Quantum encryption authentication fusion system

Abstract

The utility model discloses a quantum encryption authentication fusion system, which comprises a storage server and a plurality of communication parties, the communication party comprises a user side, a processing module, a quantum random number generator, a quantum key distribution module, a plaintext encryption module and a quantum key encryption module. The utility model discloses a quantum encryption authentication fusion system, which is characterized in that a quantum key distribution module generates a quantum key according to a true random number generated by a quantum random number generator, then a plaintext encryption module encrypts a plaintext by using the quantum key, and the quantum key encryption module encrypts the quantum key, so that the quantum key is encrypted and authenticated. The method can be prevented from being decoded by a high-speed computer, effectively improves the safety of information, and is widely applied to quantum network and natural person (or digital person) user authentication and information encryption.

Description

TECHNICAL FIELD

[0001] The utility model relates to the field of authentication and secret communication technology, concretely relates to a quantum encryption authentication fusion system. BACKGROUND

[0002] With the rapid development of the Internet, people's life is more and more inseparable from the network, however, the security problem about network is also endless, the economic loss brought by network crime is counted in ten billion, our country also promotes network security to become the national strategy, information encryption and transmission are very important in network security.

[0003] The quantum key distribution (QKD) of the next generation of secure communication technology is very important in quantum network and natural person and "digital person" user authentication and information encryption.

[0004] The existing information encryption technology is to use a computer to generate a pseudo-random number seed, then get a key through a fixed algorithm, and finally encrypt the plaintext according to the key to get the ciphertext, so as to realize information encryption. However, with the continuous development of computer technology, these fixed algorithms and pseudo-random number seeds are easy to be cracked by high-speed computers, resulting in that the ciphertext is easy to be cracked, and the information security is greatly threatened. Moreover, the existing information encryption technology also lacks authentication function, if the original text is tampered with or information loss occurs in the information transmission process, the receiving party cannot judge whether the received information is correct. UTILITY MODEL CONTENT

[0005] The utility model discloses in order to solve the problem that the existing information encryption technology adopts fixed algorithm and pseudo-random number seed and is easy to be cracked by high-speed computer, and proposes a quantum encryption authentication fusion system.

[0006] In order to achieve the above object, the technical scheme adopted by the utility model is as follows:

[0007] A quantum encryption authentication fusion system, comprising a storage server and a plurality of communication parties;

[0008] The communication party comprises a user end, a processing module, a quantum random number generator, a quantum key distribution module, a plaintext encryption module and a quantum key encryption module;

[0009] The processing module is connected with the user end, the plaintext encryption module and the storage server, the output end of the processing module is connected with the input end of the quantum random number generator, the output end of the quantum random number generator is connected with the input end of the quantum key distribution module, the output end of the quantum key distribution module is connected with the input end of the plaintext encryption module, the plaintext encryption module is connected with the quantum key encryption module, and the output end of the quantum key encryption module is connected with the storage server.

[0010] In the scheme, the quantum key distribution module generates quantum key according to the true random number generated by the quantum random number generator, then the plaintext encryption module encrypts the plaintext by using the quantum key, and the quantum key encryption module encrypts the quantum key, so that the information security is effectively improved.

[0011] Preferably, the communication parties are two.

[0012] Preferably, the communication parties further comprise a message authentication module.

[0013] The output end of the processing module is connected with the input end of the message authentication module, and the plaintext encryption module and the message authentication module are connected with each other.

[0014] Preferably, the message authentication module is a GMAC message authentication module.

[0015] Preferably, the plaintext encryption module is a symmetric encryption module.

[0016] Preferably, the symmetric encryption module is an ASE symmetric encryption module.

[0017] Preferably, the quantum key encryption module is an RSA encryption module.

[0018] Preferably, the quantum random number generator adopts a chip model of QRNG100SPI.

[0019] Preferably, the ASE symmetric encryption module adopts a chip model of HSCTU-QFN68.

[0020] Preferably, the RSA encryption module adopts a chip model of STM32F207 or CCP903T.

[0021] The utility model has the beneficial technical effect:

[0022] The utility model provides a quantum encryption authentication fusion system, through quantum key distribution module according to the true random number generated by quantum random number generator generates quantum key, then through plaintext encryption module utilizes quantum key to encrypt plaintext, and through quantum key encryption module to quantum key carries out encryption, can avoid being deciphered by high -speed computer, effectively improved information security. BRIEF DESCRIPTION OF DRAWINGS

[0023] Figure 1 It is the module connection schematic drawing of the utility model;

[0024] Wherein: 1, a storage server; 2, a communication party; 21, a user end; 22, a processing module; 23, a quantum random number generator; 24, a quantum key distribution module; 25, a plaintext encryption module; 26, a quantum key encryption module; 27, a message authentication module. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical scheme and advantages of the utility model more clearly, the following will be further detailed with examples, but the scope of the utility model claimed is not limited to the following specific examples.

[0026] Example 1

[0027] As Figure 1 shown, a quantum encryption authentication fusion system, comprising a storage server 1 and a plurality of communication parties 2;

[0028] The communication party 2 includes a user end 21, a processing module 22, a quantum random number generator 23, a quantum key distribution module 24, a plaintext encryption module 25 and a quantum key encryption module 26;

[0029] The processing module 22 is connected with the user end 21, the plaintext encryption module 25 and the storage server 1, the output end of the processing module 22 is connected with the input end of the quantum random number generator 23, the output end of the quantum random number generator 23 is connected with the input end of the quantum key distribution module 24, the output end of the quantum key distribution module 24 is connected with the input end of the plaintext encryption module 25, the plaintext encryption module 25 is connected with the quantum key encryption module 26, and the output end of the quantum key encryption module 26 is connected with the storage server 1.

[0030] In the specific implementation process, the quantum key distribution module 24 generates a quantum key according to the true random number generated by the quantum random number generator 23, then the plaintext encryption module 25 encrypts the plaintext by using the quantum key, and the quantum key encryption module 26 encrypts the quantum key, which can avoid being deciphered by a high-speed computer, and effectively improves the security of information.

[0031] Example 2

[0032] More specifically, the communication party 2 has two.

[0033] More specifically, the communication party 2 further includes a message authentication module 27;

[0034] The output end of the processing module 22 is connected with the input end of the message authentication module 27, and the plaintext encryption module 25 is connected with the message authentication module 27.

[0035] More specifically, the message authentication module 27 is a GMAC message authentication module.

[0036] More specifically, the plaintext encryption module 25 is a symmetric encryption module.

[0037] More specifically, the symmetric encryption module is an ASE symmetric encryption module.

[0038] More specifically, the quantum key encryption module 26 is an RSA encryption module.

[0039] More specifically, the quantum random number generator 23 adopts the chip model QRNG100SPI.

[0040] More specifically, the ASE symmetric encryption module adopts the chip model HSCTU-QFN68.

[0041] More specifically, the RSA encryption module adopts the chip model STM32F207 or CCP903T.

[0042] In the specific implementation process, the process of communication party 2 sending information to the storage server 1 is as follows:

[0043] The user end 21 transmits the plaintext to be sent to the processing module 22, and the processing module 22 issues an instruction to the quantum random number generator 23 (such as a laser vacuum fluctuation related source-independent quantum random number generator 23) to generate random numbers;

[0044] The true random numbers generated by the random number generator are transmitted to the quantum key distribution module 24 (using the decoy state BB84 protocol) to generate quantum keys;

[0045] The quantum key distribution module 24 transmits the quantum key and the plaintext to be sent by the processing module 22 to the ASE symmetric encryption module;

[0046] The ASE symmetric encryption module encrypts the plaintext to be sent according to the quantum key, and transmits the encrypted ciphertext and the quantum key to the GMAC message authentication module to generate an authentication tag MAC value;

[0047] At the same time, the ASE symmetric encryption module also transmits the quantum key to the RSA encryption module for encryption;

[0048] Finally, the storage server 1 stores the encrypted quantum key and the ciphertext with the authentication tag.

[0049] In the specific implementation process, the process of communication party 2 obtaining the ciphertext from the storage server 1 and decrypting it into plaintext is as follows:

[0050] The user terminal 21 sends an instruction to acquire the ciphertext to the processing module 22, and the processing module 22 acquires the corresponding ciphertext with an authentication tag and the encrypted quantum key from the storage server 1 through a reliable public network;

[0051] Firstly, the encrypted quantum key is decrypted by the RSA encryption module using the private key, then the MAC1 value is calculated in the GMAC message authentication module using the quantum key and the ciphertext, the MAC1 value is compared with the authentication tag MAC value of the ciphertext, the message authentication is completed to ensure that the ciphertext is not modified or lost, and finally the ciphertext is symmetrically decrypted by the ASE symmetric encryption module using the quantum key to obtain the plaintext.

[0052] According to the disclosure and teaching of the above description, the skilled in the art of the utility model can also change and modify the above-mentioned embodiments. Therefore, the utility model is not limited to the specific embodiments disclosed and described above, and some modifications and changes of the utility model should fall within the protection scope of the claims of the utility model. In addition, although some specific terms are used in the specification, these terms are only for convenience and do not constitute any limitation on the utility model.

Claims

1. A quantum encryption authentication fusion system, characterized in that, The communication party comprises a user terminal, a processing module, a quantum random number generator, a quantum key distribution module, a plaintext encryption module and a quantum key encryption module. The processing module is connected with the user terminal, the plaintext encryption module and the storage server, the output end of the processing module is connected with the input end of the quantum random number generator, the output end of the quantum random number generator is connected with the input end of the quantum key distribution module, the output end of the quantum key distribution module is connected with the input end of the plaintext encryption module, the plaintext encryption module is connected with the quantum key encryption module, and the output end of the quantum key encryption module is connected with the storage server. The communication party has two.

2. The quantum encryption authentication fusion system of claim 1, wherein, The communication party further comprises a message authentication module.

3. The quantum encryption authentication fusion system of claim 1, wherein, The output end of the processing module is connected with the input end of the message authentication module, and the plaintext encryption module is connected with the message authentication module. The message authentication module is a GMAC message authentication module.

4. The quantum encryption authentication fusion system of claim 3, wherein, The plaintext encryption module is a symmetric encryption module.

5. The quantum encryption authentication fusion system of claim 1, wherein, The symmetric encryption module is an ASE symmetric encryption module.

6. The quantum encryption authentication fusion system of claim 5, wherein, The quantum key encryption module is an RSA encryption module.

7. The quantum encryption authentication fusion system of claim 1, wherein, The chip model of the quantum random number generator is QRNG100SPI.

8. The quantum encryption authentication fusion system of claim 1, wherein, The chip model of the ASE symmetric encryption module is HSCTU-QFN68.

9. The quantum encryption authentication fusion system of claim 6, wherein, The chip model of the RSA encryption module is STM32F207 or CCP903T.

10. The quantum encryption authentication fusion system of claim 7, wherein, ​

Images