Lightweight identity authentication method, system and device based on quantum key and medium

Abstract

The invention discloses a lightweight identity authentication method based on a quantum key, relates to the technical field of quantum encryption technologies, and is used for solving the problems that an existing novel power system is large in calculation overhead and insufficient in authentication encryption security coefficient, and the method comprises the following steps: a quantum cryptography service platform charges a plurality of novel power terminals with quantum keys; an identity key pool is shared by charging, and identity authentication is carried out; if the authentication is passed, a shared encryption and decryption key pool is charged, and meanwhile, the novel power terminal initiates dynamic negotiation with encryption service data of the power master control platform to obtain a data encryption key and a data signature key; original data signature is carried out through the data signature key, and encryption transmission is carried out on the original data and the signed original data through the data encryption key. The invention also discloses a lightweight identity authentication system based on the quantum key, electronic equipment and a computer storage medium. According to the invention, the security of data transmission is ensured through dynamic data encryption key negotiation.

Description

Technical Field

[0001] The present invention relates to the field of quantum encryption technology, and in particular to a quantum key-based lightweight identity authentication method, system, device and medium for power business. Background Art

[0002] At present, new technologies such as mobile Internet, Internet of Things and cloud computing have been widely used in power monitoring systems, which help improve the efficiency of power production control. However, with the rapid development of artificial intelligence and quantum computing capabilities, the power system faces new security risks and threats such as data leakage and tampering.

[0003] With the wide application and continuous expansion of the Internet of Things, the research on lightweight authenticated cryptographic protocols has attracted the attention of more and more researchers, and corresponding schemes have been designed for different Internet of Things environments. In recent years, in order to ensure the communication overhead and storage overhead in the key establishment phase and the information can be safely and reliably transmitted between smart grid wireless sensor nodes, some lightweight key agreements have been proposed one after another. Such as key management schemes based on symmetric encryption and elliptic curve systems; key establishment schemes based on key graphs; anonymous key agreement schemes based on bilinear pairing, smart grid network authentication schemes based on Diffie-Hellman, etc. In addition, in 2017, Bai Haohao proposed a certificateless lightweight key agreement method combining ECDH and one-way hash key chain technology to achieve secure communication of acquisition instructions and data, user identity authentication, and effectively reduce the communication and computational overhead of key agreement. In 2019, Xu Zhen et al. proposed a sequence-based key management scheme for wireless sensor networks. In 2020, Kang Wenyang et al. designed an island microgrid key agreement protocol based on a two-party key agreement protocol based on a public key cryptography system. In 2022, Huang Fanglin et al. proposed a lightweight key management method based on dynamic polynomials of coefficient cyclic chains.

[0004] Compared with the certificate system, the above method effectively reduces the communication overhead, but it is still based on an asymmetric key system, requires a certain amount of computing overhead, and relies on strong hardware resources during the engineering process.

[0005] At present, in order to ensure safe access, the new power system has put forward requirements for lightweight authentication and digital identity management for the energy industry. It is necessary to build a security protection system based on quantum fusion cryptography, and study key technologies such as lightweight authentication, key negotiation, and high-performance encryption and decryption services based on quantum cryptography to achieve lightweight authentication and encryption based on quantum encryption in the new power system. Summary of the invention

[0006] In order to overcome the shortcomings of the prior art, one of the objectives of the present invention is to provide a lightweight identity authentication method based on quantum key, which completes the secure transmission of information through dynamic data encryption.

[0007] One of the purposes of the present invention is achieved by the following technical solution:

[0008] A lightweight identity authentication method based on quantum key, comprising the following steps:

[0009] The quantum cryptography service platform injects quantum keys into a number of new power terminals, and the quantum keys are stored in the identity key pool and the encryption and decryption key pool respectively;

[0010] The new power terminal and the power main control platform are charged with a shared identity key pool and perform identity authentication;

[0011] After the authentication is passed, the new power terminal and the power main control platform share an encryption and decryption key pool by charging, and at the same time, the new power terminal initiates dynamic negotiation of encryption business data with the power main control platform to obtain data encryption keys and data signature keys;

[0012] The novel power terminal signs the original data by using the data signature key, and encrypts and transmits the original data and the signed original data by using the data encryption key.

[0013] Furthermore, each of the novel power terminals is charged with a different quantum key, and each quantum key includes a key identifier and an offset for key positioning and identification.

[0014] Furthermore, the novel power terminal initiates authentication to the power main control platform through a two-way authentication mechanism, including the following steps:

[0015] The new power terminal initiates the first identity authentication and sends the first frame token to the power main control platform, which is encrypted with the key in the identity key pool before sending;

[0016] The power master control platform calls the quantum cryptography service platform API interface to perform identity authentication according to the first frame token;

[0017] After the verification is passed, the power control platform generates a second frame token and sends it to the new power terminal;

[0018] The new power terminal calls the quantum cryptography service platform API interface to perform a second identity authentication.

[0019] Furthermore, the first frame token includes: a timestamp, a key identifier, an offset M, an electric power master control platform identifier, and integrity check information;

[0020] The second frame token includes: a timestamp, a key identifier, an offset N, a new power terminal identifier, integrity check information, and a session key.

[0021] Furthermore, the novel power terminal initiates dynamic negotiation of encrypted business data with the power master control platform to obtain a data encryption key and a data signature key, including:

[0022] The novel power terminal obtains a key from the encryption and decryption key pool, and combines the key identifier, key pool offset and random number N of the key A Sending to the power master control platform;

[0023] The power master control platform calls the quantum cryptography service platform API interface to determine the key validity according to the key identifier;

[0024] When it is judged to be valid, the power control platform will judge the result and the random number N B Feedback to the novel power terminal;

[0025] The novel power terminal and the power main control platform calculate the data encryption key and the data signature key through a preset key calculation function.

[0026] Furthermore, the key calculation function is HMAC-SM3, which calculates the data encryption key and the data signature key, including:

[0027] Select a quantum key K with an offset of P from the encryption and decryption key pool. orc ;

[0028] Calculate the data encryption key: K enc =HMAC-SM3(K orc ,N A ||N B || "ENC");

[0029] Calculate the key in front of the data: K sm3 =HMAC-SM3(K orc ,N A ||N B || "SM3").

[0030] Furthermore, the original data includes power control protocol messages and information security protocol messages.

[0031] The second object of the present invention is to provide a lightweight identity authentication system based on quantum keys, which includes: a quantum cryptography service platform, a power master control platform and several new power terminals.

[0032] The third object of the present invention is to provide an electronic device for performing one of the objects of the invention, which includes a processor, a storage medium and a computer program, wherein the computer program is stored in the storage medium, and when the computer program is executed by the processor, the above-mentioned lightweight identity authentication method based on quantum key is implemented.

[0033] A fourth object of the present invention is to provide a computer-readable storage medium storing one of the objects of the invention, on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned lightweight identity authentication method based on quantum key is implemented.

[0034] Compared with the prior art, the present invention has the following beneficial effects:

[0035] The present invention provides encryption and decryption services and key distribution services for new power terminals and power main control platforms through a quantum cryptography service platform, which has no impact on the original network architecture, is flexible in application, easy to expand, easy to deploy and verify, and can achieve deep security protection; in addition, the present invention adopts an identity authentication and key negotiation mechanism based on symmetric keys. Compared with the traditional PKI system, the key management is simple, the cryptographic operation requires fewer resources, and the mechanism is relatively lightweight; the present invention also adopts dynamic data encryption key negotiation for data transmission, and a dynamic negotiation mechanism based on a large-volume quantum key pool for key injection can ensure the true randomness of the key. The terminal's quantum key security storage is strictly protected by a security chip, and the data encryption key is dynamically negotiated each time to ensure the risk of the injected quantum key being attacked. At the same time, business data encryption can be achieved with "one key at a time", realizing lightweight authentication encryption based on quantum encryption in the new power system. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 Flow chart of a lightweight identity authentication method based on quantum key according to Embodiment 1;

[0037] Figure 2 is a schematic diagram of the identity authentication mechanism of Example 1;

[0038] Figure 3 is a schematic diagram of a lightweight identity authentication system based on quantum key according to Embodiment 2;

[0039] Figure 4 It is a structural block diagram of an electronic device of Embodiment 3. DETAILED DESCRIPTION

[0040] The present invention will be described in more detail below in conjunction with the accompanying drawings. It should be noted that the following description of the present invention with reference to the accompanying drawings is only illustrative and not restrictive. The various embodiments can be combined with each other to form other embodiments not shown in the following description.

[0041] Embodiment 1

[0042] Embodiment 1 provides a lightweight identity authentication method based on quantum keys, aiming to realize key issuance and verification through a quantum cryptography service platform, and complete secure information transmission through dynamic data negotiation.

[0043] This embodiment introduces a quantum cryptography service platform to fill a large number of quantum keys into the quantum encryption module. The quantum keys include an identity key pool and an encryption and decryption key pool. The quantum encryption module securely stores the quantum keys through a security chip.

[0044] Please refer to Figure 1 As shown, a lightweight identity authentication method based on quantum key includes the following steps:

[0045] S1. The quantum cryptography service platform injects quantum keys into a number of new power terminals, and the quantum keys are stored in the identity key pool and the encryption and decryption key pool respectively;

[0046] The above-mentioned quantum cryptography service platform is not limited in this embodiment, and any cryptographic platform that can generate quantum keys and verify the keys can be used as the quantum cryptography service platform of this embodiment.

[0047] Each of the new power terminals is charged with a different quantum key, and each quantum key includes a key identifier and an offset for key location and identification. Specifically, the quantum key is a key source generated by a quantum random number generator or a quantum key distribution device. Each quantum key pool has a unique identifier KeyID, and each new power terminal is charged with a different quantum key to distinguish different new power terminals. The key can be determined by the offset to determine which specific key in the key pool corresponds to.

[0048] After S1 charging is completed, the new power terminal and quantum cryptography service platform have the same quantum identity key pool and quantum encryption and decryption key pool.

[0049] S2. The new power terminal and the power main control platform charge and share an identity key pool and perform identity authentication;

[0050] S2 Specifically, the new power terminal initiates authentication to the power main control platform through a two-way authentication mechanism, including the following steps:

[0051] The new power terminal initiates the first identity authentication and sends the first frame token to the power main control platform, which is encrypted with the key in the identity key pool before sending;

[0052] The power master control platform calls the quantum cryptography service platform API interface to perform identity authentication according to the first frame token;

[0053] After the verification is passed, the power control platform generates a second frame token and sends it to the new power terminal;

[0054] The new power terminal calls the quantum cryptography service platform API interface to perform a second identity authentication.

[0055] The first frame token includes: timestamp, key identifier, offset M, power master control platform identifier, and integrity check information;

[0056] The second frame token includes: a timestamp, a key identifier, an offset N, a new power terminal identifier, integrity check information, and a session key.

[0057] Please refer to Figure 2 The schematic diagram of the identity authentication mechanism shown in the figure shows that A is the identity key pool and B is the encryption and decryption key pool. AB Token is the first frame token. BA It is the token of the second frame.

[0058] Specifically, the new power terminal and the new power control platform share a common quantum key pool A before starting the specific operation of the authentication mechanism. By agreeing on the offset M of the key pool, a shared quantum key K is selected from the quantum key pool A. AB ,The cryptographic operations that the power main control platform needs to perform are executed by calling the quantum cryptography service platform interface.

[0059] Please refer to the following instructions for specific transmission formats:

[0060] The first frame transmits the content Token AB =T A N A ||Text2|f KAB (T A N A ||ID B ||Text1)

[0061] The second frame transmits the content Token BA =T B N B ||Text4||f KAB (T B N B ||ID A ||Text3)

[0062] The descriptions of the above parameters are as follows:

[0063] First frame token:

[0064] Comparison Items Description of the protocol design of this solution <![CDATA[T A N A ]]> Fill in the timestamp as the time-varying parameter. <![CDATA[Text2]]> <![CDATA[Fill in the shared quantum key pool identifier KeyID A , offset M, ciphertext length and other information.]]> <![CDATA[f KAB ]]> Key verification function, calculated using SM4-CBC algorithm. <![CDATA[T A N A ]]> <![CDATA[Fill in the timestamp as a time-varying parameter and use K for encryption during transmission.]]> AB > <![CDATA[ID B ]]> <![CDATA[Fill in the identifier of device B and use K for transmission AB Encrypt.]]> <![CDATA[Text1]]> <![CDATA[Fill in integrity verification information, etc., and use K for encryption when transmitting.]]> AB >

[0065] Second frame token:

[0066]

[0067]

[0068] S3. After the authentication is passed, the new power terminal and the power main control platform share an encryption and decryption key pool by charging, and at the same time, the new power terminal initiates dynamic negotiation of encryption business data with the power main control platform to obtain data encryption keys and data signature keys;

[0069] The above dynamic data encryption key negotiation, after the new power terminal and the power main control platform complete the two-way identity authentication, the new power terminal and the power main control platform share a common encryption and decryption quantum key pool B by filling, and the new power terminal initiates the dynamic negotiation process of the encryption key of the encrypted business data to the power main control platform, carrying the parameter KeyID of the quantum encryption and decryption key pool B B Identify and key pool offset P and random number N A The new power master control platform determines the KeyID by calling the quantum cryptography service platform B The validity of the key pool B of the new power terminal decryption key ID B , the offset P of the key pool and the random number N B To the new power terminal. Both parties calculate the final data encryption key and data signature key through the key calculation function F.

[0070] Specifically, the new power terminal in S3 initiates dynamic negotiation of encrypted business data with the power master control platform to obtain a data encryption key and a data signature key, including:

[0071] The novel power terminal obtains a key from the encryption and decryption key pool, and combines the key identifier, key pool offset and random number N of the key. A Sending to the power master control platform;

[0072] The power master control platform calls the quantum cryptography service platform API interface to determine the key validity according to the key identifier;

[0073] When it is judged to be valid, the power control platform will judge the result and the random number N B Feedback to the novel power terminal;

[0074] The novel power terminal and the power main control platform calculate the data encryption key and the data signature key through a preset key calculation function.

[0075] In this embodiment, the key calculation function is HMAC-SM3. When selecting the actual function, other encryption functions can also be selected. Calculating the data encryption key and the data signature key includes:

[0076] Select a quantum key K with an offset of P from the encryption and decryption key pool. orc ;

[0077] Calculate the data encryption key: K enc =HMAC-SM3(K orc ,N A ||N B || "ENC");

[0078] Calculate the key in front of the data: K sm3 =HMAC-SM3(K orc ,N A ||N B || "SM3").

[0079] The above-mentioned "ENC" and "SM3" are both fixed strings with specific meanings. When the HMAC-SM3 function is calculated, a combination of fixed content and random content is used. The above-mentioned "ENC" and "SM3" are fixed contents to avoid two keys being the same.

[0080] S4. The new power terminal signs the original data using the data signature key, and encrypts and transmits the original data and the signed original data using the data encryption key.

[0081] Specifically, in S4, this embodiment adds identity authentication, key negotiation and business data encryption messages on the basis of existing protocol messages. On the basis of existing power control protocol messages, information security protocol layer messages are added, and quantum encryption uses the method of encrypting the entire data to ensure the security and efficiency of information and data transmission.

[0082] The following describes the added message format.

[0083] The formats of the added identity authentication, key negotiation, and service data encryption messages are as follows:

[0084] Identity authentication message format:

[0085]

[0086] Key negotiation message format

[0087]

[0088] Business data encryption message format

[0089]

[0090] The above 7F, 7D, 7E, 1D, 1E, and 1F are self-defined formats, and specific content can be set according to actual conditions, such as as identity authentication messages or key negotiation, and final service data encryption and decryption message formats.

[0091] The following is a further description of the byte meanings of the above message format:

[0092] Identity authentication message format:

[0093]

[0094] in:

[0095] The message header 7F7D indicates an identity authentication message.

[0096] The message length (two bytes, high bit first) and checksum both refer to the data from the message length to the checksum; the same applies below, with high bit first.

[0097] The authentication ciphertext is the ciphertext encrypted by the quantum key. The plaintext data before encryption is the timestamp and the identifier of device B.

[0098] Key negotiation message format

[0099]

[0100] in:

[0101] The message header 7F7E indicates a key negotiation message.

[0102] The message length (two bytes, high bit first) and checksum both refer to the data from the message length to the checksum; the same applies below, with high bit first.

[0103] Timestamp, mainly used to prevent replay attacks.

[0104] The key pool ID refers to the ID of the data encryption key pool.

[0105] The offset refers to the key of the data encryption key pool offset P used by the original quantum key negotiated this time.

[0106] Business data encryption message format

[0107]

[0108] in:

[0109] The message header 7F7F indicates a quantum encrypted message.

[0110] The message length (two bytes, high bit first) and checksum both refer to the data from the message length to the checksum; the same applies below, with high bit first.

[0111] The key pool ID refers to the ID of the data encryption key pool.

[0112] Original plaintext, plaintext data in its original form.

[0113] Plain text signature data: refers to the signature data after the original plain text data is encrypted by the signature key

[0114] Quantum encrypted ciphertext: refers to the ciphertext data after the original plaintext and plaintext signature data are encrypted by the data encryption key.

[0115] It should be noted that steps S1 and S2 use identity authentication message format, step S3 uses key negotiation message format, and step S4 uses service data encryption message format.

[0116] Embodiment 2

[0117] Embodiment 2 discloses a lightweight identity authentication system based on quantum key corresponding to the above embodiment, which is a virtual device structure of the above embodiment. Please refer to Figure 3 As shown, including:

[0118] Quantum cryptography service platform, (new) power master control platform and several new power terminals.

[0119] The system uses the quantum cryptography service platform to charge a large number of quantum keys into the quantum encryption module. The quantum keys include the identity key pool and the encryption and decryption key pool. The quantum encryption module stores the quantum keys securely through the security chip. The quantum encryption module is inserted into the new power terminal, or the new power terminal is embedded with the quantum encryption module. The quantum cryptography service platform directly charges the embedded quantum encryption module.

[0120] The new power control platform implements identity authentication and encryption and decryption services by calling the quantum cryptography service platform API interface. The new power terminal and the new power control platform complete the identity authentication and encryption and decryption key negotiation through dynamic parameter negotiation.

[0121] The system performs the following steps when it is running:

[0122] The quantum cryptography service platform injects quantum keys into a number of new power terminals, and the quantum keys are stored in the identity key pool and the encryption and decryption key pool respectively;

[0123] The new power terminal and the power main control platform are charged with a shared identity key pool and perform identity authentication;

[0124] After the authentication is passed, the new power terminal and the power main control platform share an encryption and decryption key pool by charging, and at the same time, the new power terminal initiates dynamic negotiation of encryption business data with the power main control platform to obtain data encryption keys and data signature keys;

[0125] The novel power terminal signs the original data by using the data signature key, and encrypts and transmits the original data and the signed original data by using the data encryption key.

[0126] Embodiment 3

[0127] Figure 4 A schematic diagram of the structure of an electronic device provided in Embodiment 6 of the present invention is shown in FIG. Figure 4 As shown, the electronic device includes a processor 210, a memory 220, an input device 230 and an output device 240; the number of processors 210 in the computer device can be one or more. Figure 4 A processor 210 is taken as an example; the processor 210, the memory 220, the input device 230 and the output device 240 in the electronic device can be connected via a bus or other means. Figure 4 The example of connecting through bus is taken in the following.

[0128] The memory 220 is a computer-readable storage medium that can be used to store software programs, computer executable programs, and modules. The processor 210 executes various functional applications and data processing of the electronic device by running the software programs, instructions, and modules stored in the memory 220, that is, to implement the lightweight identity authentication method based on quantum key in the above-mentioned embodiment 1.

[0129] The memory 220 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal, etc. In addition, the memory 220 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 220 may further include a memory remotely arranged relative to the processor 210, and these remote memories may be connected to the electronic device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0130] The input device 230 may be used to receive input user identity information, quantum keys, random numbers, etc. The output device 240 may include a display device such as a display screen.

[0131] Embodiment 4

[0132] Embodiment 4 of the present invention further provides a storage medium containing computer executable instructions, which can be used for a computer to execute a lightweight identity authentication method based on a quantum key, the method comprising:

[0133] The quantum cryptography service platform injects quantum keys into a number of new power terminals, and the quantum keys are stored in the identity key pool and the encryption and decryption key pool respectively;

[0134] The new power terminal and the power main control platform are charged with a shared identity key pool and perform identity authentication;

[0135] After the authentication is passed, the new power terminal and the power main control platform share an encryption and decryption key pool by charging, and at the same time, the new power terminal initiates dynamic negotiation of encryption business data with the power main control platform to obtain data encryption keys and data signature keys;

[0136] The novel power terminal signs the original data by using the data signature key, and encrypts and transmits the original data and the signed original data by using the data encryption key.

[0137] Of course, the storage medium containing computer executable instructions provided in an embodiment of the present invention, whose computer executable instructions are not limited to the method operations described above, can also execute related operations in the lightweight identity authentication method based on quantum key provided in any embodiment of the present invention.

[0138] Through the above description of the implementation methods, the technicians in the relevant field can clearly understand that the present invention can be implemented by means of software and necessary general hardware, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for an electronic device (which can be a mobile phone, a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention.

[0139] For those skilled in the art, various other corresponding changes and deformations can be made according to the technical solutions and concepts described above, and all of these changes and deformations should fall within the protection scope of the claims of the present invention.

Claims

1. A lightweight identity authentication method based on quantum key, characterized in that: The following steps are involved: The quantum cryptography service platform injects quantum keys into a number of new power terminals, and the quantum keys are stored in the identity key pool and the encryption and decryption key pool respectively; The new power terminal and the power main control platform are charged with a shared identity key pool and perform identity authentication; After the authentication is passed, the new power terminal and the power main control platform share an encryption and decryption key pool by charging, and at the same time, the new power terminal initiates dynamic negotiation of encryption business data with the power main control platform to obtain data encryption keys and data signature keys; The novel power terminal signs the original data by using the data signature key, and encrypts and transmits the original data and the signed original data by using the data encryption key.

2. The lightweight identity authentication method based on quantum key according to claim 1, characterized in that: Each of the novel power terminals is charged with a different quantum key, and each quantum key includes a key identifier and an offset for key positioning and identification.

3. The lightweight identity authentication method based on quantum key according to claim 1, characterized in that: The novel power terminal initiates authentication to the power main control platform through a two-way authentication mechanism, including the following steps: The new power terminal initiates the first identity authentication and sends the first frame token to the power main control platform, which is encrypted with the key in the identity key pool before sending; The power master control platform calls the quantum cryptography service platform API interface to perform identity authentication according to the first frame token; After the verification is passed, the power control platform generates a second frame token and sends it to the new power terminal; The new power terminal calls the quantum cryptography service platform API interface to perform a second identity authentication.

4. The lightweight identity authentication method based on quantum key according to claim 3, characterized in that: The first frame token includes: timestamp, key identifier, offset M, power master control platform identifier, and integrity check information; The second frame token includes: a timestamp, a key identifier, an offset N, a new power terminal identifier, integrity check information, and a session key.

5. The lightweight identity authentication method based on quantum key according to claim 1, characterized in that: The novel power terminal initiates dynamic negotiation of encrypted business data with the power master control platform to obtain a data encryption key and a data signature key, including: The novel power terminal obtains a key from the encryption and decryption key pool, and combines the key identifier, key pool offset and random number N of the key A Sending to the power master control platform; The power master control platform calls the quantum cryptography service platform API interface to determine the key validity according to the key identifier; When it is judged to be valid, the power control platform will judge the result and the random number N B Feedback to the novel power terminal; The novel power terminal and the power main control platform calculate the data encryption key and the data signature key through a preset key calculation function.

6. The lightweight identity authentication method based on quantum key according to claim 5, characterized in that: The key calculation function is HMAC-SM3, which calculates the data encryption key and the data signature key, including: Select a quantum key K with an offset of P from the encryption and decryption key pool. orc ; Calculate the data encryption key: K enc =HMAC-SM3(K orc ,N A ||N B ||"ENC"); Calculate the key in front of the data: K sm3 =HMAC-SM3(K orc ,N A ||N B ||"SM3").

7. The lightweight identity authentication method based on quantum key according to claim 1, characterized in that: The original data includes power control protocol messages and information security protocol messages.

8. A lightweight identity authentication system based on quantum key, characterized in that: These include: Quantum Cryptographic service platform, power control platform and several new power terminals; When executed, the quantum key-based lightweight identity authentication system implements the quantum key-based lightweight identity authentication method described in any one of claims 1 to 7.

9. An electronic device comprising a processor, a storage medium and a computer program, wherein the computer program is stored in the storage medium, wherein: When the computer program is executed by a processor, the lightweight identity authentication method based on quantum key described in any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the lightweight identity authentication method based on quantum key described in any one of claims 1 to 7 is implemented.

Images