A quantum key-based key authentication method

Abstract

This invention discloses a key authentication method based on quantum key distribution. The quantum key is generated by N QKD systems, where N≥1. Each QKD system includes a transmitter and a receiver. The method includes the following steps: S1: The user end constructs and encrypts an authentication request message; S2: The QKD system decrypts the authentication request message; S3: The QKD system performs key comparison and generates an authentication feedback message; S4: The QKD system encrypts the authentication feedback message; S5: The user end decrypts the authentication feedback message; S6: The user end performs key comparison and generates an authentication confirmation message; S7: The user end encrypts the authentication confirmation message; S8: The QKD system decrypts the authentication confirmation message to obtain the authentication result; S9: Execution ends. This invention discloses a key authentication method based on quantum key distribution. By utilizing quantum key distribution to achieve quantum secure communication during the two-way authentication process between the user end and the QKD system, it possesses strong resistance to attacks from traditional computer technology and quantum technology, greatly improving communication security.

Description

Technical Field

[0001] This invention relates to the field of quantum communication technology, and more specifically to a key authentication method based on quantum keys. Background Technology

[0002] Existing key authentication methods, such as symmetric key authentication and public key infrastructure (PKI), have provided a certain degree of security for communication. However, with the development of quantum technology, these key authentication methods have revealed some obvious shortcomings.

[0003] While symmetric key authentication can provide strong encryption protection, the security of the entire communication is seriously threatened if the key is intercepted during transmission because the security of the key distribution process cannot be effectively guaranteed.

[0004] While public key infrastructure (PKI) builds a chain of trust through public and private key pairs, its high dependence on Certificate Authorities (CAs) means that the security of the entire system will be questioned if the CA is attacked or the trust is lost.

[0005] Therefore, existing key authentication methods are difficult to effectively resist attacks from quantum computing technology, resulting in insufficient communication security. Summary of the Invention

[0006] To address the problem that existing key authentication methods are unable to effectively resist attacks from quantum technology, resulting in insufficient communication security, this invention provides a key authentication method based on quantum keys.

[0007] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0008] A key authentication method based on quantum key distribution, wherein the quantum key is generated by N quantum key distribution (QKD) systems, where N≥1, and each QKD system includes a transmitter and a receiver, and the method includes the following steps:

[0009] S1: The user terminal constructs an authentication request message, encrypts the authentication request message using the first quantum key, and sends it to the quantum key management terminal (Quantum Key Management, QKM).

[0010] S2: The QKM decrypts the encrypted authentication request message using the first quantum key;

[0011] If decryption is successful, proceed to step S3;

[0012] If decryption fails, authentication fails, and step S9 is executed;

[0013] S3: Perform key comparison in QKM based on the second quantum key ID in the authentication request message;

[0014] If the comparison passes, QKM obtains the session key and constructs an authentication feedback message indicating successful authentication.

[0015] If the comparison fails, QKM constructs an authentication failure feedback message;

[0016] S4: QKM uses the first quantum key to encrypt the authentication feedback message and sends it to the user terminal;

[0017] S5: The user terminal uses the first quantum key to decrypt the encrypted authentication feedback message;

[0018] If the decryption result is a successful authentication feedback message, then proceed to step S6;

[0019] Otherwise, authentication fails, proceed to step S9;

[0020] S6: Perform key comparison on the user end based on the third quantum key ID in the authentication feedback message;

[0021] If the comparison passes, the user obtains the session key and constructs an authentication confirmation message indicating successful authentication.

[0022] If the comparison fails, the user client constructs an authentication failure confirmation message;

[0023] S7: The user terminal encrypts the authentication confirmation message using the session key and sends it to QKM;

[0024] S8: QKM decrypts the encrypted authentication confirmation message using the session key;

[0025] If the decryption result is an authentication confirmation message indicating successful authentication, then the authentication was successful.

[0026] Otherwise, authentication fails;

[0027] S9: Execution complete.

[0028] In the above scheme, quantum secure communication is achieved by using quantum keys during the two-way authentication process between the user end and QKM, which has a strong ability to resist attacks from traditional computer technology and quantum technology, and greatly improves communication security.

[0029] Preferably, both the user terminal and the QKM are pre-configured with a first quantum key, a second quantum key, and a third quantum key.

[0030] Preferably, the encryption algorithm used is AES encryption algorithm, DES encryption algorithm, 3DES encryption algorithm, Blowfish encryption algorithm, SM1 encryption algorithm or SM4 encryption algorithm.

[0031] Preferably, the authentication request message includes message type, request ID, username, password, second quantum key ID, second quantum key, first session negotiation key ID, first session negotiation key, and verification code.

[0032] Preferably, the authentication feedback message upon successful authentication includes message type, request ID, authentication success status, third quantum key ID, third quantum key, second session negotiation key ID, second session negotiation key, and verification code.

[0033] Preferably, the authentication feedback message for authentication failure includes message type, request ID, authentication failure status, and verification code.

[0034] Preferably, the authentication confirmation message for successful authentication includes message type, request ID, authentication success status, and verification code.

[0035] Preferably, the authentication confirmation message for authentication failure includes message type, request ID, authentication failure status, and verification code.

[0036] Preferably, in step S3, the specific steps for QKM to obtain the session key are as follows: performing an XOR operation between the second session negotiation key randomly generated by QKM and the first session negotiation key in the authentication request message to obtain the session key.

[0037] Preferably, in step S6, the specific steps for the user to obtain the session key are as follows: performing an XOR operation between the first session negotiation key randomly generated by the user and the second session negotiation key in the authentication feedback message that has been successfully authenticated, to obtain the session key.

[0038] Beneficial technical effects of the present invention:

[0039] This invention provides a quantum key-based key authentication method. By utilizing quantum keys to achieve quantum secure communication during the two-way authentication process between the user end and QKM, it has a strong ability to resist attacks from traditional computer technology and quantum technology, and greatly improves communication security. Attached Figure Description

[0040] Figure 1 This is a structural block diagram of the present invention;

[0041] Figure 2 This is a flowchart illustrating the implementation steps of the technical solution of the present invention. Detailed Implementation

[0042] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the embodiments. However, the scope of protection of this invention is not limited to the specific embodiments described below.

[0043] Example 1

[0044] like Figure 1-2 As shown, a key authentication method based on quantum key distribution is disclosed. The quantum key is generated by N quantum key distribution (QKD) systems, where N ≥ 1. Each QKD system includes a transmitter and a receiver. The method includes the following steps:

[0045] S1: The user end constructs and encrypts the authentication request message: The user end constructs the authentication request message, encrypts the authentication request message using the first quantum key, and sends it to the quantum key management terminal (QKM).

[0046] S2: QKM decrypts the authentication request message: The QKM decrypts the encrypted authentication request message using the first quantum key;

[0047] If decryption is successful, proceed to step S3;

[0048] If decryption fails, authentication fails, and step S9 is executed;

[0049] S3: QKM performs key comparison: Key comparison is performed in QKM based on the second quantum key ID in the authentication request message;

[0050] If the comparison passes, QKM obtains the session key and constructs an authentication feedback message indicating successful authentication.

[0051] If the comparison fails, QKM constructs an authentication failure feedback message;

[0052] S4: QKM Encrypted Authentication Feedback Message: The authentication feedback message is encrypted by QKM using the first quantum key and sent to the user terminal;

[0053] S5: User terminal decrypts authentication feedback message: The user terminal decrypts the encrypted authentication feedback message using the first quantum key;

[0054] If the decryption result is a successful authentication feedback message, then proceed to step S6;

[0055] Otherwise, authentication fails, proceed to step S9;

[0056] S6: Key comparison is performed on the user end: Key comparison is performed on the user end based on the third quantum key ID in the authentication feedback message;

[0057] If the comparison passes, the user obtains the session key and constructs an authentication confirmation message indicating successful authentication.

[0058] If the comparison fails, the user client constructs an authentication failure confirmation message;

[0059] S7: User-side encrypted authentication confirmation message: The user-side uses the session key to encrypt the authentication confirmation message and sends it to QKM;

[0060] S8: QKM decrypts the authentication confirmation message: QKM decrypts the encrypted authentication confirmation message using the session key;

[0061] If the decryption result is an authentication confirmation message indicating successful authentication, then the authentication was successful.

[0062] Otherwise, authentication fails;

[0063] S9: Execution complete.

[0064] In practice, quantum secure communication is achieved by using quantum keys during the two-way authentication process between the user end and QKM, which has a strong ability to resist attacks from traditional computer technology and quantum technology, and greatly improves communication security.

[0065] Example 2

[0066] More specifically, both the user terminal and the QKM are pre-configured with a first quantum key, a second quantum key, and a third quantum key.

[0067] In the specific implementation process, the user terminal is also pre-configured with a username, password, first quantum key ID, second quantum key ID, and third quantum key ID. The first quantum key is used for encryption and decryption; the second quantum key is used to identify the user terminal's identity; and the third quantum key is used to identify the QKM's identity.

[0068] More specifically, the encryption algorithm used is AES, DES, 3DES, Blowfish, SM1, or SM4.

[0069] More specifically, the authentication request message includes message type, request ID, username length, username, password length, password, second quantum key ID, second quantum key, first session negotiation key ID, first session negotiation key, and verification code.

[0070] Table 1 shows the format of the authentication request message.

[0071] Table 1

[0072]

[0073] In practice, the message type is used to identify whether it is an authentication request message, authentication feedback message, or authentication confirmation message; the request ID is a unique identifier used to track the message; and the checksum is a CRC checksum used to detect message transmission errors.

[0074] More specifically, the authentication feedback message upon successful authentication includes the message type, request ID, authentication success status, third quantum key ID, third quantum key, second session negotiation key ID, second session negotiation key, and verification code.

[0075] Table 2 shows the format of the authentication feedback message when authentication is successful.

[0076] Table 2

[0077]

[0078] In the specific implementation process, the message type is used to identify whether the message is an authentication request message, authentication feedback message, or authentication confirmation message; the request ID is a unique identifier used to track the message; the authentication success status indicates that the message status is successful; and the checksum is a CRC checksum used to detect message transmission errors.

[0079] More specifically, the authentication feedback message for authentication failure includes the message type, request ID, authentication failure status, and verification code.

[0080] Table 3 shows the format of the authentication feedback message when authentication fails.

[0081] Table 3

[0082]

[0083] In practice, the authentication failure status indicates that the message has failed to authenticate; the checksum is a CRC checksum used to detect errors in message transmission.

[0084] More specifically, a successful authentication confirmation message includes the message type, request ID, authentication success status, and verification code.

[0085] Table 4 shows the format of the authentication confirmation message for successful authentication.

[0086] Table 4

[0087]

[0088] In the specific implementation process, the message type is used to identify whether the message is an authentication request message, authentication feedback message, or authentication confirmation message; the request ID is a unique identifier used to track the message; the authentication success status indicates that the message status is successful; and the checksum is a CRC checksum used to detect message transmission errors.

[0089] More specifically, the authentication confirmation message for authentication failure includes the message type, request ID, authentication failure status, and verification code.

[0090] Table 5 shows the format of the authentication confirmation message when authentication fails.

[0091] Table 5

[0092]

[0093] In practice, the authentication failure status indicates that the message has failed to authenticate; the checksum is a CRC checksum used to detect errors in message transmission.

[0094] More specifically, in step S3, the specific steps for QKM to obtain the session key are as follows: performing an XOR operation between the second session negotiation key and its ID randomly generated by QKM and the first session negotiation key and its ID in the authentication request message to obtain the session key and its ID.

[0095] More specifically, in step S6, the specific steps for the user to obtain the session key are as follows: perform an XOR operation on the first session negotiation key and its ID randomly generated by the user and the second session negotiation key and its ID in the authentication feedback message that has been successfully authenticated, to obtain the session key and its ID.

[0096] Based on the disclosure and teachings of the foregoing specification, those skilled in the art can make changes and modifications to the above embodiments. Therefore, the present invention is not limited to the specific embodiments disclosed and described above, and some modifications and changes to the invention should also fall within the protection scope of the claims of the present invention. Furthermore, although some specific terms are used in this specification, these terms are only for convenience of explanation and do not constitute any limitation on the present invention.

Claims

1. A key authentication method based on quantum key distribution, wherein the quantum key is generated by N QKD systems, N≥1, and the QKD system includes a transmitter and a receiver, characterized in that, The method includes the following steps: S1: The user terminal constructs an authentication request message, encrypts the authentication request message using the first quantum key, and sends it to QKM; S2: The QKM decrypts the encrypted authentication request message using the first quantum key; If decryption is successful, proceed to step S3; If decryption fails, authentication fails, and step S9 is executed; S3: Perform key comparison in QKM based on the second quantum key ID in the authentication request message; If the comparison passes, QKM obtains the session key and constructs an authentication feedback message indicating successful authentication. If the comparison fails, QKM constructs an authentication failure feedback message; In step S3, the specific steps for QKM to obtain the session key are as follows: perform an XOR operation between the second session negotiation key randomly generated by QKM and the first session negotiation key in the authentication request message to obtain the session key; S4: QKM uses the first quantum key to encrypt the authentication feedback message and sends it to the user terminal; S5: The user terminal uses the first quantum key to decrypt the encrypted authentication feedback message; If the decryption result is a successful authentication feedback message, then proceed to step S6; Otherwise, authentication fails, proceed to step S9; S6: Perform key comparison on the user end based on the third quantum key ID in the authentication feedback message; If the comparison passes, the user obtains the session key and constructs an authentication confirmation message indicating successful authentication. If the comparison fails, the user client constructs an authentication failure confirmation message; In step S6, the specific steps for the user to obtain the session key are as follows: XOR the first session negotiation key randomly generated by the user with the second session negotiation key in the authentication feedback message that has been successfully authenticated to obtain the session key. S7: The user terminal encrypts the authentication confirmation message using the session key and sends it to QKM; S8: QKM decrypts the encrypted authentication confirmation message using the session key; If the decryption result is an authentication confirmation message indicating successful authentication, then the authentication was successful. Otherwise, authentication fails; S9: Execution complete.

2. The key authentication method based on quantum key distribution according to claim 1, characterized in that, Both the user terminal and the QKM are pre-configured with a first quantum key, a second quantum key, and a third quantum key.

3. The key authentication method based on quantum key distribution according to claim 1, characterized in that, The encryption algorithm used is AES, DES, 3DES, Blowfish, SM1, or SM4.

4. The key authentication method based on quantum key distribution according to claim 1, characterized in that, The authentication request message includes message type, request ID, username, password, second quantum key ID, second quantum key, first session negotiation key ID, first session negotiation key, and verification code.

5. The key authentication method based on quantum key distribution according to claim 4, characterized in that, The authentication feedback message upon successful authentication includes the message type, request ID, authentication success status, third quantum key ID, third quantum key, second session negotiation key ID, second session negotiation key, and verification code.

6. The key authentication method based on quantum key distribution according to claim 1, characterized in that, The authentication failure feedback message includes the message type, request ID, authentication failure status, and verification code.

7. The key authentication method based on quantum key distribution according to claim 1, characterized in that, A successful authentication confirmation message includes the message type, request ID, authentication success status, and verification code.

8. The key authentication method based on quantum key distribution according to claim 1, characterized in that, An authentication confirmation message for authentication failure includes the message type, request ID, authentication failure status, and verification code.

Images