Mail communication method based on global quantum security and credibility authentication

Abstract

The invention relates to the technical field of information security, in particular to a mail communication method based on global quantum security credible authentication. According to the scheme of the invention, based on signature authentication of a global quantum security authentication center, signature authentication of the mail can be initiated by a receiver at any time, the signature authentication is not limited by time after the mail is sent, and the signature authentication can be carried out as long as the receiver needs; when a receiver does not receive the mail for a long time, the quantum security authentication center cannot complete signature verification possibly due to the fact that the certificate is expired, and then the effectiveness and timeliness of the signed mail are guaranteed; in addition, the sending and receiving processes of the mail are both subjected to quantum security encryption communication, so that the security of the mail content in the transmission process is ensured, and meanwhile, the privacy of a communicator is also protected.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an email communication method based on global quantum security trusted authentication. Background Art

[0002] In the current email communication field, although there are a variety of encryption and authentication technologies, there are still challenges in terms of security, timeliness and privacy protection. Although traditional digital signatures and certificate authorities (CAs) can guarantee the integrity of emails and the authenticity of sender identities to a certain extent, they have the following shortcomings:

[0003] Traditional encryption and authentication technologies may not be able to fully resist quantum computing attacks, and with the development of quantum computing technology, the security of these technologies is threatened.

[0004] During the transmission of email content, the privacy protection needs of communicators are increasing, but existing technologies can hardly meet this demand.

[0005] In order to solve the above problems, the present invention proposes an email processing method based on signature authentication of a global quantum security authentication center. Summary of the invention

[0006] To solve the above problems, the present application discloses an email communication method based on global quantum security trusted authentication, comprising the following steps:

[0007] Apply to the Quantum Security Certification Center for a quantum security certificate, which includes a public certificate Cpub and a private identity PID.

[0008] The sender obtains a one-time identity OID and an irreducible polynomial P from its corresponding quantum security certification center, calculates a hash value Hb of the email body and its attachments to be sent, constructs a Toeplitz matrix T based on the irreducible polynomial P obtained from the quantum security certification center and a random number S obtained from a local random number pool, and calculates a hash of the signature body based on the Toeplitz matrix T to obtain a signature Hs of the signature body, wherein the signature body includes the hash value Hb of the email body and attachments, the public certificate Cpub, the private identity PID, the one-time identity OID and the local random number S;

[0009] When the sender sends an email, it carries its corresponding public certificate Cpub, private identity PID,

[0010] One-time identity OID, local random number S and signature Hs; wherein the email is sent to the peer server through quantum secure encryption;

[0011] After the recipient obtains the email, it calculates the hash value H'b of the email body and its attachments, and then determines the corresponding quantum security center based on the issuer information in the sender's public certificate, and constructs authentication information and sends it to the quantum security center, where the authentication request includes the email body hash value H'b, the random number S, the one-time identity OID, and the public identity Cpub of user B;

[0012] After receiving the authentication request, the quantum security center determines the corresponding irreducible polynomial P according to the one-time identity OID, determines the corresponding private identity P ID according to the public certificate Cpub, and then constructs the Toeplitz matrix T' based on the irreducible polynomial P and the received random number S, calculates the signature hash value H's for the email body hash value H'b, the public certificate Cpub, the private identity P ID, the one-time identity OID and the local random number S, and then returns the hash value H's and the public certificate Cpub to the recipient;

[0013] The recipient verifies the email's signature Hs with the hash value H's obtained from the quantum security center. If the verification passes, it means that the email is indeed sent by the user of the public certificate Cpub.

[0014] The one-time identity OID is a hash identity generated by calculating the user certificate based on the Toeplitz matrix.

[0015] The sender's public certificate, one-time identity OID, local random number S and signature Hs are sent to the recipient of the email as email attachments.

[0016] The process of the sender sending an email to the receiver further includes:

[0017] The email sent by the sender is sent to the sender's email server through quantum secure encryption;

[0018] The sender's mailbox server performs quantum-secure encryption on it again and sends it to the recipient's mailbox server. When the recipient's mailbox is online, the email is pulled from the recipient's mailbox server to the local computer via quantum-secure encrypted communication.

[0019] The visible part of the public certificate Cpub includes the identity information of the certificate subject; the private identity PID is the signature private identity generated by the quantum security certification center for the user based on the Toeplitz matrix.

[0020] The local random number S is a quantum true random number.

[0021] The solution of this application is based on the signature authentication of the global quantum security authentication center, so that the recipient can initiate signature authentication of the email at any time. The signature authentication is not restricted by the time after the email is sent, and the signature authentication can be performed as long as the recipient needs it. When the recipient has not received the email for a long time, the certificate may have expired, resulting in the quantum security authentication center being unable to complete the signature verification, thereby ensuring the validity and timeliness of the signed email. In addition, the sending and receiving processes of the email are all subject to quantum secure encrypted communication, which ensures the security of the email content during transmission, while also protecting the privacy of the communicator. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 This is a timing diagram of the email communication process in an embodiment of the present application;

[0023] Figure 2 This is a schematic diagram of the process of a sender sending an email to a receiver in an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0025] Example: Figure 1 As shown, an email communication method based on global quantum security trusted authentication includes the following steps:

[0026] S101: Apply for a quantum security certificate from the Quantum Security Certification Center. The quantum security certificate includes two parts: a public certificate Cpub and a private identity PID.

[0027] Among them, the public certificate Cpub contains the user's public identity information and can be made public; the private identity PID is the user's private identity information, generated by the quantum security certification center, used in the encryption and signing process, and kept confidential;

[0028] S102: The sender obtains the one-time identity OID and the irreducible polynomial P from its corresponding quantum security certification center, and calculates the hash value Hb of the email body and its attachments to be sent;

[0029] The one-time identity OID is used to identify this communication and ensure the uniqueness of each communication; the irreducible polynomial P is used to construct the Toeplitz matrix and participate in the signing process; the hash value Hb is calculated for the email body and its attachments to ensure the integrity of the email content;

[0030] Construct a Toeplitz matrix T according to the irreducible polynomial P obtained from the quantum security certification center and the random number S obtained through the local random number pool, and calculate the hash of the signature body based on the Toeplitz matrix T to obtain the signature Hs of the signature body, wherein the signature body includes the hash value Hb of the email body and attachments, the public certificate Cpub, the private identity PID, the one-time identity OID and the local random number S;

[0031] When the sender sends an email, it carries its corresponding public certificate Cpub, private identity PID,

[0032] One-time identity OID, local random number S and signature Hs; wherein the email is sent to the peer server through quantum secure encryption;

[0033] S103: After the recipient obtains the email, it calculates the hash value H'b of the email body and its attachments, and then determines the corresponding quantum security center based on the issuer information in the sender's public certificate, and constructs authentication information and sends it to the quantum security center, where the authentication request includes the email body hash value H'b, the random number S, the one-time identity OID, and the public identity Cpub of user B;

[0034] S104: After receiving the authentication request, the quantum security center determines the corresponding irreducible polynomial P according to the one-time identity O ID, determines the corresponding private identity PID according to the public certificate Cpub, and then constructs the Toeplitz matrix T' based on the irreducible polynomial P and the received random number S, calculates the signature hash value H's for the email body hash value H'b, the public certificate Cpub, the private identity PID, the one-time identity OID and the local random number S, and then returns the hash value H's and the public certificate Cpub to the recipient;

[0035] Exemplarily, assume that the irreducible polynomial P(x) and the random number S are:

[0036] P(x)=x^3+x+1;S=5

[0037] First, combine P(x) and S to generate a series of values ​​to fill the matrix. Here, we simply substitute the random number S into the polynomial P(x), then calculate its value and construct the matrix.

[0038] Calculate P(S): P(S) = S^3 + S + 1P(5) = 5^3 + 5 + 1P(5) = 125 + 5 + 1P(5) = 131

[0039] At this point there is a value of 131, which is used along with the random number S to construct the Toeplitz matrix T'.

[0040] Suppose a 3x3 Toeplitz matrix is ​​constructed, and the elements of the matrix will be filled according to P(S) and S. The Toeplitz matrix is ​​constructed in such a way that the first row increases from left to right, and then each subsequent row has one more element than the previous row, and this new element is the last element of the previous row plus a specific increment (here S);

[0041] S105: The recipient verifies the email signature Hs with the hash value H's obtained from the quantum security center. If the verification passes, it means that the email is indeed sent by the user of the public certificate Cpub.

[0042] The security, integrity and authenticity of email communications are ensured through quantum security technology and encryption algorithms. The characteristics of quantum security make it difficult for attackers to forge or tamper with email content, thereby protecting the privacy and data security of both parties in the communication.

[0043] By using the irreducible polynomial P and the random number S to construct the Toeplitz matrix T', the complexity of the signature is increased, making it difficult to crack and improving the security of the email authentication process. The encrypted storage and use of the private identity PID ensures the security of the user's identity information and prevents identity leakage. The one-time nature of OID ensures the independence of each email communication and prevents replay attacks. By calculating the signature hash value H's of the hash value of the email body, it is ensured that the email content has not been tampered with during transmission, ensuring the integrity of the data. As a trusted third party, the Quantum Security Center's participation in the authentication process increases the trust between the sender and receiver of the email.

[0044] The one-time identity OID is a hash identity generated by calculating the user certificate based on the Toeplitz matrix. The user certificate includes: relevant information submitted by the user when applying for CA; such as identity information, address and other information.

[0045] The sender's public certificate, one-time identity OID, local random number S and signature Hs are sent to the recipient of the email as email attachments.

[0046] like Figure 2 As shown, the process of the sender sending an email to the receiver further includes:

[0047] S201: The email sent by the sender is sent to the sender's mailbox server through quantum secure encryption;

[0048] S202: The sender's mailbox server performs quantum secure encryption on it again and sends it to the recipient's mailbox server. When the recipient's mailbox is online, the email is pulled from the recipient's mailbox server to the local computer via quantum secure encrypted communication.

[0049] The sender uses quantum keys to encrypt the email content to ensure the security of the email during the sending process. The sender sends the encrypted email to its email server through a secure channel. After the sender's email server receives the encrypted email, it uses another layer of quantum keys to encrypt the email again, increasing the security of the email. The encrypted email is sent to the recipient's email server through a quantum secure network. The recipient's email server stores the received encrypted email until the recipient's email goes online. When the recipient's email goes online, his email client pulls the email from the email server to the local computer through quantum secure encrypted communication. The recipient uses the corresponding quantum key to decrypt the email to read the email content.

[0050] Emails are quantum encrypted when they are transmitted between the sender, the sender's mailbox server, and the recipient's mailbox server, which provides higher security because the unpredictability of quantum keys and the characteristics of quantum entanglement make cracking almost impossible. The private identity PID is a signed private identity generated based on the Toeplitz matrix. It is not displayed in the public certificate Cpub, so even if the email is intercepted, the attacker cannot directly obtain the user's private identity information. The visible part of the public certificate Cpub only contains the identity information of the certificate subject and does not contain sensitive private information, so that the user's identity can be verified without leaking the user's privacy. Quantum encryption ensures the integrity of emails during transmission and prevents data from being tampered with during transmission. Due to the use of quantum encryption technology, even if quantum computers become popular in the future, these email communications will still be able to resist the threats of traditional encryption algorithms brought by quantum computing.

[0051] The email is stored in encrypted form on the recipient's mailbox server until the recipient is ready to receive it, which reduces the risk of unauthorized access to the email on the server.

[0052] The local random number S is a quantum true random number, whose randomness is physically guaranteed, does not rely on any algorithm or calculation process, and is more secure.

[0053] Exemplarily, the above encryption process specifically includes:

[0054] The sender uses a quantum random number generator (QRNG) to generate a true random number sequence. The key is used to encrypt the email content using the AES encryption algorithm. The encrypted email is sent to the sender's email server via a classical communication network.

[0055] The sender's email server receives the encrypted email and re-encrypts it using another local quantum random number key. The encrypted email is then sent to the recipient's email server via the network.

[0056] The recipient's mailbox server stores the encrypted email until the recipient's mailbox comes online.

[0057] The recipient's email client uses the decryption key to decrypt the email and pull the email content to the local computer. Symmetric quantum random numbers (quantum keys) are configured between the sender and the sender's email server, the sender's email server and the recipient's email server, and the recipient's email server and the recipient for quantum encryption and decryption.

[0058] In a specific solution, the visible part of the public certificate Cpub includes the identity information of the certificate subject; the private identity PID is a signed private identity generated by the quantum security certification center for the user based on the Toeplitz matrix.

[0059] The public certificate Cpub is a part of the certificate that contains publicly accessible information. The visible part of Cpub mainly contains the identity information of the certificate subject. It may include but is not limited to the user's name, email address, organization name, organizational unit, etc. This information is public, meaning that anyone can view it, but it does not directly expose the user's private information.

[0060] The privacy identity PID is an encrypted identity information, which is generated by the Quantum Security Certification Center for the user to protect the user's privacy. PID is a signature privacy identity (hash value) generated based on the Toeplitz matrix. As the user's privacy identity, PID will not be exposed publicly. It is used to ensure that the user's identity information is not leaked during the encryption process. For example, in the digital signature process, PID can be used to prove that the message is sent by a specific user without disclosing the user's true identity.

[0061] By using the Toeplitz matrix-based privacy identity PID, the scheme enhances the protection of user identity information. Because PID is encrypted, the user's real identity remains safe even if the public certificate Cpub is leaked or viewed by a third party.

[0062] During the email communication process, the sender's private identity PID is combined with the one-time identity OID and the local random number S to generate the signature hash value H's. This process ensures the authentication and integrity of the email while protecting the user's privacy. Since the PID generation and authentication process involves the Quantum Security Certification Center, it means that quantum encryption technology is used, providing advanced security against classical and quantum computing attacks.

[0063] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An email communication method based on global quantum security trusted authentication, characterized in that: The following steps are involved: Apply to the Quantum Security Certification Center for a quantum security certificate, which includes a public certificate Cpub and a private identity PID. The sender obtains a one-time identity OID and an irreducible polynomial P from its corresponding quantum security certification center, calculates a hash value Hb of the email body and its attachments to be sent, constructs a Toeplitz matrix T based on the irreducible polynomial P obtained from the quantum security certification center and a random number S obtained from a local random number pool, and calculates a hash of the signature body based on the Toeplitz matrix T to obtain a signature Hs of the signature body, wherein the signature body includes the hash value Hb of the email body and attachments, the public certificate Cpub, the private identity PID, the one-time identity OID and the local random number S; When the sender sends an email, it carries its corresponding public certificate Cpub, private identity PID, one-time identity OID, local random number S and signature Hs; wherein the email is sent to the peer server through quantum secure encryption; After the recipient obtains the email, it calculates the hash value H'b of the email body and its attachments, and then determines the corresponding quantum security center based on the issuer information in the sender's public certificate, and constructs authentication information and sends it to the quantum security center, where the authentication request includes the email body hash value H'b, the random number S, the one-time identity OID, and the public identity Cpub of user B; After receiving the authentication request, the quantum security center determines the corresponding irreducible polynomial P according to the one-time identity OID, determines the corresponding private identity PID according to the public certificate Cpub, and then constructs the Toeplitz matrix T' based on the irreducible polynomial P and the received random number S, calculates the signature hash value H's for the email body hash value H'b, the public certificate Cpub, the private identity PID, the one-time identity OID and the local random number S, and then returns the hash value H's and the public certificate Cpub to the recipient; The recipient verifies the email's signature Hs with the hash value H's obtained from the quantum security center. If the verification passes, it means that the email is indeed sent by the user of the public certificate Cpub.

2. The method according to claim 1, characterized in that The one-time identity OID is a hash identity generated by calculating the user certificate based on the Toeplitz matrix.

3. The method according to claim 1 or 2, characterized in that: The sender's public certificate, one-time identity OID, local random number S and signature Hs are sent to the recipient of the email as email attachments.

4. The method according to claim 1, characterized in that: The process of the sender sending an email to the receiver further includes: The email sent by the sender is sent to the sender's email server through quantum secure encryption; The sender's mailbox server performs quantum-secure encryption on it again and sends it to the recipient's mailbox server. When the recipient's mailbox is online, the email is pulled from the recipient's mailbox server to the local computer via quantum-secure encrypted communication.

5. The method according to claim 1, characterized in that The visible part of the public certificate Cpub includes the identity information of the certificate subject; the private identity PID is the signature private identity generated by the quantum security certification center for the user based on the Toeplitz matrix.

6. The method according to claim 1, characterized in that The local random number S is a quantum true random number.

Images