Identity authentication method and device based on quantum encryption, equipment and storage medium

Abstract

The embodiment of the invention provides a quantum encryption identity authentication method and device, equipment and a storage medium. The method comprises the following steps: receiving a two-dimensional code generation request sent by an authentication application through a quantum encryption toolkit; according to the two-dimensional code generation request, returning a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit; when the user scans the target two-dimensional code through the authentication application and confirms authorization, receiving a two-dimensional code identifier of the target two-dimensional code and user information of the user sent by the authentication application through the quantum encryption toolkit; binding the user information with the two-dimensional code identifier; receiving an authorization code sent by the authentication application through the quantum encryption toolkit, wherein the authorization code is generated according to the two-dimensional code identifier; performing identity authentication on the user according to the authorization code; and if the identity authentication is passed, returning the user information to the authentication application through the quantum encryption toolkit. According to the embodiment of the invention, the quantum key and the two-dimensional code content are fused, so that extremely high security is realized.

Description

Technical Field

[0001] The present application relates to the field of identity authentication technology, and in particular to a quantum encryption identity authentication method and device, an electronic device and a storage medium. Background Art

[0002] Traditional QR code scanning authentication is usually implemented based on the OIDC (OpenID Connect, an identity authentication layer) protocol, but the protocol does not encrypt some key information during the interaction process. The OIDC protocol is highly dependent on transport layer security mechanisms such as HTTPS (HyperText Transfer Protocol Secure) to ensure the confidentiality and integrity of communications. Once the transport layer encryption fails, the entire login process may be exposed to the risk of network attacks.

[0003] Specifically, the QR code scanning authentication scheme in the prior art has the following defects: malicious applications can obtain Access Token by intercepting the authorization code and redirection URI (Uniform Resource Identifier), and then steal sensitive data; ID Token contains user authentication information, and if it is not transmitted encrypted, it is very easy to be intercepted by a man-in-the-middle attack; the authorization code may be intercepted during the front-end transmission process and used to illegally obtain the access token; criminals can bypass identity authentication by forging mobile phone authorization and other means, and then illegally obtain user information. Summary of the invention

[0004] The embodiments of the present application provide a quantum encryption identity authentication method to solve or at least partially solve the above technical problems.

[0005] Correspondingly, the embodiments of the present application also provide a quantum encryption identity authentication device, an electronic device and a storage medium to ensure the implementation and application of the above method.

[0006] In order to solve the above problems, the embodiment of the present application discloses a quantum encryption identity authentication method, which is applied to an identity authentication platform, wherein the identity authentication platform is connected to a terminal device for communication, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated on the authentication application. The method includes:

[0007] Receiving a QR code generation request sent by the authentication application through the quantum encryption toolkit;

[0008] According to the QR code generation request, returning a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit;

[0009] When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit;

[0010] Binding the user information with the QR code identifier;

[0011] Receiving an authorization code sent by the authentication application through the quantum encryption toolkit, the authorization code being generated according to the two-dimensional code identifier;

[0012] Performing identity authentication on the user according to the authorization code;

[0013] If the identity authentication is successful, the user information is returned to the authentication application through the quantum encryption toolkit.

[0014] In an optional embodiment of the present application, the quantum encryption toolkit is communicatively connected to the encryption service platform, and before receiving the QR code generation request sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0015] Controlling the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform;

[0016] Establishing a communication connection with the encryption service platform;

[0017] Receive a second token distributed by the encryption service platform.

[0018] In an optional embodiment of the present application, the two-dimensional code generation request includes at least the first token, and the returning a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request includes:

[0019] Obtain the first token in the QR code generation request;

[0020] Generate QR code content according to the first token;

[0021] Applying for a quantum key from the encryption service platform according to the second token to obtain the quantum key;

[0022] Encrypt the content of the two-dimensional code using the quantum key to obtain the target two-dimensional code embedded with the quantum key information;

[0023] Return the target QR code embedded with the quantum key information to the quantum encryption toolkit, so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returns the target QR code to the authentication application.

[0024] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit includes:

[0025] When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the quantum encryption toolkit is controlled to parse the target QR code according to the quantum key to obtain the QR code identifier of the target QR code;

[0026] Compare the two-dimensional code identifier with the cached two-dimensional code identifier;

[0027] If the QR code identifier is consistent with the cached QR code identifier, the authorization is confirmed to be successful;

[0028] Receive the two-dimensional code identifier of the target two-dimensional code and the user information of the user sent by the quantum encryption toolkit.

[0029] In an optional embodiment of the present application, after returning the target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the method further includes:

[0030] Receiving a QR code status polling request for the target QR code periodically sent by the authentication application through the quantum encryption toolkit;

[0031] According to the QR code status polling request, the current status of the target QR code is returned to the authentication application through the quantum encryption toolkit.

[0032] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code is a confirmation state, and before receiving the authorization code sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0033] When the current state of the target two-dimensional code is the confirmed state, generating the authorization code according to the two-dimensional code identifier;

[0034] Cache the authorization code to obtain a cached authorization code;

[0035] The authorization code and the current state of the target two-dimensional code are sent to the authentication application through the quantum encryption toolkit.

[0036] In an optional embodiment of the present application, authenticating the user according to the authorization code includes:

[0037] Compare the authorization code with the cached authorization code;

[0038] If the authorization code is consistent with the cached authorization code, a third token is generated, and there is a corresponding relationship between the third token and the user information of the user;

[0039] Cache the third token to obtain a cached third token;

[0040] Sending the third token to the authentication application via the quantum cryptography toolkit;

[0041] In the case where the user needs to perform identity authentication, receiving, through the quantum encryption toolkit, the third token sent by the user using the authentication application;

[0042] Comparing the third token with the cached third token;

[0043] If the third token is consistent with the cached third token, it is confirmed that the user identity authentication is passed;

[0044] According to the correspondence between the third token and the user information, the user information of the user is sent to the authentication application through the quantum encryption toolkit.

[0045] The embodiment of the present application also discloses a quantum encrypted identity authentication device, which is applied to an identity authentication platform, wherein the identity authentication platform is connected to a terminal device for communication, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated on the authentication application. The device comprises:

[0046] A request receiving module, used to receive a QR code generation request sent by the authentication application through the quantum encryption toolkit;

[0047] A two-dimensional code generation module, used to return a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request;

[0048] An authorization module, configured to receive the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization;

[0049] An information binding module, used to bind the user information with the QR code identifier;

[0050] An authorization code receiving module, used to receive an authorization code sent by the authentication application through the quantum encryption toolkit, wherein the authorization code is generated according to the two-dimensional code identifier;

[0051] An identity authentication module, used to authenticate the user according to the authorization code;

[0052] The information return module is used to return the user information to the authentication application through the quantum encryption toolkit if the identity authentication is passed.

[0053] An embodiment of the present application also discloses an electronic device, including: a processor; and a memory, on which executable code is stored. When the executable code is executed, the processor executes the quantum encryption identity authentication method as described in one or more of the embodiments of the present application.

[0054] The embodiments of the present application also disclose one or more machine-readable media on which executable codes are stored. When the executable codes are executed, the processor executes the quantum encryption identity authentication method as described in one or more of the embodiments of the present application.

[0055] Compared with the prior art, the embodiments of the present application have the following advantages:

[0056] In an embodiment of the present application, a QR code generation request sent by a receiving authentication application through a quantum encryption toolkit is returned; according to the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the QR code identifier of the target QR code sent by the receiving authentication application through the quantum encryption toolkit and the user information of the user are bound; the user information is bound to the QR code identifier; the authorization code sent by the receiving authentication application through the quantum encryption toolkit is generated according to the QR code identifier; according to the authorization code, the user is authenticated; if the identity authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the ability of quantum one-time one-key is integrated to ensure that the user's personal sensitive information is not leaked during the scanning code login process, avoiding malicious acquisition and abuse of user privacy data, thereby enhancing the user's trust in the scanning code login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 This is a flowchart of a quantum encryption identity authentication method embodiment of the present application;

[0058] Figure 2 This is a flowchart of generating a QR code according to an embodiment of a quantum encryption identity authentication method of the present application;

[0059] Figure 3 This is a user authorization flow chart of an embodiment of a quantum encryption identity authentication method of the present application;

[0060] Figure 4 This is an identity authentication flow chart of an embodiment of a quantum encryption identity authentication method of the present application;

[0061] Figure 5 This is a structural block diagram of an embodiment of a quantum encryption identity authentication device of the present application;

[0062] Figure 6 It is a schematic diagram of the structure of a device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0063] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, the present application is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0064] Reference Figure 1 , is a flowchart of a quantum encryption identity authentication method embodiment of the present application, comprising the following steps:

[0065] Step 101: Receive a QR code generation request sent by the authentication application through the quantum encryption toolkit.

[0066] A quantum encryption identity authentication method provided in an embodiment of the present application is applied to an identity authentication platform. The identity authentication platform is communicatively connected with a terminal device. An authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated in the authentication application.

[0067] Among them, the terminal device can be a mobile phone, a personal computer, etc. The authentication application is deployed on the mobile phone and / or the personal computer, and the quantum encryption toolkit is integrated in the authentication application. The quantum encryption toolkit is provided with multiple interfaces for connecting the authentication application, the identity authentication platform and the encryption service platform respectively, so as to connect the authentication application on the terminal device with the identity authentication platform. In one embodiment, the quantum encryption toolkit can be a quantum shield SDK (Software Development Kit, software development kit).

[0068] In step 101, a QR code generation request sent by an authentication application via a quantum encryption toolkit is received.

[0069] In this embodiment, the authentication application can send a QR code generation request to the identity authentication platform through the quantum encryption toolkit. In one embodiment, the authentication application on the PC (Personal Computer) side sends a QR code generation request to the identity authentication platform through the quantum encryption toolkit.

[0070] Step 102: According to the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit.

[0071] In step 102, the identity authentication platform generates a target QR code embedded with quantum key information according to the QR code generation request, caches the corresponding quantum key, and returns the target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit.

[0072] In one embodiment, the identity authentication platform returns a target QR code embedded with quantum key information to the authentication application on the PC via a quantum encryption toolkit.

[0073] Optionally, after the identity authentication platform returns the target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the authentication application can periodically send a QR code status polling request for the target QR code to the identity authentication platform through the quantum encryption toolkit, and the identity authentication platform can return the current status of the target QR code to the authentication application through the quantum encryption toolkit.

[0074] Step 103: When the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit are received.

[0075] In step 103, after the authentication application receives the target QR code embedded with quantum key information, it will be displayed. The user can scan the target QR code through the authentication application on the terminal device and confirm the authorization. At this time, the authentication application will send the QR code identifier of the target QR code and the user information of the user to the identity authentication platform through the quantum encryption toolkit. Among them, the QR code identifier is used to compare with the cached QR code identifier previously cached.

[0076] In an optional embodiment, the user scans the QR code displayed by the PC-side authentication application through the authentication application deployed on the mobile phone. After the user confirms the authorization, the current state of the target QR code can be changed to the confirmed state.

[0077] Step 104: Bind the user information with the QR code identifier.

[0078] In step 104, after the QR code identifier is compared and matched with the previously cached QR code identifier, the user information is bound to the QR code identifier. In one embodiment, after the user information is bound, a message reminder of "authorization success" can also be returned to the authentication application.

[0079] Step 105: Receive an authorization code sent by the authentication application through the quantum encryption toolkit, wherein the authorization code is generated according to the QR code identifier.

[0080] In step 105, after the authorization is completed, the identity authentication platform can generate an authorization code based on the QR code identifier according to the current state of the target QR code has been changed to the confirmation state, and send it to the authentication application through the quantum encryption toolkit. When the user needs to perform identity authentication, the authentication application can send the authorization code to the identity authentication platform through the quantum encryption toolkit for identity authentication.

[0081] Step 106: Authenticate the user according to the authorization code.

[0082] In step 106, after receiving the authorization code, the identity authentication platform performs identity authentication on the user according to the authorization code.

[0083] Step 107: If the identity authentication is successful, the user information is returned to the authentication application through the quantum encryption toolkit.

[0084] In step 107, when the identity authentication is passed, the identity authentication platform can return the user information to the authentication application through the quantum encryption toolkit. Since the authorization code is generated based on the QR code identifier, the identity authentication platform can return the user information bound to the QR code identifier.

[0085] In an embodiment of the present application, a QR code generation request sent by a receiving authentication application through a quantum encryption toolkit is returned; according to the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the QR code identifier of the target QR code sent by the receiving authentication application through the quantum encryption toolkit and the user information of the user are bound; the user information is bound to the QR code identifier; the authorization code sent by the receiving authentication application through the quantum encryption toolkit is generated according to the QR code identifier; according to the authorization code, the user is authenticated; if the identity authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the ability of quantum one-time one-key is integrated to ensure that the user's personal sensitive information is not leaked during the scanning code login process, avoiding malicious acquisition and abuse of user privacy data, thereby enhancing the user's trust in the scanning code login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information.

[0086] In an optional embodiment of the present application, the quantum encryption toolkit is communicatively connected to the encryption service platform, and before receiving the QR code generation request sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0087] Controlling the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform;

[0088] Establishing a communication connection with the encryption service platform;

[0089] Receive a second token distributed by the encryption service platform.

[0090] In this embodiment, before the identity authentication platform receives the request to generate a QR code, it is necessary to first initialize the encryption service platform, that is, it is necessary to first establish connections between the encryption service platform and the authentication application and the identity authentication platform.

[0091] For authentication applications, a communication connection can be established between the quantum encryption toolkit and the encryption service platform by integrating the quantum encryption toolkit. Since the quantum encryption toolkit is provided with multiple interfaces for connecting the authentication application, the identity authentication platform and the encryption service platform respectively, the authentication application on the terminal device can be connected to the identity authentication platform by integrating the quantum encryption toolkit. After the authentication application completes the initialization of the encryption service platform, the encryption service platform distributes the first token to the authentication application through the quantum encryption toolkit.

[0092] For the identity authentication platform, when the identity authentication platform is running, a communication connection is established with the encryption service platform, and a second token distributed by the encryption service platform is received.

[0093] The embodiment of the present application completes the initialization of the encryption service platform by establishing connections between the encryption service platform and the authentication application and the identity authentication platform, and provides quantum encryption services for subsequent steps such as generating a QR code and user identity authentication.

[0094] In an optional embodiment of the present application, the two-dimensional code generation request includes at least the first token, and the returning a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request includes:

[0095] Obtain the first token in the QR code generation request;

[0096] Generate QR code content according to the first token;

[0097] Applying for a quantum key from the encryption service platform according to the second token to obtain the quantum key;

[0098] Encrypt the content of the two-dimensional code using the quantum key to obtain the target two-dimensional code embedded with the quantum key information;

[0099] Return the target QR code embedded with the quantum key information to the quantum encryption toolkit, so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returns the target QR code to the authentication application.

[0100] In this embodiment, after the initialization of the encryption service platform is completed, the process of generating the target QR code may be as follows.

[0101] The authentication application sends a QR code generation request including a first token to the identity authentication platform through the quantum encryption toolkit. After receiving the QR code generation request, the identity authentication platform obtains the first token in the QR code generation request, generates QR code content according to the first token, and caches the QR code content.

[0102] The identity authentication platform applies for a quantum key from the encryption service platform based on the second token, and obtains the quantum key returned by the encryption service platform. Thus, the identity authentication platform can use the quantum key to encrypt the QR code content, obtain the target QR code embedded with the quantum key information, and return the target QR code embedded with the quantum key information to the quantum encryption toolkit.

[0103] After receiving the target QR code embedded with quantum key information, the quantum encryption toolkit first caches the quantum key and the cache QR code identifier of the target QR code, and then returns the target QR code to the authentication application. The authentication application displays the target QR code embedded with quantum key information to the user.

[0104] The embodiment of the present application generates a target QR code embedded with quantum key information based on the first token and the second token, which can ensure the security of the target QR code transmission, and the target QR code incorporates the quantum one-time pad capability, so that even if the QR code is intercepted, the information therein cannot be deciphered without the correct quantum key.

[0105] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit includes:

[0106] When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the quantum encryption toolkit is controlled to parse the target QR code according to the quantum key to obtain the QR code identifier of the target QR code;

[0107] Compare the two-dimensional code identifier with the cached two-dimensional code identifier;

[0108] If the QR code identifier is consistent with the cached QR code identifier, the authorization is confirmed to be successful;

[0109] Receive the two-dimensional code identifier of the target two-dimensional code and the user information of the user sent by the quantum encryption toolkit.

[0110] In this embodiment, the authorization of the user may specifically include the following steps. When the user uses the authentication application on the terminal device (usually the authentication application installed on the mobile phone) to scan the target QR code and confirms the authorization in the authentication application on the terminal device, the quantum encryption toolkit uploads the cached quantum key and the target QR code embedded with the quantum key information to the encryption service platform to parse the target QR code and obtain the QR code identifier of the target QR code returned by the encryption service platform.

[0111] The quantum encryption toolkit compares the QR code identifier returned by the encryption service platform with the cached QR code identifier. If the QR code identifier returned by the encryption service platform is consistent with the cached QR code identifier, the authorization can be confirmed to be successful, and the QR code identifier of the target QR code and the user's user information are sent to the identity authentication platform.

[0112] After the identity authentication platform receives the QR code identifier of the target QR code and the user information sent by the quantum encryption toolkit, it binds the user information to the QR code identifier and returns a reminder of successful authorization to the authentication application on the mobile phone through the quantum encryption toolkit to inform the user of the authorization status.

[0113] The embodiment of the present application confirms whether the user information is bound by comparing the QR code identification mark, thereby completing the authorization of the user, ensuring that the user's personal sensitive information is not leaked during the scanning code login process, avoiding the user's privacy data from being maliciously obtained and abused, and thus enhancing the user's trust in the scanning code login method.

[0114] In an optional embodiment of the present application, after returning the target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the method further includes:

[0115] Receiving a QR code status polling request for the target QR code periodically sent by the authentication application through the quantum encryption toolkit;

[0116] According to the QR code status polling request, the current status of the target QR code is returned to the authentication application through the quantum encryption toolkit.

[0117] In this embodiment, after the target QR code embedded with quantum key information is returned to the authentication application, the authentication application can periodically send a QR code status polling request for the target QR code through the quantum encryption toolkit to query the current status of the target QR code, thereby obtaining the authorization code issued by the authentication platform when the current status of the target QR code is a confirmed status.

[0118] After receiving the QR code status polling request, the identity authentication platform returns the current status of the target QR code to the authentication application through the quantum encryption toolkit.

[0119] The authentication application in the embodiment of the present application periodically polls the identity authentication platform for the current status of the target QR code, and can obtain the authorization code in time after the user authorization is successful, thereby authenticating the user.

[0120] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code is a confirmation state, and before receiving the authorization code sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0121] When the current state of the target two-dimensional code is the confirmed state, generating the authorization code according to the two-dimensional code identifier;

[0122] Cache the authorization code to obtain a cached authorization code;

[0123] The authorization code and the current state of the target two-dimensional code are sent to the authentication application through the quantum encryption toolkit.

[0124] In this embodiment, the detailed steps of the authentication application obtaining the authorization code can be represented as follows: When the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code switches to the confirmation state.

[0125] When the authentication application sends a QR code status polling request for the target QR code through the quantum encryption toolkit to query the current status of the target QR code, if the current status of the target QR code is a confirmed status, the identity authentication platform generates an authorization code based on the QR code identifier of the target QR code, and caches the authorization code to obtain a cached authorization code.

[0126] After the authentication platform uses the quantum key to encrypt the authorization code, it sends the encrypted authorization code and the current state of the target QR code to the authentication application through the quantum encryption toolkit. The authorization code can be used to authenticate the user and obtain the user's user information.

[0127] In the embodiment of the present application, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using a quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information, thereby protecting the information security of the user's authorization code.

[0128] In an optional embodiment of the present application, authenticating the user according to the authorization code includes:

[0129] Compare the authorization code with the cached authorization code;

[0130] If the authorization code is consistent with the cached authorization code, a third token is generated, and there is a corresponding relationship between the third token and the user information of the user;

[0131] Cache the third token to obtain a cached third token;

[0132] Sending the third token to the authentication application via the quantum cryptography toolkit;

[0133] In the case where the user needs to perform identity authentication, receiving, through the quantum encryption toolkit, the third token sent by the user using the authentication application;

[0134] Comparing the third token with the cached third token;

[0135] If the third token is consistent with the cached third token, it is confirmed that the user identity authentication is passed;

[0136] According to the correspondence between the third token and the user information, the user information of the user is sent to the authentication application through the quantum encryption toolkit.

[0137] In this embodiment, the specific process of authenticating the user according to the authorization code can be represented as follows: When the user needs to perform identity authentication, the authentication application can send the authorization code to the identity authentication platform through the quantum encryption toolkit for identity authentication.

[0138] After receiving the authorization code, the identity authentication platform compares the authorization code with the cached authorization code previously cached. If the authorization code sent by the authentication application is consistent with the cached authorization code, a third token is generated based on the authorization code. Since the third token is generated based on the authorization code, the authorization code is generated based on the QR code identifier of the target QR code, and the QR code identifier of the target QR code is bound to the user information of the user, there is a corresponding relationship between the third token and the user information of the user.

[0139] The identity authentication platform caches the generated third token, obtains the cached third token, and after encrypting the third token using the quantum key, sends the encrypted third token to the authentication application through the quantum encryption toolkit.

[0140] When the user needs to perform identity authentication, the authentication application can send the encrypted third token to the identity authentication platform through the quantum encryption toolkit. After receiving the encrypted third token, the identity authentication platform calls the encryption service platform to parse the third token according to the quantum key used in encryption.

[0141] The identity authentication platform compares the parsed third token returned by the encryption service platform with the cached third token. If the third token is consistent with the cached third token, the user identity authentication is confirmed to be successful, so that the user information corresponding to the third token can be confirmed based on the correspondence between the third token and the user information, and the user information of the user can be sent to the authentication application through the quantum encryption toolkit.

[0142] In the embodiment of the present application, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using a quantum key, incorporating the quantum one-time pad capability to prevent the third token from being brute-force cracked during data transmission, thereby avoiding malicious acquisition and abuse of user privacy data.

[0143] In an embodiment of the present application, a QR code generation request sent by a receiving authentication application through a quantum encryption toolkit is returned; according to the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the QR code identifier of the target QR code sent by the receiving authentication application through the quantum encryption toolkit and the user information of the user are bound; the user information is bound to the QR code identifier; the authorization code sent by the receiving authentication application through the quantum encryption toolkit is generated according to the QR code identifier; according to the authorization code, the user is authenticated; if the identity authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the ability of quantum one-time one-key is integrated to ensure that the user's personal sensitive information is not leaked during the scanning code login process, avoiding malicious acquisition and abuse of user privacy data, thereby enhancing the user's trust in the scanning code login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information.

[0144] In order to enable those skilled in the art to further understand a quantum encryption identity authentication method provided in an embodiment of the present application, the following will be Figure 2 , Figure 3 as well as Figure 4 A quantum encryption identity authentication method provided in an embodiment of the present application is described in detail and completely.

[0145] Reference Figure 2 , is a flowchart of generating a QR code in an embodiment of a quantum encryption identity authentication method of the present application.

[0146] like Figure 2As shown, the identity authentication platform is connected to the terminal device in communication, and the terminal device includes a mobile terminal and a PC terminal. The terminal devices are respectively deployed with authentication applications, namely, the mobile application to be connected and the PC terminal to be connected. The Quantum Shield SDK is integrated in the authentication application as a quantum encryption toolkit. The Quantum Shield SDK is provided with multiple interfaces for respectively connecting the authentication application, the identity authentication platform (i.e., the authentication system) and the encryption service platform (i.e., the National Shield Encryption Service Platform), so as to connect the authentication application on the terminal device to the identity authentication platform, the identity authentication platform to the encryption service platform, and the authentication application to the encryption service platform.

[0147] In one embodiment, when generating a target two-dimensional code embedded with quantum key information, the target two-dimensional code can be generated according to the following steps.

[0148] Step 201, the authentication system is connected to the National Shield Secret Service Platform to initialize the National Shield Secret Service Platform according to the parameters. After the initialization is successful, the National Shield Secret Service Platform returns a second token to the authentication system.

[0149] Step 202, the Quantity Shield SDK is connected to the National Shield Confidential Service Platform, and the National Shield Confidential Service Platform is initialized according to the parameters. After the initialization is successful, the National Shield Confidential Service Platform returns the first token (i.e., the first token) to the authentication system.

[0150] Step 203: Based on the first token, the PC to be connected requests the authentication system to generate a QR code through the Quantity Shield SDK.

[0151] Step 204: The authentication system generates and caches the QR code content according to the first token.

[0152] Step 205: The authentication system applies for a quantum key from the National Shield Confidential Service Platform based on the second token. After receiving the quantum key returned by the National Shield Confidential Service Platform, the authentication system uses the quantum key to encrypt the QR code content to obtain a target QR code embedded with quantum key information.

[0153] Step 206: Vector Shield SDK returns the target QR code embedded with quantum key information.

[0154] Step 207: After the Quantum Shield SDK caches the quantum key and QR code identifier, it returns the target QR code embedded with the quantum key information to the PC to be connected.

[0155] Step 208: The PC to be connected periodically polls the authentication system for the QR code status through the Quantity Shield SDK, and the authentication system returns the PC to be connected to the PC through the Quantity Shield SDK. Step 208 is executed in a loop.

[0156] Reference Figure 3 , is a user authorization flow chart of an embodiment of a quantum encryption identity authentication method of the present application.

[0157] like Figure 3 As shown, the identity authentication platform is connected to the terminal device in communication, and the terminal device includes a mobile terminal and a PC terminal. The terminal devices are respectively deployed with authentication applications, namely, the mobile application to be connected and the PC terminal to be connected. The Quantum Shield SDK is integrated in the authentication application as a quantum encryption toolkit. The Quantum Shield SDK is provided with multiple interfaces for respectively connecting the authentication application, the identity authentication platform (i.e., the authentication system) and the encryption service platform (i.e., the National Shield Encryption Service Platform), so as to connect the authentication application on the terminal device to the identity authentication platform, the identity authentication platform to the encryption service platform, and the authentication application to the encryption service platform.

[0158] In one embodiment, when authorizing a user, the user may be authorized according to the following steps.

[0159] Step 301: A user (ie, Actor) uses a mobile application to be connected to scan a target QR code.

[0160] Step 302: After the mobile application to be accessed identifies the type of the QR code, the user confirms the authorization through the mobile application to be accessed.

[0161] Step 303: Quantum Shield SDK calls the National Shield Cryptographic Service Platform, parses the QR code content through the quantum key, and obtains the QR code identifier returned by the National Shield Cryptographic Service Platform.

[0162] Step 304: Liangdun SDK compares the returned QR code identifier with the QR code identifier in the cache. After confirming that they are consistent, it authorizes login to the authentication system and uploads the QR code identifier and user information to the authentication system.

[0163] Step 305: The authentication system binds the QR code identifier to the user information and changes the QR code status to a confirmed status.

[0164] Step 306: The authentication system returns a message reminder of authorization success or authorization failure to the mobile application to be connected through the Quantity Shield SDK.

[0165] Reference Figure 4 , is an identity authentication flow chart of an embodiment of a quantum encryption identity authentication method of the present application.

[0166] like Figure 4As shown, the identity authentication platform is connected to the terminal device in communication, and the terminal device includes a mobile terminal and a PC terminal. The terminal devices are respectively deployed with authentication applications, namely, the mobile application to be connected and the PC terminal to be connected. The Quantum Shield SDK is integrated in the authentication application as a quantum encryption toolkit. The Quantum Shield SDK is provided with multiple interfaces for respectively connecting the authentication application, the identity authentication platform (i.e., the authentication system) and the encryption service platform (i.e., the National Shield Encryption Service Platform), so as to connect the authentication application on the terminal device to the identity authentication platform, the identity authentication platform to the encryption service platform, and the authentication application to the encryption service platform.

[0167] In one embodiment, when authenticating the identity of a user, the user may be authenticated according to the following steps.

[0168] Step 401: When the PC to be connected polls the authentication system for the QR code status through the Quantity Shield SDK, if the QR code status is confirmed at this time, the authentication system generates an authorization code through the QR code identifier and caches it.

[0169] Step 402: After the authentication system encrypts the authorization code using the quantum key, Vector Shield SDK returns the QR code status and the encrypted authorization code.

[0170] Step 403: The Quantum Shield SDK calls the National Shield Secret Service Platform, parses the authorization code according to the quantum key, and obtains the parsed authorization code returned by the National Shield Secret Service Platform. The Quantum Shield SDK returns the parsed authorization code and QR code status to the PC to be connected.

[0171] Step 404: When the user needs to perform identity authentication, the PC to be connected sends an authorization code to the authentication system through the Quantity Shield SDK to obtain a third token.

[0172] Step 405: The authentication system verifies the received authorization code based on the cached authorization code.

[0173] Step 406: After verification, the authentication system generates a third token based on the authorization code and caches it. After encrypting the third token with the quantum key, the third token is returned to the Quantum Shield SDK.

[0174] Step 407: Liangdun SDK sends the third token to the authentication system to obtain user information based on the third token.

[0175] Step 408: The authentication system calls the National Shield Confidential Service Platform to parse the third token according to the quantum key, obtains the parsed third token, and compares it with the cached third token.

[0176] Step 409: After the third token is compared and found to be consistent, the user information is returned to the PC to be connected via the Quantity Shield SDK.

[0177] In an embodiment of the present application, a QR code generation request sent by a receiving authentication application through a quantum encryption toolkit is returned; according to the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the QR code identifier of the target QR code sent by the receiving authentication application through the quantum encryption toolkit and the user information of the user are bound; the user information is bound to the QR code identifier; the authorization code sent by the receiving authentication application through the quantum encryption toolkit is generated according to the QR code identifier; according to the authorization code, the user is authenticated; if the identity authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the ability of quantum one-time one-key is integrated to ensure that the user's personal sensitive information is not leaked during the scanning code login process, avoiding malicious acquisition and abuse of user privacy data, thereby enhancing the user's trust in the scanning code login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information.

[0178] It should be noted that, for the method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present application are not limited by the described order of actions, because according to the embodiments of the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present application.

[0179] On the basis of the above embodiments, this embodiment further provides a quantum encryption identity authentication device, which is applied to electronic devices such as terminal devices and servers.

[0180] Reference Figure 5 , shows a structural block diagram of an embodiment of a quantum encryption identity authentication device of the present application, which may specifically include the following modules:

[0181] A request receiving module 501 is used to receive a QR code generation request sent by the authentication application through the quantum encryption toolkit;

[0182] A two-dimensional code generation module 502 is used to return a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request;

[0183] The authorization module 503 is used to receive the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization;

[0184] An information binding module 504, used to bind the user information with the QR code identifier;

[0185] An authorization code receiving module 505 is used to receive an authorization code sent by the authentication application through the quantum encryption toolkit, wherein the authorization code is generated according to the two-dimensional code identifier;

[0186] An identity authentication module 506, configured to authenticate the user according to the authorization code;

[0187] The information return module 507 is used to return the user information to the authentication application through the quantum encryption toolkit if the identity authentication is passed.

[0188] In an optional embodiment of the present application, the quantum encryption toolkit is communicatively connected to the encryption service platform, and the device further includes:

[0189] A first token acquisition module is used to control the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform;

[0190] A platform initialization module, used to establish a communication connection with the encryption service platform;

[0191] The second token acquisition module is used to receive the second token distributed by the encryption service platform.

[0192] In an optional embodiment of the present application, the two-dimensional code generation request includes at least the first token, and the two-dimensional code generation module 502 includes:

[0193] A first token extraction submodule, used to obtain the first token in the QR code generation request;

[0194] A QR code content generation submodule, used to generate QR code content according to the first token;

[0195] A quantum key application submodule, used to apply for a quantum key from the encryption service platform according to the second token to obtain the quantum key;

[0196] A two-dimensional code encryption submodule, used to encrypt the content of the two-dimensional code using the quantum key to obtain the target two-dimensional code embedded with the quantum key information;

[0197] The QR code returning submodule is used to return the target QR code embedded with the quantum key information to the quantum encryption toolkit, so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returns the target QR code to the authentication application.

[0198] In an optional embodiment of the present application, the authorization module 503 includes:

[0199] A two-dimensional code parsing submodule, used for controlling the quantum encryption toolkit to parse the target two-dimensional code according to the quantum key to obtain the two-dimensional code identifier of the target two-dimensional code when the user scans the target two-dimensional code through the authentication application on the terminal device and confirms the authorization;

[0200] A two-dimensional code comparison submodule, used for comparing the two-dimensional code identifier with the cached two-dimensional code identifier;

[0201] The authorization confirmation submodule is used to confirm that the authorization is successful if the two-dimensional code identifier is consistent with the cached two-dimensional code identifier;

[0202] The user information receiving submodule is used to receive the two-dimensional code identifier of the target two-dimensional code and the user information of the user sent by the quantum encryption toolkit.

[0203] In an optional embodiment of the present application, the device further includes:

[0204] A status polling module, used to receive a QR code status polling request for the target QR code sent periodically by the authentication application through the quantum encryption toolkit;

[0205] A status return module is used to return the current status of the target two-dimensional code to the authentication application through the quantum encryption toolkit according to the two-dimensional code status polling request.

[0206] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code is a confirmation state, and the device further includes:

[0207] An authorization code generation module, used to generate the authorization code according to the two-dimensional code identifier when the current state of the target two-dimensional code is the confirmation state;

[0208] An authorization code cache module is used to cache the authorization code to obtain a cached authorization code;

[0209] An authorization code sending module is used to send the authorization code and the current state of the target two-dimensional code to the authentication application through the quantum encryption toolkit.

[0210] In an optional embodiment of the present application, the identity authentication module 506 includes:

[0211] An authorization code comparison submodule, used to compare the authorization code with the cached authorization code;

[0212] A third token acquisition submodule, configured to generate a third token if the authorization code is consistent with the cached authorization code, wherein the third token corresponds to the user information of the user;

[0213] A third token cache submodule, used for caching the third token to obtain a cached third token;

[0214] A third token sending submodule, used to send the third token to the authentication application through the quantum encryption toolkit;

[0215] A third token receiving submodule is used to receive, through the quantum encryption toolkit, the third token sent by the user using the authentication application when the user needs to perform identity authentication;

[0216] A third token comparison submodule, used for comparing the third token with the cached third token;

[0217] An identity authentication confirmation submodule, configured to confirm that the user identity authentication is passed if the third token is consistent with the cached third token;

[0218] An identity information sending submodule is used to send the user information of the user to the authentication application through the quantum encryption toolkit according to the corresponding relationship between the third token and the user information.

[0219] In an embodiment of the present application, a QR code generation request sent by a receiving authentication application through a quantum encryption toolkit is returned; according to the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the QR code identifier of the target QR code sent by the receiving authentication application through the quantum encryption toolkit and the user information of the user are bound; the user information is bound to the QR code identifier; the authorization code sent by the receiving authentication application through the quantum encryption toolkit is generated according to the QR code identifier; according to the authorization code, the user is authenticated; if the identity authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the ability of quantum one-time one-key is integrated to ensure that the user's personal sensitive information is not leaked during the scanning code login process, avoiding malicious acquisition and abuse of user privacy data, thereby enhancing the user's trust in the scanning code login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information.

[0220] The embodiment of the present application also provides a non-volatile readable storage medium, which stores one or more modules (programs). When the one or more modules are applied to a device, the device can execute instructions (instructions) of each method step in the embodiment of the present application.

[0221] The present application embodiment provides one or more machine-readable media on which instructions are stored, and when executed by one or more processors, an electronic device executes one or more of the methods described in the above embodiments. In the present application embodiment, the electronic device includes various types of devices such as terminal devices and servers (clusters).

[0222] The embodiments of the present disclosure may be implemented as a device configured as desired using any appropriate hardware, firmware, software, or any combination thereof, and the device may include electronic devices such as terminal devices and servers (clusters). Figure 6 An exemplary apparatus 600 that may be used to implement various embodiments described in this application is schematically illustrated.

[0223] For one embodiment, Figure 6An exemplary apparatus 600 is shown having one or more processors 602, a control module (chip set) 604 coupled to at least one of the processor(s) 602, a memory 606 coupled to the control module 604, a non-volatile memory (NVM) / storage device 608 coupled to the control module 604, one or more input / output devices 610 coupled to the control module 604, and a network interface 612 coupled to the control module 604.

[0224] The processor 602 may include one or more single-core or multi-core processors, and the processor 602 may include any combination of general-purpose processors or special-purpose processors (such as graphics processors, application processors, baseband processors, etc.). In some embodiments, the device 600 can be used as a terminal device, server (cluster), etc. described in the embodiments of the present application.

[0225] In some embodiments, the apparatus 600 may include one or more computer-readable media (e.g., memory 606 or NVM / storage device 608) having instructions 614 and one or more processors 602 combined with the one or more computer-readable media and configured to execute the instructions 614 to implement a module to perform the actions described in the present disclosure.

[0226] For one embodiment, control module 604 may include any suitable interface controller to provide any suitable interface to at least one of processor(s) 602 and / or any suitable device or component in communication with control module 604 .

[0227] The control module 604 may include a memory controller module to provide an interface to the memory 606. The memory controller module may be a hardware module, a software module, and / or a firmware module.

[0228] The memory 606 may be used, for example, to load and store data and / or instructions 614 for the device 600. For one embodiment, the memory 606 may include any suitable volatile memory, such as a suitable DRAM. In some embodiments, the memory 606 may include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0229] For one embodiment, control module 604 may include one or more input / output controllers to provide an interface to NVM / storage device 608 and input / output device(s) 610 .

[0230] For example, NVM / storage 608 may be used to store data and / or instructions 614. NVM / storage 608 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable non-volatile storage device(s) (e.g., one or more hard disk drives (HDDs), one or more compact disk (CD) drives, and / or one or more digital versatile disk (DVD) drives).

[0231] NVM / storage device 608 may include storage resources that are physically part of the device on which apparatus 600 is installed, or it may be accessible to the device without being part of the device. For example, NVM / storage device 608 may be accessed via input / output device(s) 610 over a network.

[0232] (One or more) input / output devices 610 may provide an interface for the apparatus 600 to communicate with any other appropriate device, and the input / output device 610 may include a communication component, an audio component, a sensor component, etc. The network interface 612 may provide an interface for the apparatus 600 to communicate through one or more networks, and the apparatus 600 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and / or protocols, for example, access a wireless network based on a communication standard, such as WiFi, 2G, 3G, 4G, 5G, etc., or a combination thereof for wireless communication.

[0233] For one embodiment, at least one of the processor(s) 602 may be packaged together with the logic of one or more controllers (e.g., a memory controller module) of the control module 604. For one embodiment, at least one of the processor(s) 602 may be packaged together with the logic of one or more controllers of the control module 604 to form a system-in-package (SiP). For one embodiment, at least one of the processor(s) 602 may be integrated on the same die with the logic of one or more controllers of the control module 604. For one embodiment, at least one of the processor(s) 602 may be integrated on the same die with the logic of one or more controllers of the control module 604 to form a system-on-chip (SoC).

[0234] In various embodiments, the device 600 may be, but is not limited to, a terminal device such as a server, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, the device 600 may have more or fewer components and / or a different architecture. For example, in some embodiments, the device 600 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touch screen display), a non-volatile memory port, multiple antennas, a graphics chip, an application-specific integrated circuit (ASIC), and a speaker.

[0235] Among them, the main control chip can be used as a processor or control module in the detection device, sensor data, location information, etc. are stored in a memory or NVM / storage device, the sensor group can be used as an input / output device, and the communication interface may include a network interface.

[0236] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0237] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0238] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable quantum encryption identity authentication terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable quantum encryption identity authentication terminal device generate instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0239] These computer program instructions may also be stored in a computer-readable memory that can guide a computer or other programmable quantum encryption identity authentication terminal device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0240] These computer program instructions can also be loaded onto a computer or other programmable quantum encryption identity authentication terminal device, so that a series of operation steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable terminal device provide for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0241] Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present application.

[0242] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0243] The above is a detailed introduction to a quantum encryption identity authentication method and device, an electronic device and a storage medium provided by the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A quantum encryption identity authentication method, characterized in that: Applied to an identity authentication platform, the identity authentication platform is in communication connection with a terminal device, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated on the authentication application, the method comprises: Receiving a QR code generation request sent by the authentication application through the quantum encryption toolkit; According to the QR code generation request, returning a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit; When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit; Binding the user information with the QR code identifier; Receiving an authorization code sent by the authentication application through the quantum encryption toolkit, the authorization code being generated according to the two-dimensional code identifier; Performing identity authentication on the user according to the authorization code; If the identity authentication is successful, the user information is returned to the authentication application through the quantum encryption toolkit.

2. The method according to claim 1, characterized in that The quantum encryption toolkit is communicatively connected to the encryption service platform, and before receiving the QR code generation request sent by the authentication application through the quantum encryption toolkit, the method further includes: Controlling the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform; Establishing a communication connection with the encryption service platform; Receive a second token distributed by the encryption service platform.

3. The method according to claim 2, characterized in that The two-dimensional code generation request includes at least the first token, and returning a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request includes: Obtain the first token in the QR code generation request; Generate QR code content according to the first token; Applying for a quantum key from the encryption service platform according to the second token to obtain the quantum key; Encrypt the content of the two-dimensional code using the quantum key to obtain the target two-dimensional code embedded with the quantum key information; Return the target QR code embedded with the quantum key information to the quantum encryption toolkit, so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returns the target QR code to the authentication application.

4. The method according to claim 3, characterized in that: When the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit, including: When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the quantum encryption toolkit is controlled to parse the target QR code according to the quantum key to obtain the QR code identifier of the target QR code; Compare the two-dimensional code identifier with the cached two-dimensional code identifier; If the QR code identifier is consistent with the cached QR code identifier, the authorization is confirmed to be successful; Receive the two-dimensional code identifier of the target two-dimensional code and the user information of the user sent by the quantum encryption toolkit.

5. The method according to claim 1, characterized in that After returning the target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the method further includes: Receiving a QR code status polling request for the target QR code periodically sent by the authentication application through the quantum encryption toolkit; According to the QR code status polling request, the current status of the target QR code is returned to the authentication application through the quantum encryption toolkit.

6. The method according to claim 5, characterized in that When the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code is a confirmation state. Before receiving the authorization code sent by the authentication application through the quantum encryption toolkit, the method further includes: When the current state of the target two-dimensional code is the confirmed state, generating the authorization code according to the two-dimensional code identifier; Cache the authorization code to obtain a cached authorization code; The authorization code and the current state of the target two-dimensional code are sent to the authentication application through the quantum encryption toolkit.

7. The method according to claim 6, characterized in that The step of authenticating the user according to the authorization code includes: Compare the authorization code with the cached authorization code; If the authorization code is consistent with the cached authorization code, a third token is generated, and there is a corresponding relationship between the third token and the user information of the user; Cache the third token to obtain a cached third token; Sending the third token to the authentication application via the quantum cryptography toolkit; In the case where the user needs to perform identity authentication, receiving, through the quantum encryption toolkit, the third token sent by the user using the authentication application; Comparing the third token with the cached third token; If the third token is consistent with the cached third token, it is confirmed that the user identity authentication is passed; According to the correspondence between the third token and the user information, the user information of the user is sent to the authentication application through the quantum encryption toolkit.

8. A quantum encrypted identity authentication device, characterized in that: Applied to an identity authentication platform, the identity authentication platform is connected to a terminal device for communication, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated on the authentication application. The device comprises: A request receiving module, used to receive a QR code generation request sent by the authentication application through the quantum encryption toolkit; A two-dimensional code generation module, used to return a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request; An authorization module, configured to receive the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit when the user scans the target QR code through the authentication application on the terminal device and confirms the authorization; An information binding module, used to bind the user information with the QR code identifier; An authorization code receiving module, used to receive an authorization code sent by the authentication application through the quantum encryption toolkit, wherein the authorization code is generated according to the two-dimensional code identifier; An identity authentication module, used to authenticate the user according to the authorization code; The information return module is used to return the user information to the authentication application through the quantum encryption toolkit if the identity authentication is passed.

9. An electronic device, characterized in that: include: processor; and A memory having executable codes stored thereon, which, when executed, causes the processor to execute the quantum encryption identity authentication method as described in one or more of claims 1-7.

10. One or more machine-readable media having executable codes stored thereon, which, when executed, cause a processor to execute the quantum encryption identity authentication method as described in one or more of claims 1-7.

Images