Digital certificate authentication method and device based on post-quantum algorithm, equipment and medium

Abstract

The invention discloses a digital certificate authentication method and device based on a post-quantum algorithm, equipment and a medium, and relates to the field of information security, and the method comprises the steps: obtaining digital certificate application information of a target entity for auditing; if the digital certificate request passes the verification, analyzing the digital certificate request submitted by the target entity, and obtaining a key encryption key of the digital certificate request by using a post-quantum key encapsulation algorithm after verification; then obtaining user information of the target entity and an active cryptographic algorithm public key value in the digital certificate request, generating an anti-quantum-attack digital certificate according to the user information and a public key, and signing and issuing the anti-quantum-attack digital certificate to the target entity; the digital certificate comprises a post-quantum key packaging public key, a post-quantum signature public key and an active-service public key password public key ciphertext of the entity. According to the application, the public key data of the traditional public key cryptographic algorithm can be protected, the quantum computing attack is resisted, the public key plaintext of the traditional public key cryptographic algorithm can be obtained in the service system, and the influence on the original service using the traditional public key cryptographic algorithm is extremely low.

Description

Technical Field

[0001] The present invention relates to the field of information security, and in particular to a digital certificate authentication method, device, equipment and medium based on a post-quantum algorithm. Background Art

[0002] With the development and progress of quantum computing technology, the security of traditional public key cryptographic algorithms has been seriously challenged, especially cryptographic algorithms designed based on large integer factorization and discrete logarithm problems, such as RSA (Rivest-Shamir-Adleman, an asymmetric encryption algorithm), ECC (Elliptic curve cryptography), SM2 (a national secret algorithm), etc. In order to solve this potential problem, cryptographers have developed some post-quantum public key cryptographic algorithms that resist quantum computing attacks to replace traditional public key cryptographic algorithms. However, due to the short application time, these algorithms are not very mature, so the mixed use of traditional public key cryptographic algorithms and post-quantum cryptographic algorithms is the current mainstream use method. A digital certificate is a trusted digital file digitally signed by a third-party certificate authority (CA) recognized by the state, which is authoritative, credible and fair. It is used to bind the identity information of an entity with the public key data owned by the entity. Distributing public keys through digital certificates can effectively solve man-in-the-middle attacks in secure communications. The currently widely used digital certificate format can currently support two public key cryptographic algorithms to form a hybrid certificate system.

[0003] The authentication system built on the basis of digital certificates plays an important basic supporting role in entity identity authentication, ensuring the confidentiality, integrity and non-repudiation of communications and data. The currently widely used digital certificate authentication system is usually bound to only one traditional public key cryptographic algorithm, such as RSA and SM2, which leads to the serious threat to the security of these algorithms by quantum computing technology. Since the issuance of digital certificates is generally large and the validity period is long, the authentication system needs to ensure the security of a large number of digital certificates for a long time. When digital certificates use post-quantum public key cryptographic algorithms, the current method is mainly to mix post-quantum public key cryptographic algorithms and traditional public key cryptographic algorithms. However, the public key of the traditional public key cryptographic algorithm still exists in the certificate in plain text, and there is a risk that the algorithm is cracked and the entity identity private key is stolen. Moreover, if the digital certificate authentication system uses a hybrid public key cryptographic algorithm, in order to ensure security, the business application needs to use the post-quantum public key cryptographic algorithm, and the business system needs to modify a large number of security functions. Therefore, how to upgrade and improve the security of the digital certificate authentication system is a problem to be solved in this field. Summary of the invention

[0004] In view of this, the purpose of the present invention is to provide a digital certificate authentication method, device, equipment and storage medium based on post-quantum algorithm, which can protect the public key data of traditional public key cryptographic algorithm, resist quantum computing attack, and obtain the public key plaintext of traditional public key cryptographic algorithm within the business system, with minimal impact on the original business using traditional public key cryptographic algorithm. The specific scheme is as follows:

[0005] In a first aspect, the present application provides a digital certificate authentication method based on a post-quantum algorithm, comprising:

[0006] Obtaining digital certificate application information of a target entity through a certificate registration system, and reviewing the target entity according to the digital certificate application information;

[0007] If the target entity passes the review, the digital certificate request submitted by the target entity is parsed, and after verifying that the digital certificate request passes, the key encryption key corresponding to the digital certificate request is obtained using a preset post-quantum key encapsulation algorithm; the digital certificate request is generated by the target entity through packaging according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system;

[0008] The key management system is used to obtain the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request, generate a corresponding quantum attack resistant digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key, issue the certificate to the target entity, and store the quantum attack resistant digital certificate; the subject public key information in the quantum attack resistant digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key cryptographic public key ciphertext of the target entity;

[0009] After the application system receives the quantum attack resistant digital certificate of the target entity, it performs signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key to obtain a signature verification result of the quantum attack resistant digital certificate.

[0010] Optionally, the digital certificate authentication based on the post-quantum algorithm further includes:

[0011] Encapsulating a random shared temporary key using the post-quantum key encapsulation public key of the target entity, and encrypting the key encryption key using the random shared temporary key to obtain a key encryption key ciphertext;

[0012] According to a preset symmetric encryption algorithm, the active algorithm public key plaintext of the target entity is encrypted using the key encryption key to obtain the active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cipher public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC check.

[0013] Optionally, before performing signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key, the method further includes:

[0014] If the quantum attack-resistant digital certificate is a certificate of the target entity, the active public key cryptography public key ciphertext is parsed into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and MAC value;

[0015] Based on the preset post-quantum key encapsulation algorithm, decrypt the post-quantum key encapsulation ciphertext using the post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key to obtain the random shared temporary key, and use the random shared temporary key to decrypt the key encryption key ciphertext to obtain the key encryption key and save it;

[0016] The key encryption key is used to decrypt the active algorithm public key ciphertext, and the MAC value is verified. If the verification passes, the active algorithm public key plaintext is obtained.

[0017] Optionally, before performing signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key, the method further includes:

[0018] If the quantum attack-resistant digital certificate is not a certificate of the target entity, parsing the active public key cryptography public key ciphertext into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and MAC value;

[0019] The key encryption key is obtained, and the public key ciphertext of the active algorithm is decrypted using the key encryption key, and the MAC value is verified at the same time. If the verification passes, the public key plaintext of the active algorithm is obtained.

[0020] Optionally, before obtaining the key encryption key corresponding to the digital certificate request according to the preset key encryption key usage policy, the method further includes:

[0021] Generate a plurality of symmetric cryptographic algorithm keys according to a preset key generation rule through the key management system, and randomly determine a target symmetric cryptographic algorithm key as the current key encryption key;

[0022] Correspondingly, after generating a corresponding quantum attack-resistant digital certificate according to the user information, the active algorithm public key and the post-quantum algorithm public key and issuing it to the target entity, it also includes:

[0023] If it is determined that the key encryption key is not secure, the current key encryption key is stopped from being used, and a new key encryption key is determined from the symmetric cryptographic algorithm key to issue a new quantum attack-resistant digital certificate based on the new key encryption key.

[0024] Optionally, after generating a corresponding quantum attack resistant digital certificate according to the user information, the active algorithm public key and the post-quantum algorithm public key and issuing the certificate to the target entity, the method further includes:

[0025] If it is determined that the key encryption key and / or the quantum attack resistant digital certificate are not safe, the quantum attack resistant digital certificate is revoked, and the certificate serial number corresponding to the quantum attack resistant digital certificate is added to a preset certification revocation list.

[0026] In a second aspect, the present application provides a digital certificate authentication device based on a post-quantum algorithm, comprising:

[0027] An entity review module is used to obtain the digital certificate application information of the target entity through the certificate registration system, and review the target entity according to the digital certificate application information;

[0028] A key acquisition module is used to parse the digital certificate request submitted by the target entity if the target entity passes the review, and after verifying that the digital certificate request passes, obtain the key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm; the digital certificate request is generated by the target entity by packaging according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system;

[0029] A certificate issuing module, used to obtain the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, generate a corresponding quantum attack resistant digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key, issue it to the target entity, and store the quantum attack resistant digital certificate; the subject public key information in the quantum attack resistant digital certificate includes the post-quantum key encapsulation public key, post-quantum signature public key and active public key cryptographic public key ciphertext of the target entity;

[0030] The certificate verification module is used to perform signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key after the application system receives the quantum attack resistant digital certificate of the target entity, so as to obtain the signature verification result of the quantum attack resistant digital certificate.

[0031] Optionally, the certificate issuing module further includes:

[0032] A key encryption unit, configured to encapsulate a random shared temporary key using the post-quantum key encapsulation public key of the target entity, and encrypt the key encryption key using the random shared temporary key to obtain a key encryption key ciphertext;

[0033] A ciphertext encapsulation unit is used to encrypt the active algorithm public key plaintext of the target entity using the key encryption key according to a preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cipher public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC check, and the post-quantum key encapsulation ciphertext is the ciphertext corresponding to the post-quantum key encapsulation public key.

[0034] In a third aspect, the present application provides an electronic device, comprising a processor and a memory; wherein the memory is used to store a computer program, and the computer program is loaded and executed by the processor to implement the aforementioned digital certificate authentication method based on post-quantum algorithm.

[0035] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program, which, when executed by a processor, implements the aforementioned digital certificate authentication method based on a post-quantum algorithm.

[0036] This application first obtains the digital certificate application information of the target entity, and reviews the target entity based on the digital certificate application information. If the review is passed, the digital certificate request submitted by the target entity is parsed, and after verifying that the digital certificate request is passed, the preset post-quantum key encapsulation algorithm is used to obtain the key encryption key corresponding to the digital certificate request, and then the user information of the target entity and the active algorithm public key value in the digital certificate request are obtained through the key management system, and the corresponding quantum attack-resistant digital certificate is generated according to the user information and the public key and issued to the target entity, and the digital certificate is stored. In this way, when the application system receives the quantum attack-resistant digital certificate of the target entity, it can perform signature verification on the quantum attack-resistant digital certificate based on the post-quantum signature key, thereby obtaining the signature verification result of the quantum attack-resistant digital certificate. In this way, this application can use a hybrid post-quantum public key cryptographic algorithm to produce and issue digital certificates, and in the digital certificate issued by the authentication system, the public key data of the traditional public key cryptographic algorithm is ciphertext. Even if the digital certificate is exposed, the traditional public key cryptographic algorithm will not be cracked, thereby protecting the public key data of the traditional public key cryptographic algorithm and resisting quantum computing attacks. The public key plaintext of the traditional public key cryptographic algorithm can be obtained within the business system, which has a very low impact on the original business using the traditional public key cryptographic algorithm. The post-quantum digital signature algorithm and the optional active public key cryptographic algorithm are used to ensure the authenticity of the digital certificate. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0038] Figure 1 A flow chart of a digital certificate authentication method based on a post-quantum algorithm provided for this application;

[0039] Figure 2 A schematic diagram of a digital certificate authentication system based on a post-quantum algorithm provided for this application;

[0040] Figure 3 A digital certificate issuance flow chart provided for this application;

[0041] Figure 4 A digital certificate signature operation flow chart provided for this application;

[0042] Figure 5 A digital certificate verification operation flow chart provided for this application;

[0043] Figure 6A specific flow chart of a digital certificate authentication method based on a post-quantum algorithm provided for this application;

[0044] Figure 7 A schematic diagram of a digital certificate request format provided for this application;

[0045] Figure 8 A schematic diagram of the encapsulation of the public key ciphertext structure of an active algorithm provided for this application;

[0046] Fig. 9 A schematic diagram of a digital certificate structure provided for this application;

[0047] Fig.10 A schematic diagram of the encapsulation of the public key ciphertext structure of an active algorithm provided for this application;

[0048] Fig.11 A schematic diagram of the public key ciphertext structure analysis of an active algorithm provided for this application;

[0049] Fig.12 A schematic diagram of the structure of a digital certificate authentication device based on a post-quantum algorithm provided in this application;

[0050] Fig.13 A structural diagram of an electronic device provided for this application. DETAILED DESCRIPTION

[0051] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0052] At present, when hybrid post-quantum public key cryptographic algorithms are used, the public key of the traditional public key cryptographic algorithm still exists in the certificate in plain text, and there is a risk that the algorithm will be cracked and the entity identity private key will be stolen. Moreover, if the digital certificate authentication system adopts a hybrid public key cryptographic algorithm, the business system needs to be modified a lot when the business application uses the post-quantum public key cryptographic algorithm. However, this application adopts a hybrid post-quantum public key cryptographic algorithm to produce and issue digital certificates. In the digital certificate issued by the authentication system, the public key data of the traditional public key cryptographic algorithm is ciphertext. Even if the digital certificate is exposed, the traditional public key cryptographic algorithm will not be cracked, thereby protecting the public key data of the traditional public key cryptographic algorithm and resisting quantum computing attacks.

[0053] See also Figure 1 As shown, the embodiment of the present invention discloses a digital certificate authentication method based on a post-quantum algorithm, comprising:

[0054] Step S11: obtaining digital certificate application information of a target entity through a certificate registration system, and reviewing the target entity according to the digital certificate application information.

[0055] It should be pointed out that the digital certificate authentication system in this embodiment is implemented based on the post-quantum cryptographic hybrid algorithm. Figure 2 As shown, it consists of the following parts: certificate issuing system (CA, Certificate Authority), registration review system (RA, Register Authority), key management system (KMC, Key Management Center), certificate storage publishing system (LDAP, Lightweight Directory Access Protocol) and certificate status query system (OCSP, The Online Certificate Status Protocol).

[0056] In this embodiment, Figure 3 As shown, the entity first submits a certificate registration application. When registering, it is necessary to fill in the relevant entity information to ensure that it is applied to the same business system and uses the same symmetric cryptographic algorithm key. After the entity fills in the application information, the digital certificate application information of the target entity can be obtained through the certificate registration system, and the target entity can be reviewed based on the digital certificate application information. If the review fails at this time, the corresponding review failure reason will be sent to the entity, so that the entity can modify the application information after obtaining the failure reason and resubmit the modified digital certificate application.

[0057] Step S12: If the target entity passes the review, the digital certificate request submitted by the target entity is parsed, and after verifying that the digital certificate request passes, the key encryption key corresponding to the digital certificate request is obtained using a preset post-quantum key encapsulation algorithm; the digital certificate request is packaged and generated by the target entity according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system.

[0058] In this embodiment, if the target entity passes the review, the target entity can obtain the Figure 4 The digital certificate request shown in the figure is verified, and after the digital certificate request is passed, the key encryption key (KEK) corresponding to the digital certificate request is obtained according to the preset key encryption key usage policy. Among them, the above digital certificate request is generated by the target entity based on the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system. Figure 3As shown, after receiving the message that the certificate registration system has passed the review, the entity can generate the corresponding forward and backward quantum keys, and further package them into a certificate generation request. After that, the certificate registration system can verify the request. After the verification is passed, the KEK key generated by the key management system is obtained according to the pre-set KEK key usage policy, that is, the key encryption key usage policy. And it can be understood that, as in the previous step, after the entity's certificate request verification fails, the corresponding failure information can also be sent to the entity.

[0059] According to the above process, before obtaining the key encryption key corresponding to the digital certificate request, the key management system needs to generate several 32-byte symmetric cryptographic algorithm keys according to the preset key generation rules, and use one of the symmetric cryptographic algorithm keys as the current key encryption key. It is understandable that the key management system can manage the keys corresponding to the post-quantum public key cryptographic algorithm, the traditional public key cryptographic algorithm and the symmetric cryptographic algorithm, and pre-generate a certain amount of 32-byte symmetric cryptographic algorithm keys (KEK), which are stored in a secure storage area for extraction when used, and the certificate registration system needs to ensure that the same business system entity certificate uses the same symmetric cryptographic algorithm key (KEK). It should be pointed out that the traditional algorithm in this application document is the active algorithm described in this application document, and the corresponding traditional algorithm public key is the active algorithm public key, and the corresponding expression of the traditional algorithm can also be understood as the relevant content of the corresponding active algorithm. The relevant content mentioned later also has the same effect and will not be described in detail here.

[0060] Step S13: obtaining the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, generating a corresponding quantum attack resistant digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key, issuing the certificate to the target entity, and storing the quantum attack resistant digital certificate; the subject public key information in the quantum attack resistant digital certificate includes the post-quantum key encapsulation public key, post-quantum signature public key and active public key cryptographic public key ciphertext of the target entity.

[0061] In this embodiment, Figure 3As shown, the user information of the target entity and the public key in the digital certificate request can be obtained through the key management system, and the corresponding digital certificate is generated according to the user information and the public key and issued to the target entity, and the digital certificate is stored, wherein the subject public key information in the above digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key cryptographic public key ciphertext. And after the digital certificate is issued to the target entity, if the key encryption key is determined to be unsafe, the current key encryption key is stopped, and a new key encryption key is determined from the symmetric cryptographic algorithm key to issue a new digital certificate according to the new key encryption key. In this embodiment, when the symmetric cryptographic algorithm key is no longer safe, the key management system needs to stop using the original symmetric key (KEK), replace the new symmetric key to issue a new certificate, and revoke all digital certificates protected by the original symmetric cryptographic algorithm key (KEK), and store and save the traditional cryptographic algorithm public key, post-quantum KEM public key, and post-quantum signature public key of the issued entity certificate to ensure that the public key of the subsequent entity certificate is no longer the same. Accordingly, after the digital certificate is issued to the target entity, if it is determined that the key encryption key and / or the digital certificate is not secure, the digital certificate is revoked and the certificate serial number corresponding to the digital certificate is added to the preset certification revocation list. In this embodiment, if the digital certificate is no longer secure, or the protected symmetric key KEK is no longer secure, the digital certificate should be revoked, and the corresponding certificate serial number is placed in the CRL (Certificate Revocation List) list for public release.

[0062] Through the above process, if Figure 4 As shown, when the entity submits the active algorithm public key, post-quantum key encapsulation public key and post-quantum signature public key, the CA generates a KEK and uses the KEK and the entity's post-quantum key encapsulation public key to encapsulate the active public key cryptographic public key ciphertext, and then obtains the identity information submitted by the entity and encapsulates the corresponding certificate information structure, and signs the certificate information structure based on the CA post-quantum private key (active algorithm private key) corresponding to the post-quantum signature public key to complete the issuance of the entity certificate.

[0063] Step S14: After the application system receives the quantum attack resistant digital certificate of the target entity, it performs signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key to obtain a signature verification result of the quantum attack resistant digital certificate.

[0064] In this embodiment, after the application system receives the digital certificate of the target entity, it can perform signature verification on the digital certificate based on the post-quantum signature key to obtain the signature verification result of the digital certificate. Figure 5As shown, after obtaining the physical certificate, the certificate information is retrieved, and the validity period and identity information of the certificate are verified. Specifically, the certificate signature information can be retrieved through the CA post-quantum public key (active algorithm public key) for verification.

[0065] In this embodiment, the digital certificate application information of the target entity is obtained through the certificate registration system, and the target entity is reviewed according to the digital certificate application information; if the target entity passes the review, the digital certificate request submitted by the target entity is obtained, and after verifying that the digital certificate request passes, the key encryption key corresponding to the digital certificate request is obtained according to the preset key encryption key usage policy, and then the user information of the target entity and the public key in the digital certificate request are obtained through the key management system, and the corresponding digital certificate is generated according to the user information and the public key and issued to the target entity, and the digital certificate is stored. When the application system receives the digital certificate of the target entity, the digital certificate can be signed and verified based on the post-quantum signature key to obtain the signature verification result of the digital certificate. In this way, a hybrid post-quantum public key cryptographic algorithm can be used to produce and publish digital certificates, and in the digital certificate issued by the authentication system, the public key data of the traditional public key cryptographic algorithm is ciphertext, even if the digital certificate is exposed, the traditional public key cryptographic algorithm will not be cracked, so that the public key data of the traditional public key cryptographic algorithm can be protected, resisting quantum computing attacks, and the public key plaintext of the traditional public key cryptographic algorithm can be obtained within the business system, which has a very low impact on the original business using the traditional public key cryptographic algorithm.

[0066] Based on the previous embodiment, it can be seen that the present application can use the hybrid post-quantum public key cryptographic algorithm to produce and issue digital certificates. Next, the process of certificate verification will be described in detail in this embodiment. Figure 6 As shown, the embodiment of the present application discloses a specific digital certificate authentication method based on a post-quantum algorithm, including:

[0067] Step S21: Use the post-quantum key encapsulation public key of the target entity to encapsulate a random shared temporary key, and use the random shared temporary key to encrypt the key encryption key to obtain a key encryption key ciphertext.

[0068] In this application, if Figure 7 As shown, the digital certificate request structure still follows the PKCS#10 standard. After receiving the certificate request, Figure 8 As shown, the CA's post-quantum key encapsulation public key is used to encapsulate a random shared key, and a symmetric encryption algorithm with MAC check, such as SM4-GCM / CCM, is used to encrypt the traditional public key plaintext of this entity using the shared key pair KEK to obtain the traditional public key ciphertext, and then the post-quantum key encapsulation ciphertext and the traditional public key ciphertext are encapsulated together into the public key ciphertext structure of the active algorithm.

[0069] And about the process of encapsulating the public key ciphertext structure of the active algorithm, such as Fig. 9 As shown, the digital certificate structure in this embodiment follows the X.509 standard, but the internal structure is slightly adjusted. The subject public key information in the X.509 certificate wraps the post-quantum cryptography KEM (key encapsulation) public key, post-quantum signature public key and active public key cryptography public key ciphertext owned by the entity. The format of the above digital certificate can be defined in the following format:

[0070] CA< >=CA{V,SN,AI,CA,UCA,A,UA,Ap,T A , E};

[0071] Where V in the curly brackets is the certificate version, SN is the certificate serial number, AI is the algorithm identifier for signing the certificate, CA is the issuer distinguished name, UCA is the optional unique identifier of CA, A is the subject distinguished name, UA is the optional unique identifier of user A, Ap is the public key of user A, T A is the validity period of the certificate, and E is the extended item information.

[0072] Based on the above process, Fig.10 As shown, the process of encapsulating the public key ciphertext of the current public key cryptography is as follows: CA selects a secure KEK key for long-term use (the same KEK key is used in the same business system to ensure that the application entity in the system can also obtain this key), uses the post-quantum key encapsulation public key of this entity to encapsulate a random shared key, uses the shared key to encrypt the KEK to obtain the KEK key ciphertext, and then uses a symmetric encryption algorithm with MAC verification such as SM4-GCM (Galios CountMode, Galois Field Count Mode) / CCM, and uses the KEK key to encrypt the traditional public key plaintext of this entity to obtain the traditional public key ciphertext, and finally encapsulates the post-quantum key encapsulation ciphertext, KEK ciphertext and traditional public key ciphertext together into the public key ciphertext structure of the current algorithm. In this way, in the digital certificate issued by the authentication system, the public key data of the traditional public key cryptography algorithm is ciphertext. Even if the digital certificate is exposed, the traditional public key cryptography algorithm will not be cracked, and the private key of the traditional public key cryptography is still safe;

[0073] Step S22: Encrypt the active algorithm public key plaintext of the target entity using the key encryption key according to a preset symmetric encryption algorithm to obtain an active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into an active public key cryptographic public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including a MAC check, and the post-quantum key encapsulation ciphertext is the ciphertext corresponding to the post-quantum key encapsulation public key.

[0074] In this embodiment, the active algorithm public key plaintext of the target entity can be encrypted with the key encryption key according to the above-mentioned preset symmetric encryption algorithm including MAC verification to obtain the active algorithm public key ciphertext, and the post-quantum key encapsulation ciphertext, key encryption key ciphertext and active algorithm public key ciphertext are encapsulated into active public key cryptographic public key ciphertext. Before this process, in a specific embodiment, if the above-mentioned digital certificate is the certificate of the target entity, the active public key cryptographic public key ciphertext is parsed into post-quantum key encapsulation ciphertext, key encryption key ciphertext and active algorithm public key ciphertext and MAC value, and then the post-quantum key encapsulation ciphertext is decrypted by the post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key to obtain a random shared key, and the key encryption key ciphertext is decrypted by the random shared key to obtain the key encryption key and save it, and the key encryption key is used to decrypt the active algorithm public key ciphertext, and the MAC value is verified. If the verification passes, the active algorithm public key plaintext is obtained. Fig.11 As shown, if the certificate is the certificate of this entity, first parse the active algorithm public key ciphertext structure into post-quantum key encapsulation ciphertext, KEK key ciphertext, active algorithm public key ciphertext and MAC, then use the post-quantum key encapsulation private key of this entity to decrypt the post-quantum key encapsulation ciphertext to obtain the shared key, and use the shared key to decrypt the KEK key ciphertext to obtain the KEK key plaintext for storage, finally use the KEK key to decrypt the active algorithm public key ciphertext, verify the MAC, and if passed, the active algorithm public key plaintext can be obtained.

[0075] In another specific embodiment, if the digital certificate is not the certificate of the target entity, the public key ciphertext of the active public key cryptography is parsed into post-quantum key encapsulation ciphertext, key encryption key ciphertext, active algorithm public key ciphertext and MAC value, and the key encryption key is obtained, and the active algorithm public key ciphertext is decrypted using the key encryption key, and the MAC value is verified at the same time. If the verification passes, the active algorithm public key plaintext is obtained. After obtaining the public key plaintext of the traditional public key cryptographic algorithm through the above two specific embodiments, it can be applied to the original business system.

[0076] In this embodiment, the post-quantum key encapsulation public key of the target entity is used to encapsulate a random shared key, and the random shared key is used to encrypt the key encryption key to obtain a key encryption key ciphertext. Then, the active algorithm public key plaintext of the target entity can be encrypted with the key encryption key according to the preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, and the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext are encapsulated into an active public key cryptographic public key ciphertext. Through the above technical solution, this embodiment can issue a digital certificate of a hybrid public key cryptographic algorithm (the algorithm includes a post-quantum key encapsulation algorithm, a post-quantum signature verification algorithm, and a traditional public key cryptographic algorithm) to distribute the public key of the traditional public key cryptographic algorithm in ciphertext form. By decrypting the public key plaintext in the business application system and using the public key plaintext to complete the original business, it is suitable for a small amount of modification of the original business system to achieve quantum security resistance. In addition, the public key plaintext data of the traditional public key cryptographic algorithm can be obtained within the business system, which has no impact or very little impact on the original security business using the traditional public key cryptographic algorithm. At the same time, outside the application system, because the protection key for decrypting the traditional public key public key cannot be obtained, and the digital certificate of the hybrid algorithm uses the post-quantum cryptographic algorithm to protect and authenticate the public key of the traditional public key cryptographic algorithm, and distributes the public key of the traditional cryptographic algorithm in ciphertext form, the traditional public key cryptographic algorithm can still be used safely.

[0077] See also Fig.12 As shown, the embodiment of the present application also discloses a digital certificate authentication device, including:

[0078] The entity review module 11 is used to obtain the digital certificate application information of the target entity through the certificate registration system, and review the target entity according to the digital certificate application information;

[0079] The key acquisition module 12 is used to parse the digital certificate request submitted by the target entity if the target entity passes the review, and after verifying that the digital certificate request passes, obtain the key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm; the digital certificate request is generated by the target entity by packaging according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system;

[0080] The certificate issuing module 13 is used to obtain the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, generate a corresponding quantum attack resistant digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key, issue it to the target entity, and store the quantum attack resistant digital certificate; the subject public key information in the quantum attack resistant digital certificate includes the post-quantum key encapsulation public key, post-quantum signature public key and active public key cryptographic public key ciphertext of the target entity;

[0081] The certificate verification module 14 is used to perform signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key after the application system receives the quantum attack resistant digital certificate of the target entity, so as to obtain the signature verification result of the quantum attack resistant digital certificate.

[0082] In this embodiment, the digital certificate application information of the target entity can be obtained, and the target entity can be reviewed based on the digital certificate application information. If the review is passed, the digital certificate request submitted by the target entity is parsed, and after verifying that the digital certificate request is passed, the preset post-quantum key encapsulation algorithm is used to obtain the key encryption key corresponding to the digital certificate request, and then the user information of the target entity and the public key value of the active cryptographic algorithm in the digital certificate request are obtained through the key management system, and the corresponding quantum attack-resistant digital certificate is generated based on the user information and the public key and issued to the target entity, and the digital certificate is stored. In this way, when the application system receives the quantum attack-resistant digital certificate of the target entity, it can perform signature verification on the quantum attack-resistant digital certificate based on the post-quantum signature key, thereby obtaining the signature verification result of the quantum attack-resistant digital certificate. In this way, a hybrid post-quantum public key cryptographic algorithm can be used to produce and issue digital certificates. In the digital certificate issued by the authentication system, the public key data of the traditional public key cryptographic algorithm is ciphertext. Even if the digital certificate is exposed, the traditional public key cryptographic algorithm will not be cracked. In this way, the public key data of the traditional public key cryptographic algorithm can be protected against quantum computing attacks. In addition, the public key plaintext of the traditional public key cryptographic algorithm can be obtained within the business system, which has little impact on the original business using the traditional public key cryptographic algorithm.

[0083] In some specific embodiments, the certificate issuing module 13 further includes:

[0084] A key encryption unit, configured to encapsulate a random shared temporary key using the post-quantum key encapsulation public key of the target entity, and encrypt the key encryption key using the random shared temporary key to obtain a key encryption key ciphertext;

[0085] A ciphertext encapsulation unit is used to encrypt the active algorithm public key plaintext of the target entity using the key encryption key according to a preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC check, and the post-quantum key encapsulation ciphertext is the ciphertext corresponding to the post-quantum key encapsulation public key.

[0086] In some specific embodiments, the certificate verification module 14 further includes:

[0087] A first ciphertext parsing unit, configured to parse the active public key cryptography public key ciphertext into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and MAC value if the quantum attack-resistant digital certificate is the certificate of the target entity;

[0088] A key decryption unit is used to decrypt the post-quantum key encapsulation ciphertext by using the post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key based on the preset post-quantum key encapsulation algorithm to obtain the random shared temporary key, and use the random shared temporary key to decrypt the key encryption key ciphertext to obtain the key encryption key and save it;

[0089] The first parameter verification unit is used to decrypt the active algorithm public key ciphertext by using the key encryption key and verify the MAC value. If the verification is successful, the active algorithm public key plaintext is obtained.

[0090] In some specific embodiments, the certificate verification module 14 further includes:

[0091] A second ciphertext parsing unit is used to parse the active public key cryptography public key ciphertext into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and MAC value if the quantum attack-resistant digital certificate is not the certificate of the target entity;

[0092] The second parameter verification unit is used to obtain the key encryption key, and use the key encryption key to decrypt the active algorithm public key ciphertext, and verify the MAC value at the same time. If the verification passes, the active algorithm public key plaintext is obtained.

[0093] In some specific embodiments, the key acquisition module 12 further includes:

[0094] A key generation unit, used to generate a plurality of symmetric cryptographic algorithm keys according to a preset key generation rule through the key management system, and randomly determine a target symmetric cryptographic algorithm key as the current key encryption key;

[0095] Correspondingly, the certificate issuing module 13 further includes:

[0096] The certificate issuing unit is used to stop using the current key encryption key if it is determined that the key encryption key is not secure, and determine a new key encryption key from the symmetric cryptographic algorithm key to issue a new quantum attack resistant digital certificate based on the new key encryption key.

[0097] In some specific embodiments, the certificate issuing module 13 further includes:

[0098] A certificate revocation unit is used to revoke the quantum attack resistant digital certificate if it is determined that the key encryption key and / or the quantum attack resistant digital certificate are not safe, and add the certificate serial number corresponding to the quantum attack resistant digital certificate to a preset certification revocation list.

[0099] Furthermore, the present application also discloses an electronic device. Fig.13 This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram cannot be regarded as any limitation on the scope of use of the present application.

[0100] Fig.13 A schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the digital certificate authentication method disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0101] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0102] In addition, the memory 22, as a carrier for storing resources, can be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0103] The operating system 221 is used to manage and control the hardware devices and computer programs 222 on the electronic device 20, and can be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program that can be used to complete the digital certificate authentication method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include a computer program that can be used to complete other specific tasks.

[0104] Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein the computer program, when executed by a processor, implements the aforementioned disclosed digital certificate authentication method. The specific steps of the method can refer to the corresponding contents disclosed in the aforementioned embodiments, and will not be repeated here.

[0105] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0106] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0107] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0108] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0109] The technical solution provided by the present application is introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for general technicians in this field, according to the idea of ​​the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A digital certificate authentication method based on a post-quantum algorithm, characterized in that: include: Obtaining digital certificate application information of a target entity through a certificate registration system, and reviewing the target entity according to the digital certificate application information; If the target entity passes the review, the digital certificate request submitted by the target entity is parsed, and after verifying that the digital certificate request is passed, a preset post-quantum key encapsulation algorithm is used to obtain a key encryption key corresponding to the digital certificate request; The digital certificate request is generated by the target entity through packaging according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system; The key management system is used to obtain the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request, generate a corresponding quantum attack resistant digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key, issue the certificate to the target entity, and store the quantum attack resistant digital certificate; the subject public key information in the quantum attack resistant digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key cryptographic public key ciphertext of the target entity; After the application system receives the quantum attack resistant digital certificate of the target entity, it performs signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key to obtain a signature verification result of the quantum attack resistant digital certificate.

2. The digital certificate authentication method based on post-quantum algorithm according to claim 1 is characterized in that: Also includes: Encapsulating a random shared temporary key using the post-quantum key encapsulation public key of the target entity, and encrypting the key encryption key using the random shared temporary key to obtain a key encryption key ciphertext; According to a preset symmetric encryption algorithm, the active algorithm public key plaintext of the target entity is encrypted using the key encryption key to obtain the active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cipher public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC check, and the post-quantum key encapsulation ciphertext is the ciphertext corresponding to the post-quantum key encapsulation public key.

3. The digital certificate authentication method based on post-quantum algorithm according to claim 2 is characterized in that: Before the signature verification of the anti-quantum attack digital certificate based on the post-quantum signature key is performed, the method further includes: If the quantum attack-resistant digital certificate is a certificate of the target entity, the active public key cryptography public key ciphertext is parsed into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and MAC value; Based on the preset post-quantum key encapsulation algorithm, decrypt the post-quantum key encapsulation ciphertext using the post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key to obtain the random shared temporary key, and use the random shared temporary key to decrypt the key encryption key ciphertext to obtain the key encryption key and save it; The key encryption key is used to decrypt the active algorithm public key ciphertext, and the MAC value is verified. If the verification passes, the active algorithm public key plaintext is obtained.

4. The digital certificate authentication method based on post-quantum algorithm according to claim 3 is characterized in that: Before the signature verification of the anti-quantum attack digital certificate based on the post-quantum signature key is performed, the method further includes: If the quantum attack-resistant digital certificate is not a certificate of the target entity, parsing the active public key cryptography public key ciphertext into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and MAC value; The key encryption key is obtained, and the public key ciphertext of the active algorithm is decrypted using the key encryption key, and the MAC value is verified at the same time. If the verification passes, the public key plaintext of the active algorithm is obtained.

5. The digital certificate authentication method based on post-quantum algorithm according to any one of claims 1 to 4, characterized in that: Before obtaining the key encryption key corresponding to the digital certificate request by using the preset post-quantum key encapsulation algorithm, the method further includes: Generate a plurality of symmetric cryptographic algorithm keys according to a preset key generation rule through the key management system, and randomly determine a target symmetric cryptographic algorithm key as the current key encryption key; Correspondingly, after generating a corresponding quantum attack-resistant digital certificate according to the user information, the active algorithm public key and the post-quantum algorithm public key and issuing it to the target entity, it also includes: If it is determined that the key encryption key is not secure, the current key encryption key is stopped from being used, and a new key encryption key is determined from the symmetric cryptographic algorithm key to issue a new quantum attack-resistant digital certificate based on the new key encryption key.

6. The digital certificate authentication method based on post-quantum algorithm according to claim 5 is characterized in that: After the corresponding quantum attack-resistant digital certificate is generated according to the user information, the active algorithm public key and the post-quantum algorithm public key and issued to the target entity, the method further includes: If it is determined that the key encryption key and / or the quantum attack resistant digital certificate are not safe, the quantum attack resistant digital certificate is revoked, and the certificate serial number corresponding to the quantum attack resistant digital certificate is added to a preset certification revocation list.

7. A digital certificate authentication device based on a post-quantum algorithm, characterized in that: include: An entity review module is used to obtain the digital certificate application information of the target entity through the certificate registration system, and review the target entity according to the digital certificate application information; A key acquisition module is used to parse the digital certificate request submitted by the target entity if the target entity passes the review, and after verifying that the digital certificate request passes, obtain the key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm; The digital certificate request is generated by the target entity through packaging according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system; A certificate issuing module, used to obtain the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, generate a corresponding quantum attack resistant digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key, issue it to the target entity, and store the quantum attack resistant digital certificate; the subject public key information in the quantum attack resistant digital certificate includes the post-quantum key encapsulation public key, post-quantum signature public key and active public key cryptographic public key ciphertext of the target entity; The certificate verification module is used to perform signature verification on the quantum attack resistant digital certificate based on the post-quantum signature key after the application system receives the quantum attack resistant digital certificate of the target entity, so as to obtain the signature verification result of the quantum attack resistant digital certificate.

8. The digital certificate authentication device based on post-quantum algorithm according to claim 7, characterized in that: The certificate issuing module further includes: A key encryption unit, configured to encapsulate a random shared temporary key using the post-quantum key encapsulation public key of the target entity, and encrypt the key encryption key using the random shared temporary key to obtain a key encryption key ciphertext; A ciphertext encapsulation unit is used to encrypt the active algorithm public key plaintext of the target entity using the key encryption key according to a preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cipher public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC check, and the post-quantum key encapsulation ciphertext is the ciphertext corresponding to the post-quantum key encapsulation public key.

9. An electronic device, characterized in that: The electronic device includes a processor and a memory; wherein the memory is used to store a computer program, and the computer program is loaded and executed by the processor to implement the digital certificate authentication method based on the post-quantum algorithm as described in any one of claims 1 to 6.

10. A computer-readable storage medium, characterized in that: Used to store a computer program, which, when executed by a processor, implements the digital certificate authentication method based on a post-quantum algorithm as described in any one of claims 1 to 6.

Images