence according to the measurement basis and publish the measurement results. If the measurement error rate is less than the preset threshold, it is determined that eavesdropping has not occurred and step S7 is executed. Otherwise, it is determined that eavesdropping has occurred and the process returns to step S2.
[0101] S7. The third party collectively measures the phase-shifted particle sequences sent by the first user terminal and the second user terminal and the locally stored particle sequence. If the measurement results are all positive numbers, it is determined that the identity authentication of the first user terminal and the second user terminal is successful; otherwise, it is determined that the identity authentication fails.
[0102] In specific implementation, the steps include:
[0103] S71. The third party aggregates the phase-shifted particle sequences received from the first user end and the second user end, as well as the particle sequences stored by itself, to obtain n three-particle entangled states to be measured:
[0104]
[0105] Will sc i =|k> 1,i , substituting into the above formula, we get:
[0106]
[0107] In the formula, is the i-th three-particle entangled state to be measured;
[0108] S72, according to the following formula Perform collective measurement and obtain the measurement result X i :
[0109]
[0110] S73, if X is satisfied i >0, i=1,…,n, it is determined that the identity authentication between the first user terminal and the second user terminal is successful, otherwise it is determined that the identity authentication fails.
[0111] in, For example, Alice and Bob are both legal, then a i =b i ,a ′ i =b ′ i ,but In the results of the measurement is positive, that is, if X i(i=1,…,n) are all positive, then the identity authentication of both parties is successful. If an illegal user C authenticates with a legal user A, then there exists a i ≠c i ,a ′ i ≠c ′ i , then the test result X i If (i=1,…,n) are not all positive, it means that the identity of the participant is not completely legal and the identity authentication is judged to have failed.
[0112] Embodiment 2
[0113] The embodiment of the present invention provides a quantum identity authentication system based on data pre-sharing and entangled state distribution. The system can be implemented in software and / or hardware, and the system can be configured in a terminal device. The system includes: a first user terminal, a second user terminal and a third party.
[0114] The first user terminal and the second user terminal respectively include:
[0115] A key pre-sharing module, used to pre-share and store a key sequence containing n keys with other users;
[0116] The eavesdropping detection module is used to detect whether the channel is eavesdropped together with other users and third parties. If eavesdropping occurs, identity authentication is performed again;
[0117] A key processing module, used for performing modulo 2 processing on each key in the stored key sequence to obtain a binary bit key sequence;
[0118] The phase shift module is used to perform phase shift on the received particle sequence based on the binary bit key sequence as a shift reference, generate a phase-shifted particle sequence, and send it to a third party.
[0119] Third parties include:
[0120] A particle sequence preparation module is used to prepare n three-particle entangled states, and form particle sequences with two different particles in all three-particle entangled states, respectively, and send them to the first user terminal and the second user terminal, and the remaining particles form particle sequences and store them locally;
[0121] The collective measurement module is used to collectively measure the phase-shifted particle sequences sent by the first user terminal and the second user terminal and the particle sequence stored locally. If the measurement results are all positive numbers, it is determined that the identity authentication of the first user terminal and the second user terminal is passed, otherwise it is determined that the identity authentication fails.
[0122] The phase shift module of the first user terminal is specifically used to perform phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generate a first phase-shifted particle sequence, which is sent to a third party;
[0123]
[0124] In the formula, |α> i represents the i-th particle in the first phase-shifted particle sequence, sa i represents the i-th particle after the decoy photon is taken out from the particle sequence received by the first user end, d is the preset dimension, θ=2π / d represents the phase, a i represents the i-th key in the key sequence stored by the first user, a′ i represents the i-th key in the binary bit key sequence of the first user terminal;
[0125] The phase shift module of the second user terminal is specifically used to perform phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generate a second phase-shifted particle sequence, and send it to a third party;
[0126]
[0127] In the formula, |β> i represents the i-th particle in the second phase-shifted particle sequence, that is, the particle after the i-th particle in the particle sequence received by the second user terminal is phase-shifted, sb i represents the i-th particle after the decoy photon is removed from the particle sequence received by the second user end, b i represents the ith key in the key sequence stored by the second user, b′ i represents the i-th key in the binary bit key sequence of the second user terminal.
[0128] Wherein, the collective measurement module specifically includes:
[0129] The summarizing unit is used to summarize the phase-shifted particle sequences received from the first user end and the second user end, and the particle sequence stored locally, and obtain the n three-particle entangled states to be measured as follows:
[0130]
[0131] In the formula, is the i-th three-particle entangled state to be measured, d is the preset dimension, θ=2π / d represents the phase, |α> i represents the i-th particle in the first phase-shifted particle sequence sent by the first user, |β> i represents the i-th particle in the second phase-shifted particle sequence sent by the second user end, sci represents the i-th particle of the particle sequence stored locally by the third party;
[0132] Measuring unit for Perform collective measurement and obtain the measurement result X i :
[0133]
[0134] Identity authentication unit, used if X is met i >0, i=1,…,n, it is determined that the identity authentication between the first user terminal and the second user terminal is successful, otherwise it is determined that the identity authentication fails.
[0135] The system provided in the embodiment of the present invention can be used to execute the method provided in the first embodiment of the present invention, and has the corresponding functions and beneficial effects of the execution method. For details not detailed, please refer to the first embodiment and will not be repeated.
[0136] It is worth noting that in the embodiment of the above system, the various units and modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.
[0137] The embodiments described above are only illustrative, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, i.e., they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, or of course, it can be implemented only by hardware, as long as the function or effect can be achieved.
Claims
1. A quantum identity authentication method based on data pre-sharing and entangled state distribution, characterized in that: The steps include: (1) The first user terminal and the second user terminal pre-share and store a key sequence including n keys respectively; (2) The third party prepares n three-particle entangled states, and forms particle sequences with two different particles in all three-particle entangled states, respectively, and sends them to the first user terminal and the second user terminal, and the remaining particles form particle sequences and are stored locally; (3) The first user terminal, the second user terminal and the third party jointly detect whether the channel is eavesdropped. If no eavesdropping occurs, step (4) is executed; otherwise, the process returns to step (2); (4) The first user end and the second user end respectively perform modulo-2 processing on each key in the stored key sequence to obtain a binary bit key sequence; (5) The first user end and the second user end use the binary bit key sequence as a shift reference to perform phase shift on the received particle sequence, generate a phase-shifted particle sequence, and send it to a third party; (6) The first user terminal, the second user terminal and the third party jointly detect whether the channel is eavesdropped. If no eavesdropping occurs, step (7) is executed; otherwise, the process returns to step (2); (7) The third party collectively measures the phase-shifted particle sequences sent by the first user terminal and the second user terminal and the particle sequence stored locally. If the measurement results are all positive numbers, it is determined that the identity authentication of the first user terminal and the second user terminal is successful; otherwise, it is determined that the identity authentication fails.
2. The quantum identity authentication method based on data pre-sharing and entangled state distribution according to claim 1 is characterized in that: Step (2) specifically includes: (2.1) A third party prepares n three-particle entangled states, specifically: In the formula, represents the i-th three-particle entangled state, d = 2N is the preset dimension, N is a positive integer greater than the threshold, and the keys in the key sequence M are all less than N, |k> 1,i 、|k> 2,i 、|k> 3,i They represent the 1st, 2nd, and 3rd particles in the i-th three-particle entangled state respectively; (2.2) Select the second particle |k> from each three-particle entangled state 2,i , forming a sequence SA = {|k> 2,i |i=1,…,n}, and randomly insert decoy photons into the sequence SA to form a particle sequence SA′ and send it to the first user end; (2.3) Select the third particle |k> from each three-particle entangled state 3,i , forming a sequence SB = {|k> 3,i |i=1,…,n}, and randomly insert decoy photons into the sequence SB to form a particle sequence SB′ and send it to the second user end; (2.4) Select the first particle |k> from each three-particle entangled state 1,i , forming a sequence SC = {|k> 1,i |i=1,…,n} is stored locally.
3. The quantum identity authentication method based on data pre-sharing and entangled state distribution according to claim 1 is characterized in that: Step (3) specifically includes: (3.1) The first user terminal and the second user terminal publish a confirmation receipt indication after receiving the particles sent by the third party, and the third party publishes the position of the decoy photon and the corresponding measurement basis after receiving the confirmation receipt indication; (3.2) The first user end and the second user end respectively take out decoy photons from the received particle sequence according to the positions of the decoy photons to obtain a net particle sequence; (3.3) The first user terminal and the second user terminal measure the net particle sequence according to the measurement basis and publish the measurement results. If the measurement error rate is less than a preset threshold, it is determined that eavesdropping has not occurred and step (4) is executed. Otherwise, it is determined that eavesdropping has occurred and the process returns to step (2).
4. The quantum identity authentication method based on data pre-sharing and entangled state distribution according to claim 1 is characterized in that: Step (5) specifically includes: (5.1) The first user terminal performs phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generates a first phase-shifted particle sequence, which is sent to the third party; In the formula, |α> i represents the i-th particle in the first phase-shifted particle sequence, sa i represents the i-th particle after the decoy photon is taken out from the particle sequence received by the first user end, d is the preset dimension, θ=2π / d represents the phase, a i represents the i-th key in the key sequence stored by the first user, a′ i represents the i-th key in the binary bit key sequence of the first user terminal; (5.2) The second user terminal performs phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generates a second phase-shifted particle sequence, which is sent to the third party; In the formula, |β> i represents the i-th particle in the second phase-shifted particle sequence, that is, the particle after the i-th particle in the particle sequence received by the second user terminal is phase-shifted, sb i represents the i-th particle after the decoy photon is removed from the particle sequence received by the second user end, b i represents the ith key in the key sequence stored by the second user, b′ i represents the i-th key in the binary bit key sequence of the second user terminal.
5. The quantum identity authentication method based on data pre-sharing and entangled state distribution according to claim 1 is characterized in that: Step (6) specifically includes: (6.1) The first user terminal and the second user terminal publish a confirmation receipt indication after receiving the particles sent by the third party, and the third party publishes the corresponding measurement basis after receiving the confirmation receipt indication; (6.2) The first user terminal and the second user terminal measure the net particle sequence according to the measurement basis respectively and publish the measurement results. If the measurement error rate is less than the preset threshold, it is determined that eavesdropping has not occurred and step (7) is executed. Otherwise, it is determined that eavesdropping has occurred and the process returns to step (2).
6. The quantum identity authentication method based on data pre-sharing and entangled state distribution according to claim 1 is characterized in that: Step (7) specifically includes: (7.1) The third party aggregates the phase-shifted particle sequences received from the first user end and the second user end, as well as the locally stored particle sequences, and obtains the n three-particle entangled states to be measured as: In the formula, is the i-th three-particle entangled state to be measured, d is the preset dimension, θ=2π / d represents the phase, |α> i represents the i-th particle in the first phase-shifted particle sequence sent by the first user, |β> i represents the i-th particle in the second phase-shifted particle sequence sent by the second user end, sc i represents the i-th particle of the particle sequence stored locally by the third party; (7.2) According to the following formula Perform collective measurement and obtain the measurement result X i : (7.3) If X is satisfied i >0, i=1,…,n, it is determined that the identity authentication between the first user terminal and the second user terminal is successful, otherwise it is determined that the identity authentication fails.
7. The quantum identity authentication method based on data pre-sharing and entangled state distribution according to claim 2 is characterized in that: The decoy photon is specifically any one of {|0>,|1>,|+>,|->}.
8. A quantum identity authentication system based on data pre-sharing and entangled state distribution, characterized in that: It includes a first user terminal, a second user terminal and a third party, wherein: The first user terminal and the second user terminal respectively include: A key pre-sharing module, used to pre-share and store a key sequence containing n keys with other users; The eavesdropping detection module is used to detect whether the channel is eavesdropped together with other users and third parties. If eavesdropping occurs, identity authentication is performed again; A key processing module, used for performing modulo 2 processing on each key in the stored key sequence to obtain a binary bit key sequence; A phase shift module, used to perform phase shift on the received particle sequence based on the binary bit key sequence as a shift reference, generate a phase-shifted particle sequence, and send it to a third party; Third parties include: A particle sequence preparation module is used to prepare n three-particle entangled states, and form particle sequences with two different particles in all three-particle entangled states, respectively, and send them to the first user terminal and the second user terminal, and the remaining particles form particle sequences and store them locally; The collective measurement module is used to collectively measure the phase-shifted particle sequences sent by the first user terminal and the second user terminal and the particle sequence stored locally. If the measurement results are all positive numbers, it is determined that the identity authentication of the first user terminal and the second user terminal is passed, otherwise it is determined that the identity authentication fails.
9. The quantum identity authentication system based on data pre-sharing and entangled state distribution according to claim 8 is characterized in that: The phase shift module of the first user terminal is specifically used to perform phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generate a first phase-shifted particle sequence, and send it to a third party; In the formula, |α> i represents the i-th particle in the first phase-shifted particle sequence, sa i represents the i-th particle after the decoy photon is taken out from the particle sequence received by the first user end, d is the preset dimension, θ=2π / d represents the phase, a i represents the i-th key in the key sequence stored by the first user, a′ i represents the i-th key in the binary bit key sequence of the first user terminal; The phase shift module of the second user terminal is specifically used to perform phase shift on each particle in the received particle sequence according to the following formula based on the local binary bit key sequence, and generate a second phase-shifted particle sequence, and send it to a third party; In the formula, |β> i represents the i-th particle in the second phase-shifted particle sequence, that is, the particle after the i-th particle in the particle sequence received by the second user terminal is phase-shifted, sb i represents the i-th particle after the decoy photon is removed from the particle sequence received by the second user end, b i represents the ith key in the key sequence stored by the second user, b′ i represents the i-th key in the binary bit key sequence of the second user terminal.
10. The quantum identity authentication system based on data pre-sharing and entangled state distribution according to claim 8, characterized in that: The collective measurement module specifically includes: The summarizing unit is used to summarize the phase-shifted particle sequences received from the first user end and the second user end, and the particle sequence stored locally, and obtain the n three-particle entangled states to be measured as follows: In the formula, is the i-th three-particle entangled state to be measured, d is the preset dimension, θ=2π / d represents the phase, |α> i represents the i-th particle in the first phase-shifted particle sequence sent by the first user, |β> i represents the i-th particle in the second phase-shifted particle sequence sent by the second user end, sc i represents the i-th particle of the particle sequence stored locally by the third party; Measuring unit for Perform collective measurement and obtain the measurement result X i : Identity authentication unit, used if X is met i >0, i=1,…,n, it is determined that the identity authentication between the first user terminal and the second user terminal is successful, otherwise it is determined that the identity authentication fails.
Citation Information
Cited By
Quantum security vector dominance judgment method based on privacy protection
CN119602958A
