Key authentication method based on quantum key

Abstract

The invention discloses a key authentication method based on a quantum key, the quantum key is generated by N QKD systems, N is greater than or equal to 1, each QKD system comprises a sending end and a receiving end, the method comprises the following steps: S1, a user end constructs and encrypts an authentication request message; S2, the QKM decrypts the authentication request message; s5, the user side decrypts the authentication feedback message; S6, the user side carries out key comparison, and an authentication confirmation message is generated; S7, the user side encrypts the authentication confirmation message; S8, the authentication confirmation message is decrypted by the QKM, and an authentication result is obtained; the invention discloses a secret key authentication method based on a quantum secret key, which realizes quantum secret communication by using the quantum secret key in a bidirectional authentication process of a user side and a QKM (Quantum Key Management), thereby having relatively strong capability of resisting attacks of a traditional computer technology and a quantum technology, and greatly improving communication security.

Description

Technical Field

[0001] The present invention relates to the field of quantum communication technology, and in particular to a key authentication method based on quantum key. Background Art

[0002] Existing key authentication methods, such as symmetric key authentication and public key infrastructure (PKI), currently ensure the security of communications to a certain extent. However, with the development of quantum technology, these key authentication methods have exposed some obvious defects.

[0003] Among them, although symmetric key authentication can provide high-strength encryption protection, the security of the key distribution process cannot be effectively guaranteed. Once the key is intercepted during transmission, the security of the entire communication will be seriously threatened.

[0004] Although the public key infrastructure builds a trust chain through public and private key pairs, it is highly dependent on the certificate authority (CA). Once the CA is attacked or the trust fails, the security of the entire system will be questioned.

[0005] Therefore, existing key authentication methods are difficult to effectively resist attacks from quantum computing technology, resulting in insufficient communication security. Summary of the invention

[0006] In order to solve the problem that the existing key authentication method is difficult to effectively resist the attack of quantum technology, resulting in insufficient communication security, the present invention provides a key authentication method based on quantum key.

[0007] To achieve the above purpose, the technical solution adopted by the present invention is as follows:

[0008] A key authentication method based on a quantum key, wherein the quantum key is generated by N quantum key distribution (Quantum Key Distribution, QKD) systems, N≥1, and the QKD system includes a transmitting end and a receiving end, and the method includes the following steps:

[0009] S1: The user terminal constructs an authentication request message, encrypts the authentication request message using the first quantum key, and sends it to the quantum key management terminal (Quantum Key Management, QKM);

[0010] S2: The QKM uses the first quantum key to decrypt the encrypted authentication request message;

[0011] If the decryption is successful, execute step S3;

[0012] If the decryption fails, the authentication fails and step S9 is executed;

[0013] S3: Perform key comparison in QKM according to the second quantum key ID of the authentication request message;

[0014] If the comparison is successful, QKM obtains the session key and constructs an authentication feedback message indicating successful authentication;

[0015] If the comparison fails, QKM constructs an authentication feedback message indicating authentication failure;

[0016] S4: The QKM uses the first quantum key to encrypt the authentication feedback message and sends it to the user end;

[0017] S5: The user terminal decrypts the encrypted authentication feedback message using the first quantum key;

[0018] If the decrypted result is an authentication feedback message indicating successful authentication, execute step S6;

[0019] Otherwise, the authentication fails and step S9 is executed;

[0020] S6: Perform key comparison at the user end according to the third quantum key ID of the authentication feedback message;

[0021] If the comparison is successful, the user end obtains the session key and constructs an authentication confirmation message indicating successful authentication;

[0022] If the comparison fails, the user end constructs an authentication confirmation message indicating authentication failure;

[0023] S7: The user end encrypts the authentication confirmation message using the session key and sends it to the QKM;

[0024] S8: The QKM uses the session key to decrypt the encrypted authentication confirmation message;

[0025] If the decrypted result is an authentication confirmation message indicating successful authentication, the authentication is successful;

[0026] Otherwise, the authentication fails;

[0027] S9: Execution ends.

[0028] In the above scheme, quantum keys are used to realize quantum secure communication in the two-way authentication process between the user end and QKM, thereby having a strong ability to resist attacks from traditional computer technology and quantum technology, greatly improving communication security.

[0029] Preferably, the user terminal and QKM are both pre-set with a first quantum key, a second quantum key and a third quantum key.

[0030] Preferably, the encryption algorithm used is AES encryption algorithm, DES encryption algorithm, 3DES encryption algorithm, Blowfish encryption algorithm, SM1 encryption algorithm or SM4 encryption algorithm.

[0031] Preferably, the authentication request message includes a message type, a request ID, a user name, a password, a second quantum key ID, a second quantum key, a first session negotiation key ID, a first session negotiation key and a verification code.

[0032] Preferably, the authentication feedback message of successful authentication includes message type, request ID, authentication success status, third quantum key ID, third quantum key, second session negotiation key ID, second session negotiation key and verification code.

[0033] Preferably, the authentication feedback message of authentication failure includes message type, request ID, authentication failure status and verification code.

[0034] Preferably, the authentication confirmation message of successful authentication includes the message type, request ID, authentication success status and verification code.

[0035] Preferably, the authentication confirmation message of the authentication failure includes the message type, request ID, authentication failure status and verification code.

[0036] Preferably, in step S3, the specific step of QKM obtaining the session key is: performing an XOR operation on the second session negotiation key randomly generated by QKM and the first session negotiation key in the authentication request message to obtain the session key.

[0037] Preferably, in step S6, the specific step of the user terminal obtaining the session key is: performing an XOR operation on the first session negotiation key randomly generated by the user terminal and the second session negotiation key in the authentication feedback message of successful authentication to obtain the session key.

[0038] Beneficial technical effects of the present invention:

[0039] The present invention provides a key authentication method based on quantum key, which realizes quantum secure communication by using quantum key in the two-way authentication process between the user end and QKM, thereby having a strong ability to resist attacks from traditional computer technology and quantum technology, and greatly improving communication security. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 It is a structural block diagram of the present invention;

[0041] Figure 2 It is a flow chart of the implementation steps of the technical solution of the present invention. DETAILED DESCRIPTION

[0042] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with embodiments, but the scope of protection claimed in the present invention is not limited to the following specific embodiments.

[0043] Example 1

[0044] like Figure 1-2 As shown, a key authentication method based on quantum key, wherein the quantum key is generated by N quantum key distribution (Quantum Key Distribution, QKD) systems, N≥1, and the QKD system includes a transmitting end and a receiving end, and the method includes the following steps:

[0045] S1: The user terminal constructs and encrypts an authentication request message: The user terminal constructs an authentication request message, encrypts the authentication request message using a first quantum key, and then sends it to a quantum key management terminal (Quantum Key Management, QKM);

[0046] S2: QKM decrypts the authentication request message: QKM decrypts the encrypted authentication request message using the first quantum key;

[0047] If the decryption is successful, execute step S3;

[0048] If the decryption fails, the authentication fails and step S9 is executed;

[0049] S3: QKM performs key comparison: In QKM, key comparison is performed according to the second quantum key ID of the authentication request message;

[0050] If the comparison is successful, QKM obtains the session key and constructs an authentication feedback message indicating successful authentication;

[0051] If the comparison fails, QKM constructs an authentication feedback message indicating authentication failure;

[0052] S4: QKM encrypts the authentication feedback message: QKM uses the first quantum key to encrypt the authentication feedback message and sends it to the user end;

[0053] S5: The user end decrypts the authentication feedback message: The user end decrypts the encrypted authentication feedback message using the first quantum key;

[0054] If the decrypted result is an authentication feedback message indicating successful authentication, execute step S6;

[0055] Otherwise, the authentication fails and step S9 is executed;

[0056] S6: The user terminal performs key comparison: the user terminal performs key comparison according to the third quantum key ID of the authentication feedback message;

[0057] If the comparison is successful, the user end obtains the session key and constructs an authentication confirmation message indicating successful authentication;

[0058] If the comparison fails, the user end constructs an authentication confirmation message indicating authentication failure;

[0059] S7: User end encrypts the authentication confirmation message: The user end encrypts the authentication confirmation message using the session key and sends it to the QKM;

[0060] S8: QKM decrypts the authentication confirmation message: QKM decrypts the encrypted authentication confirmation message using the session key;

[0061] If the decrypted result is an authentication confirmation message indicating successful authentication, the authentication is successful;

[0062] Otherwise, the authentication fails;

[0063] S9: Execution ends.

[0064] In the specific implementation process, quantum keys are used to realize quantum secure communication in the two-way authentication process between the user end and QKM, so that it has a strong ability to resist attacks from traditional computer technology and quantum technology, greatly improving communication security.

[0065] Example 2

[0066] More specifically, the user terminal and the QKM are both pre-set with a first quantum key, a second quantum key and a third quantum key.

[0067] In the specific implementation process, the user terminal is also preset with a user name, password, first quantum key ID, second quantum key ID and third quantum key ID. The first quantum key is used for encryption and decryption; the second quantum key is used to identify the identity of the user terminal; the third quantum key is used to identify the identity of the QKM.

[0068] More specifically, the encryption algorithm used is AES encryption algorithm, DES encryption algorithm, 3DES encryption algorithm, Blowfish encryption algorithm, SM1 encryption algorithm or SM4 encryption algorithm.

[0069] More specifically, the authentication request message includes a message type, a request ID, a username length, a username, a password length, a password, a second quantum key ID, a second quantum key, a first session negotiation key ID, a first session negotiation key, and a verification code.

[0070] Table 1 shows the format of the authentication request message.

[0071] Table 1

[0072]

[0073] In the specific implementation process, the message type is used to identify the message as an authentication request message, an authentication feedback message or an authentication confirmation message; the request ID is a unique identifier used to track the message; the check code uses a CRC check code, which is a check code used to detect message transmission errors.

[0074] More specifically, the authentication feedback message of successful authentication includes message type, request ID, authentication success status, third quantum key ID, third quantum key, second session negotiation key ID, second session negotiation key and verification code.

[0075] Table 2 shows the format of the authentication feedback message when the authentication is successful.

[0076] Table 2

[0077]

[0078] During the specific implementation process, the message type is used to identify the message as an authentication request message, an authentication feedback message or an authentication confirmation message; the request ID is a unique identifier used to track the message; the status of the authentication success status indicates that the authentication is successful; the check code uses a CRC check code, which is a check code used to detect message transmission errors.

[0079] More specifically, the authentication feedback message of authentication failure includes a message type, a request ID, an authentication failure status, and a verification code.

[0080] Table 3 shows the format of the authentication feedback message for authentication failure.

[0081] Table 3

[0082]

[0083] In the specific implementation process, the status of the authentication failure status indication message is authentication failure; the check code adopts a CRC check code, which is a check code for detecting message transmission errors.

[0084] More specifically, the authentication confirmation message of successful authentication includes the message type, request ID, authentication success status and verification code.

[0085] Table 4 shows the format of the authentication confirmation message for successful authentication.

[0086] Table 4

[0087]

[0088] During the specific implementation process, the message type is used to identify the message as an authentication request message, an authentication feedback message or an authentication confirmation message; the request ID is a unique identifier used to track the message; the status of the authentication success status indicates that the authentication is successful; the check code uses a CRC check code, which is a check code used to detect message transmission errors.

[0089] More specifically, the authentication confirmation message of the authentication failure includes the message type, request ID, authentication failure status and verification code.

[0090] Table 5 shows the format of the authentication confirmation message for authentication failure.

[0091] Table 5

[0092]

[0093] In the specific implementation process, the status of the authentication failure status indication message is authentication failure; the check code adopts a CRC check code, which is a check code for detecting message transmission errors.

[0094] More specifically, in step S3, the specific steps for QKM to obtain the session key are: performing an XOR operation on the second session negotiation key and its ID randomly generated by QKM and the first session negotiation key and its ID in the authentication request message to obtain the session key and its ID.

[0095] More specifically, in step S6, the specific steps for the user end to obtain the session key are: performing an XOR operation on the first session negotiation key and its ID randomly generated by the user end and the second session negotiation key and its ID in the authentication feedback message of successful authentication to obtain the session key and its ID.

[0096] According to the disclosure and teaching of the above description, those skilled in the art to which the present invention belongs may also make changes and modifications to the above embodiments. Therefore, the present invention is not limited to the specific embodiments disclosed and described above, and some modifications and changes to the invention should also fall within the scope of protection of the claims of the present invention. In addition, although some specific terms are used in this specification, these terms are only for the convenience of description and do not constitute any limitation to the present invention.

Claims

1. A key authentication method based on quantum key, wherein the quantum key is generated by N QKD systems, N≥1, and the QKD system includes a transmitting end and a receiving end, characterized in that: The method comprises the following steps: S1: The user terminal constructs an authentication request message, encrypts the authentication request message using the first quantum key, and sends it to the QKM; S2: The QKM uses the first quantum key to decrypt the encrypted authentication request message; If the decryption is successful, execute step S3; If the decryption fails, the authentication fails and step S9 is executed; S3: Perform key comparison in QKM according to the second quantum key ID of the authentication request message; If the comparison is successful, QKM obtains the session key and constructs an authentication feedback message indicating successful authentication; If the comparison fails, QKM constructs an authentication feedback message indicating authentication failure; S4: The QKM uses the first quantum key to encrypt the authentication feedback message and sends it to the user end; S5: The user terminal decrypts the encrypted authentication feedback message using the first quantum key; If the decrypted result is an authentication feedback message indicating successful authentication, execute step S6; Otherwise, the authentication fails and step S9 is executed; S6: Perform key comparison at the user end according to the third quantum key ID of the authentication feedback message; If the comparison is successful, the user end obtains the session key and constructs an authentication confirmation message indicating successful authentication; If the comparison fails, the user end constructs an authentication confirmation message indicating authentication failure; S7: The user end encrypts the authentication confirmation message using the session key and sends it to the QKM; S8: The QKM uses the session key to decrypt the encrypted authentication confirmation message; If the decrypted result is an authentication confirmation message indicating successful authentication, the authentication is successful; Otherwise, the authentication fails; S9: Execution ends.

2. A key authentication method based on quantum key according to claim 1, characterized in that: The user terminal and the QKM are both pre-set with a first quantum key, a second quantum key and a third quantum key.

3. A key authentication method based on quantum key according to claim 1, characterized in that: The encryption algorithm used is AES encryption algorithm, DES encryption algorithm, 3DES encryption algorithm, Blowfish encryption algorithm, SM1 encryption algorithm or SM4 encryption algorithm.

4. A key authentication method based on quantum key according to claim 1, characterized in that: The authentication request message includes a message type, a request ID, a user name, a password, a second quantum key ID, a second quantum key, a first session negotiation key ID, a first session negotiation key and a verification code.

5. A key authentication method based on quantum key according to claim 4, characterized in that: The authentication feedback message of successful authentication includes message type, request ID, authentication success status, third quantum key ID, third quantum key, second session negotiated key ID, second session negotiated key and verification code.

6. A key authentication method based on quantum key according to claim 1, characterized in that: The authentication feedback message for authentication failure includes the message type, request ID, authentication failure status and verification code.

7. A key authentication method based on quantum key according to claim 1, characterized in that: The authentication confirmation message of a successful authentication includes the message type, request ID, authentication success status and verification code.

8. A key authentication method based on quantum key according to claim 1, characterized in that: The authentication confirmation message for authentication failure includes the message type, request ID, authentication failure status and verification code.

9. A key authentication method based on quantum key according to claim 4, characterized in that: In step S3, the specific steps for QKM to obtain the session key are: performing an XOR operation on the second session negotiation key randomly generated by QKM and the first session negotiation key in the authentication request message to obtain the session key.

10. A key authentication method based on quantum key according to claim 5, characterized in that: In step S6, the specific step of the user end obtaining the session key is: performing an XOR operation on the first session negotiation key randomly generated by the user end and the second session negotiation key in the authentication feedback message of successful authentication to obtain the session key.

Images