Quantum security data transmission method based on storage device

Abstract

The invention discloses a quantum secure data transmission method based on storage equipment. The method comprises the following steps that a quantum CA authentication center issues an equipment certificate to the storage equipment; the quantum CA authentication center carries out identity authentication on the data sender; in response to the passing of the identity authentication, the data sender generates a to-be-verified message based on the transmission data, stores the to-be-verified message in the storage device, transmits the to-be-verified message to the data receiver for verification by using the storage device, transmits the to-be-verified message to the quantum CA authentication center for signature verification, and sends the to-be-verified message to the quantum CA authentication center after both verification and signature verification are passed. And the data receiver carries out identity authentication on the data sender again, and after authentication is passed, analysis is carried out to obtain the transmission message and the transmission message is stored. According to the method, the storage device is subjected to certificate issuing, so that the device legality is ensured; the quantum random number and a data sender are bound, so that the security of the sender is ensured; and making a message authentication code to ensure safe and accurate data transmission.

Description

Technical Field

[0001] The present application relates to the technical field of data transmission, and in particular to a quantum secure data transmission method based on a storage device. Background Art

[0002] With the development of society, the core engine of digital economic development is data. Any data resource that participates in social and economic activities, has economic value, exists in electronic form, and flows in an orderly manner according to certain rules is a data element. It is the core resource for the development of the economic era and is of great significance to promote the digital economy. The importance of data elements enhances the importance of security. A large amount of data needs to be used and calculated in a trusted execution environment. This trusted execution environment is a hardware-based secure isolation environment that can ensure the security and integrity of the code and data running in it. It uses the protection mechanisms provided by hardware, such as hardware isolation technology and two-word encryption data, to isolate and protect sensitive data and code from external attacks. The trusted execution environment plays an important role in data privacy computing, especially when processing high-security data, it can provide additional security. The global quantum secure execution environment is a trusted execution environment that logically isolates Internet data packets, protects business systems from Internet network attacks, and ensures data security.

[0003] However, data cannot always be stored only in the trusted execution environment where data is processed. The data needs to interact with other terminals. Therefore, how to export data from the trusted execution environment so that the data can be used in the Internet environment has become a problem that needs to be considered. With the development of quantum technology, considering the future attack risks of quantum computing, this data exchange must be quantum-resistant. Summary of the invention

[0004] Purpose of the invention: In order to solve the related technical problems raised in the background technology, the present application provides a quantum secure data transmission method based on a storage device. The present application issues certificates to storage devices to ensure the legitimacy of the device, and then binds the data sender through quantum random numbers to obtain a one-time identity authentication code and identity ID. While ensuring the security of transmission, a message authentication code is produced to ensure that data transmission is safe and accurate. When used by the data recipient, a three-party message signature verification is performed to ensure that data is securely exported from the trusted area. At the same time, quantum random numbers are used to replace classical algorithm encryption during data transmission, and the entire export process meets the anti-quantum computing functional characteristics.

[0005] Technical solution:

[0006] The present invention provides a quantum secure data transmission method based on a storage device. The participants of the method include a quantum CA certification center, a data sender, a data receiver, and a pluggable storage device. The method includes the following steps:

[0007] Step 1: Quantum CA Certification Center issues a device certificate for the storage device;

[0008] Step 2: The Quantum CA Certification Center authenticates the data sender;

[0009] Step 3: In response to the identity authentication in step 2 being passed, the data sender generates a message to be verified based on the transmission data and stores it in the storage device, uses the storage device to transmit the message to be verified to the data receiver for verification, and transmits the message to be verified to the quantum CA certification center for signature verification. After both the verification and signature verification are passed, the data receiver authenticates the data sender again, and after the authentication is passed, the transmission message is parsed and stored.

[0010] As an improvement of the present invention, the specific process of step 1 is:

[0011] Step 1-1: Insert the storage device into the Quantum CA Certification Center, and the Quantum CA Certification Center generates a device certificate for the inserted storage device;

[0012] The format of the device certificate includes the certificate number, certificate source, validity period, domain name, certificate status, first quantum random array, and privacy identity priv-ID of the storage device; the domain name includes identity authentication interface and message authentication interface;

[0013] Step 1-2: The quantum CA certification center exports the generated device certificate to the storage device, and locally stores the certificate number, the second quantum random array, and the privacy identity priv-ID of the storage device. The storage device stores the device certificate locally;

[0014] Step 1-3: Unplug the storage device from the quantum CA certification center and insert the storage device into the data sender.

[0015] As an improvement of the present invention, the first quantum random array includes:

[0016] A first identity authentication hash random array (str1, s1), a first identity encrypted random array t1[u1, v1], a second identity authentication hash random array (str2, s2), and a second identity encrypted random number u2 for identity authentication;

[0017] Message hash random array (str3, s3) and message encryption random array t3[u3, v3] used to generate message authentication code;

[0018] Signature hash random array (str4, s4) and signature encryption random array t4[u4, v4] used to generate signature authentication code;

[0019] Random numbers t5 and t6 used to perform encryption and decryption operations;

[0020] The quantum CA authentication center stores a second quantum random array corresponding to the first quantum random array, and the second quantum random array includes: a first identity authentication hash random array (str1', s1'), a first identity encryption random array t1'[u1', v1'], a second identity authentication hash random array (str2', s2'), a second identity encryption random number u2'; a message hash random array (str3', s3'), a message encryption random array t3'[u3', v3']; a signature hash random array (str4', s4'), a signature encryption random array t4'[u4', v4'] and t5', t6'.

[0021] As an improvement of the present invention, the generation method of str1 includes:

[0022] (a) The quantum CA center obtains a set of quantum random numbers from the local computer and generates a polynomial based on the set of quantum random numbers.

[0023] (b) verifying whether the polynomial is an irreducible polynomial: if so, recording the string consisting of the coefficients of each term of the irreducible polynomial except the highest term as str1; otherwise, reobtaining another set of quantum random numbers, substituting the other set of quantum random numbers into step (a), and repeating steps (a)-(b) until the string str1 is obtained.

[0024] As an improvement of the present invention, the specific process of step 2 is:

[0025] Step 2-1: The data sender obtains the device certificate from the storage device, generates its own one-time certificate OTCA and one-time identity OTID based on the device certificate, and generates an identity authentication data packet based on OTCA and OTID;

[0026] Step 2-2: The data sender transmits the identity authentication data packet to the quantum CA authentication center through the identity authentication interface in the domain name in the device certificate;

[0027] Step 2-3: The Quantum CA Authentication Center performs identity authentication on the identity authentication data packet.

[0028] As an improvement of the present invention, the specific process of step 2-1 is as follows:

[0029] Step 2-1-1: The data sender generates its own one-time certificate OTCA based on the device certificate:

[0030] The data sender obtains the privacy identity priv-ID of the storage device from the device certificate, concatenates the privacy identity priv-ID of the storage device with the device number TXID of the data sender, and obtains the first information M1=(TXID, priv-ID); the data sender obtains the first identity authentication hash random array (str1, s1) and the first identity encryption random array t1[u1, v1] from the device certificate, generates an irreducible polynomial p1(x) based on the random number str1, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p1(x) and the quantum random number s1 p1,s1 , using the hash function H p1,s1 Calculate the hash value of the first information M1 to obtain the first hash value Hash1 = H p1,s1 (TXID, priv-ID), concatenate the first hash value Hash1 and str1, and then perform an XOR operation using the random number t1 to obtain a one-time certificate OTCA = [H p1,s1 (TXID,priv-ID),str1]⊕t1;

[0031] Step 2-1-2: The data sender generates its own one-time identity OTID based on the device certificate:

[0032] The data sender obtains the second identity hash random array (str2, s2) and the second identity encrypted random number u2 from the device certificate, generates an irreducible polynomial p2(x) based on the quantum random number str2, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p2(x) and the quantum random number s2. p2,s2 , using the hash function H p2,s2 Calculate the hash value of the first information M1 to obtain the second hash value Hash2 = H p2,s2 (TXID, priv-ID), perform an XOR operation on the second hash value Hash2 with the random number u2 to obtain a one-time identity OTID = H p2,s2 (TXID, priv-ID)⊕t2;

[0033] Step 2-1-3: The data sender concatenates the one-time certificate OTCA, the one-time identity OTID, the device number TXID of the data sender and the certificate number to generate an authentication data packet.

[0034] As an improvement of the present invention, the specific process of steps 2-3 is as follows:

[0035] Step 2-3-1: The quantum CA authentication center receives the identity authentication data packet and stores it locally. Based on the certificate number in the identity authentication data packet, it searches for the certificate number that is consistent with the certificate number stored locally. According to the certificate number stored locally, it obtains the privacy identity priv-ID of the storage device, and concatenates the privacy identity priv-ID of the storage device with the device number TXID of the data sender to obtain the second information M1′=(TXID, priv-ID); the quantum CA authentication center obtains the first identity authentication hash random array (str1′, s1′) and the first identity encryption random array t1′[u1′, v1′] from the local, generates an irreducible polynomial p1′(x) based on the quantum random number str1′, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p1′(x) and the quantum random number s1′ p1′,s1′ , using the hash function H p1′,s1′ Calculate the hash value of the second information M1′ to obtain a third hash value Hash3=H p1′,s1′ (TXID, priv-ID), concatenate the third hash value Hash3 with str1' and perform an XOR operation with the random number t1' to obtain the one-time identity to be authenticated OTCA' = [H p1′,s1′ (TXID,priv-ID),str1′]⊕t1′;

[0036] Step 2-3-2: The quantum CA authentication center compares the OTCA in the authentication data packet with the OTCA' calculated in step 2-3-1. If they are consistent, the authentication is successful, and the message of successful authentication is returned to the data sender through the authentication interface in the domain name in the device certificate; otherwise, the authentication fails and the data transmission process ends.

[0037] As an improvement of the present invention, in step 3, the specific process of the data sender generating the message to be verified based on the transmission data is:

[0038] Step 3-1: In response to the identity authentication in step 2 being passed, the quantum CA authentication center also sends the local signature hash random array (str4', s4') and signature encryption random array t4'[u4', v4'] to the data sender together with the identity authentication passed message. The data sender compares the received signature hash random array (str4', s4') and signature encryption random array t4'[u4', v4'] with the signature hash random array (str4, s4) and signature encryption random array t4[u4, v4] obtained from the device certificate. If the comparison is consistent, the next step is executed, otherwise, the data transmission process ends;

[0039] Step 3-2: The data sender concatenates the transmission data doc to be sent with the certificate number and validity period to obtain a transmission message mess = (doc, certificate number, validity period);

[0040] Step 3-3: The data sender generates a message authentication code MACmess based on the transmission message mess:

[0041] The data sender obtains the message hash random array (str3, s3) and the message encryption random array t3[u3, v3] from the device certificate, generates an irreducible polynomial p3(x) based on the random number str3, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p3(x) and the quantum random number s3. p3,s3 , using the hash function H p3,s3 Calculate the hash value of the transmission message mess=(doc, device certificate, validity period) to obtain the fourth hash value Hash4=H p3,s3 (doc, device certificate, validity period), concatenate the fourth hash value Hash4 with str3 and perform an XOR operation using the random number t3 to obtain the message authentication code MACmess = [H p3,s3 (doc, certificate number, validity period), str3]⊕t3;

[0042] Step 3-4: The data sender generates a signature authentication code MACsign based on the message authentication code MACmess:

[0043] The data sender concatenates the message authentication code MACmess = [H p3,s3 (doc, certificate number, validity period), str3]⊕t3 and one-time identity OTID, generate a one-time signature sign={[H p3,s3 (doc, device certificate, validity period), str3]⊕t3,OTID}, the data sender obtains the signature hash random array (str4, s4) and the signature encryption random array t4[u4, v4] from the device certificate, generates an irreducible polynomial p4(x) based on the random number str4, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p4(x) and the quantum random number s4 p4,s4 , using the hash function H p4,s4 Calculate the hash value of the one-time signature sign and get the fifth hash value Hash5 = H p4,s4 (sign), concatenate the fifth hash value Hash5 and str4, and use the random number t4 to perform an XOR operation to obtain the signature authentication code MACsign = [H p4,s4 (sign),str4]⊕t4;

[0044] Step 3-5: The data sender uses the random number t5 to perform an encryption operation on the data sender's number TXID to obtain the number authentication code MACID = TXID⊕t5, and then concatenates the transmission message mess, the message authentication code MACmess, the signature authentication code MACsign, and the number authentication code MACID and performs an XOR operation using the random number t6 to generate a message to be verified PVmess = (mess, MACmess, MACsign, MACID)⊕t6 and store it in the storage device.

[0045] As an improvement of the present invention, in step 3, the specific process of using the storage device to transmit the message to be verified to the data receiving party for verification is:

[0046] Step 3-6: The data receiver verifies the message PVmess to be verified:

[0047] Step 3-6-1: The data sender sends the message to be verified PVmess to the data receiver through the message authentication interface in the domain name in the device certificate;

[0048] Step 3-6-2: The data receiver obtains the device certificate from the storage device, obtains the quantum random number t6 from the device certificate, uses the random number t6 to perform a decryption operation on the verification message PVmess, and obtains the decrypted transmission message mess' and message authentication code MACmess';

[0049] Step 3-6-3: The data receiver obtains the message hash random array (str3, s3) and the message encryption random array t3[u3, v3] from the device certificate, and uses the hash function H generated by the data sender. p3,s3 The same method is used to generate the hash function H′ p3,s3 , using the hash function H′ p3,s3 Perform hash calculation on the transmission message mess' to obtain the sixth hash value Hash6 = H' p3,s3 (mess′), use the message encryption random array t3 to perform an XOR operation on the concatenated sixth hash value Hash6 and str3, and obtain the message authentication code to be verified MACmess″=[H′ p3,s3 (mess′), str3]⊕t3;

[0050] Step 3-6-4: Compare the calculated message authentication code MACmess″ with the message authentication code MACmess' decrypted in step 3-6-2. If they are consistent, the message authentication code verification is successful; otherwise, the verification fails and the data transmission process ends;

[0051] In step 3, the specific process of transmitting the message to be verified to the quantum CA certification center for signature verification is:

[0052] Step 3-7: The quantum CA authentication center verifies the signature of the message to be verified PVmess: Step 3-7-1: The data receiver sends the message to be verified PVmess to the quantum CA authentication center through the message authentication interface in the domain name in the device certificate;

[0053] Step 3-7-2: The quantum CA authentication center obtains the quantum random number t6' from the local computer, uses the random number t6' to perform a decryption operation on the verification message PVmess, and obtains the message authentication code MACmess"' and the signature authentication code MACsign';

[0054] Step 3-7-3: The quantum CA certification center obtains the signature hash random array (str4', s4'), the signature encryption random array t4'[u4', v4'], and the one-time identity OTID from the local computer, and generates a hash function H' based on the signature hash random array (str4', s4') p4,s4 , using the hash function H′ p4,s4 Calculate the seventh hash value Hash7 = H' of the concatenated message authentication code MACmess' and the one-time identity OTID p4,s4 (MACmess″′, OTID);

[0055] Step 3-7-4: Use the random number t4' to perform an XOR operation on the concatenation of the seventh hash value Hash7 and str4' to obtain the signature verification code MACsign″=(Hash7,str4′)⊕t4′;

[0056] Step 3-7-5: Compare the calculated signature authentication code MACsign″ with the signature authentication code MACsign′ decrypted in step 3-7-2. If they are consistent, the signature authentication code verification is successful; otherwise, the verification fails and the data transmission process ends.

[0057] As an improvement of the present invention, in step 3, the specific process of the data receiver performing identity authentication on the data sender again is as follows:

[0058] Step 3-8: The data receiver obtains the device certificate, the identity authentication data packet and the message to be verified PVmess from the storage device, obtains the random numbers t5 and t6 from the first quantum random array in the device certificate, uses the random number t6 to perform a decryption operation on the message to be verified PVmess, and obtains the transmission message mess′ and the number authentication code MACID′; obtains the data sender number TXID from the identity authentication data packet, uses the random number t5 to perform an encryption operation on the data sender number TXID to obtain the number authentication code to be authenticated MACID″=TXID⊕t5, compares the calculated number authentication code to be authenticated MACID″ with the decrypted number authentication code MACID′, if they are consistent, the authentication is passed, the transmission message mess′ is parsed, and the transmission data doc′ is obtained and stored; otherwise, the authentication fails and the data transmission process ends.

[0059] Beneficial effects:

[0060] 1. Utilize the offline distribution technology of storage devices to provide a hardware-based trusted execution environment for data transmission, ensure the integrity of data and messages, and thus improve the security of data transmission; the pluggable nature of storage devices also provides users with higher portability and ease of use, providing users with more applicable application scenarios;

[0061] 2. A storage device corresponds to a unique identity ID, and then a unique device certificate is issued. In actual applications, the storage device is bound to the device identity of the data sender, and the identity signature is jointly performed for the transmitted data. The identity of the storage device is authenticated by the quantum CA certification center and the data receiver, thereby improving the security of data transmission;

[0062] 3. One piece of transmitted data corresponds to a unique message authentication code and signature authentication code. The three-party message signature verification performed by the quantum CA certification center and the data recipient ensures that the data cannot be tampered with during transmission, thereby improving the security of data transmission. At the same time, quantum random numbers and hash algorithms are used to replace classical algorithm encryption during data transmission. The entire transmission process meets the characteristics of anti-quantum computing functions, improving the security of data transmission to the quantum level. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0064] Figure 1 This is a flowchart of the quantum secure data transmission method based on a storage device in this application;

[0065] Figure 2 A schematic diagram of the connection between the participants of the quantum secure data transmission method based on storage device of this application;

[0066] Figure 3 This is a diagram of the format for applying for a device certificate. DETAILED DESCRIPTION

[0067] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0068] like Figure 1 As shown, the present invention provides a quantum secure data transmission method based on a storage device, and the participants of the method include a quantum CA certification center, a data sender, a data receiver, and a pluggable storage device. Figure 2 As shown, a connection is provided between a quantum CA certification center, a data sender, a data receiver, and a storage device. Among them, the quantum CA certification center is used to issue device certificates for storage devices, authenticate the storage devices and data senders, and verify the signatures of messages to ensure secure message transmission. The data sender is the end that exports private data from a trusted execution environment, and is used to generate messages to be verified based on the transmission data (i.e., private data). The data receiver is the party that uses the private data, and can safely use the transmission data after the message to be verified is authenticated and verified by the quantum CA certification center. The storage device is used to receive and store device certificates issued by the quantum CA certification center. In an embodiment of the present invention, the storage device may be in the form of a Ukey, a U disk, a mobile hard disk, an optical disc, and the like.

[0069] The quantum secure data transmission method of the present invention comprises the following steps:

[0070] Step 1: Quantum CA Certification Center issues a device certificate for the storage device;

[0071] Specifically:

[0072] Step 1-1: Insert the storage device into the Quantum CA Certification Center, and the Quantum CA Certification Center generates a device certificate for the inserted storage device;

[0073] In an embodiment of the present invention, Figure 3As shown, the format of the device certificate includes a certificate number, a certificate source, a validity period, a domain name, a certificate status, a first quantum random array, and a privacy identity priv-ID of the storage device. The certificate number is used to mark the unique identifier of the device certificate. The certificate source is a carrier for issuing certificates, and the device identity information of the quantum CA certification center that issues the device certificate is marked here. The validity period is used to display the starting validity time and expiration time of the device certificate. The domain name is an access interface embodied in a string format, which may include access interfaces for certificate query, identity authentication, and message authentication. The certificate status is used to display whether the current certificate is available, including in-use status, suspended status, abandoned status, etc. For example, the in-use status may be that the device certificate is being used during data transmission; the suspended status may be that the user causes the current data transmission process to be interrupted due to other operations (for example, illegal operations or network interruptions, etc.), and the device certificate is in a suspended state at this time; the abandoned state may be that the certificate expires and becomes invalid, or the data transmission process ends, and the device certificate completes its authentication, and the device certificate is in an abandoned state.

[0074] The first quantum random number array is a plurality of groups of quantum random numbers used for authentication and performing encryption and decryption operations, including:

[0075] A first identity authentication hash random array (str1, s1), a first identity encrypted random array t1[u1, v1], a second identity authentication hash random array (str2, s2), and a second identity encrypted random number u2 for identity authentication;

[0076] Message hash random array (str3, s3) and message encryption random array t3[u3, v3] used to generate message authentication code;

[0077] Signature hash random array (str4, s4) and signature encryption random array t4[u4, v4] used to generate signature authentication code;

[0078] Random numbers t5 and t6 used to perform encryption and decryption operations;

[0079] The quantum CA authentication center stores a second quantum random array corresponding to the first quantum random array, and the second quantum random array includes: a first identity authentication hash random array (str1', s1'), a first identity encryption random array t1'[u1', v1'], a second identity authentication hash random array (str2', s2'), a second identity encryption random number u2'; a message hash random array (str3', s3'), a message encryption random array t3'[u3', v3']; a signature hash random array (str4', s4'), a signature encryption random array t4'[u4', v4'] and t5', t6'.

[0080] Among them, str1, str2, str3, str4, s1, s2, s3, s4, u1, u2, u3, u4, v1, v3, v4 are all 128-bit random numbers, t1 is the 256-bit random number after the combination of u1 and v1, t3 is the combination of u3 and v3, and t4 is the combination of u4 and v4, and t5 and t6 are both 256-bit random numbers. Accordingly, the size of the random numbers in the second quantum random array corresponds to the size of the random numbers in the first quantum random array.

[0081] In an embodiment of the present invention, the generation method of str1 includes:

[0082] (a) The quantum CA center obtains a set of quantum random numbers from the local computer and generates a polynomial based on the set of quantum random numbers.

[0083] (b) Verify whether the polynomial is an irreducible polynomial: If so, record the string consisting of the coefficients of each term of the irreducible polynomial except the highest term as str1; otherwise, obtain another set of quantum random numbers, substitute the other set of quantum random numbers into step (a), and repeat steps (a)-(b) until the string str1 is obtained. The generation method of str2 and str3 is the same as the generation method of str1.

[0084] The privacy identity priv-ID of the storage device is the unified ID of the storage device being read, and is the unique identity of the storage device.

[0085] Step 1-2: The quantum CA certification center exports the generated device certificate to the storage device, and locally stores the certificate number, the second quantum random array, and the privacy identity priv-ID of the storage device. The storage device stores the device certificate locally;

[0086] Step 1-3: Unplug the storage device from the quantum CA certification center and insert the storage device into the data sender.

[0087] Step 2: The Quantum CA Certification Center authenticates the data sender;

[0088] Specifically:

[0089] Step 2-1: The data sender obtains the device certificate from the storage device, generates its own one-time certificate OTCA and one-time identity OTID based on the device certificate, and generates an identity authentication data packet based on OTCA and OTID;

[0090] More specifically:

[0091] Step 2-1-1: The data sender generates its own one-time certificate OTCA based on the device certificate:

[0092] The data sender obtains the privacy identity priv-ID of the storage device from the device certificate, concatenates the privacy identity priv-ID of the storage device with the device number TXID of the data sender, and obtains the first information M1=(TXID, priv-ID); the data sender obtains the first identity authentication hash random array (str1, s1) and the first identity encryption random array t1[u1, v1] from the device certificate, generates an irreducible polynomial p1(x) based on the random number str1, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p1(x) and the quantum random number s1 p1,s1 , using the hash function H p1,s1 Calculate the hash value of the first information M1 to obtain the first hash value Hash1 = H p1,s1 (TXID, priv-ID), concatenate the first hash value Hash1 and str1, and then perform an XOR operation using the random number t1 to obtain a one-time certificate OTCA = [H p1,s1 (TXID,priv-ID),str1]⊕t1;

[0093] Step 2-1-2: The data sender generates its own one-time identity OTID based on the device certificate:

[0094] The data sender obtains the second identity hash random array (str2, s2) and the second identity encrypted random number u2 from the device certificate, generates an irreducible polynomial p2(x) based on the quantum random number str2, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p2(x) and the quantum random number s2. p2,s2 , using the hash function H p2,s2 Calculate the hash value of the first information M1 to obtain the second hash value Hash2 = H p2,s2 (TXID, priv-ID), perform an XOR operation on the second hash value Hash2 with the random number u2 to obtain a one-time identity OTID = H p2,s2 (TXID, priv-ID)⊕t2;

[0095] Step 2-1-3: The data sender concatenates the one-time certificate OTCA, the one-time identity OTID, the device number TXID of the data sender and the certificate number to generate an authentication data packet.

[0096] Step 2-2: The data sender transmits the identity authentication data packet to the quantum CA authentication center through the identity authentication interface in the domain name in the device certificate;

[0097] Step 2-3: The Quantum CA Authentication Center performs identity authentication on the identity authentication data packet.

[0098] Specifically:

[0099] Step 2-3-1: The quantum CA authentication center receives the identity authentication data packet and stores it locally. Based on the certificate number in the identity authentication data packet, it searches for the certificate number that is consistent with the certificate number stored locally. According to the certificate number stored locally, it obtains the privacy identity priv-ID of the storage device, and concatenates the privacy identity priv-ID of the storage device with the device number TXID of the data sender to obtain the second information M1′=(TXID, priv-ID); the quantum CA authentication center obtains the first identity authentication hash random array (str1′, s1′) and the first identity encryption random array t1′[u1′, v1′] from the local, generates an irreducible polynomial p1′(x) based on the quantum random number str1′, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p1′(x) and the quantum random number s1′ p1′,s1′ , using the hash function H p1′,s1′ Calculate the hash value of the second information M1′ to obtain a third hash value Hash3=H p1′,s1′ (TXID, priv-ID), concatenate the third hash value Hash3 with str1' and perform an XOR operation with the random number t1' to obtain the one-time identity to be authenticated OTCA' = [H p1′,s1′ (TXID,priv-ID),str1′]⊕t1′;

[0100] Step 2-3-2: The quantum CA authentication center compares the OTCA in the authentication data packet with the OTCA' calculated in step 2-3-1. If they are consistent, the authentication is successful, and the message of successful authentication is returned to the data sender through the authentication interface in the domain name in the device certificate; otherwise, the authentication fails and the data transmission process ends.

[0101] In the embodiment of the present invention, since the output data length of the hash algorithm is fixed, while the input data length can be arbitrary, the hash algorithm is an irreversible algorithm. In other words, the summary calculated by the hash algorithm cannot be deduced from the original data. This characteristic makes the hash algorithm widely used in the fields of digital signatures and digital certificates, because it can ensure the integrity and authenticity of the data. Therefore, the comparison of the hash values ​​used in this step improves the security of the identity authentication process to the quantum level.

[0102] Step 3: In response to the identity authentication in step 2 being passed, the data sender generates a message to be verified based on the transmission data and stores it in the storage device, uses the storage device to transmit the message to be verified to the data receiver for verification, and transmits the message to be verified to the quantum CA certification center for signature verification. After both the verification and signature verification are passed, the data receiver authenticates the data sender again, and after the authentication is passed, the transmission message is parsed and stored.

[0103] In step 3 described above, the specific process of the data sender generating the message to be verified based on the transmission data is as follows:

[0104] Step 3-1: In response to the identity authentication in step 2 being passed, the quantum CA authentication center also sends the local signature hash random array (str4', s4') and signature encryption random array t4'[u4', v4'] to the data sender together with the identity authentication passed message. The data sender compares the received signature hash random array (str4', s4') and signature encryption random array t4'[u4', v4'] with the signature hash random array (str4, s4) and signature encryption random array t4[u4, v4] obtained from the device certificate to confirm whether the random number parameters in the quantum CA authentication center have been tampered with; if the comparison is consistent, it means that the parameters are not damaged during the data transmission process, and the next step can be executed; otherwise, the random number is damaged during the data transmission process, and the subsequent authentication is invalid. The quantum random array needs to be regenerated for data authentication, and the data transmission process here ends;

[0105] Step 3-2: The data sender concatenates the transmission data doc to be sent with the certificate number and validity period to obtain a transmission message mess = (doc, certificate number, validity period);

[0106] Step 3-3: The data sender generates a message authentication code MACmess based on the transmission message mess:

[0107] The data sender obtains the message hash random array (str3, s3) and the message encryption random array t3[u3, v3] from the device certificate, generates an irreducible polynomial p3(x) based on the random number str3, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p3(x) and the quantum random number s3. p3,s3 , using the hash function H p3,s3 Calculate the hash value of the transmission message mess=(doc, device certificate, validity period) to obtain the fourth hash value Hash4=H p3,s3 (doc, device certificate, validity period), concatenate the fourth hash value Hash4 with str3 and perform an XOR operation using the random number t3 to obtain the message authentication code MACmess = [H p3,s3(doc, certificate number, validity period), str3]⊕t3;

[0108] Step 3-4: The data sender generates a signature authentication code MACsign based on the message authentication code MACmess:

[0109] The data sender concatenates the message authentication code MACmess = [H p3,s3 (doc, certificate number, validity period), str3]⊕t3 and one-time identity OTID, generate a one-time signature sign={[H p3,s3 (doc, device certificate, validity period), str3]⊕t3,OTID}, the data sender obtains the signature hash random array (str4, s4) and the signature encryption random array t4[u4, v4] from the device certificate, generates an irreducible polynomial p4(x) based on the random number str4, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p4(x) and the quantum random number s4 p4,s4 , using the hash function H p4,s4 Calculate the hash value of the one-time signature sign and get the fifth hash value Hash5 = H p4,s4 (sign), concatenate the fifth hash value Hash5 and str4, and use the random number t4 to perform an XOR operation to obtain the signature authentication code MACsign = [H p4,s4 (sign),str4]⊕t4;

[0110] Step 3-5: The data sender uses the random number t5 to perform an encryption operation on the data sender's number TXID to obtain the number authentication code MACID = TXID⊕t5, and then concatenates the transmission message mess, the message authentication code MACmess, the signature authentication code MACsign, and the number authentication code MACID and performs an XOR operation using the random number t6 to generate a message to be verified PVmess = (mess, MACmess, MACsign, MACID)⊕t6 and store it in the storage device.

[0111] In step 3 described above, the specific process of using the storage device to transmit the message to be verified to the data recipient for verification is as follows:

[0112] Step 3-6: The data receiver verifies the message PVmess to be verified:

[0113] Step 3-6-1: The data sender sends the message to be verified PVmess to the data receiver through the message authentication interface in the domain name in the device certificate;

[0114] Step 3-6-2: The data receiver obtains the device certificate from the storage device, obtains the quantum random number t6 from the device certificate, uses the random number t6 to perform a decryption operation on the verification message PVmess, and obtains the decrypted transmission message mess' and message authentication code MACmess';

[0115] Step 3-6-3: The data receiver obtains the message hash random array (str3, s3) and the message encryption random array t3[u3, v3] from the device certificate, and uses the hash function H generated by the data sender. p3,s3 The same method is used to generate the hash function H′ p3,s3 , using the hash function H′ p3,s3 Perform hash calculation on the transmission message mess' to obtain the sixth hash value Hash6 = H' p3,s3 (mess′), use the message encryption random array t3 to perform an XOR operation on the concatenated sixth hash value Hash6 and str3, and obtain the message authentication code to be verified MACmess″=[H′ p3,s3 (mess′), str3]⊕t3;

[0116] Step 3-6-4: Compare the calculated message authentication code MACmess″ with the message authentication code MACmess' decrypted in step 3-6-2. If they are consistent, it means that the integrity of the message authentication code is guaranteed during the data transmission process and the message authentication code verification is successful; otherwise, the verification fails and the data transmission process ends;

[0117] In step 3 above, the specific process of transmitting the message to be verified to the quantum CA certification center for signature verification is:

[0118] Step 3-7: The quantum CA authentication center verifies the signature of the message to be verified PVmess: Step 3-7-1: The data receiver sends the message to be verified PVmess to the quantum CA authentication center through the message authentication interface in the domain name in the device certificate;

[0119] Step 3-7-2: The quantum CA authentication center obtains the quantum random number t6' from the local computer, uses the random number t6' to perform a decryption operation on the verification message PVmess, and obtains the message authentication code MACmess"' and the signature authentication code MACsign';

[0120] Step 3-7-3: The quantum CA certification center obtains the signature hash random array (str4', s4'), the signature encryption random array t4'[u4', v4'], and the one-time identity OTID from the local computer, and generates a hash function H' based on the signature hash random array (str4', s4') p4,s4 , using the hash function H′ p4,s4Calculate the seventh hash value Hash7 = H' of the concatenated message authentication code MACmess' and the one-time identity OTID p4,s4 (MACmess″′, OTID);

[0121] Step 3-7-4: Use the random number t4' to perform an XOR operation on the concatenation of the seventh hash value Hash7 and str4' to obtain the signature verification code MACsign″=(Hash7,str4′)⊕t4′;

[0122] Step 3-7-5: Compare the calculated signature authentication code MACsign″ with the signature authentication code MACsign′ decrypted in step 3-7-2. If they are consistent, it means that the integrity of the signature authentication code is guaranteed during the data transmission process and the signature authentication code verification is successful; otherwise, the verification fails and the data transmission process ends.

[0123] As described above, in one embodiment of the present invention, the storage device may carry a device certificate, and may also carry an identity authentication data packet and a message to be verified. The device certificate, identity authentication data packet, message to be verified and other messages and data are transmitted between the quantum CA certification center, the data sender, and the data receiver through offline distribution technology.

[0124] In other embodiments of the present invention, the storage device may carry a device certificate. Due to the presence of the domain name interface in the device certificate, such as Figure 3 As shown, the message of success or failure of identity authentication and / or data authentication and the corresponding other messages and data can interact through the interface in the domain name. For example, the data sender can transmit the identity authentication data packet to the quantum CA authentication center through the identity authentication interface in the domain name; for another example, the quantum CA authentication center can return the message of identity authentication passing to the data sender through the identity authentication interface in the domain name; for another example, the data receiver can send the message to be verified to the quantum CA authentication center through the message authentication interface in the domain name.

[0125] In step 3 above, the specific process of the data receiver re-authenticating the data sender is as follows:

[0126] Step 3-8: The data receiver obtains the device certificate, the identity authentication data packet and the message to be verified PVmess from the storage device (or the identity authentication interface and the message authentication interface), obtains the random numbers t5 and t6 from the first quantum random array in the device certificate, uses the random number t6 to perform a decryption operation on the message to be verified PVmess, and obtains the transmission message mess′ and the number authentication code MACID′; obtains the data sender number TXID from the identity authentication data packet, uses the random number t5 to perform an encryption operation on the data sender number TXID to obtain the number authentication code to be authenticated MACID″=TXID⊕t5, compares the calculated number authentication code to be authenticated MACID″ with the decrypted number authentication code MACID′, if they are consistent, it indicates the uniqueness of the identity of the data sender before and after the data transmission, verifies the security of the data sender, the authentication is passed, the transmission message mess′ is parsed, and the transmission data doc′ is obtained and stored; otherwise, the authentication fails, and the data transmission process ends.

Claims

1. A quantum secure data transmission method based on a storage device, characterized in that: The participants of the method include a quantum CA certification center, a data sender, a data receiver, and a pluggable storage device; the method includes the following steps: Step 1: The Quantum CA Certification Center issues a device certificate for the storage device; Step 2: The Quantum CA Authentication Center authenticates the data sender; Step 3: In response to the identity authentication in step 2 being passed, the data sender generates a message to be verified based on the transmitted data and stores it in a storage device. The storage device is used to transmit the message to be verified to the data receiver for verification, and the message to be verified is transmitted to the quantum CA certification center for signature verification. After both the verification and signature verification are passed, the data receiver authenticates the data sender again. After the authentication is passed, the transmitted message is parsed and stored.

2. The method for quantum secure data transmission based on a storage device according to claim 1, characterized in that: The specific process of step 1 is: Step 1-1: Insert the storage device into the Quantum CA Certification Center, and the Quantum CA Certification Center generates a device certificate for the inserted storage device; The format of the device certificate includes the certificate number, certificate source, validity period, domain name, certificate status, first quantum random array, and the privacy identity priv-ID of the storage device; the domain name includes the identity authentication interface and the message authentication interface; Step 1-2: The quantum CA certification center exports the generated device certificate to the storage device and saves the certificate number, the second quantum random array, and the privacy identity priv-ID of the storage device locally. The storage device stores the device certificate locally. Step 1-3: Unplug the storage device from the Quantum CA certification center and plug the storage device into the data sender.

3. The method for quantum secure data transmission based on a storage device according to claim 2, characterized in that: The first quantum random array includes: The first identity authentication hash random array (str1, s1), the first identity encrypted random array t1[u1, v1], the second identity authentication hash random array (str2, s2), and the second identity encrypted random number u2 for identity authentication; Message hash random array (str3, s3) and message encryption random array t3[u3, v3] used to generate message authentication code; Signature hash random array (str4, s4) and signature encryption random array t4[u4, v4] used to generate signature authentication code; Random numbers t5 and t6 used to perform encryption and decryption operations; The quantum CA authentication center stores a second quantum random array corresponding to the first quantum random array, and the second quantum random array includes: a first identity authentication hash random array (str1', s1'), a first identity encryption random array t1'[u1', v1'], a second identity authentication hash random array (str2', s2'), a second identity encryption random number u2'; a message hash random array (str3', s3'), a message encryption random array t3'[u3', v3']; a signature hash random array (str4', s4'), a signature encryption random array t4'[u4', v4'], and t5' and t6'.

4. The method for quantum secure data transmission based on a storage device according to claim 3, characterized in that: The generation method of str1 includes: (a) The quantum CA center obtains a set of quantum random numbers from the local computer and generates a polynomial based on the set of quantum random numbers. (b) Verify whether the polynomial is an irreducible polynomial: If so, record the string consisting of the coefficients of each term of the irreducible polynomial except the highest term as str1; otherwise, obtain another set of quantum random numbers, substitute the other set of quantum random numbers into step (a), and repeat steps (a)-(b) until the string str1 is obtained.

5. The method for quantum secure data transmission based on a storage device according to claim 3, characterized in that: The specific process of step 2 is: Step 2-1: The data sender obtains the device certificate from the storage device, generates its own one-time certificate (OTCA) and one-time identity (OTID) based on the device certificate, and generates an identity authentication data packet based on the OTCA and OTID. Step 2-2: The data sender transmits the identity authentication data packet to the Quantum CA Certification Center through the identity authentication interface in the domain name in the device certificate; Step 2-3: The Quantum CA Authentication Center performs identity authentication on the identity authentication data packet.

6. The method for quantum secure data transmission based on a storage device according to claim 5, characterized in that: The specific process of step 2-1 is as follows: Step 2-1-1: The data sender generates its own one-time certificate OTCA based on the device certificate: The data sender obtains the privacy identity priv-ID of the storage device from the device certificate, concatenates the privacy identity priv-ID of the storage device with the device number TXID of the data sender, and obtains the first information M1 = (TXID, priv-ID); the data sender obtains the first identity authentication hash random array (str1, s1) and the first identity encryption random array t1[u1, v1] from the device certificate, generates an irreducible polynomial p1(x) based on the random number str1, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p1(x) and the quantum random number s1 p1,s1 , using the hash function H p1,s1 Calculate the hash value of the first information M1 and obtain the first hash value Hash1=H p1,s1 (TXID, priv-ID), concatenate the first hash value Hash1 with str1 and perform an XOR operation with the random number t1 to obtain a one-time certificate Step 2-1-2: The data sender generates its own one-time identity OTID based on the device certificate: The data sender obtains the second identity hash random array (str2, s2) and the second identity encrypted random number u2 from the device certificate, generates an irreducible polynomial p2(x) based on the quantum random number str2, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p2(x) and the quantum random number s2. p2,s2 , using the hash function H p2,s2 Calculate the hash value of the first information M1 to obtain the second hash value Hash2 = H p2,s2 (TXID, priv-ID), perform XOR operation on the second hash value Hash2 with the random number u2 to obtain a one-time identity Step 2-1-3: The data sender concatenates the one-time certificate OTCA, the one-time identity OTID, the data sender's device number TXID, and the certificate number to generate an identity authentication data packet.

7. The method for quantum secure data transmission based on a storage device according to claim 6, characterized in that: The specific process of steps 2-3 is as follows: Step 2-3-1: The quantum CA authentication center receives the identity authentication data packet and stores it locally. Based on the certificate number in the identity authentication data packet, it searches for the certificate number stored locally that matches it. According to the certificate number stored locally, it obtains the privacy identity priv-ID of the storage device. It concatenates the privacy identity priv-ID of the storage device with the device number TXID of the data sender to obtain the second information M1′=(TXID, priv-ID). The quantum CA authentication center obtains the first identity authentication hash random array (str1′, s1′) and the first identity encryption random array t1′[u1′, v1′] from the local computer. It generates an irreducible polynomial p1′(x) based on the quantum random number str1′. It generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p1′(x) and the quantum random number s1′. p1′,s1′ , using the hash function H p1′,s1′ Calculate the hash value of the second information M1′ to obtain a third hash value Hash3=H p1′,s1′ (TXID, priv-ID), concatenate the third hash value Hash3 with str1' and perform an XOR operation with the random number t1' to obtain the one-time identity to be authenticated Step 2-3-2: The Quantum CA Authentication Center compares the OTCA in the authentication data packet with the OTCA' calculated in step 2-3-1. If they are consistent, the authentication is successful, and the authentication success message is returned to the data sender through the authentication interface in the domain name in the device certificate; otherwise, the authentication fails and the data transmission process ends.

8. The method for quantum secure data transmission based on a storage device according to claim 7, characterized in that: In step 3, the specific process of the data sender generating the message to be verified based on the transmission data is as follows: Step 3-1: In response to the identity authentication in step 2 being passed, the Quantum CA Certification Center also sends the local signature hash random array (str4', s4') and signature encryption random array t4'[u4', v4'] along with the identity authentication passed message to the data sender. The data sender compares the received signature hash random array (str4', s4') and signature encryption random array t4'[u4', v4'] with the signature hash random array (str4, s4) and signature encryption random array t4[u4, v4] obtained from the device certificate. If the comparison is consistent, the next step is executed. Otherwise, the data transmission process ends. Step 3-2: The data sender concatenates the transmission data doc to be sent with the certificate number and validity period to obtain the transmission message mess = (doc, certificate number, validity period); Step 3-3: The data sender generates a message authentication code MACmess based on the transmission message mess: The data sender obtains the message hash random array (str3, s3) and the message encryption random array t3[u3, v3] from the device certificate, generates an irreducible polynomial p3(x) based on the random number str3, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p3(x) and the quantum random number s3. p3,s3 , using the hash function H p3,s3 Calculate the hash value of the transmission message mess=(doc, device certificate, validity period) to obtain the fourth hash value Hash4=H p3,s3 (doc, device certificate, validity period), concatenate the fourth hash value Hash4 with str3 and perform an XOR operation with the random number t3 to obtain the message authentication code Step 3-4: The data sender generates a signature authentication code MACsign based on the message authentication code MACmess: Data sender splices message authentication code and one-time identity OTID to generate a one-time signature for the message The data sender obtains the signature hash random array (str4, s4) and the signature encryption random array t4[u4, v4] from the device certificate, generates an irreducible polynomial p4(x) based on the random number str4, and generates a hash function H based on the Toeplitz matrix according to the irreducible polynomial p4(x) and the quantum random number s4. p4,s4 , using the hash function H p4,s4 Calculate the hash value of the one-time signature sign and obtain the fifth hash value Hash5 = H p4,s4 (sign), after splicing the fifth hash value Hash5 and str4, perform an XOR operation with the random number t4 to obtain the signature authentication code Step 3-5: The data sender uses the random number t5 to perform an encryption operation on the data sender's number TXID to obtain the number authentication code The transmission message mess, message authentication code MACmess, signature authentication code MACsign, and number authentication code MACID are concatenated and then XORed using the random number t6 to generate the message to be verified. Save to a storage device.

9. The method for quantum secure data transmission based on a storage device according to claim 8, characterized in that: In step 3, the specific process of using the storage device to transmit the message to be verified to the data recipient for verification is as follows: Step 3-6: The data receiver verifies the message PVmess to be verified: Step 3-6-1: The data sender sends the message to be verified PVmess to the data receiver through the message authentication interface in the domain name in the device certificate; Step 3-6-2: The data receiver obtains the device certificate from the storage device, obtains the quantum random number t6 from the device certificate, and uses the random number t6 to perform a decryption operation on the verification message PVmess to obtain the decrypted transmission message mess' and the message authentication code MACmess'; Step 3-6-3: The data receiver obtains the message hash random array (str3, s3) and the message encryption random array t3[u3, v3] from the device certificate, and uses the hash function H generated by the data sender. p3,s3 The same method is used to generate the hash function H′ p3,s3 , using the hash function H′ p3,s3 Perform hash calculation on the transmission message mess' to obtain the sixth hash value Hash6=H' p3,s3 (mess′), use the message encryption random array t3 to perform an XOR operation on the concatenated sixth hash value Hash6 and str3 to obtain the message authentication code to be verified Step 3-6-4: Compare the calculated message authentication code MACmess″ with the message authentication code MACmess' decrypted in step 3-6-2. If they are consistent, the message authentication code verification is successful; otherwise, the verification fails and the data transmission process ends; In step 3, the specific process of transmitting the message to be verified to the quantum CA certification center for signature verification is as follows: Step 3-7: The quantum CA authentication center verifies the signature of the message to be verified PVmess: Step 3-7-1: The data recipient sends the message to be verified PVmess to the quantum CA authentication center through the message authentication interface in the domain name in the device certificate; Step 3-7-2: The quantum CA authentication center obtains the quantum random number t6' from the local computer, uses the random number t6' to perform a decryption operation on the verification message PVmess, and obtains the message authentication code MACmess"' and the signature authentication code MACsign'; Step 3-7-3: The Quantum CA Certification Center obtains the signature hash random array (str4', s4'), the signature encryption random array t4'[u4', v4'], and the one-time identity OTID from the local computer, and generates a hash function H' based on the signature hash random array (str4', s4'). p4,s4 , using the hash function H′ p4,s4 Calculate the seventh hash value Hash7 = H' of the concatenated message authentication code MACmess' and the one-time identity OTID p4,s4 (MACmess″′, OTID); Step 3-7-4: Use the random number t4' to perform an XOR operation on the concatenation of the seventh hash value Hash7 and str4' to obtain the signature verification code to be verified Step 3-7-5: Compare the calculated signature authentication code MACsign″ with the signature authentication code MACsign′ decrypted in step 3-7-2. If they are consistent, the signature authentication code verification is successful. Otherwise, the signature verification fails and the data transmission process ends.

10. The method for quantum secure data transmission based on a storage device according to claim 9, characterized in that: In step 3, the specific process of the data receiver re-authenticating the data sender is as follows: Step 3-8: The data receiver obtains the device certificate, identity authentication data packet and the message to be verified PVmess from the storage device, obtains the random numbers t5 and t6 from the first quantum random array in the device certificate, uses the random number t6 to perform a decryption operation on the message to be verified PVmess, and obtains the transmission message mess′ and the number authentication code MACID′; obtains the data sender number TXID from the identity authentication data packet, uses the random number t5 to perform an encryption operation on the data sender number TXID to obtain the number authentication code to be authenticated Compare the calculated number verification code MACID″ to be authenticated with the decrypted number authentication code MACID′. If they are consistent, the authentication is successful, the transmission message mess′ is parsed, and the transmission data doc′ is obtained and stored; otherwise, the authentication fails and the data transmission process ends.

Images