Quantum encryption identity authentication method, device and equipment and storage medium

Abstract

Embodiments of the present application provide a quantum encryption identity authentication method and device, equipment and a storage medium. A two-dimensional code generation request sent by an authentication application through a quantum encryption toolkit is received. According to the two-dimensional code generation request, a target two-dimensional code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit. When a user scans the target two-dimensional code through the authentication application and confirms authorization, a two-dimensional code identifier of the target two-dimensional code and user information of the user sent by the authentication application through the quantum encryption toolkit are received. The user information is bound with the two-dimensional code identifier. An authorization code sent by the authentication application through the quantum encryption toolkit is received. The authorization code is generated according to the two-dimensional code identifier. The user is authenticated according to the authorization code. If the authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiments of the present application realize high security by fusing the quantum key and the two-dimensional code content.

Description

Technical Field

[0001] The present application relates to the field of identity authentication technology, and in particular to a quantum encryption identity authentication method and device, an electronic device, and a storage medium. Background Art

[0002] Traditional QR code authentication is typically implemented using the OIDC (OpenID Connect) protocol, an authentication layer. However, this protocol does not encrypt key information during the interaction process. The OIDC protocol relies heavily on transport layer security mechanisms such as HTTPS (HyperText Transfer Protocol Secure) to ensure the confidentiality and integrity of communications. If transport layer encryption fails, the entire login process may be exposed to the risk of cyberattacks.

[0003] Specifically, the QR code scanning authentication scheme in the existing technology has the following defects: malicious applications can obtain Access Token by intercepting the authorization code and redirection URI (Uniform Resource Identifier), and then steal sensitive data; ID Token contains user authentication information, and if it is not transmitted encrypted, it is very easy to be intercepted by man-in-the-middle attacks; the authorization code may be intercepted during the front-end transmission process and used to illegally obtain access tokens; criminals can bypass identity authentication by forging mobile phone authorization and other means, and then illegally obtain user information. Summary of the Invention

[0004] The embodiments of the present application provide a quantum encryption identity authentication method to solve or at least partially solve the above technical problems.

[0005] Correspondingly, the embodiments of the present application also provide a quantum encryption identity authentication device, an electronic device and a storage medium to ensure the implementation and application of the above method.

[0006] To address the above issues, the present invention discloses a quantum encryption identity authentication method, which is applied to an identity authentication platform. The identity authentication platform is in communication with a terminal device, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated into the authentication application. The method includes:

[0007] Receiving a QR code generation request sent by the authentication application through the quantum encryption toolkit;

[0008] Returning a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the QR code generation request;

[0009] receiving a two-dimensional code identifier of the target two-dimensional code sent by the authentication application through the quantum encryption toolkit and user information of the user when the user scans the target two-dimensional code through the authentication application on the terminal device and confirms authorization;

[0010] binding the user information with the two-dimensional code identifier;

[0011] receiving an authorization code sent by the authentication application through the quantum encryption toolkit, the authorization code being generated according to the two-dimensional code identifier;

[0012] performing identity authentication on the user according to the authorization code;

[0013] if the identity authentication is passed, returning the user information to the authentication application through the quantum encryption toolkit.

[0014] In an optional embodiment of the present application, the quantum encryption toolkit is in communication connection with an encryption service platform, and before the receiving of the two-dimensional code generation request sent by the authentication application through the quantum encryption toolkit, the method further comprises:

[0015] controlling the authentication application to establish a communication connection between the quantum encryption toolkit and the encryption service platform, so that the authentication application receives a first token distributed by the encryption service platform;

[0016] establishing a communication connection with the encryption service platform;

[0017] receiving a second token distributed by the encryption service platform.

[0018] In an optional embodiment of the present application, the two-dimensional code generation request at least includes the first token, and the returning of the target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request comprises:

[0019] obtaining the first token in the two-dimensional code generation request;

[0020] generating two-dimensional code content according to the first token;

[0021] applying for a quantum key from the encryption service platform according to the second token, to obtain the quantum key;

[0022] encrypting the two-dimensional code content using the quantum key, to obtain the target two-dimensional code embedded with quantum key information;

[0023] Returning the target QR code embedded with the quantum key information to the quantum encryption toolkit so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returning the target QR code to the authentication application.

[0024] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit includes:

[0025] When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, controlling the quantum encryption toolkit to parse the target QR code according to the quantum key to obtain the QR code identifier of the target QR code;

[0026] Comparing the QR code identifier with the cached QR code identifier;

[0027] If the QR code identifier is consistent with the cached QR code identifier, the authorization is confirmed to be successful;

[0028] Receive the QR code identifier of the target QR code and the user information of the user sent by the quantum encryption toolkit.

[0029] In an optional embodiment of the present application, after returning the target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the method further includes:

[0030] Receiving a QR code status polling request for the target QR code sent periodically by the authentication application through the quantum encryption toolkit;

[0031] According to the QR code status polling request, the current status of the target QR code is returned to the authentication application through the quantum encryption toolkit.

[0032] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the current state of the target QR code is a confirmation state. Before receiving the authorization code sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0033] When the current state of the target QR code is the confirmed state, generating the authorization code according to the QR code identifier;

[0034] Cache the authorization code to obtain a cached authorization code;

[0035] The authorization code and the current state of the target QR code are sent to the authentication application via the quantum encryption toolkit.

[0036] In an optional embodiment of the present application, authenticating the user according to the authorization code includes:

[0037] Comparing the authorization code with the cached authorization code;

[0038] If the authorization code is consistent with the cached authorization code, a third token is generated, and the third token corresponds to the user information of the user;

[0039] caching the third token to obtain a cached third token;

[0040] Sending the third token to the authentication application via the quantum cryptography toolkit;

[0041] In a case where the user needs to perform identity authentication, receiving, through the quantum encryption toolkit, the third token sent by the user using the authentication application;

[0042] comparing the third token with the cached third token;

[0043] If the third token is consistent with the cached third token, the user identity authentication is confirmed to be successful;

[0044] According to the correspondence between the third token and the user information, the user information of the user is sent to the authentication application through the quantum encryption toolkit.

[0045] The present application also discloses a quantum encryption identity authentication device, which is applied to an identity authentication platform. The identity authentication platform is in communication with a terminal device, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated into the authentication application. The device includes:

[0046] A request receiving module, configured to receive a QR code generation request sent by the authentication application via the quantum encryption toolkit;

[0047] A QR code generation module, configured to return a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the QR code generation request;

[0048] an authorization module, configured to receive the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit when the user scans the target QR code through the authentication application on the terminal device and confirms authorization;

[0049] An information binding module, used to bind the user information with the QR code identifier;

[0050] An authorization code receiving module, configured to receive an authorization code sent by the authentication application via the quantum encryption toolkit, the authorization code being generated based on the QR code identifier;

[0051] An identity authentication module, configured to authenticate the user according to the authorization code;

[0052] An information return module is used to return the user information to the authentication application through the quantum encryption toolkit if the identity authentication is passed.

[0053] An embodiment of the present application also discloses an electronic device, including: a processor; and a memory, on which executable code is stored. When the executable code is executed, the processor executes the quantum encryption identity authentication method as described in one or more embodiments of the present application.

[0054] The embodiments of the present application also disclose one or more machine-readable media having executable codes stored thereon. When the executable codes are executed, the processor executes the quantum encryption identity authentication method as described in one or more embodiments of the present application.

[0055] Compared with the prior art, the embodiments of the present application have the following advantages:

[0056] In an embodiment of the present application, a QR code generation request is received from an authentication application via a quantum encryption toolkit; based on the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application via the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the QR code identifier of the target QR code sent by the authentication application via the quantum encryption toolkit and the user's user information are bound; the user information is bound to the QR code identifier; the authorization code is received from the authentication application via the quantum encryption toolkit, and the authorization code is generated based on the QR code identifier; based on the authorization code, the user is authenticated; if the identity authentication is successful, the user information is returned to the authentication application via the quantum encryption toolkit. This embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the integration of the quantum one-time pad capability ensures that the user's personal sensitive information is not leaked during the code scanning login process, preventing the user's privacy data from being maliciously acquired and abused, thereby enhancing the user's trust in the code scanning login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher its content, let alone forge valid authorization information. BRIEF DESCRIPTION OF DRAWINGS

[0057] Figure 1 is a step flow chart of an embodiment of a quantum encryption identity authentication method of the present application;

[0058] Figure 2 is a flow chart of generating a two-dimensional code of an embodiment of a quantum encryption identity authentication method of the present application;

[0059] Figure 3 is a user authorization flow chart of an embodiment of a quantum encryption identity authentication method of the present application;

[0060] Figure 4 is an identity authentication flow chart of an embodiment of a quantum encryption identity authentication method of the present application;

[0061] Figure 5 is a structural block diagram of an embodiment of a quantum encryption identity authentication device of the present application;

[0062] Figure 6 is a structural schematic diagram of the device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0063] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the present application will be further described in detail below with reference to the drawings and specific embodiments.

[0064] Reference Figure 1 is a step flow chart of an embodiment of a quantum encryption identity authentication method of the present application, comprising the following steps:

[0065] Step 101, receiving a two-dimensional code generation request sent by the authentication application through the quantum encryption toolkit.

[0066] A quantum encryption identity authentication method provided by an embodiment of the present application is applied to an identity authentication platform. The identity authentication platform is in communication connection with a terminal device. An authentication application is deployed on the terminal device. A quantum encryption toolkit is integrated on the authentication application.

[0067] The terminal device can be a mobile phone, a personal computer, etc. The authentication application is deployed on the mobile phone and / or the personal computer. The quantum encryption toolkit is integrated in the authentication application. The quantum encryption toolkit is provided with a plurality of interfaces for connecting the authentication application, the identity authentication platform and the encryption service platform, so as to connect the authentication application on the terminal device and the identity authentication platform. In an embodiment, the quantum encryption toolkit can be a Qunatum SDK (Software Development Kit).

[0068] In step 101, the receiving authentication application sends a two-dimensional code generation request through the quantum encryption toolkit.

[0069] In this embodiment, the authentication application can send a two-dimensional code generation request to the identity authentication platform through the quantum encryption toolkit. In one embodiment, the authentication application on the PC (Personal Computer) sends a two-dimensional code generation request to the identity authentication platform through the quantum encryption toolkit.

[0070] In step 102, according to the two-dimensional code generation request, the target two-dimensional code embedded with quantum key information is returned to the authentication application through the quantum encryption toolkit.

[0071] In step 102, the identity authentication platform generates a target two-dimensional code embedded with quantum key information according to the two-dimensional code generation request, caches the corresponding quantum key, and returns the target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit.

[0072] In one embodiment, the identity authentication platform returns the target two-dimensional code embedded with quantum key information to the authentication application on the PC through the quantum encryption toolkit.

[0073] Optionally, after the identity authentication platform returns the target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the authentication application can send a two-dimensional code state polling request for the target two-dimensional code to the identity authentication platform through the quantum encryption toolkit at regular intervals, and the identity authentication platform can return the current state of the target two-dimensional code to the authentication application through the quantum encryption toolkit.

[0074] In step 103, when the user scans the target two-dimensional code through the authentication application on the terminal device and confirms authorization, the receiving authentication application sends the two-dimensional code identifier of the target two-dimensional code and the user information of the user through the quantum encryption toolkit.

[0075] In step 103, after the authentication application receives the target two-dimensional code embedded with quantum key information, it will be displayed. The user can scan the target two-dimensional code through the authentication application on the terminal device and confirm authorization, at which time the authentication application sends the two-dimensional code identifier of the target two-dimensional code and the user information of the user to the identity authentication platform through the quantum encryption toolkit. The two-dimensional code identifier is used to compare with the previously cached cache two-dimensional code identifier.

[0076] In one optional embodiment, the user scans the two-dimensional code displayed by the PC authentication application through the authentication application deployed on the mobile phone. After the user confirms authorization, the current state of the target two-dimensional code can be changed to a confirmed state.

[0077] Step 104: Bind the user information with the QR code identifier.

[0078] In step 104, after the QR code identifier is compared with the previously cached QR code identifier, the user information is bound to the QR code identifier. In one embodiment, after the user information binding is completed, a message reminder of "authorization successful" can also be returned to the authentication application.

[0079] Step 105: Receive an authorization code sent by the authentication application through the quantum encryption toolkit, where the authorization code is generated based on the QR code identifier.

[0080] In step 105, after authorization is complete, the identity authentication platform can generate an authorization code based on the QR code identifier, as the current state of the target QR code has changed to the confirmed state. This code is then sent to the authentication application via the quantum encryption toolkit. When the user needs to authenticate themselves, the authentication application can send this authorization code to the identity authentication platform via the quantum encryption toolkit for authentication.

[0081] Step 106: Authenticate the user according to the authorization code.

[0082] In step 106, after receiving the authorization code, the identity authentication platform performs identity authentication on the user according to the authorization code.

[0083] Step 107: If the identity authentication is successful, the user information is returned to the authentication application through the quantum encryption toolkit.

[0084] In step 107, when the identity authentication is successful, the identity authentication platform can return the user information to the authentication application through the quantum encryption toolkit. Since the authorization code is generated based on the QR code identifier, the identity authentication platform can return the user information bound to the QR code identifier.

[0085] In an embodiment of the present application, a QR code generation request is received from an authentication application via a quantum encryption toolkit; based on the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application via the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the QR code identifier of the target QR code sent by the authentication application via the quantum encryption toolkit and the user's user information are bound; the user information is bound to the QR code identifier; the authorization code is received from the authentication application via the quantum encryption toolkit, and the authorization code is generated based on the QR code identifier; based on the authorization code, the user is authenticated; if the identity authentication is successful, the user information is returned to the authentication application via the quantum encryption toolkit. This embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the integration of the quantum one-time pad capability ensures that the user's personal sensitive information is not leaked during the code scanning login process, preventing the user's privacy data from being maliciously acquired and abused, thereby enhancing the user's trust in the code scanning login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher its content, let alone forge valid authorization information.

[0086] In an optional embodiment of the present application, the quantum encryption toolkit is communicatively connected to the encryption service platform. Before receiving the QR code generation request sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0087] Controlling the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform;

[0088] Establishing a communication connection with the encryption service platform;

[0089] Receive a second token distributed by the encryption service platform.

[0090] In this embodiment, before the identity authentication platform receives the QR code generation request, it is necessary to initialize the encryption service platform first, that is, it is necessary to establish connections between the encryption service platform and the authentication application and the identity authentication platform respectively.

[0091] For authentication applications, a quantum cryptography toolkit can be integrated to establish a communication connection between the toolkit and the encryption service platform. Because the toolkit has multiple interfaces for connecting to the authentication application, the identity authentication platform, and the encryption service platform, integrating the toolkit allows the authentication application on the terminal device to connect to the identity authentication platform. After the authentication application initializes the encryption service platform, the encryption service platform distributes a first token to the authentication application via the toolkit.

[0092] For the identity authentication platform, when the identity authentication platform is running, a communication connection is established between the identity authentication platform and the encryption service platform, and the second token distributed by the encryption service platform is received.

[0093] The embodiment of the present application completes the initialization of the encryption service platform by establishing connections between the encryption service platform and the authentication application and identity authentication platform respectively, and provides quantum encryption services for subsequent steps such as generating QR codes and user identity authentication.

[0094] In an optional embodiment of the present application, the QR code generation request includes at least the first token, and returning a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the QR code generation request includes:

[0095] Obtain the first token in the QR code generation request;

[0096] Generate QR code content according to the first token;

[0097] Applying for a quantum key from the encryption service platform according to the second token to obtain the quantum key;

[0098] Encrypting the QR code content using the quantum key to obtain the target QR code embedded with the quantum key information;

[0099] Returning the target QR code embedded with the quantum key information to the quantum encryption toolkit, so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returning the target QR code to the authentication application.

[0100] In this embodiment, after the encryption service platform is initialized, the target QR code generation process may be as follows.

[0101] The authentication application sends a QR code generation request containing a first token to the identity authentication platform via the quantum cryptography toolkit. Upon receiving the QR code generation request, the identity authentication platform obtains the first token in the QR code generation request, generates QR code content based on the first token, and caches the QR code content.

[0102] Based on the second token, the identity authentication platform applies for a quantum key from the encryption service platform and receives a quantum key from the encryption service platform. The identity authentication platform can then use the quantum key to encrypt the QR code content, obtaining a target QR code embedded with the quantum key information and returning the target QR code embedded with the quantum key information to the quantum encryption toolkit.

[0103] After receiving the target QR code embedded with the quantum key information, the quantum encryption toolkit first caches the quantum key and the cached QR code identifier of the target QR code, and then returns the target QR code to the authentication application. The authentication application then displays the target QR code embedded with the quantum key information to the user.

[0104] The embodiment of the present application generates a target QR code embedded with quantum key information based on the first token and the second token, which can ensure the security of the target QR code transmission. In addition, the target QR code incorporates the quantum one-time pad capability, so that even if the QR code is intercepted, the information therein cannot be deciphered without the correct quantum key.

[0105] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit includes:

[0106] When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, controlling the quantum encryption toolkit to parse the target QR code according to the quantum key to obtain the QR code identifier of the target QR code;

[0107] Comparing the QR code identifier with the cached QR code identifier;

[0108] If the QR code identifier is consistent with the cached QR code identifier, the authorization is confirmed to be successful;

[0109] Receive the QR code identifier of the target QR code and the user information of the user sent by the quantum encryption toolkit.

[0110] In this embodiment, user authorization may specifically include the following steps: When the user uses an authentication application on a terminal device (usually an authentication application installed on a mobile phone) to scan a target QR code and confirms authorization within the authentication application on the terminal device, the quantum encryption toolkit uploads the cached quantum key and the target QR code embedded with the quantum key information to the encryption service platform to parse the target QR code and obtain a QR code identifier of the target QR code returned by the encryption service platform.

[0111] The quantum encryption toolkit compares the QR code identifier returned by the encryption service platform with the cached QR code identifier. If the QR code identifier returned by the encryption service platform is consistent with the cached QR code identifier, the authorization is confirmed to be successful, and the QR code identifier of the target QR code and the user's user information are sent to the identity authentication platform.

[0112] After the identity authentication platform receives the QR code identifier of the target QR code sent by the quantum encryption toolkit and the user's user information, it binds the user information with the QR code identifier and returns a reminder of successful authorization to the authentication application on the mobile phone through the quantum encryption toolkit to inform the user of the authorization status.

[0113] The embodiment of the present application confirms whether the user information is bound by comparing the QR code identification, thereby completing the authorization of the user, ensuring that the user's personal sensitive information is not leaked during the scanning code login process, avoiding the user's privacy data from being maliciously obtained and abused, and thus enhancing the user's trust in the scanning code login method.

[0114] In an optional embodiment of the present application, after returning the target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit, the method further includes:

[0115] Receiving a QR code status polling request for the target QR code sent periodically by the authentication application through the quantum encryption toolkit;

[0116] According to the QR code status polling request, the current status of the target QR code is returned to the authentication application through the quantum encryption toolkit.

[0117] In this embodiment, after the target QR code embedded with quantum key information is returned to the authentication application, the authentication application can periodically send a QR code status polling request for the target QR code through the quantum encryption toolkit to query the current status of the target QR code, so that when the current status of the target QR code is the confirmed status, the authorization code issued by the authentication platform can be obtained.

[0118] After receiving the QR code status polling request, the identity authentication platform returns the current status of the target QR code to the authentication application through the quantum encryption toolkit.

[0119] The authentication application in the embodiment of the present application periodically polls the identity authentication platform for the current status of the target QR code, and can obtain the authorization code in time after the user authorization is successful, thereby authenticating the user.

[0120] In an optional embodiment of the present application, when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the current state of the target QR code is a confirmation state. Before receiving the authorization code sent by the authentication application through the quantum encryption toolkit, the method further includes:

[0121] When the current state of the target QR code is the confirmed state, generating the authorization code according to the QR code identifier;

[0122] Cache the authorization code to obtain a cached authorization code;

[0123] The authorization code and the current state of the target QR code are sent to the authentication application via the quantum encryption toolkit.

[0124] In this embodiment, the detailed steps of the authentication application obtaining the authorization code can be shown as follows: When the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code switches to the confirmation state.

[0125] When the authentication application sends a QR code status polling request for the target QR code through the quantum encryption toolkit to query the current status of the target QR code, if the current status of the target QR code is a confirmed status, the identity authentication platform generates an authorization code based on the QR code identifier of the target QR code, and caches the authorization code to obtain a cached authorization code.

[0126] The authentication platform encrypts the authorization code using a quantum key and sends the encrypted authorization code and the current state of the target QR code to the authentication application via a quantum encryption toolkit. The authorization code can be used to authenticate the user and obtain their user information.

[0127] In the embodiment of the present application, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using quantum keys. Even if an attacker intercepts this information, he or she will not be able to decipher the content, let alone forge valid authorization information, thereby protecting the information security of the user's authorization code.

[0128] In an optional embodiment of the present application, authenticating the user according to the authorization code includes:

[0129] Comparing the authorization code with the cached authorization code;

[0130] If the authorization code is consistent with the cached authorization code, a third token is generated, and the third token corresponds to the user information of the user;

[0131] caching the third token to obtain a cached third token;

[0132] Sending the third token to the authentication application via the quantum cryptography toolkit;

[0133] In a case where the user needs to perform identity authentication, receiving, through the quantum encryption toolkit, the third token sent by the user using the authentication application;

[0134] comparing the third token with the cached third token;

[0135] If the third token is consistent with the cached third token, the user identity authentication is confirmed to be successful;

[0136] According to the correspondence between the third token and the user information, the user information of the user is sent to the authentication application through the quantum encryption toolkit.

[0137] In this embodiment, the specific process of authenticating the user according to the authorization code can be represented as follows: When the user needs to perform identity authentication, the authentication application can send the authorization code to the identity authentication platform through the quantum encryption toolkit for identity authentication.

[0138] After receiving the authorization code, the identity authentication platform compares it with the previously cached authorization code. If the authorization code sent by the authentication application matches the cached authorization code, a third token is generated based on the authorization code. Because the third token is generated based on the authorization code, which is generated based on the QR code identifier of the target QR code, and the QR code identifier of the target QR code is bound to the user's user information, there is a corresponding relationship between the third token and the user's user information.

[0139] The identity authentication platform caches the generated third token, obtains the cached third token, encrypts the third token using the quantum key, and then sends the encrypted third token to the authentication application through the quantum encryption toolkit.

[0140] When a user needs to authenticate their identity, the authentication application can send an encrypted third token to the authentication platform via the quantum cryptography toolkit. Upon receiving the encrypted third token, the authentication platform calls the encryption service platform to parse the third token based on the quantum key used during encryption.

[0141] The identity authentication platform compares the parsed third token returned by the encryption service platform with the cached third token. If the third token matches the cached third token, the user's identity authentication is confirmed to be successful. Based on the correspondence between the third token and the user information, the user information corresponding to the third token can be confirmed and the user information can be sent to the authentication application via the quantum encryption toolkit.

[0142] The exchange of authorization information between the authentication application and the identity authentication platform in the embodiments of the present application will be encrypted using quantum keys, incorporating the ability of quantum one-time pad, preventing the third token from being brute-forced in the data transmission process, and avoiding malicious acquisition and abuse of user privacy data.

[0143] In the embodiments of the present application, the receiving authentication application sends a two-dimensional code generation request through the quantum encryption toolkit; according to the two-dimensional code generation request, the receiving authentication application returns a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit; when the user scans the target two-dimensional code through the authentication application on the terminal device and confirms the authorization, the receiving authentication application sends the two-dimensional code identifier of the target two-dimensional code and the user information of the user through the quantum encryption toolkit; the user information is bound with the two-dimensional code identifier; the receiving authentication application sends an authorization code through the quantum encryption toolkit, and the authorization code is generated according to the two-dimensional code identifier; the user is identity authenticated according to the authorization code; if the identity authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiments of the present application realize high security by fusing quantum keys with two-dimensional code content. Even if the two-dimensional code is intercepted, the information in it cannot be read without the correct quantum key. At the same time, the ability of quantum one-time pad is incorporated to ensure that the user's personal sensitive information is not leaked in the code scanning login process, avoiding malicious acquisition and abuse of user privacy data, thereby enhancing the user's trust in the code scanning login method. When the user scans the two-dimensional code, the exchange of authorization information between the authentication application and the identity authentication platform will be encrypted using quantum keys. Even if the attacker intercepts this information, he cannot read the content, and cannot fake valid authorization information.

[0144] To enable those skilled in the art to further understand the quantum encryption identity authentication method provided by the embodiments of the present application, the following will describe the quantum encryption identity authentication method provided by the embodiments of the present application in detail and completely. Figure 2 、 Figure 3 and Figure 4

[0145] Refer to Figure 2 , which is a flowchart of generating a two-dimensional code of an embodiment of the quantum encryption identity authentication method of the present application.

[0146] As Figure 2 ​As shown, the identity authentication platform is in communication connection with the terminal device, which includes a mobile terminal and a PC terminal. The terminal devices are respectively equipped with authentication applications, namely the mobile application to be connected and the PC terminal to be connected. The authentication application integrates the Quantum Shield SDK as a quantum encryption toolkit. The Quantum Shield SDK is provided with multiple interfaces for connecting the authentication application, the identity authentication platform (i.e., the authentication system) and the encryption service platform (i.e., the National Shield Encryption Service Platform), thereby connecting the authentication application on the terminal device to the identity authentication platform, the identity authentication platform to the encryption service platform, and the authentication application to the encryption service platform.

[0147] In one embodiment, when generating a target two-dimensional code embedded with quantum key information, the target two-dimensional code can be generated according to the following steps.

[0148] Step 201: The authentication system is connected to the Guodun Secret Service Platform to initialize the Guodun Secret Service Platform according to the parameters. After the initialization is successful, the Guodun Secret Service Platform returns a second token to the authentication system.

[0149] Step 202: The Quantity Shield SDK is connected to the National Shield Confidential Service Platform, and the National Shield Confidential Service Platform is initialized according to the parameters. After successful initialization, the National Shield Confidential Service Platform returns the first token (i.e., the first token) to the authentication system.

[0150] Step 203: Based on the first token, the PC to be connected requests the authentication system to generate a QR code through the Quantity Shield SDK.

[0151] Step 204: The authentication system generates and caches QR code content based on the first token.

[0152] Step 205: The authentication system applies for a quantum key from the Guodun Secret Service Platform based on the second token. After receiving the quantum key returned by the Guodun Secret Service Platform, the authentication system uses the quantum key to encrypt the QR code content to obtain a target QR code embedded with quantum key information.

[0153] Step 206: Vector Shield SDK returns the target QR code embedded with quantum key information.

[0154] Step 207: After the Quantum Shield SDK caches the quantum key and QR code identifier, it returns the target QR code embedded with the quantum key information to the PC to be connected.

[0155] Step 208: The PC to be connected periodically polls the authentication system for the QR code status via the Quantity Shield SDK, and the authentication system returns the status of the PC to be connected via the Quantity Shield SDK. Step 208 is executed repeatedly.

[0156] Reference Figure 3 , is a user authorization flow chart of an embodiment of a quantum encryption identity authentication method of the present application.

[0157] like Figure 3 As shown, the identity authentication platform is in communication connection with the terminal device, which includes a mobile terminal and a PC terminal. The terminal devices are respectively equipped with authentication applications, namely the mobile application to be connected and the PC terminal to be connected. The authentication application integrates the Quantum Shield SDK as a quantum encryption toolkit. The Quantum Shield SDK is provided with multiple interfaces for connecting the authentication application, the identity authentication platform (i.e., the authentication system) and the encryption service platform (i.e., the National Shield Encryption Service Platform), thereby connecting the authentication application on the terminal device to the identity authentication platform, the identity authentication platform to the encryption service platform, and the authentication application to the encryption service platform.

[0158] In one embodiment, when authorizing a user, the user may be authorized according to the following steps.

[0159] Step 301: A user (ie, an Actor) uses a mobile application to be connected to scan a target QR code.

[0160] Step 302: After the mobile application to be accessed identifies the type of the QR code, the user confirms authorization through the mobile application to be accessed.

[0161] Step 303: The Quantum Shield SDK calls the National Shield Secret Service Platform, parses the QR code content through the quantum key, and obtains the QR code identifier returned by the National Shield Secret Service Platform.

[0162] Step 304: The Quantity Shield SDK compares the returned QR code identifier with the QR code identifier in the cache. After confirming that they are consistent, it authorizes login to the authentication system and uploads the QR code identifier and user information to the authentication system.

[0163] Step 305: The authentication system binds the QR code identifier to the user information and changes the QR code status to a confirmed status.

[0164] Step 306: The authentication system returns a message reminder of authorization success or authorization failure to the mobile application to be connected through the Quantity Shield SDK.

[0165] Reference Figure 4 , is an identity authentication flow chart of an embodiment of a quantum encryption identity authentication method of the present application.

[0166] like Figure 4As shown, the identity authentication platform is in communication connection with the terminal device, the terminal device includes a mobile terminal and a PC terminal, and the authentication application is deployed on the terminal device, that is, the to-be-accessed mobile application and the to-be-accessed PC terminal. The authentication application is integrated with the quantum shield SDK as a quantum encryption toolkit. The quantum shield SDK is provided with a plurality of interfaces for connecting the authentication application, the identity authentication platform (that is, the authentication system) and the encryption service platform (that is, the quantum shield service platform) respectively, so as to connect the authentication application on the terminal device and the identity authentication platform, connect the identity authentication platform and the encryption service platform, and connect the authentication application and the encryption service platform.

[0167] In an embodiment, when a user is authenticated, the user can be authenticated according to the following steps.

[0168] In step 401, when the to-be-accessed PC terminal polls the two-dimensional code state from the authentication system through the quantum shield SDK, if the two-dimensional code state is a confirmation state at this time, the authentication system generates an authorization code through the two-dimensional code identifier and caches it.

[0169] In step 402, after the authentication system encrypts the authorization code using a quantum key, the authentication system returns the two-dimensional code state and the encrypted authorization code to the quantum shield SDK.

[0170] In step 403, the quantum shield SDK calls the quantum shield service platform, parses the authorization code according to the quantum key, and obtains the parsed authorization code returned by the quantum shield service platform. The quantum shield SDK returns the parsed authorization code and the two-dimensional code state to the to-be-accessed PC terminal.

[0171] In step 404, when a user needs to be authenticated, the to-be-accessed PC terminal sends the authorization code to the authentication system through the quantum shield SDK to obtain a third token (that is, a third token).

[0172] In step 405, the authentication system verifies the received authorization code according to the cached authorization code.

[0173] In step 406, after verification, the authentication system generates a third token according to the authorization code and caches it. After encrypting the third token using a quantum key, the third token is returned to the quantum shield SDK.

[0174] In step 407, the quantum shield SDK sends the third token to the authentication system to obtain user information according to the third token.

[0175] In step 408, the authentication system calls the quantum shield service platform, parses the third token according to the quantum key, and obtains the parsed third token, which is compared with the cached third token.

[0176] In step 409, after the third token is consistent, the user information is returned to the to-be-accessed PC terminal through the quantum shield SDK.

[0177] In the embodiment of the present application, the receiving authentication application sends a two-dimensional code generation request through the quantum encryption toolkit; according to the two-dimensional code generation request, the receiving authentication application returns a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit; when a user scans the target two-dimensional code through the authentication application on the terminal device and confirms authorization, the receiving authentication application sends a two-dimensional code identifier of the target two-dimensional code and user information of the user to the authentication application through the quantum encryption toolkit; the user information is bound with the two-dimensional code identifier; the receiving authentication application sends an authorization code to the authentication application through the quantum encryption toolkit, and the authorization code is generated according to the two-dimensional code identifier; the user is authenticated according to the authorization code; if the authentication is passed, the user information is returned to the authentication application through the quantum encryption toolkit. The embodiment of the present application realizes high security by fusing the quantum key and the two-dimensional code content. Even if the two-dimensional code is intercepted, the information cannot be read without the correct quantum key. At the same time, the ability of quantum one-time pad is integrated to ensure that the personal sensitive information of the user is not leaked in the code scanning login process, avoid the malicious acquisition and abuse of the user privacy data, thereby enhancing the trust of the user in the code scanning login mode. When the user scans the two-dimensional code, the exchange of authorization information between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if the attacker intercepts the information, the content cannot be read, and the valid authorization information cannot be forged.

[0178] It should be noted that, for the method embodiments, in order to simply describe, they are all described as a series of action combinations, but those skilled in the art should know that the embodiments of the present application are not limited to the action sequence described, because according to the embodiments of the present application, certain steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should know that the embodiments described in the specification all belong to preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present application.

[0179] On the basis of the above-mentioned embodiments, the present embodiment further provides a quantum encryption identity authentication device, which is applied to terminal devices, servers and other electronic devices.

[0180] Reference Figure 5 , a structure block diagram of an embodiment of a quantum encryption identity authentication device of the present application is shown, which can specifically include the following modules:

[0181] The request receiving module 501 is configured to receive a two-dimensional code generation request sent by the authentication application through the quantum encryption toolkit;

[0182] The two-dimensional code generation module 502 is configured to return a target two-dimensional code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the two-dimensional code generation request;

[0183] The authorization module 503 is configured to receive the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit when the user scans the target QR code through the authentication application on the terminal device and confirms authorization;

[0184] An information binding module 504 is used to bind the user information with the QR code identifier;

[0185] An authorization code receiving module 505 is configured to receive an authorization code sent by the authentication application via the quantum encryption toolkit, wherein the authorization code is generated based on the QR code identifier;

[0186] The identity authentication module 506 is used to authenticate the user according to the authorization code;

[0187] The information return module 507 is used to return the user information to the authentication application through the quantum encryption toolkit if the identity authentication is passed.

[0188] In an optional embodiment of the present application, the quantum encryption toolkit is communicatively connected to the encryption service platform, and the device further includes:

[0189] A first token acquisition module is configured to control the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform;

[0190] A platform initialization module, used to establish a communication connection with the encryption service platform;

[0191] The second token acquisition module is used to receive the second token distributed by the encryption service platform.

[0192] In an optional embodiment of the present application, the QR code generation request includes at least the first token, and the QR code generation module 502 includes:

[0193] A first token extraction submodule, configured to obtain the first token in the QR code generation request;

[0194] A QR code content generation submodule, configured to generate QR code content according to the first token;

[0195] a quantum key application submodule, configured to apply for a quantum key from the encryption service platform according to the second token, and obtain the quantum key;

[0196] A QR code encryption submodule, configured to encrypt the QR code content using the quantum key to obtain the target QR code embedded with the quantum key information;

[0197] a two-dimensional code returning submodule, configured to return the target two-dimensional code embedded with the quantum key information to the quantum encryption toolkit, so that the quantum encryption toolkit caches the quantum key and a cached two-dimensional code identifier of the target two-dimensional code, and returns the target two-dimensional code to the authentication application.

[0198] In an optional embodiment of the present application, the authorization module 503 comprises:

[0199] a two-dimensional code analyzing submodule, configured to control the quantum encryption toolkit to analyze the target two-dimensional code according to the quantum key to obtain the two-dimensional code identifier of the target two-dimensional code when the user scans the target two-dimensional code through the authentication application on the terminal device and confirms authorization;

[0200] a two-dimensional code comparing submodule, configured to compare the two-dimensional code identifier with the cached two-dimensional code identifier;

[0201] an authorization confirming submodule, configured to confirm that the authorization is successful if the two-dimensional code identifier is consistent with the cached two-dimensional code identifier;

[0202] a user information receiving submodule, configured to receive the two-dimensional code identifier of the target two-dimensional code and the user information of the user sent by the quantum encryption toolkit.

[0203] In an optional embodiment of the present application, the device further comprises:

[0204] a state polling module, configured to receive a two-dimensional code state polling request for the target two-dimensional code sent by the authentication application through the quantum encryption toolkit at a timing;

[0205] a state returning module, configured to return the current state of the target two-dimensional code to the authentication application through the quantum encryption toolkit according to the two-dimensional code state polling request.

[0206] In an optional embodiment of the present application, when the user scans the target two-dimensional code through the authentication application on the terminal device and confirms authorization, the current state of the target two-dimensional code is a confirmation state, and the device further comprises:

[0207] an authorization code generating module, configured to generate the authorization code according to the two-dimensional code identifier when the current state of the target two-dimensional code is the confirmation state;

[0208] an authorization code caching module, configured to cache the authorization code to obtain a cached authorization code;

[0209] An authorization code sending module is used to send the authorization code and the current state of the target QR code to the authentication application through the quantum encryption toolkit.

[0210] In an optional embodiment of the present application, the identity authentication module 506 includes:

[0211] An authorization code comparison submodule, used to compare the authorization code with the cached authorization code;

[0212] A third token acquisition submodule is configured to generate a third token if the authorization code is consistent with the cached authorization code, wherein the third token corresponds to the user information of the user;

[0213] A third token cache submodule, configured to cache the third token to obtain a cached third token;

[0214] A third token sending submodule, configured to send the third token to the authentication application via the quantum encryption toolkit;

[0215] A third token receiving submodule is configured to receive, through the quantum encryption toolkit, the third token sent by the user using the authentication application when the user needs to perform identity authentication;

[0216] A third token comparison submodule, configured to compare the third token with the cached third token;

[0217] An identity authentication confirmation submodule, configured to confirm that the user identity authentication is successful if the third token is matched with the cached third token;

[0218] An identity information sending submodule is used to send the user information of the user to the authentication application through the quantum encryption toolkit according to the correspondence between the third token and the user information.

[0219] In an embodiment of the present application, a QR code generation request is received from an authentication application via a quantum encryption toolkit; based on the QR code generation request, a target QR code embedded with quantum key information is returned to the authentication application via the quantum encryption toolkit; when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, the QR code identifier of the target QR code sent by the authentication application via the quantum encryption toolkit and the user's user information are bound; the user information is bound to the QR code identifier; the authorization code is received from the authentication application via the quantum encryption toolkit, and the authorization code is generated based on the QR code identifier; based on the authorization code, the user is authenticated; if the identity authentication is successful, the user information is returned to the authentication application via the quantum encryption toolkit. This embodiment of the present application achieves extremely high security by integrating the quantum key with the QR code content. Even if the QR code is intercepted, the information therein cannot be interpreted without the correct quantum key. At the same time, the integration of the quantum one-time pad capability ensures that the user's personal sensitive information is not leaked during the code scanning login process, preventing the user's privacy data from being maliciously acquired and abused, thereby enhancing the user's trust in the code scanning login method. After the user scans the QR code, the authorization information exchange between the authentication application and the identity authentication platform will be encrypted using the quantum key. Even if an attacker intercepts this information, he or she will not be able to decipher its content, let alone forge valid authorization information.

[0220] An embodiment of the present application further provides a non-volatile readable storage medium, which stores one or more modules (programs). When the one or more modules are applied to a device, the device can execute instructions (instructions) of each method step in the embodiment of the present application.

[0221] The present application provides one or more machine-readable media having instructions stored thereon, which, when executed by one or more processors, cause an electronic device to perform one or more of the methods described in the above embodiments. In the present application, the electronic device includes various types of devices such as terminal devices and servers (clusters).

[0222] The embodiments of the present disclosure may be implemented as a device configured as desired using any appropriate hardware, firmware, software, or any combination thereof, and the device may include electronic devices such as terminal devices and servers (clusters). Figure 6 An exemplary apparatus 600 that may be used to implement various embodiments described herein is schematically illustrated.

[0223] For one embodiment, Figure 6An example apparatus 600 is shown having one or more processors 602, a control module (chipset) 604 coupled to at least one of the processor(s) 602, a memory 606 coupled to the control module 604, a non-volatile memory (NVM) / storage device 608 coupled to the control module 604, one or more input / output devices 610 coupled to the control module 604, and a network interface 612 coupled to the control module 604.

[0224] The processor(s) 602 can include one or more single core or multicore processors, which can include any combination of general-purpose processors or dedicated processors (such as graphics processors, application processors, baseband processors, etc.). In some embodiments, the apparatus 600 can function as a terminal device, a server (cluster), etc. as described in embodiments of the present application.

[0225] In some embodiments, the apparatus 600 can include one or more computer- readable media (such as the memory 606 or the NVM / storage device 608) having instructions 614 and one or more processors 602 incorporated with the one or more computer-readable media configured to execute the instructions 614 to implement modules to perform the actions described in the present disclosure.

[0226] For one embodiment, the control module 604 can include any suitable interface controllers to provide for any suitable interface to at least one of the processor(s) 602 and / or any suitable device or component in communication with the control module 604.

[0227] The control module 604 can include a memory controller module to provide an interface to the memory 606. The memory controller module can be a hardware module, a software module, and / or a firmware module.

[0228] The memory 606 can be used, for example, to load and store data and / or instructions 614 for the apparatus 600. For one embodiment, the memory 606 can include any suitable volatile memory, such as suitable DRAM. In some embodiments, the memory 606 can include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0229] For one embodiment, the control module 604 can include one or more input / output controllers to provide an interface to the NVM / storage device 608 and the input / output device(s) 610.

[0230] For example, NVM / storage 608 can be used to store data and / or instructions 614. NVM / storage 608 can include any suitable non-volatile memory (e.g., flash memory) and / or can include any suitable non-volatile storage device(s) (e.g., hard disk drive(s) (HDD(s)), compact disk (CD) drive(s), and / or digital versatile disk (DVD) drive(s)).

[0231] NVM / storage 608 can include storage resources that are physically part of the device on which the apparatus 600 is installed or that is accessed remotely and / or via a network by the device. For example, NVM / storage 608 can be accessed via input / output device(s) 610 through a network.

[0232] Input / output device(s) 610 can provide an interface between apparatus 600 and any suitable device for the receipt, processing, and / or transmission of data between the apparatus 600 and any other suitable device. Input / output device(s) 610 can include communication components, audio components, sensor components, and / or the like. Network interface 612 can provide an interface between apparatus 600 and one or more networks, and apparatus 600 can communicate wirelessly with one or more components of a wireless network according to any of one or more wireless network standards and / or protocols, such as to access a wireless network based on a communication standard, such as WiFi, 2G, 3G, 4G, 5G, and / or the like, or a combination thereof.

[0233] For one embodiment, at least one of processor(s) 602 can be packaged together with logic of one or more controllers of control module 604, such as a memory controller module. For one embodiment, at least one of processor(s) 602 can be packaged together with logic of one or more controllers of control module 604 to form a system in a package (SiP). For one embodiment, at least one of processor(s) 602 can be integrated on the same die with logic of one or more controllers of control module 604. For one embodiment, at least one of processor(s) 602 can be integrated on the same die with logic of one or more controllers of control module 604 to form a system on a chip (SoC).

[0234] In various embodiments, the apparatus 600 may be, but is not limited to, a terminal device such as a server, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, the apparatus 600 may have more or fewer components and / or a different architecture. For example, in some embodiments, the apparatus 600 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touchscreen display), a non-volatile memory port, multiple antennas, a graphics chip, an application-specific integrated circuit (ASIC), and a speaker.

[0235] Among them, the main control chip can be used as a processor or control module in the detection device, sensor data, location information, etc. are stored in the memory or NVM / storage device, the sensor group can be used as an input / output device, and the communication interface may include a network interface.

[0236] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0237] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0238] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable quantum encryption identity authentication terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable quantum encryption identity authentication terminal device generate instructions for implementing the process Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0239] These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable quantum encryption identity authentication terminal device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device, which is implemented in the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0240] These computer program instructions can also be loaded onto a computer or other programmable quantum encryption identity authentication terminal device, so that a series of operation steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions executed on the computer or other programmable terminal device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0241] Although preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they become aware of the basic inventive concepts. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0242] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or terminal device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or terminal device that includes the element.

[0243] The above is a detailed introduction to a quantum encryption identity authentication method and device, an electronic device and a storage medium provided by this application. Specific examples are used in this article to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method of this application and its core idea; at the same time, for general technical personnel in this field, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on this application.

Claims

1. A quantum encryption identity authentication method, characterized in that: Applied to an identity authentication platform, the identity authentication platform is in communication with a terminal device, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated into the authentication application, the method comprising: Receiving a QR code generation request sent by the authentication application through the quantum encryption toolkit; Returning a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the QR code generation request; Receiving a QR code status polling request for the target QR code sent periodically by the authentication application through the quantum encryption toolkit; Returning the current state of the target QR code to the authentication application through the quantum cryptography toolkit according to the QR code state polling request; Receiving the QR code identifier of the target QR code and user information of the user sent by the authentication application through the quantum encryption toolkit; Binding the user information with the QR code identifier; When the user scans the target QR code through the authentication application on the terminal device and confirms the authorization, the current state of the target QR code is the confirmation state; When the current state of the target QR code is the confirmed state, generating an authorization code according to the QR code identifier; Cache the authorization code to obtain a cached authorization code; Sending the authorization code and the current state of the target QR code to the authentication application via the quantum encryption toolkit; receiving an authorization code sent by the authentication application via the quantum cryptography toolkit; Comparing the authorization code with the cached authorization code; If the authorization code is consistent with the cached authorization code, a third token is generated, and the third token corresponds to the user information of the user; caching the third token to obtain a cached third token; Sending the third token to the authentication application via the quantum cryptography toolkit; In a case where the user needs to perform identity authentication, receiving, through the quantum encryption toolkit, the third token sent by the user using the authentication application; comparing the third token with the cached third token; If the third token is consistent with the cached third token, the user identity authentication is confirmed to be successful; According to the correspondence between the third token and the user information, the user information of the user is sent to the authentication application through the quantum encryption toolkit.

2. The method according to claim 1, characterized in that The quantum encryption toolkit is communicatively connected to the encryption service platform, and before receiving the QR code generation request sent by the authentication application through the quantum encryption toolkit, the method further includes: Controlling the authentication application to establish a communication connection with the encryption service platform through the quantum encryption toolkit, so that the authentication application receives a first token distributed by the encryption service platform; Establishing a communication connection with the encryption service platform; Receive a second token distributed by the encryption service platform.

3. The method according to claim 2, characterized in that The QR code generation request includes at least the first token, and returning a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the QR code generation request includes: Obtain the first token in the QR code generation request; Generate QR code content according to the first token; Applying for a quantum key from the encryption service platform according to the second token to obtain the quantum key; Encrypting the QR code content using the quantum key to obtain the target QR code embedded with the quantum key information; Returning the target QR code embedded with the quantum key information to the quantum encryption toolkit so that the quantum encryption toolkit caches the quantum key and the cached QR code identifier of the target QR code, and returning the target QR code to the authentication application.

4. The method according to claim 3, characterized in that When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, receiving the QR code identifier of the target QR code and the user information of the user sent by the authentication application through the quantum encryption toolkit, including: When the user scans the target QR code through the authentication application on the terminal device and confirms authorization, controlling the quantum encryption toolkit to parse the target QR code according to the quantum key to obtain the QR code identifier of the target QR code; Comparing the QR code identifier with the cached QR code identifier; If the QR code identifier is consistent with the cached QR code identifier, the authorization is confirmed to be successful; Receive the QR code identifier of the target QR code and the user information of the user sent by the quantum encryption toolkit.

5. A quantum encryption identity authentication device, characterized in that: Applied to an identity authentication platform, the identity authentication platform is in communication with a terminal device, an authentication application is deployed on the terminal device, and a quantum encryption toolkit is integrated into the authentication application. The device includes: A request receiving module, configured to receive a QR code generation request sent by the authentication application via the quantum encryption toolkit; A QR code generation module, configured to return a target QR code embedded with quantum key information to the authentication application through the quantum encryption toolkit according to the QR code generation request; A status polling module, configured to receive a QR code status polling request for the target QR code periodically sent by the authentication application through the quantum encryption toolkit; A status return module, configured to return the current status of the target QR code to the authentication application through the quantum encryption toolkit according to the QR code status polling request; An authorization module, configured to receive the QR code identifier of the target QR code and user information of the user sent by the authentication application via the quantum encryption toolkit; An information binding module, used to bind the user information with the QR code identifier; An authorization code generation module is configured to generate an authorization code according to the QR code identifier when the user scans the target QR code through the authentication application on the terminal device and confirms authorization, and the current state of the target QR code is the confirmation state; when the current state of the target QR code is the confirmation state, generate an authorization code according to the QR code identifier; An authorization code cache module is used to cache the authorization code and obtain a cached authorization code; An authorization code sending module, configured to send the authorization code and the current state of the target QR code to the authentication application via the quantum encryption toolkit; An authorization code receiving module, configured to receive the authorization code sent by the authentication application via the quantum encryption toolkit; An authorization code comparison submodule, used to compare the authorization code with the cached authorization code; A third token acquisition submodule is configured to generate a third token if the authorization code is consistent with the cached authorization code, wherein the third token corresponds to the user information of the user; A third token cache submodule, configured to cache the third token to obtain a cached third token; A third token sending submodule, configured to send the third token to the authentication application via the quantum encryption toolkit; A third token receiving submodule is configured to receive, through the quantum encryption toolkit, the third token sent by the user using the authentication application when the user needs to perform identity authentication; A third token comparison submodule, configured to compare the third token with the cached third token; An identity authentication confirmation submodule, configured to confirm that the user identity authentication is successful if the third token is matched with the cached third token; An identity information sending submodule is used to send the user information of the user to the authentication application through the quantum encryption toolkit according to the correspondence between the third token and the user information.

6. An electronic device, characterized in that: include: processor; and A memory having executable code stored thereon, which, when the executable code is executed, causes the processor to perform the quantum encryption identity authentication method according to any one of claims 1 to 4.

7. A machine-readable medium having executable code stored thereon, which, when executed, causes a processor to execute the quantum encryption identity authentication method according to any one of claims 1 to 4.

Images