An APP authentication system and method based on quantum SIM card authorization

Abstract

The application discloses an APP authentication system based on quantum SIM card authorization, comprising a quantum key management center, a smart mobile terminal and an APP server; the smart mobile terminal is provided with an APP and a quantum SIM card; the application further discloses an APP authentication method based on quantum SIM card authorization, and is realized based on the APP authentication system based on quantum SIM card authorization; the application discloses an APP authentication system and method based on quantum SIM card authorization; quantum key encryption information is utilized to realize the safe communication between the quantum SIM card and the APP, the APP and the APP server, and then the safe authentication and access authorization of the APP by the quantum SIM card and the APP server are realized, the information interception and tampering by attackers are prevented, and the reliability and safety of the APP authentication are effectively enhanced. The application can be applied to the technical fields and scenes of quantum communication, unmanned system mobile communication, Internet of Things terminal interconnection and the like.

Description

Technical Field

[0001] This invention relates to the technical field of quantum communication and mobile communication for unmanned systems, specifically to an APP authentication system and method based on quantum SIM card authorization. Background Technology

[0002] The development of quantum technology worldwide is leading to disruptive restructuring of future industries. In particular, the rapid development of mobile internet, unmanned systems, large-scale models, and intelligent agents has spurred the emergence of numerous apps. Apps require secure access environments to their servers and SIM cards. Without authentication, information stored on SIM cards and app servers could be stolen by attackers. Currently, app authentication methods primarily rely on SMS verification codes, passwords, fingerprints, and facial recognition. These methods only offer a limited level of security and harbor serious vulnerabilities: SMS verification codes are susceptible to interception and retransmission attacks; passwords are easily cracked and leaked; and fingerprints and facial recognition can be forged.

[0003] Quantum key technology, based on the fundamental principles of quantum mechanics, can generate theoretically unbreakable quantum keys, providing a new solution for the security of APP authentication.

[0004] However, existing quantum communication technologies primarily focus on the security of information transmission and the efficiency of app authentication. For example, Chinese patent application CN115412916A, which describes an app authentication method and system based on a super SIM card, improves authentication efficiency by determining whether background registration or authentication is required based on the app's permission level. However, this method neglects app identity authentication security; attackers can tamper with the authentication information and permission level initiated by the app to steal the identity information stored in the background. Furthermore, the security of this method relies solely on the verification code received by the authentication SDK. Once an attacker cracks the verification code returned by the background, they can easily access the SIM card and obtain the stored identity information through the authentication SDK.

[0005] Therefore, the existing APP identity authentication schemes are not secure enough. Summary of the Invention

[0006] To address the issue of insufficient security in existing APP identity authentication schemes, this invention provides an APP authentication system and method based on quantum SIM card authorization.

[0007] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0008] An APP authentication system based on quantum SIM card authorization includes a quantum key management center, a smart mobile terminal, and an APP server; the smart mobile terminal has an APP and a quantum SIM card installed; wherein,

[0009] The quantum key management center is used to generate quantum key information and send the quantum key information to the quantum SIM card and the APP server respectively;

[0010] The APP is used to obtain user identity information and send authentication requests to the quantum SIM card and the APP server respectively; it is also used to receive the first ciphertext sent by the quantum SIM card and encrypt the user identity information to obtain the second ciphertext, and send the first ciphertext and the second ciphertext to the APP server; it is also used to receive access permissions from the APP server and the quantum SIM card.

[0011] The APP server is used to decrypt the first and second ciphertexts to obtain the ICCID information, key serial number C', and user identity information of the quantum SIM card, and to perform authentication based on the key serial number C'. When the authentication is successful, the APP server grants access to the APP, responds to the authentication request, encrypts the user identity information and key serial number C to obtain the third ciphertext, and sends the third ciphertext to the quantum SIM card through the APP.

[0012] The quantum SIM card is used to respond to authentication requests, encrypt its own ICCID information and key serial number C to obtain the first ciphertext, and send the first ciphertext to the APP; it is also used to decrypt the third ciphertext to obtain the key serial number C'' and user identity information, and perform authentication based on the key serial number C''; when the authentication is successful, the quantum SIM card's access permissions are granted to the APP.

[0013] In the above scheme, information is encrypted using quantum keys to achieve secure communication between the quantum SIM card and the APP, and between the APP and the APP server. This enables secure authentication and access authorization of the APP by the quantum SIM card and the APP server, preventing attackers from intercepting or tampering with information and effectively enhancing the reliability and security of APP authentication.

[0014] Preferably, the quantum key management center includes a quantum random number generator and a key management module; wherein,

[0015] The quantum random number generator is used to generate true random numbers and send them to the key management module;

[0016] The key management module is used to generate and store quantum key information based on true random numbers.

[0017] Preferably, the quantum key information includes a public key, a private key, and a key sequence number C.

[0018] Preferably, when the quantum SIM card sends the first ciphertext to the APP, it also sends the public key to the APP.

[0019] Preferably, the quantum SIM card uses a public key to asymmetricly encrypt its own ICCID information and key sequence number C to obtain the first ciphertext;

[0020] The app uses a public key to perform asymmetric encryption on user identity information to obtain a second ciphertext.

[0021] The APP server uses the public key to perform asymmetric encryption on the user's identity information and the key sequence number C to obtain the third ciphertext.

[0022] Preferably, the APP server uses its private key to decrypt the first ciphertext and the second ciphertext respectively to obtain the ICCID information of the quantum SIM card, the key serial number C', and the user identity information.

[0023] Preferably, the quantum SIM card uses a private key to decrypt the third ciphertext to obtain the key sequence number C'' and user identity information.

[0024] Preferably, when the key sequence number C' matches the key sequence number C, the APP server authentication is successful, and the APP server access permissions are granted to the APP.

[0025] Preferably, when the key serial number C'' matches the key serial number C, the quantum SIM card authentication is successful, and the access rights of the quantum SIM card are granted to the APP.

[0026] An APP authentication method based on quantum SIM card authorization, implemented based on the aforementioned APP authentication system based on quantum SIM card authorization, includes the following steps:

[0027] S1: The quantum key management center generates quantum key information and sends it to the quantum SIM card and the APP server respectively;

[0028] The quantum key information includes a public key, a private key, and a key sequence number C;

[0029] S2: The APP obtains the user's identity information and sends authentication requests to the quantum SIM card and the APP server respectively;

[0030] S3: The quantum SIM card responds to the authentication request by using its public key to perform asymmetric encryption on its own ICCID information and key serial number C to obtain the first ciphertext, and then sends the first ciphertext and the public key to the APP;

[0031] S4: The APP uses the public key to perform asymmetric encryption on the user's identity information to obtain the second ciphertext, and sends the first ciphertext and the second ciphertext to the APP server;

[0032] S5: The APP server uses the private key to decrypt the first ciphertext and the second ciphertext respectively, and obtains the ICCID information of the quantum SIM card, the key serial number C' and the user identity information, and compares whether the key serial number C' and the key serial number C are consistent.

[0033] If so, grant the APP access to the APP server;

[0034] If not, return to step S2;

[0035] S6: The APP server responds to the authentication request, uses the public key to encrypt the user's identity information and the key sequence number C to obtain the third ciphertext, and sends the third ciphertext to the quantum SIM card through the APP;

[0036] S7: The quantum SIM card uses its private key to decrypt the third ciphertext, obtains the key serial number C'' and the user's identity information, and compares whether the key serial number C'' and the key serial number C are consistent.

[0037] If so, grant the APP access to the quantum SIM card;

[0038] If not, return to step 2;

[0039] S8: Authentication complete. The APP has obtained access to the APP server and the quantum SIM card.

[0040] Beneficial technical effects of the present invention:

[0041] This invention provides an APP authentication system and method based on quantum SIM card authorization. By using quantum keys to encrypt information, it enables secure communication between the quantum SIM card and the APP, and between the APP and the APP server. This allows the quantum SIM card and the APP server to securely authenticate and authorize the APP, preventing attackers from intercepting or tampering with information and effectively enhancing the reliability and security of APP authentication. Attached Figure Description

[0042] Figure 1 This is a schematic diagram of the overall framework of the present invention;

[0043] Figure 2 This is a flowchart illustrating the implementation steps of the technical solution of the present invention;

[0044] The components include: 1. Quantum Key Management Center; 2. Smart Mobile Terminal; 3. APP Server. Detailed Implementation

[0045] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the embodiments. However, the scope of protection of this invention is not limited to the specific embodiments described below.

[0046] Example 1

[0047] like Figure 1 As shown, an APP authentication system based on quantum SIM card authorization includes a quantum key management center 1, a smart mobile terminal 2, and an APP server 3; the smart mobile terminal 2 has an APP and a quantum SIM card installed; wherein,

[0048] The quantum key management center 1 is used to generate quantum key information and send the quantum key information to the quantum SIM card and the APP server 3 respectively through quantum key distribution.

[0049] The APP is used to obtain user identity information and send authentication requests to the quantum SIM card and APP server 3 respectively; it is also used to receive the first ciphertext sent by the quantum SIM card and encrypt the user identity information to obtain the second ciphertext, and send the first ciphertext and the second ciphertext to APP server 3; it is also used to receive access permissions from APP server 3 and quantum SIM card.

[0050] The APP server 3 is used to decrypt the first ciphertext and the second ciphertext to obtain the ICCID (SIM card identification number) information, key serial number C' and user identity information of the quantum SIM card, and to perform authentication based on the key serial number C'; when the authentication is successful, the APP server 3 grants the APP access rights, responds to the authentication request, encrypts the user identity information and key serial number C to obtain the third ciphertext, and sends the third ciphertext to the quantum SIM card through the APP;

[0051] The quantum SIM card is used to respond to authentication requests, encrypt its own ICCID information and key serial number C to obtain the first ciphertext, and send the first ciphertext to the APP; it is also used to decrypt the third ciphertext to obtain the key serial number C'' and user identity information, and perform authentication based on the key serial number C''; when the authentication is successful, the quantum SIM card's access permissions are granted to the APP.

[0052] In the specific implementation process, by using quantum keys to encrypt information, secure communication is achieved between the quantum SIM card and the APP, and between the APP and the APP server 3. This enables the quantum SIM card and the APP server 3 to securely authenticate and authorize the APP, preventing attackers from intercepting or tampering with information and effectively enhancing the reliability and security of APP authentication.

[0053] Example 2

[0054] More specifically, the quantum key management center 1 includes a quantum random number generator and a key management module; wherein,

[0055] The quantum random number generator is used to generate true random numbers and send them to the key management module;

[0056] The key management module is used to generate and store quantum key information based on true random numbers.

[0057] More specifically, the quantum key information includes a public key, a private key, and a key sequence number C.

[0058] More specifically, when the quantum SIM card sends the first ciphertext to the APP, it also includes sending the public key to the APP.

[0059] More specifically, the quantum SIM card uses a public key to asymmetricly encrypt its own ICCID information and key sequence number C to obtain the first ciphertext;

[0060] The app uses a public key to perform asymmetric encryption on user identity information to obtain a second ciphertext.

[0061] The APP server 3 uses the public key to perform asymmetric encryption on the user identity information and the key sequence number C to obtain the third ciphertext.

[0062] More specifically, the APP server 3 uses its private key to decrypt the first ciphertext and the second ciphertext respectively to obtain the ICCID information, key serial number C', and user identity information of the quantum SIM card.

[0063] More specifically, the quantum SIM card uses a private key to decrypt the third ciphertext to obtain the key sequence number C'' and user identity information.

[0064] More specifically, when the key sequence number C' matches the key sequence number C, the APP server 3 is authenticated and the APP server 3's access rights are granted to the APP.

[0065] More specifically, when the key serial number C'' matches the key serial number C, the quantum SIM card is authenticated and the APP is granted access to the quantum SIM card.

[0066] Example 3

[0067] like Figure 2 As shown, an APP authentication method based on quantum SIM card authorization, implemented based on the aforementioned APP authentication system based on quantum SIM card authorization, includes the following steps:

[0068] S1: The quantum key management center 1 generates quantum key information and sends it to the quantum SIM card and the APP server 3 respectively;

[0069] The quantum key information includes a public key, a private key, and a key sequence number C;

[0070] S2: The APP obtains the user's identity information and sends authentication requests to the quantum SIM card and the APP server 3 respectively;

[0071] S3: The quantum SIM card responds to the authentication request by using its public key to perform asymmetric encryption on its own ICCID information and key serial number C to obtain the first ciphertext, and then sends the first ciphertext and the public key to the APP;

[0072] S4: The APP uses the public key to perform asymmetric encryption on the user's identity information to obtain the second ciphertext, and sends the first ciphertext and the second ciphertext to the APP server 3;

[0073] S5: APP server 3 uses the private key to decrypt the first ciphertext and the second ciphertext respectively, to obtain the ICCID information of the quantum SIM card, the key serial number C' and the user identity information, and compares whether the key serial number C' and the key serial number C are consistent;

[0074] If so, grant the APP access permissions to APP server 3;

[0075] If not, return to step S2;

[0076] S6: APP server 3 responds to the authentication request, uses the public key to encrypt the user identity information and key sequence number C to obtain the third ciphertext, and sends the third ciphertext to the quantum SIM card through the APP;

[0077] S7: The quantum SIM card uses its private key to decrypt the third ciphertext, obtains the key serial number C'' and the user's identity information, and compares whether the key serial number C'' and the key serial number C are consistent.

[0078] If so, grant the APP access to the quantum SIM card;

[0079] If not, return to step 2;

[0080] S8: Authentication complete. The APP has obtained access permissions from APP server 3 and the quantum SIM card.

[0081] Based on the disclosure and teachings of the foregoing specification, those skilled in the art can make changes and modifications to the above embodiments. Therefore, the present invention is not limited to the specific embodiments disclosed and described above, and some modifications and changes to the invention should also fall within the protection scope of the claims of the present invention. Furthermore, although some specific terms are used in this specification, these terms are only for convenience of explanation and do not constitute any limitation on the present invention.

Claims

1. An APP authentication system based on quantum SIM card authorization, characterized in that, It includes a quantum key management center, a smart mobile terminal, and an APP server; the smart mobile terminal is equipped with an APP and a quantum SIM card; wherein, The quantum key management center is used to generate quantum key information and send the quantum key information to the quantum SIM card and the APP server respectively; The APP is used to obtain user identity information and send authentication requests to the quantum SIM card and the APP server respectively; it is also used to receive the first ciphertext sent by the quantum SIM card and encrypt the user identity information to obtain the second ciphertext, and send the first ciphertext and the second ciphertext to the APP server; it is also used to receive access permissions from the APP server and the quantum SIM card. The APP server is used to decrypt the first and second ciphertexts to obtain the ICCID information, key serial number C', and user identity information of the quantum SIM card, and to perform authentication based on the key serial number C'. When the authentication is successful, the APP server grants access to the APP, responds to the authentication request, encrypts the user identity information and key serial number C to obtain the third ciphertext, and sends the third ciphertext to the quantum SIM card through the APP. The quantum SIM card is used to respond to authentication requests, encrypt its own ICCID information and key serial number C to obtain the first ciphertext, and send the first ciphertext to the APP; it is also used to decrypt the third ciphertext to obtain the key serial number C'' and user identity information, and perform authentication based on the key serial number C''; when the authentication is successful, the quantum SIM card's access permissions are granted to the APP.

2. The APP authentication system based on quantum SIM card authorization according to claim 1, characterized in that, The quantum key management center includes a quantum random number generator and a key management module; wherein... The quantum random number generator is used to generate true random numbers and send them to the key management module; The key management module is used to generate and store quantum key information based on true random numbers.

3. The APP authentication system based on quantum SIM card authorization according to claim 1, characterized in that, The quantum key information includes a public key, a private key, and a key sequence number C.

4. The APP authentication system based on quantum SIM card authorization according to claim 3, characterized in that, When the quantum SIM card sends the first ciphertext to the APP, it also sends the public key to the APP.

5. The APP authentication system based on quantum SIM card authorization according to claim 3, characterized in that, The quantum SIM card uses a public key to asymmetricly encrypt its own ICCID information and key sequence number C to obtain the first ciphertext. The app uses a public key to perform asymmetric encryption on user identity information to obtain a second ciphertext. The APP server uses the public key to perform asymmetric encryption on the user's identity information and the key sequence number C to obtain the third ciphertext.

6. The APP authentication system based on quantum SIM card authorization according to claim 5, characterized in that, The APP server uses its private key to decrypt the first and second ciphertexts respectively, obtaining the ICCID information of the quantum SIM card, the key serial number C', and the user identity information.

7. The APP authentication system based on quantum SIM card authorization according to claim 1, characterized in that, The quantum SIM card uses its private key to decrypt the third ciphertext, obtaining the key sequence number C'' and the user's identity information.

8. The APP authentication system based on quantum SIM card authorization according to claim 1, characterized in that, When the key serial number C' matches the key serial number C, the APP server is authenticated and the APP server's access permissions are granted to the APP.

9. The APP authentication system based on quantum SIM card authorization according to claim 1, characterized in that, When the key serial number C'' matches the key serial number C, the quantum SIM card is authenticated and the APP is granted access to the quantum SIM card.

10. An APP authentication method based on quantum SIM card authorization, characterized in that, Includes the following steps: S1: The quantum key management center generates quantum key information and sends it to the quantum SIM card and the APP server respectively; The quantum key information includes a public key, a private key, and a key sequence number C; S2: The APP obtains the user's identity information and sends authentication requests to the quantum SIM card and the APP server respectively; S3: The quantum SIM card responds to the authentication request by using its public key to perform asymmetric encryption on its own ICCID information and key serial number C to obtain the first ciphertext, and then sends the first ciphertext and the public key to the APP; S4: The APP uses the public key to perform asymmetric encryption on the user's identity information to obtain the second ciphertext, and sends the first ciphertext and the second ciphertext to the APP server; S5: The APP server uses the private key to decrypt the first ciphertext and the second ciphertext respectively, and obtains the ICCID information of the quantum SIM card, the key serial number C' and the user identity information, and compares whether the key serial number C' and the key serial number C are consistent. If so, grant the APP access to the APP server; If not, return to step S2; S6: The APP server responds to the authentication request, uses the public key to encrypt the user's identity information and the key sequence number C to obtain the third ciphertext, and sends the third ciphertext to the quantum SIM card through the APP; S7: The quantum SIM card uses its private key to decrypt the third ciphertext, obtains the key serial number C'' and the user's identity information, and compares whether the key serial number C'' and the key serial number C are consistent. If so, grant the APP access to the quantum SIM card; If not, return to step 2; S8: Authentication complete. The APP has obtained access to the APP server and the quantum SIM card.

Images