Three-weight quantum hybrid security chip based on quantum random source, equipment fingerprint and biological characteristics and identity authentication method

Abstract

The invention discloses a quantum random source, equipment fingerprint and biological characteristic-based three-quantum hybrid security chip and an identity authentication method. The three-quantum hybrid security chip comprises a quantum random number generation unit; the system comprises an equipment safety processing unit, a biological characteristic processing unit, a triple mixing processing unit and a key derivation and identity management unit. The chip is integrated with a biological characteristic processing unit with living body detection and quantum fuzzy commitment functions, quantum randomness, equipment physical fingerprints and living body biological characteristics are subjected to deep cryptographic fusion through a triple hybrid processing unit, a unique hybrid result binding'equipment-user 'is generated, and a joint authentication key is derived according to the hybrid result; according to the invention, the method achieves the jump from equipment authentication to human-machine integrated strong authentication, thoroughly solves the risk of equipment embezzlement while inheriting the anti-quantum and anti-cloning advantages, and is suitable for scenes with the highest security level.

Description

Technical Field

[0001] This invention relates to the fields of integrated circuits and information security technology, and in particular to a tri-quantum hybrid security chip and authentication method based on quantum random source, device fingerprint and biometrics. Background Technology

[0002] In scenarios such as financial terminals, high-security access control systems, and personalized medical devices, the risk of legitimate devices being used by unauthorized operators (e.g., lost or stolen devices) still exists. Existing biometric solutions often statically store user templates, posing vulnerabilities to leakage and replay attacks. The key to improving ultimate security lies in how to cryptographically integrate live biometric features as a dynamic, non-replicable entropy source with quantum randomness and device physical fingerprints to construct an inseparable human-machine integrated root of trust. This invention aims to solve this problem. Summary of the Invention

[0003] Based on the technical problems existing in the background technology, this invention proposes a tri-quantum hybrid security chip and identity authentication method based on quantum random source, device fingerprint and biometrics.

[0004] In a first aspect, the present invention proposes a tri-quantum hybrid security chip based on quantum random source, device fingerprint, and biometrics, comprising:

[0005] A quantum random number generation unit that generates a quantum random bit stream based on quantum mechanical phenomena; The equipment safety processing unit is used to provide primary security data that characterizes the uniqueness of the equipment. The biometric processing unit is used to collect and verify the user's biometrics and generate secondary security data; The triple hybrid processing unit, connected to the quantum random number generation unit, the device security processing unit, and the biometric processing unit, is used to perform cryptographic fusion processing on the quantum random bit stream, the first security data, and the second security data to obtain a "device-user" bound hybrid result. The key derivation and identity management unit derives an encryption key based on the binding hybrid result.

[0006] Furthermore, the biometric processing unit includes: a liveness detection module, a feature extraction module, and a fuzzy commitment module that encrypts the biometric template using a quantum random bit stream from the quantum random number generation unit.

[0007] Furthermore, the triple hybrid processing unit is configured to perform two-stage hybridization and cross-perturbation operations to ensure deep entanglement of the three types of entropy sources. The first stage mixes the quantum random bit stream with the first secure data, and the second stage fuses the first stage output with the second secure data after cross-permutation.

[0008] Furthermore, the device security processing unit is a physically unclonable functional unit, an encryption chip unit, or a combination of both.

[0009] A triple authentication method, implemented based on the aforementioned chip, includes: Collect and verify user biometrics to generate secondary security data; Acquire quantum random sequences and first security data from the device's security processing unit; The quantum random sequence, the first security data, and the second security data are triple-mixed to generate a "device-user" bound hybrid result. Based on the aforementioned binding hybrid result, a joint authentication key for the device and the user is derived.

[0010] Furthermore, the generation of the second secure data includes: performing fuzzy commitment computation on the extracted biometric template using a real-time generated quantum random bit stream.

[0011] A device-user joint authentication method includes: Users present their biometrics to the device; The device performs the triple identity binding method described above to generate a joint authentication key; The device uses the joint authentication key to complete the authentication interaction with the authenticator.

[0012] Furthermore, an electronic device includes the tri-weighted quantum hybrid security chip as described above.

[0013] The advantages of the tri-quantum hybrid security chip and identity authentication method based on quantum random source, device fingerprint and biometrics provided by the present invention are as follows: (1) Revolutionary improvement in identity binding: realizing a fundamental leap from "device authentication" to "device-user integrated authentication"; (2) Intrinsic security of biometric template: adopting the quantum fuzzy commitment of "one-time pad" to realize that biometrics can be verified but cannot be stored and reproduced, eliminating the risk of template leakage; (3) Dynamic triple entropy fusion: the three elements of quantum randomness, device uniqueness and live biometrics are dynamically mixed, and the generated key has forward security and uniqueness; (4) Post-quantum security continuation: fully inheriting the previously applied quantum random source and anti-quantum algorithm system; (5) Privacy protection: the user's original biometrics never leave the local device, which complies with the strictest privacy regulations. Attached Figure Description

[0014] Figure 1 : Tri-weight quantum hybrid security chip system architecture diagram; Figure 2 : Schematic diagram of an embodiment of a quantum random number generation unit (shot noise scheme); Figure 3 : Schematic diagram of the security process of the biometric processing unit.

[0015] Figure 4 : Core flowchart of the triple hybrid processing algorithm.

[0016] Figure 5 Sequence diagram of the "Device-User" joint authentication protocol; Among them, 101-Quantum random number generation unit, 102-Security processing unit, 103-Triple hybrid processing unit, 104-Key derivation and identity management unit, 105-Biometric processing unit; 201-Reverse bias diode, 202-Amplifier, 203-Comparator, 204-Post-processing monitoring unit. Detailed Implementation

[0017] The technical solution of the present invention will now be described in detail through specific embodiments. Many specific details are set forth in the following description to provide a thorough understanding of the invention. However, the present invention can be implemented in many other ways different from those described herein, and those skilled in the art can make similar modifications without departing from the spirit of the invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0018] like Figures 1 to 5 As shown, the present invention proposes a tri-quantum hybrid security chip and authentication method based on quantum random source, device fingerprint and biometrics, as detailed below: Example 1: System Architecture; like Figure 1 As shown, a triple quantum hybrid security chip based on quantum random source, device fingerprint, and biometrics includes a quantum random number generation unit 101 (i.e., quantum random source), a security processing unit 102 (such as PUF or encryption chip), a triple hybrid processing unit 103, a key derivation and identity management unit 104, a secure storage and protocol engine, an interface, and a biometric processing unit 105. The triple hybrid processing unit 103 is responsible for executing the core binding algorithm.

[0019] Among them, quantum random number generation unit 101. For example... Figure 2 The preferred scheme based on PN junction shot noise is adopted, including a reverse bias diode 201, an amplifier 202, a comparator 203, and a post-processing monitoring unit 204. The system can also adopt a phase jitter or vacuum fluctuation scheme.

[0020] The biometric processing unit 107 includes a sensor, a liveness detection module, a feature extraction module, and a fuzzy commitment module that encrypts the biometric template using a quantum random bit stream from the quantum random number generation unit. The fuzzy commitment module uses a real-time quantum random bit stream R to encrypt and commit to the feature vector B, outputting a commitment value C and auxiliary information. The original biometric features B and R are destroyed after use; only the commitment result is stored, fundamentally preventing template leakage.

[0021] The workflow of the triple hybrid processing unit 103 is as follows: Figure 4 First, the quantum random bit stream Q and device data P are mixed as in the parent scheme to obtain intermediate result M1; second, biometric commitment data C is introduced; then, cross-permutation is performed (e.g., perturb C with the derived parameters of M1, and perturb M1 with the derived parameters of C); finally, the permuted data is fused (e.g., quantum-resistant hashing) to output a binding result E_triple that uniquely identifies "the device-the user".

[0022] Example 2: Biometric Secure Binding Process; like Figure 3 As shown, the process is as follows: Biometric signals are collected using sensors → liveness detection → feature extraction to obtain feature B → real-time quantum random bit stream R is acquired → fuzzy commitment C = Commit(B, R) is calculated → output and securely stored (C, Hash(R)). During verification, the same device is used to collect a new feature B' and use the stored Hash(R) to reconstruct R. Successfully unlocking the commitment proves a biometric match. This process upgrades biometric identification from "template comparison" to "verification of cryptographic commitment," resulting in higher security.

[0023] Example 3: Device-User Joint Authentication Protocol; like Figure 5 As shown, the high-security authentication process is as follows: 1. The user presents biometric features (such as fingerprints).

[0024] 2. The device performs a liveness detection and calls the locally stored biometric commitment C.

[0025] 3. The device synchronously activates the quantum random source and the device security unit.

[0026] 4. The triple hybrid processing unit 103 at the device end executes... Figure 3 The process utilizes real-time quantum random bit streams, device data, and biometrics being verified to generate a unique binding result E_triple for this session.

[0027] 5. Derive a one-time session key K_session based on E_triple.

[0028] 6. The device uses K_session to sign the challenge sent by the server and sends the device ID, user ID, and signature together.

[0029] 7. The server verifies the signature and checks whether the binding relationship between the device ID and the user identifier has been authorized. Once all verifications are successful, authentication is complete.

[0030] This protocol implements a two-factor strong authentication of "Something you have (device) + Something you are (biometrics)," and the key seed changes dynamically for each authentication.

[0031] Industrial applicability: This embodiment is particularly applicable to: password-free payment on mobile payment terminals (such as mobile phones and POS machines); high-level access control for confidential locations or data; user locks for personal medical devices (such as insulin pumps); and binding of usage rights for high-value assets (such as automobiles) in the sharing economy.

[0032] Furthermore, this embodiment integrates a biometric processing unit with liveness detection and quantum fuzzy commitment capabilities. Through a triple hybrid processing unit, quantum randomness, device physical fingerprints, and liveness biometrics are deeply cryptographically fused to generate a unique hybrid result binding "this device-this user," from which a joint authentication key is derived. This achieves a leap from device authentication to integrated "human-machine" strong authentication, inheriting the advantages of quantum resistance and cloning resistance while completely eliminating the risk of device theft, making it suitable for scenarios with the highest security levels.

[0033] The above description is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A tri-quantum hybrid security chip based on quantum random source, device fingerprint, and biometrics, characterized in that, include: A quantum random number generation unit that generates a quantum random bit stream based on quantum mechanical phenomena; The equipment safety processing unit is used to provide primary security data that characterizes the uniqueness of the equipment. The biometric processing unit is used to collect and verify the user's biometrics and generate secondary security data; The triple hybrid processing unit, connected to the quantum random number generation unit, the device security processing unit, and the biometric processing unit, is used to perform cryptographic fusion processing on the quantum random bit stream, the first security data, and the second security data to obtain a "device-user" bound hybrid result. The key derivation and identity management unit derives an encryption key based on the binding hybrid result.

2. The chip according to claim 1, characterized in that, The biometric processing unit includes: a liveness detection module, a feature extraction module, and a fuzzy commitment module that encrypts the biometric template using a quantum random bit stream from the quantum random number generation unit.

3. The chip according to claim 1, characterized in that, The triple hybrid processing unit is configured to perform two-stage hybridization and cross-perturbation operations, wherein the first stage mixes the quantum random bit stream with the first secure data, and the second stage fuses the first stage output with the second secure data after cross-permutation.

4. The chip according to claim 1, characterized in that, The device security processing unit is a physically unclonable functional unit, an encryption chip unit, or a combination of both.

5. A triple authentication method, implemented based on the chip described in any one of claims 1-4, characterized in that, include: Collect and verify user biometrics to generate secondary security data; Acquire the quantum random bit stream sequence and the first security data from the device's security processing unit; The quantum random bit stream sequence, the first secure data, and the second secure data are triple-mixed to generate a "device-user" bound hybrid result. Based on the aforementioned binding hybrid result, a joint authentication key for the device and the user is derived.

6. The method according to claim 5, characterized in that, The generation of the second secure data includes: performing fuzzy commitment computation on the extracted biometric template using a real-time generated quantum random bit stream.

7. A method for joint authentication of "device-user", characterized in that, include: Users present their biometrics to the device; The device executes the triple identity binding method as described in claim 5 or 6 to generate a joint authentication key; The device uses the joint authentication key to complete the authentication interaction with the authenticator.

8. An electronic device, characterized in that, Including the tri-weighted quantum hybrid security chip as described in any one of claims 1-4.

Images