Digital certificate authentication method and device based on post-quantum algorithm, equipment and medium

Abstract

The application discloses a digital certificate authentication method and device based on a post-quantum algorithm, equipment and a medium, and relates to the field of information security. The method comprises the following steps: obtaining digital certificate application information of a target entity for auditing; if the application information is passed, analyzing a digital certificate request submitted by the target entity, and obtaining a key encryption key of the digital certificate request by using a post-quantum key encapsulation algorithm after verification; then obtaining user information of the target entity and a public key value of an active password algorithm in the digital certificate request, generating a digital certificate resistant to quantum attacks according to the user information and the public key, and issuing the digital certificate to the target entity; the digital certificate comprises a post-quantum key encapsulation public key, a post-quantum signature public key and an active public key password public key ciphertext. The application can protect the public key data of the traditional public key password algorithm, resist quantum computing attacks, and obtain the public key plaintext of the traditional public key password algorithm in the business system, which has little influence on the original business using the traditional public key password algorithm.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of information security, and in particular to a digital certificate authentication method and device based on a post-quantum algorithm, equipment and a medium. BACKGROUND

[0002] With the development of quantum computing technology, the security of traditional public key cryptography algorithms has been seriously challenged, especially the algorithms based on large integer factorization and discrete logarithm problem, such as RSA (Rivest-Shamir-Adleman, an asymmetric encryption algorithm), ECC (Elliptic Curve Cryptography, Elliptic Curve Cryptography), SM2 (a national encryption algorithm), etc. In order to solve this potential problem, cryptographers have developed some post-quantum public key cryptography algorithms to resist quantum computing attacks to replace traditional public key cryptography algorithms. However, because of the short application time, these algorithms are not mature, so the mixed use of traditional public key cryptography algorithms and post-quantum cryptography algorithms is the current mainstream usage. Digital certificate is a trusted digital file signed by a third-party certificate authority CA (Certificate Authority) recognized by the state, which has authority, credibility and impartiality, and is used to bind the identity information of an entity and the public key data owned by the entity. By distributing public keys through digital certificates, man-in-the-middle attacks in secure communication can be effectively solved. The currently widely used digital certificate format can support two kinds of public key cryptography algorithms, forming a hybrid certificate system.

[0003] The authentication system based on digital certificates plays an important role in entity identity authentication, ensuring the confidentiality, integrity and non-repudiation of communication and data. The currently widely used digital certificate authentication system usually binds only one traditional public key cryptography algorithm, such as RSA and SM2, which poses a serious threat to the security of these algorithms by quantum computing technology. Since the number of digital certificates issued is generally large and the validity period is relatively long, the authentication system needs to ensure the security of a large number of digital certificates for a long time. Moreover, when using post-quantum public key cryptography algorithms for digital certificates, the current approach mainly uses hybrid post-quantum public key cryptography algorithms and traditional public key cryptography algorithms. However, the public key of the traditional public key cryptography algorithm still exists in the form of plaintext in the certificate, which poses a risk of algorithm cracking and entity identity private key theft. Moreover, if the digital certificate authentication system uses hybrid public key cryptography algorithms, the business application needs to use post-quantum public key cryptography algorithms to ensure security, which requires a large number of modifications to the security functions of the business system. Therefore, how to upgrade and modify the digital certificate authentication system to improve its security is a problem to be solved in the field. SUMMARY

[0004] Therefore, the present application aims to provide a digital certificate authentication method, device and equipment based on a post-quantum algorithm, and a storage medium, which can protect the public key data of a traditional public key cryptography algorithm, resist quantum computing attacks, and obtain the public key plaintext of the traditional public key cryptography algorithm in a business system, with little impact on the original business using the traditional public key cryptography algorithm. The specific scheme is as follows.

[0005] In a first aspect, the present application provides a digital certificate authentication method based on a post-quantum algorithm, comprising:

[0006] Obtaining the digital certificate application information of a target entity through a certificate registration system, and auditing the target entity according to the digital certificate application information;

[0007] If the target entity passes the audit, analyzing the digital certificate request submitted by the target entity, and obtaining the key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm after verifying that the digital certificate request is passed; the digital certificate request is generated by the target entity according to an active algorithm public key, a post-quantum key encapsulation public key and a post-quantum signature public key, and the key encryption key is generated by a key management system;

[0008] Obtaining the user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, generating a corresponding anti-quantum attack digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key and issuing it to the target entity, and storing the anti-quantum attack digital certificate; the subject public key information in the anti-quantum attack digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key cryptography public key ciphertext of the target entity;

[0009] When the application system receives the anti-quantum attack digital certificate of the target entity, the anti-quantum attack digital certificate is signed and verified based on a post-quantum signature key, and the signature verification result of the anti-quantum attack digital certificate is obtained.

[0010] Optionally, the digital certificate authentication based on a post-quantum algorithm further comprises:

[0011] Encapsulating a random shared temporary key by using the post-quantum key encapsulation public key of the target entity, and encrypting the key encryption key by using the random shared temporary key to obtain a key encryption key ciphertext;

[0012] encrypt the active algorithm public key plaintext of the target entity according to a preset symmetric encryption algorithm to obtain active algorithm public key ciphertext, so as to encapsulate the post-quantum key ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cryptography public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC check.

[0013] Optionally, before the signing and verification of the anti-quantum attack digital certificate based on the post-quantum signature key, the method further comprises:

[0014] If the anti-quantum attack digital certificate is the certificate of the target entity, the active public key cryptography public key ciphertext is parsed into the post-quantum key ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and the MAC value;

[0015] The post-quantum key ciphertext is decrypted based on the preset post-quantum key encapsulation algorithm through the post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key to obtain the random shared temporary key, and the key encryption key ciphertext is decrypted using the random shared temporary key to obtain the key encryption key and save it;

[0016] The active algorithm public key ciphertext is decrypted using the key encryption key, and the MAC value is verified; if the verification is passed, the active algorithm public key plaintext is obtained.

[0017] Optionally, before the signing and verification of the anti-quantum attack digital certificate based on the post-quantum signature key, the method further comprises:

[0018] If the anti-quantum attack digital certificate is not the certificate of the target entity, the active public key cryptography public key ciphertext is parsed into the post-quantum key ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and the MAC value;

[0019] The key encryption key is obtained, and the active algorithm public key ciphertext is decrypted using the key encryption key, and the MAC value is verified; if the verification is passed, the active algorithm public key plaintext is obtained.

[0020] Optionally, before the obtaining of the key encryption key corresponding to the digital certificate request according to the preset key encryption key use strategy, the method further comprises:

[0021] A plurality of symmetric cryptography algorithm keys are generated by the key management system according to a preset key generation rule, and a target symmetric cryptography algorithm key is randomly determined as the current key encryption key;

[0022] Correspondingly, the generating corresponding anti-quantum attack digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key and issuing to the target entity further comprises:

[0023] If it is determined that the key encryption key is insecure, the current key encryption key is stopped from being used, a new key encryption key is determined from the symmetric cipher algorithm key, and a new anti-quantum attack digital certificate is issued according to the new key encryption key.

[0024] Correspondingly, the generating corresponding anti-quantum attack digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key and issuing to the target entity further comprises:

[0025] If it is determined that the key encryption key and / or the anti-quantum attack digital certificate is insecure, the anti-quantum attack digital certificate is revoked, and the certificate serial number corresponding to the anti-quantum attack digital certificate is added to a preset authentication revocation list.

[0026] In a second aspect, the present application provides a digital certificate authentication device based on a post-quantum algorithm, comprising:

[0027] An entity auditing module is configured to obtain digital certificate application information of a target entity through a certificate registration system, and to audit the target entity according to the digital certificate application information;

[0028] A key obtaining module is configured to, if the target entity passes the audit, parse a digital certificate request submitted by the target entity, and to obtain a key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm after verifying that the digital certificate request is passed; the digital certificate request is generated by the target entity according to an active algorithm public key, a post-quantum key encapsulation public key and a post-quantum signature public key, and the key encryption key is generated by a key management system;

[0029] A certificate issuing module is configured to obtain user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, to generate a corresponding anti-quantum attack digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key and to issue the anti-quantum attack digital certificate to the target entity, and to store the anti-quantum attack digital certificate; the subject public key information in the anti-quantum attack digital certificate comprises a post-quantum key encapsulation public key, a post-quantum signature public key and an active public key password public key ciphertext of the target entity;

[0030] The certificate verification module is configured to, after the application system receives the anti-quantum attack digital certificate of the target entity, perform signature verification on the anti-quantum attack digital certificate based on the post-quantum signature key, to obtain a signature verification result of the anti-quantum attack digital certificate.

[0031] Optionally, the certificate issuing module further comprises:

[0032] The key encryption unit is configured to encapsulate a random shared temporary key by using the post-quantum key of the target entity, and encrypt the key encryption key by using the random shared temporary key to obtain a key encryption key ciphertext.

[0033] The ciphertext encapsulation unit is configured to encrypt the active algorithm public key plaintext of the target entity by using the key encryption key according to a preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cryptography public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC verification, and the post-quantum key encapsulation ciphertext is a ciphertext corresponding to the post-quantum key encapsulation public key.

[0034] In a third aspect, the present application provides an electronic device, comprising a processor and a memory; wherein the memory is configured to store a computer program, the computer program is loaded and executed by the processor to implement the aforementioned post-quantum algorithm-based digital certificate authentication method.

[0035] In a fourth aspect, the present application provides a computer readable storage medium for saving a computer program, the computer program is executed by a processor to implement the aforementioned post-quantum algorithm-based digital certificate authentication method.

[0036] The application first acquires digital certificate application information of a target entity, and performs auditing on the target entity according to the digital certificate application information, if the auditing is passed, parses a digital certificate request submitted by the target entity, and after verifying that the digital certificate request is passed, acquires a key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm, then acquires user information of the target entity and an active algorithm public key value in the digital certificate request through a key management system, and generates a corresponding anti-quantum attack digital certificate according to the user information and the public key and issues the anti-quantum attack digital certificate to the target entity, and stores the digital certificate, so that when an application system receives the anti-quantum attack digital certificate of the target entity, the anti-quantum attack digital certificate can be verified based on a post-quantum signature key, so as to obtain a signature verification result of the anti-quantum attack digital certificate. In this way, the application can use a hybrid post-quantum public key cryptography algorithm to make and issue a digital certificate, and in the digital certificate issued by the authentication system, the public key data of the traditional public key cryptography algorithm is a ciphertext, so that even if the digital certificate is exposed, the traditional public key cryptography algorithm cannot be cracked, so that the public key data of the traditional public key cryptography algorithm can be protected, resistance to quantum computing attacks, and the public key plaintext of the traditional public key cryptography algorithm can be obtained in the business system, which has very low impact on the original business using the traditional public key cryptography algorithm, and the authenticity of the digital certificate is ensured by using the post-quantum digital signature algorithm and the optional active public key cryptography algorithm. BRIEF DESCRIPTION OF DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiments or the prior art description. Obviously, the drawings in the following description are only embodiments of the application, and for those skilled in the art, other drawings can also be obtained without creative labor on the basis of the provided drawings.

[0038] Figure 1 A flow chart of a digital certificate authentication method based on a post-quantum algorithm is provided for the application;

[0039] Figure 2 A schematic diagram of a digital certificate authentication system based on a post-quantum algorithm is provided for the application;

[0040] Figure 3 A flow chart of a digital certificate issuing process is provided for the application;

[0041] Figure 4 A flow chart of a digital certificate signature operation is provided for the application;

[0042] Figure 5 A flow chart of a digital certificate verification operation is provided for the application;

[0043] Figure 6A specific digital certificate authentication method flowchart based on a post-quantum algorithm is provided for the present application.

[0044] Figure 7 A digital certificate request format schematic diagram is provided for the present application.

[0045] Figure 8 A current algorithm public key ciphertext structure encapsulation schematic diagram is provided for the present application.

[0046] Figure 9 A digital certificate structure schematic diagram is provided for the present application.

[0047] Figure 10 A current algorithm public key ciphertext structure encapsulation schematic diagram is provided for the present application.

[0048] Figure 11 A current algorithm public key ciphertext structure encapsulation schematic diagram is provided for the present application.

[0049] Figure 12 A digital certificate authentication device structure schematic diagram based on a post-quantum algorithm is provided for the present application.

[0050] Figure 13 An electronic equipment structure diagram is provided for the present application. DETAILED DESCRIPTION

[0051] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0052] At present, when a hybrid post-quantum public key cryptography algorithm is used, the public key of the traditional public key cryptography algorithm still exists in the certificate in plaintext form, and there is a risk that the algorithm is cracked and the entity identity private key is stolen. Moreover, if the digital certificate authentication system uses a hybrid public key cryptography algorithm, the business system needs to be modified a lot when the post-quantum public key cryptography algorithm is used in business application. However, the present application uses a hybrid post-quantum public key cryptography algorithm to make and issue digital certificates, and the public key data of the traditional public key cryptography algorithm in the digital certificates issued by the authentication system is ciphertext. Even if the digital certificate is exposed, the traditional public key cryptography algorithm will not be cracked, so that the public key data of the traditional public key cryptography algorithm can be protected against quantum computing attacks.

[0053] Referring to Figure 1 The embodiments of the present application disclose a digital certificate authentication method based on a post-quantum algorithm, which comprises:

[0054] Step S11, obtain the digital certificate application information of the target entity through the certificate registration system, and audit the target entity according to the digital certificate application information.

[0055] It should be noted that the digital certificate authentication system based on the post-quantum hybrid algorithm in the embodiment is implemented by the following parts: a certificate issuing system (CA, Certificate Authority), a registration and audit system (RA, Register Authority), a key management system (KMC, Key Management Center), a certificate storage and distribution system (LDAP, Lightweight Directory Access Protocol), and a certificate status query system (OCSP, The Online Certificate Status Protocol). Figure 2

[0056] As shown in the embodiment, Figure 3 the entity first submits a certificate registration application, and needs to fill in the relevant entity information when registering to ensure that the same symmetric cryptographic algorithm key is used in the same business system. After the entity fills in the application information, the digital certificate application information of the target entity can be obtained through the certificate registration system, and the target entity is audited according to the digital certificate application information. If the audit fails at this time, the corresponding audit failure reason is sent to the entity, so that the entity can modify the application information after obtaining the failure reason, and resubmit the modified digital certificate application.

[0057] Step S12, if the target entity passes the audit, parse the digital certificate request submitted by the target entity, and after verifying that the digital certificate request passes, obtain the key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm; the digital certificate request is packaged by the target entity according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system.

[0058] In the embodiment, if the target entity passes the audit, the digital certificate request submitted by the target entity can be obtained as shown in Figure 4 , and after verifying that the digital certificate request passes, the key encryption key (KEK, Key Encryption Key) corresponding to the digital certificate request is obtained according to a preset key encryption key usage policy. The above-mentioned digital certificate request is packaged by the target entity according to the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, and the key encryption key is generated by the key management system. As shown in Figure 3 ​As shown, after the entity receives the message that the certificate registration system has passed the audit, the entity can generate the corresponding pre- and post-quantum key, further package it into a certificate generation request, and then the certificate registration system can verify the request. When the verification is passed, the KEK key generated by the key management system is obtained according to the pre-set KEK key usage strategy, that is, the key encryption key usage strategy. It can be understood that, as in the above step, after the certificate request verification of the entity fails, the corresponding failure information can also be sent to the entity.

[0059] According to the above process, before obtaining the key encryption key corresponding to the digital certificate request, the key management system needs to generate a plurality of 32-byte long symmetric cryptographic algorithm keys according to the pre-set key generation rule, and use one of the symmetric cryptographic algorithm keys as the current key encryption key. It can be understood that the key management system can manage the keys corresponding to the post-quantum public key cryptographic algorithm, the traditional public key cryptographic algorithm and the symmetric cryptographic algorithm, and pre-generate a certain amount of 32-byte long symmetric cryptographic algorithm keys (KEK) and save them in a secure storage area for extraction when needed. The certificate registration system needs to ensure that the same symmetric cryptographic algorithm key (KEK) is used for the entity certificate of the same business system. It should be noted that the traditional algorithm in the present application file is the active algorithm described in the present application file, and the corresponding traditional algorithm public key is the active algorithm public key. The corresponding description of the traditional algorithm can also be understood as the related content of the corresponding active algorithm. The related content mentioned in the following also has the same effect, which will not be described in detail here.

[0060] Step S13, obtaining the user information of the target entity and the active algorithm public key and post-quantum algorithm public key in the digital certificate request through the key management system, generating a corresponding anti-quantum attack digital certificate according to the user information and the active algorithm public key and the post-quantum algorithm public key and issuing it to the target entity, and storing the anti-quantum attack digital certificate; the subject public key information in the anti-quantum attack digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key cryptographic public key ciphertext of the target entity.

[0061] In this embodiment, as Figure 3As shown, the user information of the target entity and the public key in the digital certificate request can be obtained by the key management system, the corresponding digital certificate is generated according to the user information and the public key, and is issued to the target entity, and the digital certificate is stored, wherein the subject public key information in the digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active algorithm public key cipher public key ciphertext. After the digital certificate is issued to the target entity, if it is determined that the key encryption key is not safe, the current key encryption key is stopped from being used, a new key encryption key is determined from the symmetric cipher algorithm key, and a new digital certificate is issued according to the new key encryption key. In this embodiment, when the symmetric cipher algorithm key is no longer safe, the key management system needs to stop using the original symmetric key (KEK), replace the new symmetric key to issue a new certificate, revoke all digital certificates protected by the original symmetric cipher algorithm key (KEK), and store and save the conventional cipher algorithm public key, the post-quantum KEM public key and the post-quantum signature public key of the issued entity certificate, so as to ensure that the public keys of the subsequent entity certificates are no longer the same. Correspondingly, after the digital certificate is issued to the target entity, if it is determined that the key encryption key and / or the digital certificate is not safe, the digital certificate is revoked, and the certificate serial number corresponding to the digital certificate is added to the preset authentication revocation list. In this embodiment, if the digital certificate is no longer safe, or the symmetric key KEK is no longer safe, etc., the digital certificate should be revoked, and the corresponding certificate serial number is placed in the CRL (Certificate Revocation List) list for public release.

[0062] Through the above process, as shown in Figure 4 When the entity submits the active algorithm public key, the post-quantum key encapsulation public key and the post-quantum signature public key, the CA generates the KEK and encapsulates the active algorithm public key cipher public key ciphertext using the KEK and the entity post-quantum key encapsulation public key, then obtains the identity information submitted by the entity and encapsulates the corresponding certificate information structure, and signs the certificate information structure based on the CA post-quantum private key (active algorithm private key) corresponding to the post-quantum signature public key, to complete the issuance of the entity certificate.

[0063] Step S14, after the application system receives the anti-quantum attack digital certificate of the target entity, the anti-quantum attack digital certificate is signed and verified based on the post-quantum signature key, to obtain the signature verification result of the anti-quantum attack digital certificate.

[0064] In this embodiment, after the application system receives the digital certificate of the target entity, the digital certificate can be signed and verified based on the post-quantum signature key, to obtain the signature verification result of the digital certificate. As shown in Figure 5As shown, after obtaining the entity certificate, the certificate information is taken out, and the validity period and identity information of the certificate are verified. The verification can be performed by taking out the certificate signature information through the CA post-quantum public key (active algorithm public key).

[0065] In this embodiment, the digital certificate application information of the target entity is obtained through the certificate registration system, and the target entity is audited according to the digital certificate application information. If the target entity passes the audit, the digital certificate request submitted by the target entity is obtained, and after verifying that the digital certificate request passes, the key encryption key corresponding to the digital certificate request is obtained according to the preset key encryption key usage policy. Then, the user information of the target entity and the public key in the digital certificate request are obtained through the key management system, the corresponding digital certificate is generated according to the user information and the public key, and is issued to the target entity. The digital certificate is stored, and when the application system receives the digital certificate of the target entity, the digital certificate can be signed and verified based on the post-quantum signature key, and the signature verification result of the digital certificate is obtained. In this way, the hybrid post-quantum public key cryptography algorithm can be used to make and issue digital certificates, and in the digital certificates issued by the authentication system, the public key data of the traditional public key cryptography algorithm is in ciphertext. Even if the digital certificate is exposed, the traditional public key cryptography algorithm will not be cracked, so that the public key data of the traditional public key cryptography algorithm can be protected, and the quantum computing attack can be resisted. Moreover, the public key plaintext of the traditional public key cryptography algorithm can be obtained in the business system, and the original business using the traditional public key cryptography algorithm has very low impact.

[0066] Based on the previous embodiment, the application can use a hybrid post-quantum public key cryptography algorithm to make and issue digital certificates. Next, the process of certificate verification will be described in detail in this embodiment. Referring to Figure 6 As shown, the application embodiment discloses a specific digital certificate authentication method based on post-quantum algorithm, which comprises:

[0067] Step S21, encapsulating a random shared temporary key using the post-quantum key encapsulation public key of the target entity, and encrypting the key encryption key using the random shared temporary key to obtain the key encryption key ciphertext.

[0068] In the application, as shown in Figure 7 As shown, the digital certificate request structure still follows the PKCS#10 standard. When receiving the certificate request, as shown in Figure 8 As shown, a random shared key is encapsulated using the post-quantum key encapsulation public key of the CA, and a symmetric encryption algorithm with MAC verification, such as SM4-GCM / CCM, is used to encrypt the KEK with the shared key to obtain the traditional public key plaintext of the entity, and then the post-quantum key encapsulation ciphertext and the traditional public key ciphertext are encapsulated into the active algorithm public key ciphertext structure.

[0069] And the process of the above-mentioned active algorithm public key ciphertext structure, as shown in Figure 9 The digital certificate structure in the embodiment follows the X.509 standard, but the internal structure is adjusted a little, wherein the subject public key information in the X.509 certificate wraps the post-quantum KEM (Key Encapsulation) public key, the post-quantum signature public key and the active public key password public key ciphertext of the entity. The format of the above-mentioned digital certificate can be defined as follows:

[0070] CA >= CA {V, SN, AI, CA, UCA, A, UA, Ap, T A , E} ;

[0071] wherein V in the braces is the certificate version, SN is the certificate serial number, AI is the algorithm identifier that signed the certificate, CA is the issuer distinguished name, UCA is the CA optional unique identifier, A is the subject distinguished name, UA is the optional unique identifier for user A, Ap is the public key for user A, T A is the certificate validity period, and E is the extensions information.

[0072] Based on the above procedure, as Figure 10 As shown in the figure, the active public key password public key ciphertext encapsulation process is as follows: the CA selects a long-term used security KEK key (the same KEK key is used in the same business system to ensure that the application entity in the system can also get the key), encapsulates a random shared key using the post-quantum key encapsulation public key of the entity, encrypts the KEK using the shared key to obtain KEK key ciphertext, encrypts the traditional public key plaintext of the entity using the KEK key using a symmetric encryption algorithm with MAC verification such as SM4-GCM (Galios Count Mode, Galios Count Mode), obtains the traditional public key ciphertext, and finally encapsulates the post-quantum key encapsulation ciphertext, the KEK ciphertext and the traditional public key ciphertext into the active algorithm public key ciphertext structure. In this way, in the digital certificate issued by the authentication system, the public key data of the traditional public key password algorithm is ciphertext, even if the digital certificate is exposed, the traditional public key password algorithm will not be cracked, and the private key of the traditional public key password is still safe;

[0073] Step S22, encrypt the active algorithm public key plaintext of the target entity using the key encryption key according to a preset symmetric encryption algorithm to obtain active algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into active public key password public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC verification, and the post-quantum key encapsulation ciphertext is the ciphertext corresponding to the post-quantum key encapsulation public key.

[0074] In this embodiment, the active algorithm public key ciphertext can be obtained by encrypting the active algorithm public key plaintext of the target entity with the key according to the preset symmetric encryption algorithm including MAC check, and the post-quantum key encapsulation ciphertext, the KEK ciphertext and the active algorithm public key ciphertext are encapsulated into the active public key password public key ciphertext. Before this process, in a specific embodiment, if the digital certificate is the certificate of the target entity, the active public key password public key ciphertext is parsed into the post-quantum key encapsulation ciphertext, the KEK ciphertext and the active algorithm public key ciphertext and the MAC value, then the post-quantum key encapsulation ciphertext is decrypted by the post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key to obtain the random shared key, the KEK ciphertext is decrypted by the random shared key to obtain the KEK, and the active algorithm public key ciphertext is decrypted by the KEK, and the MAC value is verified, if the verification is passed, the active algorithm public key plaintext is obtained. As shown in Figure 11 If the certificate is the certificate of the entity, the active algorithm public key ciphertext structure is first parsed into the post-quantum key encapsulation ciphertext, the KEK key ciphertext and the active algorithm public key ciphertext and the MAC, then the post-quantum key encapsulation ciphertext is decrypted by the post-quantum key encapsulation private key of the entity to obtain the shared key, the KEK key ciphertext is decrypted by the shared key to obtain the KEK key plaintext for storage, and finally the active algorithm public key ciphertext is decrypted by the KEK key, the MAC is verified, and the active algorithm public key plaintext is obtained if the verification is passed.

[0075] In another specific embodiment, if the digital certificate is not the certificate of the target entity, the active public key password public key ciphertext is parsed into the post-quantum key encapsulation ciphertext, the KEK key ciphertext and the active algorithm public key ciphertext and the MAC value, and the KEK key is obtained, the active algorithm public key ciphertext is decrypted by the KEK key, and the MAC value is verified, if the verification is passed, the active algorithm public key plaintext is obtained. After the public key plaintext of the traditional public key encryption algorithm is obtained through the above two specific embodiments, it can be applied to the original business system.

[0076] In the embodiment, the random shared key is packaged by the post-quantum key encapsulation public key of the target entity, the key encryption key is encrypted by using the random shared key, the active algorithm public key plaintext of the target entity is encrypted by using the key encryption key according to a preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, and the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext are packaged into the active public key cryptography public key ciphertext. Through the above technical solution, the digital certificate of the hybrid public key cryptography algorithm (the algorithm includes the post-quantum key encapsulation algorithm, the post-quantum signature verification algorithm and the traditional public key cryptography algorithm) can be published to distribute the public key of the ciphertext form of the traditional public key cryptography algorithm, the public key plaintext is decrypted in the business application system, and the original business is completed by using the public key plaintext. The original business system is slightly modified, the quantum security is realized, the public key plaintext data of the traditional public key cryptography algorithm can be obtained in the business system, the original security business using the traditional public key cryptography algorithm is not affected or is slightly affected, and the traditional public key cryptography algorithm can still be safely used outside the application system,

[0077] Referring to Figure 12 The embodiment of the application further discloses a digital certificate authentication device, which comprises:

[0078] The entity auditing module 11 is configured to obtain digital certificate application information of a target entity through a certificate registration system, and to audit the target entity according to the digital certificate application information.

[0079] The key obtaining module 12 is configured to, if the target entity passes the audit, parse a digital certificate request submitted by the target entity, and to obtain a key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm after verifying that the digital certificate request is passed. The digital certificate request is packaged by the target entity according to an active algorithm public key, a post-quantum key encapsulation public key and a post-quantum signature public key, and the key encryption key is generated by a key management system.

[0080] The certificate issuing module 13 is configured to obtain user information of the target entity and the post-quantum algorithm public key and the active algorithm public key in the digital certificate request through the key management system, generate a corresponding anti-quantum attack digital certificate according to the user information and the post-quantum algorithm public key and the active algorithm public key, and issue the anti-quantum attack digital certificate to the target entity, and store the anti-quantum attack digital certificate; the subject public key information in the anti-quantum attack digital certificate includes the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key password public key ciphertext.

[0081] The certificate verification module 14 is configured to, when the application system receives the anti-quantum attack digital certificate of the target entity, perform signature verification on the anti-quantum attack digital certificate based on the post-quantum signature key, to obtain a signature verification result of the anti-quantum attack digital certificate.

[0082] In the embodiment, the digital certificate application information of the target entity can be obtained, the target entity is audited according to the digital certificate application information, if the audit is passed, the digital certificate request submitted by the target entity is parsed, and after the verification of the digital certificate request is passed, the key encryption key corresponding to the digital certificate request is obtained by using the preset post-quantum key encapsulation algorithm, then the user information of the target entity and the active password algorithm public key value in the digital certificate request are obtained through the key management system, and the corresponding anti-quantum attack digital certificate is generated according to the user information and the public key and issued to the target entity, and the digital certificate is stored. When the application system receives the anti-quantum attack digital certificate of the target entity, the anti-quantum attack digital certificate can be verified based on the post-quantum signature key, so as to obtain the signature verification result of the anti-quantum attack digital certificate. In this way, the hybrid post-quantum public key password algorithm can be used to make and issue the digital certificate, and the public key data of the traditional public key password algorithm in the digital certificate issued by the authentication system is in ciphertext, so that even if the digital certificate is exposed, the traditional public key password algorithm cannot be cracked, thereby the public key data of the traditional public key password algorithm can be protected, the quantum computing attack can be resisted, and the public key plaintext of the traditional public key password algorithm can be obtained in the business system, which has little influence on the original business using the traditional public key password algorithm.

[0083] In some specific embodiments, the certificate issuing module 13 further comprises:

[0084] The key encryption unit is configured to encapsulate a random shared temporary key by using the post-quantum key encapsulation public key of the target entity, and encrypt the key encryption key by using the random shared temporary key to obtain key encryption key ciphertext.

[0085] The ciphertext encapsulation unit is configured to encrypt the active algorithm public key plaintext of the target entity by using the key according to a preset symmetric encryption algorithm to obtain an active algorithm public key ciphertext, and to encapsulate a post-quantum key encapsulation ciphertext, the key encryption key ciphertext, and the active algorithm public key ciphertext into the active public key cryptography public key ciphertext.

[0086] In some embodiments, the certificate verification module 14 further includes:

[0087] The first ciphertext analysis unit is configured to analyze the active public key cryptography public key ciphertext into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext, the active algorithm public key ciphertext, and a MAC value if the anti-quantum attack digital certificate is the certificate of the target entity.

[0088] The key decryption unit is configured to decrypt the post-quantum key encapsulation ciphertext by using a post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key according to the preset post-quantum key encapsulation algorithm to obtain the random shared temporary key, and to decrypt the key encryption key ciphertext by using the random shared temporary key to obtain the key encryption key and save the key encryption key.

[0089] The first parameter verification unit is configured to decrypt the active algorithm public key ciphertext by using the key encryption key, and to verify the MAC value. If the verification is passed, the active algorithm public key plaintext is obtained.

[0090] In some embodiments, the certificate verification module 14 further includes:

[0091] The second ciphertext analysis unit is configured to analyze the active public key cryptography public key ciphertext into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext, and the active algorithm public key ciphertext, and a MAC value if the anti-quantum attack digital certificate is not the certificate of the target entity.

[0092] The second parameter verification unit is configured to obtain the key encryption key, decrypt the active algorithm public key ciphertext by using the key encryption key, and verify the MAC value. If the verification is passed, the active algorithm public key plaintext is obtained.

[0093] In some embodiments, the key obtaining module 12 further includes:

[0094] The key generation unit is configured to generate a plurality of symmetric cryptography algorithm keys by using the key management system according to a preset key generation rule, and to randomly determine a target symmetric cryptography algorithm key as the current key encryption key.

[0095] Correspondingly, the certificate issuing module 13 further comprises:

[0096] The certificate issuing unit is configured to, if it is determined that the key encryption key is insecure, stop using the current key encryption key, determine a new key encryption key from the symmetric cryptographic algorithm key, and issue a new quantum attack-resistant digital certificate according to the new key encryption key.

[0097] In some specific embodiments, the certificate issuing module 13 further comprises:

[0098] The certificate revocation unit is configured to, if it is determined that the key encryption key and / or the quantum attack-resistant digital certificate is insecure, revoke the quantum attack-resistant digital certificate, and add the certificate serial number corresponding to the quantum attack-resistant digital certificate to a preset authentication revocation list.

[0099] Further, the present application also discloses an electronic device, Figure 13 is a structural diagram of an electronic device 20 according to an exemplary embodiment, and the contents in the figure cannot be considered as any limitation on the use range of the present application.

[0100] Figure 13 A structural schematic diagram of an electronic device 20 provided by the present application is provided. The electronic device 20 can specifically include at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25 and a communication bus 26. The memory 22 is used to store a computer program, and the computer program is loaded and executed by the processor 21 to realize the related steps in the digital certificate authentication method disclosed in any of the preceding embodiments. In addition, the electronic device 20 in the present embodiment can be an electronic computer.

[0101] In the present embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and external devices, and the communication protocol followed by the communication interface 24 can be any communication protocol applicable to the technical solution of the present application, which is not limited here; the input / output interface 25 is used to obtain external input data or output data to the outside, and the specific interface type can be selected according to the specific application needs, which is not limited here.

[0102] In addition, the memory 22 as a carrier for resource storage can be a read-only memory, a random access memory, a magnetic disk or an optical disk, etc., and the resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage mode can be temporary storage or permanent storage.

[0103] The operating system 221 is used to manage and control each hardware device on the electronic device 20 and the computer program 222, which can be Windows Server, Netware, Unix, Linux, etc. The computer program 222 can further include computer programs capable of completing other specific work in addition to the computer programs capable of completing the digital certificate authentication method performed by the electronic device 20 disclosed in any of the foregoing embodiments.

[0104] Further, the present application also discloses a computer readable storage medium for storing a computer program; wherein the computer program is executed by a processor to implement the digital certificate authentication method disclosed above. For the specific steps of the method, please refer to the corresponding content disclosed in the foregoing embodiments, which will not be repeated here.

[0105] The embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. For the same or similar parts between the embodiments, please refer to the description of the other embodiments. For the device disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple, and please refer to the description of the method.

[0106] The skilled person can further realize that the units and algorithm steps of the examples described in combination with the embodiments disclosed herein can be realized by electronic hardware, computer software or a combination of the two. In order to clearly show the interchangeability of hardware and software, the composition and steps of each example have been described in the above description. Whether the functions are realized in hardware or software depends on the specific application and design constraints of the technical solution. The skilled person can use different methods to realize the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.

[0107] The steps of the method or algorithm described in combination with the embodiments disclosed herein can be directly implemented by hardware, a software module executed by a processor, or a combination of the two. The software module can be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0108] Finally, it needs to be pointed out that in this document, relational terms such as first and second and the like can only be intended to distinguish one entity or operation from another entity or operation without necessarily requiring or implying any actual such relationship or order between such entities or operations. Moreover, the terms "comprising", "including", or any other variant thereof are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can also include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without more limitations, an element defined by the statement "comprising a" does not exclude the existence of additional identical elements in the process, method, article, or apparatus including the stated element.

[0109] The above detailed description of the technical solutions provided by the present application has been provided, and the principles and implementation manners of the present application have been described by applying specific examples. The above description of the examples is only for the purpose of helping to understand the method of the present application and its core idea; at the same time, for those skilled in the art, according to the idea of the present application, the specific implementation manner and application range will be changed, and the above description of the content of the specification should not be understood as a limitation of the present application.

Claims

1. A digital certificate authentication method based on a post-quantum algorithm, characterized by, The application relates to a post-quantum algorithm-based digital certificate authentication method. Obtaining digital certificate application information of a target entity through a certificate registration system, and auditing the target entity according to the digital certificate application information; If the target entity passes the audit, analyzing a digital certificate request submitted by the target entity, and obtaining a key encryption key corresponding to the digital certificate request by using a preset post-quantum key encapsulation algorithm after verifying that the digital certificate request passes; The digital certificate request is generated by the target entity according to a current algorithm public key, a post-quantum key encapsulation public key and a post-quantum signature public key, and the key encryption key is generated by a key management system; Obtaining user information of the target entity and the current algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, generating a corresponding anti-quantum attack digital certificate according to the user information and the current algorithm public key and the post-quantum algorithm public key, and issuing the anti-quantum attack digital certificate to the target entity, and storing the anti-quantum attack digital certificate; the subject public key information in the anti-quantum attack digital certificate comprises a post-quantum key encapsulation public key, a post-quantum signature public key and a current public key encryption public key ciphertext of the target entity; After an application system receives the anti-quantum attack digital certificate of the target entity, performing signature verification on the anti-quantum attack digital certificate based on a post-quantum signature key, and obtaining a signature verification result of the anti-quantum attack digital certificate; The post-quantum algorithm-based digital certificate authentication method further comprises the following steps: Encapsulating a random shared temporary key by using the post-quantum key encapsulation public key of the target entity, and encrypting the key encryption key by using the random shared temporary key to obtain a key encryption key ciphertext; Encrypting the current algorithm public key plaintext of the target entity by using the key encryption key according to a preset symmetric encryption algorithm to obtain a current algorithm public key ciphertext, so as to encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the current algorithm public key ciphertext into the current public key encryption public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm comprising MAC verification, and the post-quantum key encapsulation ciphertext is a ciphertext corresponding to the post-quantum key encapsulation public key. 2.The digital certificate authentication method based on a post-quantum algorithm according to claim 1, wherein, Before the anti-quantum attack digital certificate is verified based on the post-quantum signature key, the following steps are further included: If the anti-quantum attack digital certificate is the certificate of the target entity, the current public key encryption public key ciphertext is parsed into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the current algorithm public key ciphertext and a MAC value; Decrypting the post-quantum key encapsulation ciphertext by using a post-quantum key encapsulation private key corresponding to the post-quantum key encapsulation public key based on the preset post-quantum key encapsulation algorithm to obtain the random shared temporary key, and decrypting the key encryption key ciphertext by using the random shared temporary key to obtain the key encryption key and save the key encryption key; Decrypting the current algorithm public key ciphertext by using the key encryption key, and verifying the MAC value, if the verification passes, the current algorithm public key plaintext is obtained. 3.The digital certificate authentication method based on post-quantum algorithm according to claim 2, characterized in that, Before the post-quantum signature key pair signs the anti-quantum attack digital certificate, the method further comprises: If the anti-quantum attack digital certificate is not the certificate of the target entity, the active public key password public key ciphertext is parsed into the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext and the MAC value; The key encryption key is obtained, and the active algorithm public key ciphertext is decrypted using the key encryption key, and the MAC value is verified, and if the verification is passed, the active algorithm public key plaintext is obtained.

4. The method of claim 1 to 3, wherein, Before the preset post-quantum key encapsulation algorithm is used to obtain the key encryption key corresponding to the digital certificate request, the method further comprises: A plurality of symmetric password algorithm keys are generated according to a preset key generation rule through the key management system, and a target symmetric password algorithm key is randomly determined as the current key encryption key; Correspondingly, after the anti-quantum attack digital certificate corresponding to the user information and the active algorithm public key and the post-quantum algorithm public key is generated and issued to the target entity, the method further comprises: If it is determined that the key encryption key is insecure, the current key encryption key is stopped, a new key encryption key is determined from the symmetric password algorithm keys, and a new anti-quantum attack digital certificate is issued according to the new key encryption key.

5. The method of claim 4, wherein the post-quantum algorithm-based digital certificate authentication method is characterized by, After the anti-quantum attack digital certificate corresponding to the user information and the active algorithm public key and the post-quantum algorithm public key is generated and issued to the target entity, the method further comprises: If it is determined that the key encryption key and / or the anti-quantum attack digital certificate is insecure, the anti-quantum attack digital certificate is revoked, and the certificate serial number corresponding to the anti-quantum attack digital certificate is added to a preset authentication revocation list.

6. A digital certificate authentication apparatus based on a post-quantum algorithm, characterized by, Comprise: An entity auditing module is configured to obtain digital certificate application information of a target entity through a certificate registration system, and to audit the target entity according to the digital certificate application information; A key obtaining module is configured to parse a digital certificate request submitted by the target entity if the target entity passes the audit, and to obtain a key encryption key corresponding to the digital certificate request using a preset post-quantum key encapsulation algorithm after verifying that the digital certificate request is passed; The digital certificate request is packaged by the target entity according to an active algorithm public key, a post-quantum key encapsulation public key and a post-quantum signature public key, and the key encryption key is generated by a key management system; A certificate issuing module is configured to obtain user information of the target entity and the active algorithm public key and the post-quantum algorithm public key in the digital certificate request through the key management system, to generate an anti-quantum attack digital certificate corresponding to the user information and the active algorithm public key and the post-quantum algorithm public key and to issue the anti-quantum attack digital certificate to the target entity, and to store the anti-quantum attack digital certificate; the subject public key information in the anti-quantum attack digital certificate comprises the post-quantum key encapsulation public key, the post-quantum signature public key and the active public key password public key ciphertext of the target entity. The certificate verification module is configured to, after the application system receives the anti-quantum attack digital certificate of the target entity, perform signature verification on the anti-quantum attack digital certificate based on a post-quantum signature key, to obtain a signature verification result of the anti-quantum attack digital certificate. The certificate issuing module further includes: The key encryption unit is configured to encapsulate a random shared temporary key by using the post-quantum key of the target entity, and encrypt the key encryption key by using the random shared temporary key to obtain a key encryption key ciphertext; The ciphertext encapsulation unit is configured to encrypt the active algorithm public key plaintext of the target entity by using the key encryption key according to a preset symmetric encryption algorithm to obtain the active algorithm public key ciphertext, and encapsulate the post-quantum key encapsulation ciphertext, the key encryption key ciphertext and the active algorithm public key ciphertext into the active public key cryptography public key ciphertext; the preset symmetric encryption algorithm is a symmetric encryption algorithm including MAC verification, and the post-quantum key encapsulation ciphertext is a ciphertext corresponding to the post-quantum key encapsulation public key.

7. An electronic device, comprising: The electronic device includes a processor and a memory; wherein the memory is used to store a computer program, the computer program is loaded and executed by the processor to realize the post-quantum algorithm-based digital certificate authentication method as claimed in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, A computer program is stored, and the computer program is executed by a processor to realize the post-quantum algorithm-based digital certificate authentication method as claimed in any one of claims 1 to 5.

Images