Quantum-resistant security enhancement method for simple authentication and security layer protocol

Abstract

The present application discloses a quantum-resistant security enhancement method for a simple authentication and security layer protocol of a communication network. The method comprises: receiving a start message sent by a second network device; obtaining a quantum key identifier from a first network node connected to a first network device; and performing post-quantum cryptographic encryption on the quantum key identifier on the basis of the start message to obtain a first encryption result, and sending the first encryption result to the second network device, so as to encrypt communication between the first network device and the second network device on the basis of the first encryption result. In this way, communication between the first network device and the second network device is encrypted using post-quantum cryptography and quantum key distribution, thereby significantly enhancing the capability to resist quantum computing attacks.

Description

Anti-quantum security enhancement method for simple authentication and security layer protocol

[0001] The present application claims priority from the Chinese patent application No. 202411122563.8 filed on August 15, 2024, and entitled "Anti-quantum security enhancement method for simple authentication and security layer protocol", the content of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0002] The present application relates to the field of network security, and more particularly, to an anti-quantum security enhancement method for simple authentication and security layer protocol of a communication network. BACKGROUND

[0003] The leap in computing power represented by quantum computing has a significant impact on related algorithms in classical cryptography in terms of security. Understandably, with the advent of large-scale quantum computers, there will be some impact on key agreement, encryption, signature, and other applications in classical cryptography. Therefore, providing cryptographic techniques that can resist quantum computing attacks has become a problem to be solved. SUMMARY

[0004] The present application provides an anti-quantum security enhancement method for simple authentication and security layer protocol of a communication network.

[0005] In a first aspect, the present application provides an anti-quantum security enhancement method for simple authentication and security layer protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used for the first network device, and the method comprising:

[0006] receiving a start message sent by the second network device;

[0007] obtaining a quantum key identifier from a first network node accessing the first network device;

[0008] performing post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and sending the first encryption result to the second network device, so as to encrypt the communication between the first network device and the second network device based on the first encryption result.

[0009] Thus, in the communication process of the first network device and the second network device, the first network device receives a start message sent by the second network device. Subsequently, the first network device and the second network device apply for obtaining a quantum key identifier. The first network device encrypts the quantum key identifier according to the start message and a post-quantum cryptographic algorithm to generate a first encryption result capable of resisting quantum computing attacks, and the post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. And the first network device sends the first encryption result to the second network device to encrypt the communication between the first network device and the second network device based on the first encryption result. In this way, the anti-quantum computing attack capability of the network communication between the first network device and the second network device is enhanced through the post-quantum cryptographic algorithm and the quantum key distribution technology.

[0010] In some embodiments, the method further comprises:

[0011] loading a signature certificate and an encryption certificate of the second network device.

[0012] In this way, the first network device loads the signature certificate and the encryption certificate of the second network device. In this way, the first network device obtains the encryption certificate of the second network device, which can be used to encrypt data using the public key of the second network device in the communication process, ensuring that only the device with the corresponding private key can decrypt and read the data. And obtain the signature certificate of the second network device, which can be used to verify the signature using the public key in the signature certificate, to ensure that the data from the second network device has not been tampered with.

[0013] In some embodiments, the start message includes a username and a second random number randomly generated by the second network device.

[0014] In this way, the first network device receives the start message sent by the second network device, which includes a username and a second random number randomly generated by the second network device. The username and the second random number can be used to generate a quantum-resistant key in the subsequent process.

[0015] In some embodiments, the quantum key identifier is obtained from a first network node accessing the first network device, comprising:

[0016] sending a quantum key application to a first network node accessing the first network device;

[0017] receiving a first quantum key and a quantum key identifier sent by the first network node according to the quantum key application, the quantum key identifier being obtained by the first network node identifying the first quantum key according to the identification code of the first network node.

[0018] Thus, the first network device sends a quantum key application to a first network node accessing the first network device. Then, the second network device receives a first quantum key and a quantum key identifier sent by the first network node according to the quantum key application, and the quantum key identifier is obtained by the first network node according to the first quantum key and the identification code of the first network node. In this way, the first network device obtains the first quantum key and the quantum key identifier, the first quantum key has good quantum resistance, the first quantum key can be used to generate a key with good quantum resistance, and the quantum key identifier helps to manage and use the quantum key.

[0019] In some embodiments, the start message includes a username and a second random number, the quantum key identifier is post-quantum cryptographically processed according to the start message to obtain a first encryption result, and the first encryption result is sent to the second network device, including:

[0020] The first random number randomly generated by the first network device and the second random number are spliced to obtain a first splicing body;

[0021] The first splicing body is encrypted according to the first quantum key to obtain a first encryption verification message in the first encryption result;

[0022] The first random number and the second random number are XOR processed to obtain a first XOR body;

[0023] The quantum key identifier and the first XOR body are spliced to obtain a second splicing body;

[0024] The second splicing body is post-quantum derived to obtain a first session key;

[0025] The second splicing body is post-quantum encrypted to obtain a first encryption message in the first encryption result;

[0026] The first encryption result is sent to the second network device, and the first encryption result further includes a first network device identifier of the first network device.

[0027] Thus, the first network device splices the first random number and the second random number generated randomly by the first network device to obtain a first splice. Then, the first network device encrypts the first splice according to the first quantum key to obtain a first encrypted verification message in a first encrypted result. Then, the first network device performs XOR processing on the first random number and the second random number to obtain a first XOR body. Thereafter, the first network device splices the quantum key identifier and the first XOR body to obtain a second splice. The first network device performs post-quantum derivation processing on the second splice to obtain a first session key. And the first network device performs post-quantum encryption processing on the second splice to obtain a first encrypted message in the first encrypted result. Finally, the first network device sends the first encrypted result to the second network device, and the first encrypted result further includes a first network device identifier of the first network device. In this way, the first network device obtains the first session key, which can be used to generate subsequent keys with good quantum resistance. The first network device also obtains the first encrypted verification message, which can enable the second network device to confirm the integrity of the first encrypted result. And the first network device encrypts data using a post-quantum cryptographic algorithm to protect the data, so that the data has good quantum resistance in the transmission process.

[0028] In some embodiments, the method further comprises:

[0029] receiving a second encrypted result sent by the second network device, the second encrypted result being obtained by performing post-quantum cryptographic encryption processing on a first decrypted result by the second network device, the first decrypted result being obtained by performing decryption processing on the first encrypted result by the second network device;

[0030] performing decryption processing on the second encrypted result to obtain a second decrypted result, the second decrypted result including a signature message and a username.

[0031] Thus, the first network device receives a second encrypted result sent by the second network device, the second encrypted result being obtained by performing post-quantum cryptographic encryption processing on a first decrypted result by the second network device, the first decrypted result being obtained by performing decryption processing on the first encrypted result by the second network device. The first network device then performs decryption processing on the second encrypted result to obtain a second decrypted result, the second decrypted result including a signature message and a username. In this way, the first network device obtains the signature message, which can be used to ensure that data from the second network device has not been tampered with.

[0032] In some embodiments, the method further comprises:

[0033] obtaining a sixth splice according to the signature message;

[0034] performing a post-quantum cryptographic signature verification on the signed message to confirm the correctness of the sixth concatenation body, the sixth concatenation body being derived from the quantum key identifier, the first random number and the second random number.

[0035] In this way, the first network device derives the sixth concatenation body from the signed message. Then, the first network device performs a post-quantum cryptographic signature verification on the signed message to confirm the correctness of the sixth concatenation body, the sixth concatenation body being derived from the quantum key identifier, the first random number and the second random number. In this way, the first network device confirms the correctness of the sixth concatenation body, ensuring that the data of the second network device received by the first network device has not been accessed by unauthorized access.

[0036] In some embodiments, the method further comprises:

[0037] performing an exclusive-OR operation on the first session key, the first random number, the second random number and the first quantum key to generate a first quantum-resistant session key;

[0038] deriving the first quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0039] In this way, the first network device performs an exclusive-OR operation on the first session key, the first random number, the second random number and the first quantum key to generate a first quantum-resistant session key. Then, the first network device derives the first quantum-resistant session key to encrypt the communication between the first network device and the second network device. In this way, the first network device derives the first quantum-resistant session key, which has good anti-quantum computing attack capability, and uses the first quantum-resistant session key or its derived key to protect the communication data between the first network device and the second network device, which can greatly enhance the security of the communication data.

[0040] In some embodiments, the method further comprises:

[0041] receiving a second encrypted attestation message sent by the second network device;

[0042] performing a concatenation operation on the first network device identifier and the first random number to generate a third concatenation body;

[0043] performing an encryption operation on the third concatenation body according to the first quantum-resistant session key to generate a first encrypted attestation message;

[0044] comparing the first encrypted attestation message with the second encrypted attestation message to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0045] Thus, the first network device receives the second encrypted authentication message sent by the second network device. Then, the first network device concatenates the first network device identifier and the first random number to obtain a third concatenation. Then, the first network device encrypts the third concatenation according to the first quantum-resistant session key to obtain a first encrypted authentication message. Finally, the first network device compares the first encrypted authentication message with the second encrypted authentication message to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key. In this way, the first network device receives the second encrypted authentication message. And the first network device generates the first encrypted authentication message according to the same data information as that used to generate the second encrypted authentication message. By comparing whether the first encrypted authentication message and the second encrypted authentication message are consistent, it is determined whether the first session key generated by the first network device and the second encrypted authentication message generated by the second network device are consistent, so as to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0046] In some embodiments, the method further comprises:

[0047] concatenating the username and the second random number to obtain a fourth concatenation;

[0048] encrypting the fourth concatenation according to the first quantum-resistant session key to obtain a first encrypted authentication message;

[0049] sending the first encrypted authentication message to the second network device to enable the second network device to confirm that the first quantum-resistant session key is consistent with the second quantum-resistant session key generated by the second network device.

[0050] Thus, the first network device concatenates the username and the second random number to obtain a fourth concatenation. Then, the first network device encrypts the fourth concatenation according to the first quantum-resistant session key to obtain a first encrypted authentication message. Finally, the first network device sends the first encrypted authentication message to the second network device to enable the second network device to confirm that the first quantum-resistant session key is consistent with the second quantum-resistant session key generated by the second network device. In this way, the first network device obtains the first encrypted authentication message, the second network device can verify whether the second quantum-resistant session key used by the second network device is the same as the first quantum-resistant session key used by the first network device according to the first encrypted authentication message, and the first encrypted authentication message can resist the threat of quantum computing attack during transmission.

[0051] In a second aspect, the embodiments of the present application provide a method for anti-quantum security enhancement of a simple authentication and security layer protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used by the second network device, and the method comprising:

[0052] sending a start message to the first network device;

[0053] receiving a first encryption result of quantum key identifier encrypted by the first network device according to the start message, the quantum key identifier being obtained by the first network device from an accessed first network node, and the first encryption result being used to encrypt communication between the first network device and the second network device.

[0054] Thus, in the communication process between the first network device and the second network device, the first network device receives the start message sent by the second network device. Then, the first network device and the second network device apply for a quantum key identifier. The first network device encrypts the quantum key identifier according to the start message and a post-quantum cryptographic algorithm to generate a first encryption result that can resist quantum computing attacks, and the post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. And the first network device sends the first encryption result to the second network device to encrypt the communication between the first network device and the second network device based on the first encryption result. In this way, the anti-quantum computing attack capability of the network communication between the first network device and the second network device is enhanced by the post-quantum cryptographic algorithm and quantum key distribution technology.

[0055] In some embodiments, the method further comprises:

[0056] obtaining a signature certificate and an encryption certificate of the second network device from a certificate system.

[0057] Thus, the second network device obtains the signature certificate and the encryption certificate of the second network device from the certificate system. In this way, the second network device obtains the signature certificate of itself, which is used to prove the identity of itself and allows the second network device to digitally sign the data sent to ensure the authenticity and integrity of the data. The second network device also obtains the encryption certificate of itself, which allows the first network device to encrypt the data using the public key in the encryption certificate, and then the second network device uses the private key corresponding to the encryption certificate to decrypt the encrypted data, thereby enhancing the confidentiality of the data between the first network device and the second network device.

[0058] In some embodiments, the method further comprises:

[0059] decrypting the first encryption result to obtain a first decryption result;

[0060] According to the first decryption result and the second quantum key, a second quantum-resistant session key is generated to encrypt the communication between the first network device and the second network device, and the second quantum key is obtained from a second network node of the second network device according to the first decryption result;

[0061] According to the second quantum-resistant session key, a second encryption result is generated by performing post-quantum encryption processing on the first decryption result, so that the first network device confirms that the second network device receives the correct first encryption result.

[0062] In this way, the second network device performs decryption processing on the first encryption result to obtain the first decryption result. Then, the second network device generates a second quantum-resistant session key according to the first decryption result and the second quantum key to encrypt the communication between the first network device and the second network device, and the second quantum key is obtained from a second network node of the second network device according to the first decryption result. Then, the second network device generates a second encryption result by performing post-quantum encryption processing on the first decryption result according to the second quantum-resistant session key, so that the first network device confirms that the second network device receives the correct first encryption result. In this way, the second network device obtains the first decryption result by processing the received first encryption result, and generates the second quantum-resistant session key by deriving the first decryption result and the second quantum key. The second quantum-resistant session key has good quantum resistance and can be used to protect the communication between the first network device and the second network device. The second encryption result is obtained by encrypting the first decryption result, which is used to make the first network device confirm that the second network device receives the correct first encryption result.

[0063] In some embodiments, the decryption processing on the first encryption result to obtain the first decryption result comprises:

[0064] Decrypting the first encryption result to obtain the first network device identifier, the first encryption verification message, and the first encryption message of the first network device;

[0065] Performing post-quantum decryption processing on the first encryption message to obtain a second splicing body;

[0066] According to the second splicing body, a quantum key identifier and a first XOR body are obtained;

[0067] According to the first XOR body and a second random number randomly generated by the second network device, a first random number randomly generated by the first network device is obtained;

[0068] Performing post-quantum derivation processing on the second splicing body to obtain a second session key.

[0069] Thus, the second network device decrypts the first encrypted result to obtain the first network device identifier of the first network device, the first encrypted verification message, and the first encrypted message. Then, the second network device performs post-quantum decryption processing on the first encrypted message to obtain the second splice. Then, the second network device obtains the quantum key identifier and the first XOR body according to the second splice. And the second network device obtains the first random number generated by the first network device according to the first XOR body and the second random number generated by the second network device. Finally, the second network device performs post-quantum derivation processing on the second splice to obtain the second session key. In this way, the second network device obtains various data for generating the first session key, and generates the second session key according to these data, and the second session key is used to generate a key with good quantum resistance.

[0070] In some embodiments, the method further comprises:

[0071] replenishing a plurality of keys to a cryptographic module of the second network device by a service node;

[0072] sending a quantum key application to the service node according to the quantum key identifier, the quantum key application being protected by a protection key, the protection key being one of the plurality of keys replenished to the cryptographic module and used randomly;

[0073] receiving a quantum key encryption result obtained by the service node by encrypting a second quantum key according to the protection key, the second quantum key being generated by a second network node accessing the service node and distributed to the service node;

[0074] decrypting the quantum key encryption result to obtain the second quantum key.

[0075] Thus, the second network device replenishes a plurality of keys to a cryptographic module of the second network device by a service node. Then, the second network device sends a quantum key application to the service node according to the quantum key identifier, the quantum key application being protected by a protection key, the protection key being one of the plurality of keys replenished to the cryptographic module and used randomly. Then, the second network device receives a quantum key encryption result obtained by the service node by encrypting a second quantum key according to the protection key, the second quantum key being generated by a second network node accessing the service node and distributed to the service node. Finally, the second network device decrypts the quantum key encryption result to obtain the second quantum key. In this way, the second network device obtains the second quantum key matched with the first quantum key through the quantum key identifier to the second network node, which can be used for subsequent generation of a key with good quantum resistance.

[0076] In some embodiments, the method further comprises:

[0077] The first random number and the second random number are spliced to obtain a fifth splicing body;

[0078] The fifth splicing body is encrypted according to the second quantum key to obtain a second encrypted verification message;

[0079] The second encrypted verification message and the first encrypted verification message are compared to confirm that the second network device receives the correct quantum key identifier and the first random number.

[0080] In this way, the second network device splices the first random number and the second random number to obtain the fifth splicing body. Then, the second network device encrypts the fifth splicing body according to the second quantum key to obtain the second encrypted verification message. And the second encrypted verification message and the first encrypted verification message are compared to confirm that the second network device receives the correct quantum key identifier and the first random number. In this way, the second network device generates the second encrypted verification message by itself having the same data information as the first network device generating the first encrypted verification message, and compares it with the first encrypted verification message. Confirm that the second network device receives the correct quantum key identifier and the first random number, which ensures that the second network device can obtain the correct second quantum key and generate the correct second session key according to these information.

[0081] In some embodiments, the processing according to the first decryption result and the second quantum key generates a second quantum-resistant session key to encrypt the communication between the first network device and the second network device, comprising:

[0082] The second session key, the first random number, the second random number and the second quantum key are XOR processed to generate a second quantum-resistant session key;

[0083] The second quantum-resistant session key is derived to encrypt the communication between the first network device and the second network device.

[0084] In this way, the second network device XOR processes the second session key, the first random number, the second random number and the second quantum key to generate a second quantum-resistant session key. Then, the second network device derives the second quantum-resistant session key to encrypt the communication between the first network device and the second network device. In this way, the second network device generates a second quantum-resistant session key, which can be used to enhance the anti-quantum computing attack capability of the communication data between the first network device and the second network device.

[0085] In some embodiments, the post-quantum encryption processing of the first decryption result according to the second anti-quantum session key generates a second encryption result, to make the first network device confirm that the second network device receives the correct first encryption result, including:

[0086] XOR processing the second quantum key and the first random number to obtain a second XOR body;

[0087] Splicing processing the second XOR body and the second random number to obtain a sixth splicing body;

[0088] Post-quantum signature processing the sixth splicing body to obtain a signature message in the second encryption result;

[0089] Sending the second encryption result to the first network device, the second encryption result including a username.

[0090] In this way, the second network device XOR processes the second quantum key and the first random number to obtain a second XOR body. Then, the second network device splicing processes the second XOR body and the second random number to obtain a sixth splicing body. Then, the second network device further post-quantum signature processes the sixth splicing body to obtain a signature message in the second encryption result. Finally, the second network device sends the second encryption result to the first network device, and the second encryption result includes a username. In this way, the second network device generates a signature message to protect the second encryption result from unauthorized access and tampering during transmission.

[0091] In some embodiments, the method further includes:

[0092] Splicing processing the first random number and a first network device identifier of the first network device to obtain a seventh splicing body;

[0093] Encrypting processing the seventh splicing body according to the second anti-quantum session key to obtain a second encryption verification message in the second encryption result;

[0094] Sending the second encryption verification message to the first network device to make the first network device confirm that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device.

[0095] Thus, the second network device concatenates the first random number and the first network device identifier of the first network device to obtain a seventh concatenation. Then, the second network device encrypts the seventh concatenation according to the second anti-quantum session key to obtain a second encrypted authentication message in the second encrypted result. Finally, the second network device sends the second encrypted authentication message to the first network device, so that the first network device confirms that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device. In this way, the second network device generates the second encrypted authentication message, which is used to make the first network device confirm that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device, and the consistent key can be used to communicate with the second network device.

[0096] In some embodiments, the method further comprises:

[0097] receiving the first encrypted authentication message sent by the first network device;

[0098] concatenating the username and the second random number to obtain an eighth concatenation;

[0099] encrypting the eighth concatenation according to the second anti-quantum session key to obtain a second encrypted authentication message;

[0100] comparing the first encrypted authentication message with the second encrypted authentication message to confirm that the first anti-quantum session key generated by the first network device is consistent with the second anti-quantum session key.

[0101] Thus, the second network device receives the first encrypted authentication message sent by the first network device. Then, the second network device concatenates the username and the second random number to obtain an eighth concatenation. Then, the second network device encrypts the eighth concatenation according to the second anti-quantum session key to obtain a second encrypted authentication message. Finally, the second network device compares the first encrypted authentication message with the second encrypted authentication message to confirm that the first anti-quantum session key generated by the first network device is consistent with the second anti-quantum session key. In this way, the second network device receives the first encrypted authentication message sent by the first network device, generates the second encrypted authentication message according to the related information, compares the first encrypted authentication message with the second encrypted authentication message, confirms that the first anti-quantum session key generated by the first network device is consistent with the second anti-quantum session key, and can use the consistent key to communicate with the first network device.

[0102] In a third aspect, the embodiments of the present application provide a computing processing device, comprising: a memory, wherein the computer readable code is stored; and one or more processors, when the computer readable code is executed by the one or more processors, the computing processing device performs the method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to the first aspect and the second aspect.

[0103] In a fourth aspect, the embodiments of the present application provide a computer program comprising computer readable code, when the computer readable code is run on a computing processing device, the computer readable code causes the computing processing device to perform the method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to the first aspect and the second aspect.

[0104] In a fifth aspect, the embodiments of the present application provide a computer readable medium, wherein the computer program according to the fourth aspect is stored.

[0105] Additional aspects and advantages of the embodiments of the present application will be in part apparent and in part pointed out below. BRIEF DESCRIPTION OF DRAWINGS

[0106] The above and / or additional aspects and advantages of the present application will become apparent and be readily appreciated from the following description, including the appended drawings.

[0107] FIG. 1 is a flow diagram of a method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to an embodiment of the present application;

[0108] FIG. 2 is an architecture diagram of a method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to an embodiment of the present application;

[0109] FIG. 3 is a flow diagram of a method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to an embodiment of the present application;

[0110] FIG. 4 is a flow diagram of a method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to an embodiment of the present application;

[0111] FIG. 5 is a flow diagram of a method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to an embodiment of the present application;

[0112] FIG. 6 is a flow diagram of a method for quantum-resistant security enhancement of the Simple Authentication and Security Layer protocol of the communication network according to an embodiment of the present application;

[0113] Figure 7 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0114] Figure 8 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0115] Figure 9 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0116] Figure 10 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0117] Figure 11 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0118] Figure 12 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0119] Figure 13 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0120] Figure 14 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0121] Figure 15 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0122] Figure 16 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0123] Figure 17 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0124] Figure 18 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0125] Figure 19 is a flowchart of a method for quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the application;

[0126] FIG. 20 is a nineteenth flowchart illustrating a method of quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the present disclosure;

[0127] FIG. 21 is a signaling diagram of a method of quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network according to an embodiment of the present disclosure;

[0128] FIG. 22 is a block diagram of a computing device for a method of quantum-resistant security enhancement of a central authentication service protocol of a communication network according to an embodiment of the present disclosure;

[0129] FIG. 23 is a block diagram of a computer program for a method of quantum-resistant security enhancement of a central authentication service protocol of a communication network according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0130] The leap in computing power represented by quantum computing has a significant impact on the security of related algorithms in classical cryptography. That is, quantum computing poses a more direct and urgent threat to classical cryptography. A series of classical algorithms such as Diffie-Hellman, RSA, and elliptic curve cryptography (ECC) face a significant security risk because the number theory problems on which they are based, such as large prime factorization and discrete logarithms, are no longer difficult in the quantum era. Understandably, with the advent of large-scale quantum computers, there will be some impact on key agreement, encryption, and signature applications in classical cryptography.

[0131] Thus, the security of the Internet, which uses classical cryptography algorithms to protect communication processes, is threatened by quantum computing attacks. For example, the Simple Authentication and Security Layer (SASL), a standardized client / server identity authentication protocol, allows clients and servers to exchange identity information based on this protocol and ensures that a connection is established only after successful authentication. The Simple Authentication and Security Layer is an authentication framework based on which various authentication mechanisms can be implemented, such as username / password, Kerberos, NTLM, OAuth, etc. These classical authentication technologies use classical public key encryption algorithms such as RSA and ECC algorithms. However, the Simple Authentication and Security Layer does not have the ability to resist quantum computing attacks, and has a significant security risk when facing quantum computing attacks.

[0132] Currently, the technologies for addressing the threat of quantum computing attacks internationally mainly fall into two categories: one is to use quantum key distribution (QKD) networks for symmetric key agreement in scenarios where asymmetric algorithms are used for (symmetric) key agreement and then encrypted transmission through symmetric algorithms, to protect the security of the key; the other is to study post-quantum cryptography (PQC) algorithms, which directly replace existing asymmetric algorithms. Quantum key distribution technology uses quantum mechanics to generate keys that cannot be intercepted by a third party, ensuring the security of key transmission. It is particularly suitable for key exchange scenarios and can replace existing asymmetric key agreement algorithms such as RSA or ECC to improve the security of the key. However, quantum key distribution technology cannot completely replace all applications of asymmetric algorithms, such as signature verification, integrity protection, and anti-repudiation scenarios, which still require the use of asymmetric algorithms.

[0133] Post-quantum cryptography algorithms are asymmetric cryptography algorithms designed based on new mathematical problems, aiming to resist the threat of quantum computers. NIST has announced the first batch of 4 post-quantum cryptography algorithms for standardization, including Kyber, Dilithium, Falcon, and SPHINCS+, which cover multiple technical routes to reduce the risk of a single technology being cracked. Post-quantum cryptography algorithms can theoretically replace all asymmetric algorithms and are more versatile. However, the security of post-quantum cryptography algorithms still depends on the complexity of the computational problem, and in the future, they may face new cracking methods or become insecure as computing power improves. In addition, the post-quantum cryptography algorithm standard has not been officially announced, and the production and certification of related products also require time, so its large-scale application still needs a long period.

[0134] Both post-quantum cryptography algorithms and quantum key distribution technology have the ability to resist quantum computing attacks, but each has its limitations, so providing a relatively low-cost and highly secure cryptographic technology that can resist quantum computing attacks has become a pressing problem.

[0135] Based on the above problems, referring to FIG. 1, the embodiment of the present application provides a method for anti-quantum security enhancement of a simple authentication and security layer protocol of a communication network, the communication network comprising a first network device and a second network device, the method being used for the first network device, and the method comprising:

[0136] 011: receiving a start message sent by the second network device;

[0137] 012: obtaining a quantum key identifier from a first network node accessing the first network device;

[0138] 013: Perform post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and send the first encryption result to the second network device, so as to encrypt the communication between the first network device and the second network device based on the first encryption result.

[0139] The embodiment of the application further provides a first network device, comprising a memory and a processor. The method of the embodiment of the application can be implemented by the first network device of the embodiment of the application. Specifically, the memory stores a computer program, and the processor is configured to receive a start message sent by a second network device, obtain a quantum key identifier from a first network node connected to the first network device, and perform post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and send the first encryption result to the second network device, so as to encrypt the communication between the first network device and the second network device based on the first encryption result.

[0140] The embodiment of the application further provides a first network device security enhancement device. The method of the embodiment of the application can be implemented by the first network device security enhancement device of the embodiment of the application. Specifically, the first network device security enhancement device comprises a receiving module, an obtaining module and an encryption module. The receiving module is configured to receive a start message sent by a second network device. The obtaining module is configured to obtain a quantum key identifier from a first network node connected to the first network device. The encryption module is configured to perform post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and send the first encryption result to the second network device, so as to encrypt the communication between the first network device and the second network device based on the first encryption result.

[0141] The application provides a communication system based on a simple authentication and security layer protocol, which comprises the first network device, the second network device and the quantum key distribution network of the above-mentioned embodiments, and the quantum key distribution network is configured to distribute quantum keys to the first network device or the second network device.

[0142] Specifically, the quantum key distribution network comprises network nodes and a quantum network link control center. The network nodes are used to store and distribute quantum keys in the quantum key distribution network. The quantum network link center can establish quantum key distribution and relay links between the network nodes according to the names of the network nodes, and the quantum key distribution and relay links are used for data transfer and other functions. The quantum key distribution network is used to implement quantum key generation, quantum key relay, quantum key provision and other services.

[0143] Referring to FIG. 2, in some embodiments, in the SASL security layer, the first network device receives an identity authentication request sent by the second network device according to the SASL authentication protocol, and the first network device responds to the identity authentication request sent by the second network device. In addition, the second network device accesses a service node, which is a transit station for the second network device to connect with the network node, and is used to charge the second network device with a key and transit and store a quantum key. After the second network device sends a quantum key application, the network node sends the quantum key generated by the quantum key distribution network to the service node accessed by the second network device, and the service node sends the quantum key to the second network device. The simple process of the first network device and the second network device obtaining the quantum key is as follows: first, the first network device sends a quantum key application to the first network node accessed by the first network device through a trusted channel. Then, the first network node generates a quantum key according to the quantum key application, and distributes the quantum key to the first network device through a trusted channel. At the same time, the quantum network link control center synchronously causes the second network node accessed by the second network device to generate a quantum key, but the quantum key will not be distributed to the second network device immediately, but will be stored in the network node first. The correspondence between the above-mentioned first network device, second network device, service node and network node is provided by the management platform.

[0144] It should be noted that the embodiments of the present application take the FIPS 203 Module-Lattice-based Key-Encapsulation Mechanism Standard as the PQC key encapsulation algorithm, and take the FIPS 204 Module-Lattice-Based Digital Signature Standard as the PQC digital signature algorithm as an example for explanation and description. The following description of the operations related to the PQC algorithm is based on the above FIPS standard. Of course, in other embodiments, other algorithms such as the NewHope algorithm, the Sidh algorithm, and the HQC algorithm can also be used as the related algorithm of the PQC. It should be further noted that the embodiments of the present application are directed to the Simple Authentication and Security Layer (SASL), which is referred to as the SASL protocol hereinafter.

[0145] Specifically, the second network device sends a start message to the first network device.

[0146] The first network device receives a start message sent by the second network device, and the start message includes a username and a second random number randomly generated by the second network device. In a case where the start message sent by the second network device is received, the second network device acquires a quantum key identifier from a first network node of the first network device to which the second network device accesses. The second network device further performs post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and sends the first encryption result to the second network device, so as to encrypt communication between the first network device and the second network device based on the first encryption result.

[0147] The second network device receives the first encryption result of the post-quantum cryptographic encryption processing on the quantum key identifier according to the start message sent by the first network device, so as to encrypt communication between the first network device and the second network device based on the first encryption result.

[0148] In summary, in the communication network, the simple authentication and security layer protocol, the communication system, the first network device and the second network device, for the communication process between the first network device and the second network device, the first network device receives a start message sent by the second network device. Subsequently, the first network device and the second network device apply for a quantum key identifier. The first network device performs encryption processing on the quantum key identifier according to the start message and a post-quantum cryptographic algorithm to generate a first encryption result capable of resisting quantum computing attacks, and the post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. And the first network device sends the first encryption result to the second network device, so as to encrypt communication between the first network device and the second network device based on the first encryption result. In this way, the post-quantum cryptographic algorithm and the quantum key distribution technology enhance the anti-quantum computing attack capability of the network communication between the first network device and the second network device.

[0149] Referring to FIG. 3, in some embodiments, the method further includes:

[0150] 014: loading a signature certificate and an encryption certificate of the second network device.

[0151] In some embodiments, the loading module is configured to load a signature certificate and an encryption certificate of the second network device.

[0152] In some embodiments, the processor is further configured to load a signature certificate and an encryption certificate of the second network device.

[0153] Specifically, the first network device loads a signature certificate and an encryption certificate of the second network device.

[0154] Thus, the first network device obtains the encryption certificate of the second network device, can encrypt data using the public key of the second network device in the communication process, and ensures that only the device with the corresponding private key can decrypt and read the data. And obtain the signature certificate of the second network device, can use the public key in the signature certificate to verify the signature, ensure that the data from the second network device has not been tampered with.

[0155] Referring to FIG. 4, in some embodiments, the step 012 (obtaining a quantum key identifier according to a first network node accessing to the first network device) comprises:

[0156] 0121: sending a quantum key application to the first network node accessing to the first network device;

[0157] 0122: receiving the first quantum key and the quantum key identifier sent by the first network node according to the quantum key application.

[0158] In some embodiments, the sending module is configured to send a quantum key application to the first network node accessing to the first network device. The receiving module is configured to receive the first quantum key and the quantum key identifier sent by the first network node according to the quantum key application.

[0159] In some embodiments, the processor is further configured to send a quantum key application to the first network node accessing to the first network device, and receive the first quantum key and the quantum key identifier sent by the first network node according to the quantum key application.

[0160] Specifically, the first network device sends a quantum key application to the first network node accessing to the first network device. Then, the second network device receives the first quantum key and the quantum key identifier sent by the first network node according to the quantum key application, and the quantum key identifier is obtained by the first network node according to the identification code of the first network node to identify the first quantum key.

[0161] Thus, the first network device obtains the first quantum key and the quantum key identifier, the first quantum key has good quantum resistance, the first quantum key can be used to generate a key with good quantum resistance, and the quantum key identifier helps to manage and use the quantum key.

[0162] Referring to FIG. 5, in some embodiments, the start message includes a username and a second random number, and the step 013 (performing post-quantum cryptographic processing on the quantum key identifier according to the start message to obtain a first encryption result, and sending the first encryption result to the second network device) comprises:

[0163] 0131: splicing the first random number and the second random number randomly generated by the first network device to obtain a first splicing body;

[0164] 0132: encrypting the first splicing body according to the first quantum key to obtain a first encryption verification message in a first encryption result;

[0165] 0133: performing exclusive or processing on the first random number and the second random number to obtain a first exclusive or body;

[0166] 0134: splicing the quantum key identifier and the first exclusive or body to obtain a second splicing body;

[0167] 0135: performing post-quantum derivation processing on the second splicing body to obtain a first session key;

[0168] 0136: performing post-quantum encryption processing on the second splicing body to obtain a first encryption message in the first encryption result;

[0169] 0137: sending the first encryption result to the second network device.

[0170] In some embodiments, the splicing module is configured to splice a first random number and a second random number randomly generated by the first network device to obtain a first splicing body. The encryption module is configured to encrypt the first splicing body according to the first quantum key to obtain a first encryption verification message in a first encryption result. The processing module is configured to perform exclusive or processing on the first random number and the second random number to obtain a first exclusive or body. The splicing module is further configured to splice the quantum key identifier and the first exclusive or body to obtain a second splicing body. The derivation module is configured to perform post-quantum derivation processing on the second splicing body to obtain a first session key. The encryption module is further configured to perform post-quantum encryption processing on the second splicing body to obtain a first encryption message in the first encryption result. The sending module is further configured to send the first encryption result to the second network device.

[0171] In some embodiments, the processor is further configured to splice a first random number and a second random number randomly generated by the first network device to obtain a first splicing body. And encrypt the first splicing body according to the first quantum key to obtain a first encryption verification message in a first encryption result. And perform exclusive or processing on the first random number and the second random number to obtain a first exclusive or body. The processor is further configured to splice the quantum key identifier and the first exclusive or body to obtain a second splicing body. And perform post-quantum derivation processing on the second splicing body to obtain a first session key. And perform post-quantum encryption processing on the second splicing body to obtain a first encryption message in the first encryption result. And send the first encryption result to the second network device.

[0172] Specifically, the first network device concatenates a first random number and a second random number randomly generated by the first network device to obtain a first concatenated body. Next, the first network device encrypts the first concatenated body using a first quantum key to obtain a first encrypted verification message in the first encrypted result. Then, the first network device XORs the first random number and the second random number to obtain a first XOR vector. Subsequently, the first network device concatenates the quantum key identifier and the first XOR vector to obtain a second concatenated body. The first network device performs post-quantum derivation processing on the second concatenated body to obtain a first session key. It then performs post-quantum encryption processing on the second concatenated body to obtain a first encrypted message in the first encrypted result. Finally, the first encrypted result is sent to the second network device, and the first encrypted result also includes the first network device identifier of the first network device.

[0173] In this way, the first network device obtains the first session key, which can be used to generate subsequent keys with good quantum resistance. It also obtains the first encryption verification message, enabling the second network device to confirm the integrity of the first encryption result. Furthermore, it uses a post-quantum cryptography algorithm to encrypt and protect the data, giving it good quantum resistance during transmission.

[0174] Please refer to Figure 6. In some embodiments, the method further includes:

[0175] 016: Receive the second encryption result sent by the second network device;

[0176] 017: Decrypt the second encryption result to obtain the second decryption result.

[0177] In some implementations, the receiving module is used to receive a second encryption result sent by a second network device. The decryption module is used to decrypt the second encryption result to obtain a second decryption result.

[0178] In some implementations, the processor is further configured to receive a second encryption result sent by a second network device, and to decrypt the second encryption result to obtain a second decryption result.

[0179] Specifically, the first network device receives a second encryption result sent by the second network device. The second encryption result is obtained by the second network device performing post-quantum cryptographic encryption on the first decryption result. The first decryption result is obtained by the second network device decrypting the first encryption result. The first network device then decrypts the second encryption result to obtain a second decryption result, which includes a signature message and a username.

[0180] In this way, the first network device decrypts the signed message, which can be used to ensure that the data from the second network device has not been tampered with.

[0181] Referring to FIG. 7, in some embodiments, the method further comprises:

[0182] 018: obtaining the sixth concatenation according to the signed message;

[0183] 019: performing post-quantum cryptographic signature verification on the signed message to confirm the correctness of the sixth concatenation.

[0184] In some embodiments, the obtaining module is configured to obtain the sixth concatenation according to the signed message. The signature verification module is configured to perform post-quantum cryptographic signature verification on the signed message to confirm the correctness of the sixth concatenation.

[0185] In some embodiments, the processor is further configured to obtain the sixth concatenation according to the signed message, and perform post-quantum cryptographic signature verification on the signed message to confirm the correctness of the sixth concatenation.

[0186] Specifically, the first network device obtains the sixth concatenation according to the signed message. Then, the first network device performs post-quantum cryptographic signature verification on the signed message to confirm the correctness of the sixth concatenation, which is obtained according to the quantum key identifier, the first random number and the second random number.

[0187] In this way, the first network device confirms the correctness of the sixth concatenation by performing signature verification on the signed message, ensuring that the second network device data received by the first network device has not been accessed by unauthorized access.

[0188] Referring to FIG. 8, in some embodiments, the method further comprises:

[0189] 020: performing XOR operation on the first session key, the first random number, the second random number and the first quantum key to obtain the first quantum-resistant session key;

[0190] 021: performing derivation processing on the first quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0191] In some embodiments, the generating module is configured to perform XOR operation on the first session key, the first random number, the second random number and the first quantum key to obtain the first quantum-resistant session key. The derivation module is configured to perform derivation processing on the first quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0192] In some embodiments, the processor is further configured to perform XOR operation on the first session key, the first random number, the second random number and the first quantum key to obtain the first quantum-resistant session key. And perform derivation processing on the first quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0193] Specifically, the first network device performs XOR processing on the first session key, the first random number, the second random number, and the first quantum key to obtain a first quantum-resistant session key. Then, the first network device performs derivation processing on the first quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0194] In this way, the first network device obtains the first quantum-resistant session key, which has good quantum computing attack resistance, and the communication data between the first network device and the second network device is protected by using the first quantum-resistant session key or a derived key thereof, which greatly enhances the security of the communication data.

[0195] Referring to FIG. 9, in some embodiments, the method further includes:

[0196] 022: receiving a second encrypted authentication message sent by the second network device;

[0197] 023: performing splicing processing on the first network device identifier and the first random number to obtain a third splicing body;

[0198] 024: performing encryption processing on the third splicing body according to the first quantum-resistant session key to obtain a first encrypted authentication message;

[0199] 025: comparing the first encrypted authentication message with the second encrypted authentication message to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0200] In some embodiments, the receiving module is configured to receive a second encrypted authentication message sent by the second network device. The splicing module is configured to perform splicing processing on the first network device identifier and the first random number to obtain a third splicing body. The encryption module is configured to perform encryption processing on the third splicing body according to the first quantum-resistant session key to obtain a first encrypted authentication message. The comparison module is configured to compare the first encrypted authentication message with the second encrypted authentication message to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0201] In some embodiments, the processor is further configured to receive a second encrypted authentication message sent by the second network device. The processor is further configured to perform splicing processing on the first network device identifier and the first random number to obtain a third splicing body. The processor is further configured to perform encryption processing on the third splicing body according to the first quantum-resistant session key to obtain a first encrypted authentication message. The processor is further configured to compare the first encrypted authentication message with the second encrypted authentication message to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0202] Specifically, the first network device receives the second encrypted authentication message sent by the second network device. Then, the first network device concatenates the first network device identifier and the first random number to obtain a third concatenation. Then, the first network device encrypts the third concatenation according to the first quantum-resistant session key to obtain the first encrypted authentication message. Finally, the first network device compares the first encrypted authentication message with the second encrypted authentication message to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0203] In this way, the first network device receives the second encrypted authentication message. And the first network device generates the first encrypted authentication message according to the same data information as that for generating the second encrypted authentication message. By comparing whether the first encrypted authentication message and the second encrypted authentication message are consistent, the consistency of the first session key generated by the first network device and the second encrypted authentication message generated by the second network device is determined to confirm that the second quantum-resistant session key generated by the second network device is consistent with the first quantum-resistant session key.

[0204] Referring to FIG. 10, in some embodiments, the method further includes:

[0205] 026: concatenating the username and the second random number to obtain a fourth concatenation;

[0206] 027: encrypting the fourth concatenation according to the first quantum-resistant session key to obtain the first encrypted authentication message;

[0207] 028: sending the encrypted authentication message to the second network device to enable the second network device to confirm that the first quantum-resistant session key is consistent with the second quantum-resistant session key generated by the second network device.

[0208] In some embodiments, the concatenating module is configured to concatenate the username and the second random number to obtain a fourth concatenation. The encrypting module is configured to encrypt the fourth concatenation according to the first quantum-resistant session key to obtain the first encrypted authentication message. The sending module is configured to send the first encrypted authentication message to the second network device to enable the second network device to confirm that the first quantum-resistant session key is consistent with the second quantum-resistant session key generated by the second network device.

[0209] In some embodiments, the processor is further configured to concatenate the username and the second random number to obtain a fourth concatenation, and encrypt the fourth concatenation according to the first quantum-resistant session key to obtain the first encrypted authentication message, and send the first encrypted authentication message to the second network device to enable the second network device to confirm that the first quantum-resistant session key is consistent with the second quantum-resistant session key generated by the second network device.

[0210] Referring to FIG. 11, the anti-quantum security enhancement method of the simple authentication and security layer protocol of the communication network according to the embodiment of the application includes a first network device and a second network device, the method is used for the second network device, and the method includes the following steps.

[0211] 031: sending a start message to the first network device;

[0212] 032: receiving a first encryption result of post-quantum cryptographic encryption processing of a quantum key identifier according to the start message sent by the first network device, to encrypt the communication between the first network device and the second network device based on the first encryption result.

[0213] The embodiment of the application further provides a second network device, including a memory and a processor. The method of the embodiment of the application can be implemented by the second network device of the embodiment of the application. Specifically, the memory stores a computer program, and the processor is configured to send a start message to the first network device, and receive a first encryption result of post-quantum cryptographic encryption processing of a quantum key identifier according to the start message sent by the first network device, to encrypt the communication between the first network device and the second network device based on the first encryption result, wherein the quantum key identifier is obtained by the first network device from an accessed first network node.

[0214] The embodiment of the application further provides a second network device security enhancement device. The method of the embodiment of the application can be implemented by the second network device security enhancement device of the embodiment of the application. Specifically, the second network device security enhancement device includes a sending module and a receiving module. The sending module is configured to send a start message to the first network device. The receiving module is further configured to receive a first encryption result of post-quantum cryptographic encryption processing of a quantum key identifier according to the start message sent by the first network device, to encrypt the communication between the first network device and the second network device based on the first encryption result.

[0215] The application provides a communication system based on the simple authentication and security layer protocol, and the communication system includes the second network device, the first network device and the quantum key distribution network of the above-mentioned embodiment. The quantum key distribution network is configured to distribute a quantum key to the first network device or the second network device.

[0216] Specifically, the anti-quantum security enhancement method of the embodiment is basically the same as the anti-quantum security enhancement method of the first network device as the execution object of the above-mentioned embodiment, and specific reference can be made to the explanation and description of the corresponding part. The difference is that the second network device is the execution object of the embodiment, which will not be described here.

[0217] In summary, in the communication network simple authentication and security layer protocol anti-quantum security enhancement method, the communication system, the first network device and the second network device, for the communication process of the first network device and the second network device, the first network device receives the start message sent by the second network device. Subsequently, the first network device and the second network device apply for obtaining a quantum key identifier. The first network device encrypts the quantum key identifier according to the start message and a post-quantum cryptographic algorithm to generate a first encryption result capable of resisting quantum computing attacks, and the post-quantum cryptographic algorithm is a series of encryption algorithms designed to resist quantum computing attacks. And the first network device sends the first encryption result to the second network device to encrypt the communication between the first network device and the second network device based on the first encryption result. In this way, the anti-quantum computing attack capability of the network communication between the first network device and the second network device is enhanced through the post-quantum cryptographic algorithm and the quantum key distribution technology.

[0218] Referring to FIG. 12, in some embodiments, the method further comprises:

[0219] 033: obtaining, from the certificate system, a signature certificate and an encryption certificate of the second network device.

[0220] In some embodiments, the obtaining module is further configured to obtain, from the certificate system, a signature certificate and an encryption certificate of the second network device.

[0221] In some embodiments, the processor is further configured to obtain, from the certificate system, a signature certificate and an encryption certificate of the second network device.

[0222] Specifically, the second network device obtains a signature certificate and an encryption certificate of the second network device itself from the certificate system.

[0223] In this way, the second network device obtains a signature certificate of itself, which is used to prove the identity of itself and allows the second network device to digitally sign the data sent to ensure the authenticity and integrity of the data. The second network device also obtains an encryption certificate of itself, which allows the first network device to encrypt the data using the public key in the encryption certificate, and then the second network device uses the private key corresponding to the encryption certificate to decrypt the encrypted data, thereby enhancing the confidentiality of the data between the first network device and the second network device.

[0224] Referring to FIG. 13, in some embodiments, the method further comprises:

[0225] 035: decrypting the first encryption result to obtain a first decryption result;

[0226] 036: generating a second quantum-resistant session key according to the first decryption result and the second quantum key, to encrypt the communication between the first network device and the second network device;

[0227] 037: performing post-quantum encryption processing on the first decryption result according to the second quantum-resistant session key to generate a second encryption result, to make the first network device confirm that the second network device receives the correct first encryption result.

[0228] In some embodiments, the decryption module is further configured to perform decryption processing on the first encryption result to obtain a first decryption result. The processing module is further configured to generate a second quantum-resistant session key according to the first decryption result and the second quantum key, to encrypt the communication between the first network device and the second network device. The encryption module is configured to perform post-quantum encryption processing on the first decryption result according to the second quantum-resistant session key to generate a second encryption result, to make the first network device confirm that the second network device receives the correct first encryption result.

[0229] In some embodiments, the processor is further configured to perform decryption processing on the first encryption result to obtain a first decryption result. And generate a second quantum-resistant session key according to the first decryption result and the second quantum key, to encrypt the communication between the first network device and the second network device. And perform post-quantum encryption processing on the first decryption result according to the second quantum-resistant session key to generate a second encryption result, to make the first network device confirm that the second network device receives the correct first encryption result.

[0230] Specifically, the second network device performs decryption processing on the first encryption result to obtain a first decryption result. Then, the second network device generates a second quantum-resistant session key according to the first decryption result and the second quantum key, to encrypt the communication between the first network device and the second network device, and the second quantum key is obtained from a second network node of the second network device according to the first decryption result. Then, the second network device performs post-quantum encryption processing on the first decryption result according to the second quantum-resistant session key to generate a second encryption result, to make the first network device confirm that the second network device receives the correct first encryption result.

[0231] In this way, the second network device obtains the first decryption result by processing the received first encryption result, and generates the second quantum-resistant session key by deriving the first decryption result and the second quantum key applied for, the second quantum-resistant session key has good quantum resistance and can be used to protect the communication between the first network device and the second network device. And by encrypting the first decryption result to obtain the second encryption result, to make the first network device confirm that the second network device receives the correct first encryption result.

[0232] Referring to FIG. 14, in some embodiments, the step 035 (decrypting the first encryption result to obtain a first decryption result) comprises:

[0233] 0351: decrypting the first encryption result to obtain the first network device identifier of the first network device, the first encryption verification message, and the first encryption message;

[0234] 0352: performing post-quantum decryption processing on the first encryption message to obtain a second splicing body;

[0235] 0353: obtaining a quantum key identifier and a first XOR body according to the second splicing body;

[0236] 0354: obtaining a first random number randomly generated by the first network device according to the first XOR body and a second random number randomly generated by the second network device;

[0237] 0355: performing post-quantum derivation processing on the second splicing body to obtain a second session key.

[0238] In some embodiments, the decryption module is configured to decrypt the first encryption result to obtain the first network device identifier of the first network device, the first encryption verification message, and the first encryption message. The decryption module is further configured to perform post-quantum decryption processing on the first encryption message to obtain a second splicing body. The processing module is configured to obtain a quantum key identifier and a first XOR body according to the second splicing body. The processing module is further configured to obtain a first random number randomly generated by the first network device according to the first XOR body and a second random number randomly generated by the second network device. The derivation module is configured to perform post-quantum derivation processing on the second splicing body to obtain a second session key.

[0239] In some embodiments, the processor is further configured to decrypt the first encryption result to obtain the first network device identifier of the first network device, the first encryption verification message, and the first encryption message. The processor is further configured to perform post-quantum decryption processing on the first encryption message to obtain a second splicing body. The processor is further configured to obtain a quantum key identifier and a first XOR body according to the second splicing body. The processor is further configured to obtain a first random number randomly generated by the first network device according to the first XOR body and a second random number randomly generated by the second network device. The processor is further configured to perform post-quantum derivation processing on the second splicing body to obtain a second session key.

[0240] In particular, the second network device decrypts the first encrypted result to obtain the first network device identifier of the first network device, the first encrypted verification message, and the first encrypted message. Next, the second network device performs post-quantum decryption processing on the first encrypted message to obtain a second splicing body. Then, the second network device obtains the quantum key identifier and a first XOR body according to the second splicing body. And obtains the first random number generated by the first network device according to the first XOR body and the second random number generated by the second network device. Finally, the second network device performs post-quantum derivation processing on the second splicing body to obtain a second session key.

[0241] In this way, the second network device obtains various data for generating the first session key, and generates the second session key according to the data, which is used to generate a key with good quantum resistance.

[0242] Referring to FIG. 15, in some embodiments, the method further includes:

[0243] 038: using the service node to charge the cryptographic module of the second network device with a plurality of keys;

[0244] 039: sending a quantum key application to the service node according to the quantum key identifier;

[0245] 040: receiving a quantum key encryption result obtained by the service node by encrypting the second quantum key according to the protection key;

[0246] 041: decrypting the quantum key encryption result to obtain the second quantum key.

[0247] In some embodiments, the charging module is further configured to charge the cryptographic module of the second network device with a plurality of keys using the service node. The sending module is configured to send a quantum key application to the service node according to the quantum key identifier. The receiving module is configured to receive a quantum key encryption result obtained by the service node by encrypting the second quantum key according to the protection key. The decryption module is configured to decrypt the quantum key encryption result to obtain the second quantum key.

[0248] In some embodiments, the processor is further configured to charge the cryptographic module of the second network device with a plurality of keys using the service node, and send a quantum key application to the service node according to the quantum key identifier. The processor is further configured to receive a quantum key encryption result obtained by the service node by encrypting the second quantum key according to the protection key, and decrypt the quantum key encryption result to obtain the second quantum key.

[0249] Specifically, the second network device uses the service node to charge a plurality of keys to a password module of the second network device. Then, the second network device sends a quantum key application to the service node according to a quantum key identifier, the quantum key application is protected by a protection key, and the protection key is one of the plurality of keys charged to the password module. Then, the second network device receives a quantum key encryption result obtained by the service node performing encryption processing on a second quantum key according to the protection key, the second quantum key is generated by a second network node accessing the service node and distributed to the service node. Finally, the second network device performs decryption processing on the quantum key encryption result to obtain the second quantum key.

[0250] In this way, the second network device obtains the second quantum key matched with the first quantum key through the quantum key identifier to the second network node, which can be used for subsequent generation of a key with good quantum resistance.

[0251] Referring to FIG. 16, in some embodiments, the method further includes:

[0252] 042: performing splicing processing on the first random number and the second random number to obtain a fifth splicing body;

[0253] 043: performing encryption processing on the fifth splicing body according to the second quantum key to obtain a second encrypted verification message;

[0254] 044: comparing the second encrypted verification message and the first encrypted verification message to confirm that the second network device receives the correct quantum key identifier and the first random number.

[0255] In some embodiments, the splicing module is configured to perform splicing processing on the first random number and the second random number to obtain a fifth splicing body. The encryption module is further configured to perform encryption processing on the fifth splicing body according to the second quantum key to obtain a second encrypted verification message. The comparison module is further configured to compare the second encrypted verification message and the first encrypted verification message to confirm that the second network device receives the correct quantum key identifier and the first random number.

[0256] In some embodiments, the processor is further configured to perform splicing processing on the first random number and the second random number to obtain a fifth splicing body. Perform encryption processing on the fifth splicing body according to the second quantum key to obtain a second encrypted verification message. And compare the second encrypted verification message and the first encrypted verification message to confirm that the second network device receives the correct quantum key identifier and the first random number.

[0257] Specifically, the second network device performs splicing processing on the first random number and the second random number to obtain a fifth splicing body. Then, the second network device performs encryption processing on the fifth splicing body according to the second quantum key to obtain a second encrypted verification message. And the second network device compares the second encrypted verification message with the first encrypted verification message to confirm that the second network device receives the correct quantum key identifier and the first random number.

[0258] In this way, the second network device generates the second encrypted verification message by using the same data information as that used by the first network device to generate the first encrypted verification message, and compares the second encrypted verification message with the first encrypted verification message. It is confirmed that the second network device receives the correct quantum key identifier and the first random number, and it is ensured that the second network device can obtain the correct second quantum key and generate the correct second session key according to the information.

[0259] Referring to FIG. 17, in some embodiments, the step 036 (generating a second quantum-resistant session key according to the first decryption result and the second quantum key to encrypt the communication between the first network device and the second network device) includes:

[0260] 0361: performing exclusive-OR processing on the second session key, the first random number, the second random number, and the second quantum key to generate a second quantum-resistant session key;

[0261] 0362: performing derivation processing on the second quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0262] In some embodiments, the derivation module is configured to perform exclusive-OR processing on the second session key, the first random number, the second random number, and the second quantum key to generate a second quantum-resistant session key. The derivation module is also configured to perform derivation processing on the second quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0263] In some embodiments, the processor is further configured to perform exclusive-OR processing on the second session key, the first random number, the second random number, and the second quantum key to generate a second quantum-resistant session key. The processor is also configured to perform derivation processing on the second quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0264] Specifically, the second network device performs exclusive-OR processing on the second session key, the first random number, the second random number, and the second quantum key to generate a second quantum-resistant session key. Then, the second network device performs derivation processing on the second quantum-resistant session key to encrypt the communication between the first network device and the second network device.

[0265] In this way, the second network device generates a second quantum-resistant session key, which can be used to enhance the ability of the communication data between the first network device and the second network device to resist quantum computing attacks.

[0266] Referring to FIG. 18, in some embodiments, step 037 (generating a second encrypted result by performing post-quantum encryption processing on the first decryption result according to the second quantum-resistant session key, so as to enable the first network device to confirm that the second network device receives the correct first encrypted result) comprises:

[0267] 0371: performing XOR processing on the second quantum key and the first random number to obtain a second XOR body;

[0268] 0372: performing splicing processing on the second XOR body and the second random number to obtain a sixth splicing body;

[0269] 0373: performing post-quantum signature processing on the sixth splicing body to obtain a signature message in the second encrypted result;

[0270] 0374: sending the second encrypted result to the first network device, wherein the second encrypted result comprises the username.

[0271] In some embodiments, the processing module is configured to perform XOR processing on the second quantum key and the first random number to obtain a second XOR body. The splicing module is further configured to perform splicing processing on the second XOR body and the second random number to obtain a sixth splicing body. The signature module is further configured to perform post-quantum signature processing on the sixth splicing body to obtain a signature message in the second encrypted result. The sending module is further configured to send the second encrypted result to the first network device.

[0272] In some embodiments, the processor is further configured to perform XOR processing on the second quantum key and the first random number to obtain a second XOR body. And perform splicing processing on the second XOR body and the second random number to obtain a sixth splicing body. The processor is further configured to perform post-quantum signature processing on the sixth splicing body to obtain a signature message in the second encrypted result. And send the second encrypted result to the first network device.

[0273] Referring to FIG. 19, in some embodiments, the method further comprises:

[0274] 045: performing splicing processing on the first random number and the first network device identifier of the first network device to obtain a seventh splicing body;

[0275] 046: performing encryption processing on the seventh splicing body according to the second quantum-resistant session key to obtain a second encrypted verification message in the second encrypted result;

[0276] 047: sending the second encrypted verification message to the first network device, so as to enable the first network device to confirm that the second quantum-resistant session key is consistent with the first quantum-resistant session key generated by the first network device.

[0277] In some embodiments, the splicing module is configured to splice the first random number and the first network device identifier of the first network device to obtain a seventh splicing body. The encryption module is further configured to encrypt the seventh splicing body according to the second anti-quantum session key to obtain a second encrypted authentication message in the second encryption result. The sending module is further configured to send the second encrypted authentication message to the first network device, so that the first network device confirms that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device.

[0278] In some embodiments, the processor is further configured to splice the first random number and the first network device identifier of the first network device to obtain a seventh splicing body, and encrypt the seventh splicing body according to the second anti-quantum session key to obtain a second encrypted authentication message in the second encryption result, and send the second encrypted authentication message to the first network device, so that the first network device confirms that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device.

[0279] Specifically, the second network device splices the first random number and the first network device identifier of the first network device to obtain a seventh splicing body. Then, the second network device encrypts the seventh splicing body according to the second anti-quantum session key to obtain a second encrypted authentication message in the second encryption result. Finally, the second network device sends the second encrypted authentication message to the first network device, so that the first network device confirms that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device.

[0280] In this way, the second network device generates the second encrypted authentication message to make the first network device confirm that the second anti-quantum session key is consistent with the first anti-quantum session key generated by the first network device, so that the first network device can communicate with the second network device using the consistent key.

[0281] Referring to FIG. 20, in some embodiments, the method further includes:

[0282] 048: receiving the first encrypted authentication message sent by the first network device;

[0283] 049: splicing the username and the second random number to obtain an eighth splicing body;

[0284] 050: encrypting the eighth splicing body according to the second anti-quantum session key to obtain a second encrypted authentication message;

[0285] 051: comparing the first encrypted authentication message with the second encrypted authentication message to confirm that the first anti-quantum session key generated by the first network device is consistent with the second anti-quantum session key.

[0286] In some embodiments, the receiving module is configured to receive the first encrypted authentication message sent by the first network device. The splicing module is further configured to splice the username and the second random number to obtain an eighth splicing body. The encryption module is further configured to encrypt the eighth splicing body according to the second quantum-resistant session key to obtain the second encrypted authentication message. The comparison module is further configured to compare the first encrypted authentication message with the second encrypted authentication message to confirm that the first quantum-resistant session key generated by the first network device is consistent with the second quantum-resistant session key.

[0287] In some embodiments, the processor is further configured to receive the first encrypted authentication message sent by the first network device, splice the username and the second random number to obtain an eighth splicing body, encrypt the eighth splicing body according to the second quantum-resistant session key to obtain the second encrypted authentication message, and compare the first encrypted authentication message with the second encrypted authentication message to confirm that the first quantum-resistant session key generated by the first network device is consistent with the second quantum-resistant session key.

[0288] Specifically, the second network device receives the first encrypted authentication message sent by the first network device. Then, the second network device splices the username and the second random number to obtain an eighth splicing body. Then, the second network device encrypts the eighth splicing body according to the second quantum-resistant session key to obtain the second encrypted authentication message. Finally, the second network device compares the first encrypted authentication message with the second encrypted authentication message to confirm that the first quantum-resistant session key generated by the first network device is consistent with the second quantum-resistant session key.

[0289] In this way, the second network device receives the first encrypted authentication message sent by the first network device, generates the second encrypted authentication message according to the relevant information, compares the first encrypted authentication message with the second encrypted authentication message, confirms that the first quantum-resistant session key generated by the first network device is consistent with the second quantum-resistant session key, and can use the consistent key to communicate with the first network device.

[0290] The method of the embodiments of the present application is described below with an example. In the embodiments of the present application, the first network device is a server, a server of the SASL protocol, which performs identity authentication on a client through a SASL authentication mechanism, obtains a key between the client, and protects the integrity and confidentiality of user data of various applications using the SASL protocol. The second network device is a client, a client of the SASL protocol, which performs identity authentication on the server through the SASL authentication mechanism, obtains a key between the server, and protects the integrity and confidentiality of user data of various applications using the SASL protocol.

[0291] The quantum network node is a network node that stores and provides generated quantum keys to the server through a trusted channel or to the client through a cryptographic service node. The cryptographic service node is a service node that connects the quantum network node and provides pre-shared key refilling and quantum key services for multiple clients. The certificate system is a framework that provides a method for securely generating, distributing, managing, and using digital certificates.

[0292] The start message is a client_first_message, the first encryption result is SASL_QKD_PQC, and the second encryption result is SASL_QKD_PQC. The first encryption verification message is hmac1-1, and the second encryption verification message is hmac1-2. The first encryption verification message is hmac2-1, and the second encryption verification message is hmac2-2. The first encryption authentication message is hmac3-1, and the second encryption authentication message is hmac3-2. The first network device identifier is the server identifier name serverID.

[0293] Referring to FIG. 21, first, the certificate system issues the PQC signature certificate and the PQC encryption certificate of the client. Then, the server accesses the first quantum network node closest in physical distance and authorized to complete through a trusted channel, which refers to a mechanism or protocol that provides a secure communication path between two communication entities. One way to establish is to connect the authentication server and the second quantum network node directly in the same cabinet and shield the network cable. This channel ensures the confidentiality, integrity, and availability of data during transmission, preventing unauthorized access, tampering, or eavesdropping. The server also obtains the PQC signature certificate or PQC signature public key of the client authorized to access the server through offline or online methods such as Lightweight Directory Access Protocol (LDAP) download. Both the PQC signature certificate and the PQC signature public key can be used to verify the signature message from the client, ensuring that the data from the client has not been tampered with. The PQC encryption certificate and PQC encryption public key can be used to encrypt data sent by the server to the client. Lightweight Directory Access Protocol is a network protocol used to access and maintain distributed directory information.

[0294] The client uses the password service node to pre-share the key of the personal password module of the resource owner in the client, and the total amount of pre-sharing is 1M bits of 128-bit keys, and the personal password module includes but is not limited to a smart password key (HSM) and a virtual security module (VSM). Then, the client sends a start message client_first_message to the server, which includes the protocol name SASL_QKD_PQC, the username username, and the second random number R2 generated by the client, as follows:

[0295] a=SASL_QKD_PQC, n=username, r=R2;

[0296] After receiving the start message client_first_message sent by the client, the server sends a quantum key application to the first quantum network node connected to the server through a trusted channel. After the first quantum network node receives the quantum key application, the first quantum network node distributes the first quantum key QK_UUID-1 (128 bits or more) and the quantum key identifier UUID_QK to the server. At the same time, the first quantum network node also synchronizes a second quantum key QK_UUID-2 with the second quantum network node connected to the password service node of the client through the quantum key distribution network, but does not issue it.

[0297] After obtaining the first quantum key QK_UUID-1, the server randomly generates a first random number R1 of 128 bits. The first random number R1 and the second random number R2 are spliced to obtain a first splicing body P1, i.e. R1|R2. The server uses the first quantum key QK_UUID-1 and the SM3 algorithm to calculate the first encrypted verification message hmac1-1 of the first splicing body, hmac1-1=SM3_HMAC(R1|R2,QK_UUID-1). Then, the server performs exclusive or processing on the first random number R1 and the second random number R2 to obtain a first exclusive or body The quantum key identifier UUID_QK and the first exclusive or body are spliced to obtain a second splicing body P2, i.e. Then, the server uses the second splicing body P2 as the encrypted message in the PQC key encapsulation algorithm, and runs the G function of the PQC algorithm on the second splicing body P2 to obtain a first session key H1. Then, the second splicing body P2 is encrypted and encapsulated by the PQC encryption public key of the client to obtain a first encrypted message encap. Finally, the server sends a server_first_message to the client, which includes the protocol name SASL_QKD_PQC, the server identifier serverID, the first encrypted verification message hmac1-1, and the first encrypted message encap, as follows:

[0298] a = "SASL_QKD_PQC", n = serverID, h = hmac1-1, k = encap;

[0299] The client performs PQC key decapsulation on the encap in the received server_first_message message to obtain a second splicing body P2. Then, according to the second splicing body P2, the quantum key identifier UUID_QK and the first XOR body XOR1 can be obtained. Next, the client performs XOR processing on the second random number R2 and the first XOR body XOR1 to obtain the first random number R1. Then, the client performs G function of the PQC algorithm on the obtained second splicing body P2 to obtain the second session key H2.

[0300] After obtaining the quantum key identifier UUID_QK, the client sends a quantum key application to the second quantum network node accessed by the client according to the quantum key identifier UUID_QK. The client randomly uses a key in the smart password key as a protection key. The client performs hash operation (HMAC) on the key ID and the application content by using the SM3 algorithm and the protection key. Then, the password service node also performs hash operation on the key ID and the application content by using the SM3 algorithm and the protection key to verify the integrity and authenticity of the data. HMAC is a method of providing data integrity and source authentication by using a hash function and a key. After the quantum key application is confirmed to be successful, the client receives the quantum key encryption result obtained by the password service node by performing encryption processing on the second quantum key QK_UUID-2 according to the protection key. The second quantum key QK_UUID-2 is generated by the second quantum network node accessed by the password service node and distributed to the password service node. The client then performs decryption processing on the quantum key encryption result according to the protection key to obtain the second quantum key QK_UUID-2.

[0301] ​After obtaining the second quantum key QK_UUID-2, the client performs concatenation processing on the first random number R1 and the second random number R2 to obtain a fifth concatenation P5. Then, the fifth concatenation P5 is encrypted according to the second quantum key QK_UUID-2 to obtain a second encrypted verification message hmac1-2, hmac2-2 = SM3_HMAC(R1|R2s, QK_UUID-2). Subsequently, the client compares the received first encrypted verification message hmac1-1 with the second encrypted verification message hmac1-2 generated by the client itself, and confirms that the client receives the correct quantum key identifier UUID_QK and the first random number R1. Then, the client performs XOR processing on the second session key H2, the first random number R1, the second random number R2 and the second quantum key QK_UUID-2 to obtain a second quantum-resistant session key K2,

[0302] After generating the first quantum-resistant session key K2, the client performs XOR processing on the second quantum key QK_UUID-2 and the first random number R1 to obtain a second XOR Then, the second XOR and the second random number R2 are concatenated to obtain a sixth concatenation P6, that is, and the sixth concatenation P6 is used as M in the PQC signature algorithm to obtain signature information sign by PQC signature protection. In addition, the client performs concatenation processing on the first random number R1 and the server identifier serverID to obtain a seventh concatenation P7, that is, R1|serverID. Then, the server uses the second quantum-resistant session key K2 and the SM3 encryption algorithm to calculate the seventh concatenation P7 to obtain a second encrypted verification message hmac2-2, hmac2-2 = SM3_HMAC(R1|serverID, K2). The client sends a client_final_message to the server, which includes a protocol name SASL_QKD_PQC, a username username, signature information sign, and a second encrypted verification message hmac2-2, as follows:

[0303] a = "SASL_QKD_PQC", n = username, v = sign, h = hmac2-2;

[0304] After receiving the client_final_message message, the server performs PQC signature verification on the received signature information sign in the client_final_message according to the PQC signature public key of the client to confirm that the client has received the correct first random number R1, second random number R2, and quantum key identifier UUID_QK. The first session key H1, the first random number R1, the second random number R2, and the first quantum key QK_UUID-1 are subjected to XOR processing to obtain the first quantum-resistant session key K1, In addition, the server also performs splicing processing on the server identifier serverID and the first random number R1 to obtain a third splicing body P3, that is, R1|serverID. Then, the third splicing body P3 is subjected to encryption processing according to the first quantum-resistant session key K1 to obtain the first encrypted authentication message hmac2-1, hmac2-1 = SM3_HMAC(R1|serverID, K1). Subsequently, the server compares the first encrypted authentication message hmac2-1 with the second encrypted authentication message hmac2-2 received in the client_final_message message to confirm that the second quantum-resistant session key K2 generated by the client is consistent with the first quantum-resistant session key K1.

[0305] The server performs splicing processing on the username username and the second random number R2 to obtain a fourth splicing body P4, that is, R2|username. Then, the fourth splicing body P4 is subjected to encryption processing according to the first quantum-resistant session key K1 to obtain the first encrypted authentication message hmac3-1. The server sends the server_final_message message, which includes the protocol name SASL_QKD_PQC, the server identifier serverID, and the first encrypted authentication message hmac3-1, as follows:

[0306] a = "SASL_QKD_PQC", n = serverID, h = hmac3-1;

[0307] After receiving the server_final_message message, the client performs splicing processing on the username username and the second random number R2 to obtain an eighth splicing body P8, that is, R2|username. Then, the eighth splicing body P8 is subjected to encryption processing according to the second quantum-resistant session key K2 to obtain the second encrypted authentication message hmac3-2, hmac3-2 = SM3_HMAC(R2|username, K2). Subsequently, the client compares the first encrypted authentication message hmac3-1 with the second encrypted authentication message hmac3-2 to confirm that the first quantum-resistant session key K1 generated by the server is consistent with the second quantum-resistant session key K2.

[0308] In case that the first anti-quantum session key K1 generated by the server and the second anti-quantum session key K2 generated by the client are consistent, the client and the server perform key derivation according to the requirements of the SASL application layer and the security layer based on the obtained first anti-quantum session key K1 and second anti-quantum session key K2, obtain corresponding data encryption key and integrity protection key, and perform security protection on the transmission of the application layer user data.

[0309] The various component embodiments of the present application can be implemented in hardware, or as software modules running on one or more processors, or in combinations thereof. Those skilled in the art will appreciate that a microprocessor or a digital signal processor (DSP) can be used in practice to implement some or all of the functions of some or all of the components of the computing processing device according to the embodiments of the present application. The present application can also be implemented as a device or apparatus program (e.g., a computer program and a computer program product) for performing part or all of the methods described herein. Such a program implementing the present application can be stored on a computer readable medium, or can be in the form of one or more signals. Such signals can be downloaded from an Internet website, or provided on a carrier medium, or in any other form.

[0310] For example, Fig. 22 shows a computing processing device which can implement the methods according to the present application. The computing processing device conventionally comprises a processor 1010 and a computer program product or a computer readable medium in the form of a memory 1020. The memory 1020 can be an electronic memory such as a flash memory, an EEPROM (electrically erasable programmable read-only memory), an EPROM, a hard disk, or a ROM. The memory 1020 has a storage space 1030 for program code 1031 for performing any of the method steps in the methods described above. For example, the storage space 1030 for program code can comprise individual program codes 1031 for implementing the various steps in the methods described above, respectively. These program codes can be read from or written to one or more computer program products. These computer program products include program code carriers such as hard disks, compact disks (CDs), memory cards, or floppy disks. Such computer program products are typically portable or stationary memory units as described with reference to Fig. 23. The memory unit can have a storage section, a storage space, etc. arranged similarly to the memory 1020 in the computing processing device of Fig. 22. The program code can be compressed, for example, in a suitable form. Typically, the memory unit comprises computer readable code 1031', i.e. code which can be read by a processor such as 1010, which, when run by the computing processing device, causes the computing processing device to perform the various steps in the methods described above.

[0311] It can be understood that the computer program includes computer program code. The computer program code can be in the form of source code, object code, executable files, or some intermediate forms, etc. The computer readable storage medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution medium, etc.

[0312] In the description of the present specification, the description referring to the terms "specifically", "further", "particularly", "understandably", etc. means that the specific features, structures, materials or characteristics described in connection with the embodiments or examples are included in at least one embodiment or example of the present application. In the present specification, the illustrative description of the above terms does not intend to refer to the same embodiment or example. Also, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, the person skilled in the art can combine and combine the different embodiments or examples described in the present specification and the features of the different embodiments or examples without contradiction.

[0313] Any process or method descriptions in flow charts or described herein can be understood as representing code modules, segments, or portions of code that include one or more executable instructions for performing specific logic functions or steps in the process. The scope of preferred embodiments of the present application encompasses the additional implementation in which the functions can be performed in different order, in substantially simultaneous manner or in reverse order, according to the involved functions, which should be understood by those skilled in the art of the embodiments of the present application.

[0314] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application, and those skilled in the art can make changes, modifications, replacements and variations to the above embodiments within the scope of the present application

[0315] Thus, by signing the ticket authorization ticket TGT, the correctness of the ticket authorization ticket TGT is confirmed, and the subsequent service ticket ST-2 is generated and distributed, the identity of the user terminal is confirmed, and the security of the resources in the authentication server is ensured.

[0316] It can be understood that the computer program includes computer program code. The computer program code can be in the form of source code, object code, executable files, or some intermediate forms, etc. The computer readable storage medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution medium, etc.

[0317] In the description of the present specification, the description referring to the terms "specifically", "further", "particularly", "it can be understood that", etc. means that the specific features, structures, materials or characteristics described in connection with the embodiments or examples are included in at least one embodiment or example of the present application. In the present specification, the illustrative description of the above terms does not intend to refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, the person skilled in the art can combine and combine the different embodiments or examples described in the present specification and the features of the different embodiments or examples without contradiction.

[0318] Any process or method descriptions or descriptions in flow charts or otherwise described herein can be understood as representing code modules, segments, or portions of code which include one or more executable instructions for performing specific logic functions or steps in the process, and the preferred embodiments of the application include additional implementations in which the order of steps can be changed, additional steps can be added, some steps can be eliminated, or some steps can be performed at least partially in parallel with other steps, all without departing from the scope of the application.

[0319] Although the embodiments of the present application have been shown and described above, it can be understood that the above-described embodiments are exemplary and cannot be construed as limiting the present application, and the person skilled in the art can make changes, modifications, replacements and variations to the above-described embodiments within the scope of the present application.

Claims

1. A method of quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network, wherein, The communication network comprises a first network device and a second network device, the method is used for the first network device, and the method comprises the following steps: receiving a start message sent by the second network device; obtaining a quantum key identifier from a first network node accessed to the first network device; performing post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and sending the first encryption result to the second network device, so as to encrypt the communication between the first network device and the second network device based on the first encryption result.

2. The method of quantum-resistant enhancement in resistance according to claim 1, wherein, The method further comprises the following steps: loading a signature certificate and an encryption certificate of the second network device.

3. The method of quantum-resistant enhancement in resistance according to claim 1, wherein, The start message comprises a username and a second random number randomly generated by the second network device.

4. The method of quantum-resistant enhancement in resistance according to claim 1, wherein, The step of obtaining a quantum key identifier from a first network node accessed to the first network device comprises the following steps: sending a quantum key application to the first network node accessed to the first network device; receiving a first quantum key and a quantum key identifier sent by the first network node according to the quantum key application, wherein the quantum key identifier is obtained by identifying the first quantum key according to an identification code of the first network node.

5. The method of quantum-resistant enhancement of claim 4, wherein, The start message comprises a username and a second random number, and the step of performing post-quantum cryptographic encryption processing on the quantum key identifier according to the start message to obtain a first encryption result, and sending the first encryption result to the second network device comprises the following steps: splicing a first random number randomly generated by the first network device and the second random number to obtain a first splicing body; performing encryption processing on the first splicing body according to the first quantum key to obtain a first encryption verification message in the first encryption result; performing XOR processing on the first random number and the second random number to obtain a first XOR body; performing splicing processing on the quantum key identifier and the first XOR body to obtain a second splicing body; performing post-quantum derivation processing on the second splicing body to obtain a first session key; performing post-quantum encryption processing on the second splicing body to obtain a first encryption message in the first encryption result; sending the first encryption result to the second network device, wherein the first encryption result further comprises a first network device identifier of the first network device.

6. The method of quantum-resistant enhancement of claim 1, wherein, The method further comprises the following steps: receiving a second encryption result sent by the second network device, wherein the second encryption result is obtained by performing post-quantum cryptographic encryption processing on a first decryption result by the second network device, and the first decryption result is obtained by performing decryption processing on the first encryption result by the second network device; performing decryption processing on the second encryption result to obtain a second decryption result, wherein the second decryption result comprises a signature message and a username.

7. The method of quantum-resistant enhancement of claim 6, wherein, The method further comprises the following steps: obtaining a sixth splicing body according to the signature message; performing post-quantum cryptographic signature verification processing on the signature message to confirm the correctness of the sixth splicing body, wherein the sixth splicing body is obtained according to the quantum key identifier, the first random number and the second random number.

8. The method of quantum-resistant enhancement of claim 5, wherein, The method further comprises the following steps: XOR processing the first session key, the first random number, the second random number and the first quantum key to generate a first anti-quantum session key; deriving the first anti-quantum session key to encrypt the communication between the first network device and the second network device.

9. The method of quantum-resistant enhancement of claim 8, wherein, The method further comprises: receiving a second encrypted authentication message sent by the second network device; splicing the first network device identifier and the first random number to generate a third splicing body; encrypting the third splicing body according to the first anti-quantum session key to generate a first encrypted authentication message; comparing the first encrypted authentication message with the second encrypted authentication message to confirm that the second anti-quantum session key generated by the second network device is consistent with the first anti-quantum session key.

10. The method of quantum-resistant enhancement of claim 8, wherein, The method further comprises: splicing the username and the second random number to generate a fourth splicing body; encrypting the fourth splicing body according to the first anti-quantum session key to generate a first encrypted authentication message; sending the first encrypted authentication message to the second network device to make the second network device confirm that the first anti-quantum session key is consistent with the second anti-quantum session key generated by the second network device.

11. A method of quantum-resistant security enhancement of a simple authentication and security layer protocol of a communication network, wherein, The communication network comprises a first network device and a second network device, and the method is used for the second network device, and the method comprises: sending a start message to the first network device; receiving a first encrypted result of quantum key identifier encrypted according to the start message by the first network device, to encrypt the communication between the first network device and the second network device based on the first encrypted result, wherein the quantum key identifier is obtained by the first network device from a first network node accessed.

12. The method of quantum-resistant enhancement of claim 11, wherein, The method further comprises: obtaining a signature certificate and an encryption certificate of the second network device from a certificate system.

13. The method of quantum-resistant enhancement of claim 11, wherein, The method further comprises: decrypting the first encrypted result to obtain a first decrypted result; processing the first decrypted result and a second quantum key to generate a second anti-quantum session key to encrypt the communication between the first network device and the second network device, wherein the second quantum key is obtained from a second network node accessed by the second network device according to the first decrypted result; post-quantum encrypting the first decrypted result according to the second anti-quantum session key to generate a second encrypted result, to make the first network device confirm that the second network device receives the correct first encrypted result.

14. The method of quantum-resistant enhancement of claim 13, wherein, The decrypting the first encrypted result to obtain a first decrypted result comprises: decrypting the first encrypted result to obtain a first network device identifier, a first encrypted authentication message and a first encrypted message of the first network device; post-quantum decrypting the first encrypted message to obtain a second splicing body; obtaining a quantum key identifier and a first XOR body according to the second splicing body; The first random number randomly generated by the first network device is obtained according to a second random number randomly generated by the first XOR body and the second network device; The second session key is obtained by performing post-quantum derivation processing on the second splicing body.

15. The method of quantum-resistant enhancement of claim 14, wherein, The method further comprises: The password module of the second network device is injected with a plurality of keys by a service node; A quantum key application is sent to the service node according to the quantum key identifier, the quantum key application being protected by a protection key, the protection key being one of the plurality of keys injected into the password module and being used randomly; A quantum key encryption result obtained by the service node by performing encryption processing on a second quantum key according to the protection key is received, the second quantum key being generated by a second network node accessing the service node and distributed to the service node; The second quantum key is obtained by performing decryption processing on the quantum key encryption result.

16. The method of quantum-resistant enhancement of claim 15, wherein, The method further comprises: A fifth splicing body is obtained by splicing the first random number and the second random number; A second encrypted verification message is obtained by performing encryption processing on the fifth splicing body according to the second quantum key; The second network device receives the correct quantum key identifier and the first random number by comparing the second encrypted verification message with the first encrypted verification message.

17. The method of quantum-resistant enhancement of claim 14, wherein, The second quantum session key is generated by performing processing on the first decryption result and the second quantum key, and is used to encrypt the communication between the first network device and the second network device, comprising: A second quantum session key is generated by performing XOR processing on the second session key, the first random number, the second random number, and the second quantum key; The second quantum session key is derived to encrypt the communication between the first network device and the second network device.

18. The method of quantum-resistant enhancement of claim 14, wherein, The second encrypted result is generated by performing post-quantum encryption processing on the first decryption result according to the second quantum session key, so that the first network device confirms that the second network device receives the correct first encrypted result, comprising: A second XOR body is obtained by performing XOR processing on the second quantum key and the first random number; A sixth splicing body is obtained by splicing the second XOR body and the second random number; A signature message in the second encrypted result is obtained by performing post-quantum signature processing on the sixth splicing body; The second encrypted result is sent to the first network device, and the second encrypted result comprises a username.

19. The method of quantum-resistant enhancement of claim 18, wherein, The method further comprises: A seventh splicing body is obtained by splicing the first random number and a first network device identifier of the first network device; A second encrypted verification message in the second encrypted result is obtained by performing encryption processing on the seventh splicing body according to the second quantum session key; The second encrypted verification message is sent to the first network device, so that the first network device confirms that the second quantum session key is consistent with the first quantum session key generated by the first network device.

20. The method of quantum-resistant enhancement of claim 18, wherein, The method further comprises: A first encrypted authentication message sent by the first network device is received; concatenating the username and the second random number to obtain an eighth concatenation; encrypting the eighth concatenation according to the second quantum-resistant session key to obtain a second encrypted authentication message; comparing the first encrypted authentication message and the second encrypted authentication message to confirm that the first quantum-resistant session key generated by the first network device is consistent with the second quantum-resistant session key.

21. A computing processing device, wherein, comprises: a memory having computer readable code stored therein; one or more processors, when the computer readable code is executed by the one or more processors, the computing processing device performs the quantum-resistant security enhancement method of the simple authentication and security layer protocol of the communication network as claimed in any one of claims 1-10 or 11-20.

22. A computer program comprising computer readable code which, when run on a computing processing device, causes the computing processing device to perform the quantum-resistant security enhancement method of the simple authentication and security layer protocol of the communication network as claimed in any one of claims 1-10 or 11-20.

23. A computer readable medium having stored therein the computer program as claimed in claim 22.

Images