Identity authentication method and system

Abstract

The present application relates to an identity authentication method and system. The method comprises: a claimant determining an asymmetric digital signature algorithm and a post-quantum digital signature algorithm; generating an algorithm identifier corresponding to the asymmetric digital signature algorithm and the post-quantum digital signature algorithm; acquiring a time-varying parameter, and generating signature data on the basis of the time-varying parameter and an identifier of a verifier; using the asymmetric digital signature algorithm to perform signing on the signature data, so as to obtain a first signature; using the post-quantum digital signature algorithm to perform signing on the signature data, so as to obtain a second signature; on the basis of the algorithm identifier, the signature data, the first signature and the second signature, generating an identity authentication string; and sending the identity authentication string to the verifier, so as to instruct the verifier to perform identity authentication on the basis of the authentication string. On the basis of conventional asymmetric cryptographic identity authentication, the method introduces a post-quantum digital signature algorithm capable of resisting quantum computation, thereby enhancing the security of two communicating parties during identity authentication and being able to resist quantum threats to a certain extent.

Description

Identity authentication methods and systems

[0001] This application claims priority to Chinese Patent Application No. 2024116099097, filed on November 12, 2024, entitled "Identity Authentication Method and System", the entire contents of which are incorporated herein by reference. Technical Field

[0002] This application relates to the field of cybersecurity technology, and in particular to an identity authentication method and system. Background Technology

[0003] In asymmetric cryptography-based authentication, a communicating entity verifies its identity by demonstrating that it possesses a private signature key, which is used by the entity to sign specific data. However, with continuous breakthroughs in quantum computing hardware and the emergence of quantum algorithms such as Shor's algorithm and Grover's algorithm, there is a significant threat to current public-key cryptography. Currently, most digital signature algorithms used in asymmetric cryptography authentication are RSA or elliptic curve cryptography; the development of quantum computing and quantum algorithms will impact their security. Summary of the Invention

[0004] Therefore, it is necessary to provide an identity authentication method and system to address the aforementioned technical problems, which can improve the security of both parties in the identity authentication process.

[0005] Firstly, this application provides an identity authentication method, which is applied to the claimant and includes:

[0006] The first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are determined;

[0007] Generate the first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm;

[0008] Obtain the first time-varying parameter, and generate the first signature data based on the first time-varying parameter and the verifier's identifier;

[0009] The first signature is obtained by signing the first signature data using the first asymmetric digital signature algorithm.

[0010] The first signature data is signed using the first post-quantum digital signature algorithm to obtain the second signature;

[0011] A first identity authentication string is generated based on the first algorithm identifier, the first signature data, the first signature, and the second signature.

[0012] The first authentication string is sent to the authenticator to instruct the authenticator to perform authentication based on the first authentication string.

[0013] In one embodiment, the method further includes:

[0014] Obtain request data from the verifier; the request data includes a random number generated by the verifier;

[0015] Obtain time-varying parameters, including:

[0016] Use random numbers as the first time-varying parameter.

[0017] In one embodiment, the method further includes:

[0018] Receive the second authentication string from the verifier;

[0019] Authentication is performed based on the second authentication string;

[0020] If the identity authentication based on the second identity authentication string is successful and the identity authentication success information is received from the authenticator, then the two-way identity authentication is considered successful.

[0021] In one embodiment, the second authentication string includes a second algorithm identifier, second signature data, a third signature, and a fourth signature;

[0022] Authentication is performed based on the second authentication string, including:

[0023] Determine whether the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier are supported;

[0024] If the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, then verify whether the second time-varying parameter carried in the second signature data is valid, and verify whether the claimant's identifier carried in the second signature data is correct.

[0025] If the second time-varying parameter is valid and the claimant's identifier is correct, then obtain the verifier's first and second public keys;

[0026] Verify the third signature using the first public key, and verify the fourth signature using the second public key;

[0027] If both the third and fourth signatures are successfully verified, then the identity authentication is successful.

[0028] In one embodiment, the step of obtaining the first public key and the second public key of the verifier includes at least one of the following:

[0029] Receive the digital signature certificate and the post-quantum digital signature certificate from the verifier. After verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid, obtain the first public key from the digital signature certificate and the second public key from the post-quantum digital signature certificate.

[0030] The first and second public keys of the verifier are obtained from the preset storage space, which is used to store the pre-agreed algorithm public key.

[0031] Query the first and second public keys of the verifier from a trusted third party.

[0032] Secondly, this application also provides an identity authentication method, which is applied to the authenticator and includes:

[0033] The claimant receives a first authentication string; wherein the first authentication string is generated by the claimant according to the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter, and generating first signature data according to the first time-varying parameter and the verifier's identifier; signing the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; and generating a first authentication string according to the first algorithm identifier, the first signature data, the first signature, and the second signature.

[0034] Authentication is performed based on the first authentication string.

[0035] In one embodiment, the method further includes:

[0036] Determine the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm;

[0037] Generate a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm;

[0038] Obtain the second time-varying parameter, and generate the second signature data based on the second time-varying parameter and the claimant's identifier;

[0039] The second signature data is signed using the second asymmetric digital signature algorithm to obtain the third signature;

[0040] The second signature data is signed using the second post-quantum digital signature algorithm to obtain the fourth signature;

[0041] A second identity authentication string is generated based on the second algorithm identifier, the second signature data, the third signature, and the fourth signature.

[0042] Send the second authentication string to the claimant to instruct the claimant to authenticate based on the second authentication string;

[0043] If the identity authentication based on the first identity authentication string is successful and the identity authentication success information is received from the claimant, then the two-way identity authentication is considered successful.

[0044] In one embodiment, identity authentication based on a first authentication string includes:

[0045] Determine whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported;

[0046] If the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, then verify whether the first time-varying parameter carried in the first signature data is valid, and verify whether the identifier of the verifier carried in the first signature data is correct.

[0047] If the first time-varying parameter is valid and the verifier's identifier is correct, then obtain the claimant's third and fourth public keys;

[0048] The first signature is verified using the third public key, and the second signature is verified using the fourth public key;

[0049] If both the first and second signatures are successfully verified, then the identity authentication is successful.

[0050] In one embodiment, before receiving the first authentication string from the claimant, the method further includes:

[0051] Generate random numbers;

[0052] The request data is sent to the claimant based on the random number to instruct the claimant to use the random number as the first time-varying parameter;

[0053] Verify the validity of the first time-varying parameter carried in the first signature data, including:

[0054] Verify whether the first time-varying parameter carried in the first signature data is consistent with the generated random number;

[0055] If they match, then the first time-varying parameter is determined to be valid.

[0056] Thirdly, this application also provides an identity authentication system, which includes a claimant and a verifier; wherein:

[0057] The claimant is used to implement the steps of the method described in the first aspect above when executing a computer program;

[0058] The verification party is used to implement the steps of the method described in the second aspect above when executing a computer program.

[0059] The aforementioned authentication method and system involve the claimant determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; acquiring a first time-varying parameter, and generating first signature data based on the first time-varying parameter and the verifier's identifier; signing the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; generating a first authentication string based on the first algorithm identifier, the first signature data, the first signature, and the second signature; and sending the first authentication string to the verifier to instruct the verifier to perform authentication based on the first authentication string. Through this method, based on traditional asymmetric cryptographic authentication, a post-quantum digital signature algorithm resistant to quantum computing is introduced. Combining the asymmetric digital signature algorithm and the post-quantum digital signature algorithm ensures that cracking only one algorithm is insufficient to completely breach the security defenses of authentication, thus improving the security of authentication between communicating parties and mitigating quantum threats to a certain extent. Attached Figure Description

[0060] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0061] Figure 1 is an application environment diagram of an identity authentication method in one embodiment;

[0062] Figure 2 is a flowchart illustrating an identity authentication method in one embodiment;

[0063] Figure 3 is a schematic diagram of identity authentication interaction in one embodiment;

[0064] Figure 4 is a flowchart illustrating the two-way authentication steps in one embodiment;

[0065] Figure 5 is a schematic diagram of two-way authentication interaction in one embodiment;

[0066] Figure 6 is a flowchart illustrating the identity authentication method in another embodiment;

[0067] Figure 7 is a flowchart illustrating an identity authentication method applied to an identity authentication system in one embodiment;

[0068] Figure 8 is a flowchart illustrating an identity authentication method applied to an identity authentication system in another embodiment;

[0069] Figure 9 is a flowchart illustrating an identity authentication method applied to an identity authentication system in another embodiment. Detailed Implementation

[0070] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0071] It is understood that the terms "first," "second," etc., used in this application may be used herein to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from another element. For example, without departing from the scope of this application, the first signature data may be referred to as the second signature data, and similarly, the second signature data may be referred to as the first signature data. Both the first signature data and the second signature data are signature data, but they are not the same signature data.

[0072] The identity authentication method provided in this application can be applied to the application environment shown in Figure 1. The identity authentication system includes a claimant 102 and a verifier 104. The claimant 102 and verifier 104 communicate via a network and perform identity authentication based on the identity authentication method provided in any embodiment of this application. Both the claimant 102 and verifier 104 are communication entities and can be, but are not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, portable wearable devices, and servers. IoT devices can be smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, projection devices, etc. Portable wearable devices can be smartwatches, smart bracelets, head-mounted devices, etc. Head-mounted devices can be virtual reality (VR) devices, augmented reality (AR) devices, smart glasses, etc. The server can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services.

[0073] For example, if claimant 102 is an application device and verifier 104 is a key distribution device, the authentication method provided in this application can achieve authentication between the application device and the quantum key distribution device. For example, if claimant 102 is a terminal device and verifier 104 is a platform, the authentication method provided in this application can achieve authentication for various devices accessing the platform. For example, the authentication method provided in this application can enable authentication between communicating parties before establishing a secure communication channel.

[0074] In an exemplary embodiment, as shown in FIG2, an identity authentication method is provided. Taking the application of this method to the claimant 102 in FIG1 as an example, the method includes:

[0075] Step 202: Determine the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm.

[0076] Specifically, the claimant automatically selects or, through user configuration, chooses the authentication method, specifying which traditional asymmetric digital signature algorithm or which post-quantum digital signature algorithm to use, thus determining the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm used for this authentication. Post-quantum cryptography (PQC) is a new generation of cryptographic algorithms capable of resisting quantum computing attacks on existing cryptographic algorithms, ensuring the security of cryptographic algorithms in a quantum environment.

[0077] In some embodiments, for greater practicality, this application provides three optional authentication methods for use by both communicating parties: "traditional + PQC" digital signature, "single PQC" digital signature, and "traditional" digital signature. Each method is distinguished by a different code to ensure the availability, compatibility, and security of the authentication methods. "Traditional + PQC" digital signature refers to authentication using a combination of asymmetric and post-quantum digital signature algorithms; "single PQC" digital signature refers to authentication using only a post-quantum digital signature algorithm; and "traditional" digital signature refers to authentication using only a traditional asymmetric digital signature algorithm. It is understood that since the migration from traditional cryptography to post-quantum cryptography is a long-term process, the method provided in this embodiment can be compatible with traditional authentication methods with minor modifications, while simultaneously supporting "traditional + PQC" and "single PQC" digital signatures, encompassing future evolution directions as much as possible, and gradually improving security through smooth upgrades and modifications.

[0078] Step 204: Generate the first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm.

[0079] The first algorithm identifier refers to the authentication method code, which indicates which asymmetric digital signature algorithm and which post-quantum digital signature algorithm are used for this authentication. In some embodiments, a label corresponding to each asymmetric digital signature algorithm and a label corresponding to each post-quantum digital signature algorithm are preset in advance. By querying the label corresponding to the first asymmetric digital signature algorithm and the label corresponding to the first post-quantum digital signature algorithm, and integrating the two, the corresponding first algorithm identifier can be determined.

[0080] In one alternative implementation, the algorithm identifier consists of two hexadecimal digits. A value of 0 indicates that this type of digital signature algorithm is not used. For example, a value of 0 in the lower digit represents a "single PQC" digital signature, a value of 0 in the higher digit represents a "traditional" digital signature, and a value that is non-zero in both the higher and lower digits represents a "traditional + PQC" digital signature.

[0081] For example, the authentication method code "0x0N", with a high-order value of 0 and a low-order value of N, indicates that this authentication uses a traditional asymmetric digital signature algorithm. The authentication method code "0xMN", with a high-order value of M and a low-order value of N, indicates that this authentication uses both a traditional asymmetric digital signature algorithm and a post-quantum digital signature algorithm. The authentication method code "0xM0", with a high-order value of M and a low-order value of 0, indicates that this authentication uses a post-quantum digital signature algorithm.

[0082] Referring to Table 1, which records the corresponding post-quantum digital signature algorithms when the high-order bit M has different values.

[0083] Table 1:

[0084] Referring to Table 2, which records the corresponding asymmetric digital signature algorithms when the lower-order bits N have different values.

[0085] Table 2:

[0086] It is understood that Tables 1 and 2 above are merely examples, and in actual use, the code names can be expanded and adjusted according to the supported algorithms. For instance, if a certain traditional public-key cryptography algorithm or a certain post-quantum cryptography algorithm is proven to be insecure, the platform can quickly eliminate insecure algorithms in the interaction scenario between the terminal and the platform. Furthermore, if a new post-quantum cryptography algorithm emerges, it can also be upgraded by adding a code name without affecting the overall business process.

[0087] Referring to Tables 1 and 2, in the case of "traditional + PQC" digital signature, the algorithm used is determined by both high and low bits. For example, the code "0x23" indicates that FIPS205 (SLH-DSA) is used as the post-quantum digital signature algorithm and SM2 digital signature algorithm is used as the asymmetric digital signature algorithm.

[0088] Step 206: Obtain the first time-varying parameter, and generate the first signature data based on the first time-varying parameter and the verifier's identifier.

[0089] The value of the time-varying parameter changes over time. In some embodiments, the time-varying parameter in this embodiment is any one of a timestamp, a sequence number, and a random number, which is generated and issued by the verifier. The first signature data in this embodiment consists of the first time-varying parameter and the verifier's identifier.

[0090] Step 208: Sign the first signature data using the first asymmetric digital signature algorithm to obtain the first signature.

[0091] Step 210: Sign the first signature data using the first post-quantum digital signature algorithm to obtain the second signature.

[0092] Step 212: Generate a first identity authentication string based on the first algorithm identifier, the first signature data, the first signature, and the second signature.

[0093] In one alternative implementation, if the claimant and the verifier have agreed on which traditional asymmetric digital signature algorithm or which post-quantum digital signature algorithm to use, then there is no need to execute the aforementioned steps 202 and 204. Based on the first signature data, the first signature, and the second signature, a first identity authentication string is generated without sending an identity authentication method code.

[0094] Step 214: Send the first authentication string to the verifier to instruct the verifier to perform authentication based on the first authentication string.

[0095] In this scenario, assuming the first algorithm identifier is C1, the first signature data is M1, the first signature is S1, and the second signature is S2, the claimant sends the first identity authentication string C1||M1||S1||S2 to the verifier, who then performs identity authentication based on the first identity authentication string.

[0096] In one alternative implementation, the claimant sends a first authentication string to the verifier, along with a digital signature certificate and a post-quantum digital signature certificate, for the verifier to use.

[0097] In one alternative implementation, if the claimant determines that the authentication uses the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm, then proceed to steps 204 to 214.

[0098] If it is determined that only the first asymmetric digital signature algorithm is used for this identity authentication, then an algorithm identifier corresponding to the first asymmetric digital signature algorithm is generated; a first time-varying parameter is obtained, and a first signature data is generated based on the first time-varying parameter and the verifier's identifier; the first signature data is signed using the first asymmetric digital signature algorithm to obtain a first signature; an identity authentication string is generated based on the algorithm identifier, the first signature data, and the first signature; the identity authentication string is sent to the verifier to instruct the verifier to perform identity authentication based on the identity authentication string.

[0099] If it is determined that only the first post-quantum digital signature algorithm is used for this identity authentication, then an algorithm identifier corresponding to the first post-quantum digital signature algorithm is generated; the first time-varying parameter is obtained, and the first signature data is generated according to the first time-varying parameter and the identifier of the verifier; the first signature data is signed using the first post-quantum digital signature algorithm to obtain a second signature; an identity authentication string is generated according to the algorithm identifier, the first signature data and the second signature; the identity authentication string is sent to the verifier to instruct the verifier to perform identity authentication according to the identity authentication string.

[0100] This embodiment does not limit the identity authentication process of the verifier. In some embodiments, the verifier performs identity authentication in the following ways: determining whether it supports the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier; if it supports the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm, then verifying whether the first time-varying parameter carried in the first signature data is valid, and verifying whether the verifier's identifier carried in the first signature data is correct; if the first time-varying parameter is valid and the verifier's identifier is correct, then obtaining the claimant's third public key and fourth public key; verifying the first signature according to the third public key, and verifying the second signature according to the fourth public key; if both the first signature and the second signature are successfully verified, then the identity authentication is determined to be successful.

[0101] The aforementioned authentication method introduces a post-quantum digital signature algorithm that can resist quantum computing, based on traditional asymmetric cryptographic authentication. By combining the asymmetric digital signature algorithm and the post-quantum digital signature algorithm, cracking only one of the algorithms cannot completely break through the security defense of authentication, thereby improving the security of both parties in the authentication process and resisting quantum threats to a certain extent.

[0102] In an exemplary embodiment, the method further includes: obtaining request data from the verifier; the request data includes a random number generated by the verifier; obtaining a time-varying parameter, including: using the random number as a first time-varying parameter.

[0103] Referring to Figure 3, the verifier sends a request to the claimant, and the claimant responds to the request by executing the steps of the method provided in this application embodiment, generating a first identity authentication string, and sending the first identity authentication string to the verifier, who then performs identity authentication based on the first identity authentication string.

[0104] In this embodiment, a challenge / response mechanism is used, where the verifier initiates a challenge and generates and verifies a random challenge number to ensure the uniqueness and timeliness of the authentication process.

[0105] In an exemplary embodiment, as shown in FIG4, the method further includes:

[0106] Step 402: Receive the second identity authentication string from the verifier.

[0107] The second authentication string is a credential generated by the verifier for identity authentication. In some embodiments, the verifier generates the second authentication string in the same way as the claimant generates the first authentication string, specifically including: determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter, and generating second signature data based on the second time-varying parameter and the claimant's identifier; signing the second signature data using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data using the second post-quantum digital signature algorithm to obtain a fourth signature; generating a second authentication string based on the second algorithm identifier, the second signature data, the third signature, and the fourth signature; and sending the second authentication string to the claimant.

[0108] In one alternative implementation, the claimant may choose any one of the following authentication methods: "traditional + PQC" digital signature, "single PQC" digital signature, or "traditional" digital signature. Similarly, the verifier may also choose any one of the following authentication methods: "traditional + PQC" digital signature, "single PQC" digital signature, or "traditional" digital signature.

[0109] Step 404: Perform identity authentication based on the second identity authentication string.

[0110] In this embodiment, the authentication logic used by the claimant and the verifier is the same. This embodiment does not limit the specific authentication method.

[0111] Step 406: If the identity authentication based on the second identity authentication string is successful and the identity authentication success information is received from the authenticator, then the two-way identity authentication is confirmed to be successful.

[0112] In this process, after the verifier successfully authenticates its identity using the first authentication string, it sends authentication success information to the claimant. The claimant confirms successful two-way authentication upon verifying both its own and the verifier's identities, thus completing the authentication process. If either the claimant's or the verifier's authentication fails, the claimant determines that the two-way authentication has failed.

[0113] In one optional implementation, referring to Figure 5, the authentication method includes the following steps: 1. The claimant generates a first authentication string and sends it to the verifier; 2. The verifier performs authentication based on the first authentication string; 3. After successful authentication, the verifier sends authentication success information to the claimant; 4. The verifier generates a second authentication string and sends it to the claimant; 5. The claimant performs authentication based on the second authentication string; 6. After successful authentication, the claimant sends authentication success information to the verifier; 7. If the claimant's authentication is successful and it receives authentication success information from the verifier, the claimant determines that the two-way authentication is successful; 8. If the verifier's authentication is successful and it receives authentication success information from the claimant, the verifier determines that the two-way authentication is successful. Figure 5 is merely an example, and this embodiment does not limit the order of steps 1 and 4; steps 3 and 4 can be performed simultaneously or separately; similarly, steps 1 and 6 can be performed simultaneously or separately.

[0114] In this embodiment, two-way identity authentication between the claimant and the verifier can be achieved based on the interaction between the two parties.

[0115] In an exemplary embodiment, the second authentication string includes a second algorithm identifier, second signature data, a third signature, and a fourth signature; step 404 includes: determining whether the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier are supported; if the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, then verifying whether the second time-varying parameter carried in the second signature data is valid, and verifying whether the claimant's identifier carried in the second signature data is correct; if the second time-varying parameter is valid and the claimant's identifier is correct, then obtaining the first public key and the second public key of the verifier; verifying the third signature according to the first public key, and verifying the fourth signature according to the second public key; if both the third signature and the fourth signature are successfully verified, then the authentication is determined to be successful.

[0116] Specifically, if the second asymmetric digital signature algorithm indicated by the second algorithm identifier is not supported, or if the second post-quantum digital signature algorithm indicated by the second algorithm identifier is not supported, then authentication is determined to have failed, and an authentication failure message is returned to the verifier. If the second time-varying parameter is invalid, or the claimant's identifier is incorrect, then authentication is determined to have failed, and an authentication failure message is returned to the verifier. If the verification of the third or fourth signature fails, then authentication is determined to have failed, and an authentication failure message is returned to the verifier.

[0117] In an exemplary embodiment, the step of obtaining the first public key and the second public key of the verifier includes at least one of the following: receiving a digital signature certificate and a post-quantum digital signature certificate from the verifier; after verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid, obtaining the first public key from the digital signature certificate and obtaining the second public key from the post-quantum digital signature certificate; obtaining the first public key and the second public key of the verifier from a preset storage space, wherein the preset storage space is used to store a pre-agreed algorithm public key; and querying the first public key and the second public key of the verifier from a trusted third party.

[0118] The first public key is the public key of the asymmetric digital signature algorithm used by the verifier; the second public key is the public key of the post-quantum digital signature algorithm used by the verifier.

[0119] In one implementation, the verifier sends a second authentication string to the claimant, along with a digital signature certificate and a post-quantum digital signature certificate. At any point before obtaining the verifier's first and second public keys, the claimant verifies the validity of both the digital signature certificate and the post-quantum digital signature certificate. After verifying the validity of both certificates, the claimant obtains the first public key from the digital signature certificate and the second public key from the post-quantum digital signature certificate.

[0120] In another implementation, the claimant pre-sets the verifier's traditional algorithm public key and post-quantum algorithm public key in a preset storage space. For example, the verification method is an application platform, and the claimant pre-sets the public key online or offline during the registration process.

[0121] In another implementation, the traditional algorithm public key and the post-quantum algorithm public key of the claimant or verifier are maintained by a trusted third party. The claimant or verifier obtains the traditional algorithm public key and the post-quantum algorithm public key by querying the trusted third party before identity authentication.

[0122] In an exemplary embodiment, as shown in FIG6, an identity authentication method is provided. Taking the application of this method to the verification party 104 in FIG1 as an example, the method includes:

[0123] Step 602: Receive a first authentication string from the claimant; wherein the first authentication string is generated by the claimant according to the following steps: determine a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generate a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtain a first time-varying parameter, and generate first signature data according to the first time-varying parameter and the verifier's identifier; sign the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; sign the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; generate a first authentication string according to the first algorithm identifier, the first signature data, the first signature, and the second signature.

[0124] Step 604: Perform identity authentication based on the first identity authentication string.

[0125] For the explanation of steps 602 to 604, please refer to the aforementioned explanation of the identity authentication method applied to the claimant, which will not be repeated here.

[0126] The aforementioned authentication method introduces a post-quantum digital signature algorithm that can resist quantum computing, based on traditional asymmetric cryptographic authentication. By combining the asymmetric digital signature algorithm and the post-quantum digital signature algorithm, cracking only one of the algorithms cannot completely break through the security defense of authentication, thereby improving the security of both parties in the authentication process and resisting quantum threats to a certain extent.

[0127] In an exemplary embodiment, the method further includes: determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter, and generating second signature data based on the second time-varying parameter and the claimant's identifier; signing the second signature data using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data using the second post-quantum digital signature algorithm to obtain a fourth signature; generating a second identity authentication string based on the second algorithm identifier, the second signature data, the third signature, and the fourth signature; sending the second identity authentication string to the claimant to instruct the claimant to perform identity authentication based on the second identity authentication string; and determining that the two-way identity authentication is successful if the identity authentication based on the first identity authentication string is successful and the claimant receives identity authentication success information.

[0128] In this scenario, assuming the second algorithm identifier is C2, the second signature data is M2, the third signature is S3, and the fourth signature is S4, the logic for generating the first identity authentication string is the same as that for the claimant. The verifier generates the second identity authentication string C2||M2||S3||S4 and sends it to the claimant, who then performs identity authentication based on the second identity authentication string.

[0129] Referring to Figure 5, after the claiming party successfully authenticates itself using the second authentication string, it sends authentication success information to the verifying party. If the verifying party confirms that both its own and the claiming party's authentications are successful, it determines that the two-way authentication is successful and completes the authentication process. If either its own authentication or the claiming party's authentication fails, the verifying party determines that the two-way authentication has failed.

[0130] In an exemplary embodiment, step 604 includes: determining whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported; if the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, then verifying whether the first time-varying parameter carried in the first signature data is valid, and verifying whether the identifier of the verifier carried in the first signature data is correct; if the first time-varying parameter is valid and the identifier of the verifier is correct, then obtaining the third public key and the fourth public key of the claimant; verifying the first signature according to the third public key, and verifying the second signature according to the fourth public key; if both the first signature and the second signature are successfully verified, then determining that the identity authentication is successful.

[0131] Specifically, if the first asymmetric digital signature algorithm indicated by the first algorithm identifier is not supported, or if the first post-quantum digital signature algorithm indicated by the first algorithm identifier is not supported, then authentication is determined to have failed, and an authentication failure message is returned to the claimant. If the first time-varying parameter is invalid, or the verifier's identifier is incorrect, then authentication is determined to have failed, and an authentication failure message is returned to the claimant. If the verification of the first signature or the second signature fails, then authentication is determined to have failed, and an authentication failure message is returned to the claimant.

[0132] In one alternative implementation, the step of obtaining the claimant's third and fourth public keys includes at least one of the following: receiving a digital signature certificate and a post-quantum digital signature certificate from the claimant; after verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid, obtaining the third public key from the digital signature certificate and the fourth public key from the post-quantum digital signature certificate; obtaining the claimant's third and fourth public keys from a preset storage space, the preset storage space being used to store a pre-agreed algorithm public key; and querying the claimant's third and fourth public keys from a trusted third party.

[0133] In an exemplary embodiment, prior to step 602, the method further includes: generating a random number; sending request data to the claimant based on the random number to instruct the claimant to use the random number as a first time-varying parameter;

[0134] Verifying the validity of the first time-varying parameter carried in the first signature data includes: verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; if they are consistent, then the first time-varying parameter is determined to be valid.

[0135] Referring to Figure 3, the verifier generates a random number and sends a request containing the random number to the claimant. The claimant responds to the request by generating a first authentication string and sending it to the verifier. The verifier then performs authentication based on the first authentication string. The validity of the first time-varying parameter is verified by checking if it matches the generated random number. If they match, the first time-varying parameter is valid; otherwise, it is invalid.

[0136] In some embodiments, the time-varying parameter in this embodiment is any one of a timestamp, a sequence number, and a random number. If the first time-varying parameter is a sequence number, the verifier determines whether the sequence number is greater than the sequence number used in the previous authentication process. If so, the first time-varying parameter is determined to be valid; otherwise, an authentication failure message is returned to the claimant.

[0137] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0138] In an exemplary embodiment, as shown in FIG1, this application also provides an identity authentication system, which includes a claimant and a verifier; wherein:

[0139] The claimant, when executing a computer program, performs the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter, and generating first signature data based on the first time-varying parameter and the verifier's identifier; signing the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; generating a first identity authentication string based on the first algorithm identifier, the first signature data, the first signature, and the second signature; and sending the first identity authentication string to the verifier.

[0140] The verifier is configured to perform the following steps when executing a computer program: receiving a first authentication string from the claimant; and performing authentication based on the first authentication string.

[0141] In an exemplary embodiment, the claiming party, when executing a computer program, further performs the following steps: obtaining request data from the verifying party; the request data includes a random number generated by the verifying party; and using the random number as a first time-varying parameter.

[0142] In an exemplary embodiment, the claiming party, when executing a computer program, further implements the following steps: receiving a second authentication string from the authenticating party; performing authentication based on the second authentication string; and determining that the two-way authentication was successful if the authentication based on the second authentication string is successful and authentication success information is received from the authenticating party.

[0143] In an exemplary embodiment, the second authentication string includes a second algorithm identifier, second signature data, a third signature, and a fourth signature; the claiming party, when executing a computer program, further implements the following steps: determining whether it supports the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier; if it supports the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm, verifying whether the second time-varying parameter carried in the second signature data is valid, and verifying whether the claiming party's identifier carried in the second signature data is correct; if the second time-varying parameter is valid and the claiming party's identifier is correct, obtaining the first public key and the second public key of the verifying party; verifying the third signature according to the first public key, and verifying the fourth signature according to the second public key; if both the third signature and the fourth signature are successfully verified, then the authentication is determined to be successful.

[0144] In an exemplary embodiment, the claiming party, when executing a computer program, further implements the following steps: receiving a digital signature certificate and a post-quantum digital signature certificate from the verifier; after verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid, obtaining a first public key from the digital signature certificate and a second public key from the post-quantum digital signature certificate; obtaining the verifier's first public key and second public key from a preset storage space, the preset storage space being used to store a pre-agreed algorithm public key; and querying the verifier's first public key and second public key from a trusted third party.

[0145] In an exemplary embodiment, the verifier, when executing a computer program, further implements the following steps: determining a second asymmetric digital signature algorithm and a second post-quantum digital signature algorithm; generating a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; obtaining a second time-varying parameter, and generating second signature data based on the second time-varying parameter and the claimant's identifier; signing the second signature data using the second asymmetric digital signature algorithm to obtain a third signature; signing the second signature data using the second post-quantum digital signature algorithm to obtain a fourth signature; generating a second identity authentication string based on the second algorithm identifier, the second signature data, the third signature, and the fourth signature; sending the second identity authentication string to the claimant to instruct the claimant to perform identity authentication based on the second identity authentication string; and determining that the two-way identity authentication is successful if the identity authentication based on the first identity authentication string is successful and the claimant receives identity authentication success information.

[0146] In an exemplary embodiment, the verifier, when executing a computer program, further implements the following steps: determining whether it supports the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier; if it supports the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm, verifying whether the first time-varying parameter carried in the first signature data is valid, and verifying whether the verifier's identifier carried in the first signature data is correct; if the first time-varying parameter is valid and the verifier's identifier is correct, obtaining the claimant's third public key and fourth public key; verifying the first signature according to the third public key, and verifying the second signature according to the fourth public key; if both the first signature and the second signature are successfully verified, determining that the identity authentication is successful.

[0147] In an exemplary embodiment, the verifier, when executing a computer program, further implements the following steps: generating a random number; sending request data to the claimant based on the random number to instruct the claimant to use the random number as a first time-varying parameter; verifying whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; and if consistent, determining that the first time-varying parameter is valid.

[0148] In one optional implementation, referring to Figure 7, the identity authentication method applied to the identity authentication system includes the following steps:

[0149] 01. Claimant A selects an authentication method, i.e., which traditional asymmetric digital signature algorithm or which post-quantum digital signature algorithm, with the corresponding method code C; using the current timestamp T as a time-varying parameter, and combining it with the identifier of verifier B to form signature data M; performing a traditional digital signature on M to obtain signature S1, and performing a post-quantum digital signature on M to obtain signature S2.

[0150] 02. Claimant A sends the authentication string C||M||S1||S2 to verifier B, along with A's traditional digital signature certificate and post-quantum digital signature certificate.

[0151] 03. Verifier B receives the authentication string sent by A and determines whether it supports the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm shown in C. If it does not support them, it returns an authentication failure message.

[0152] 04. If supported, verify whether the timestamp T in M ​​is valid and whether the identifier of verifier B is correct. If the timestamp T is invalid or the identifier of verifier B is incorrect, return an authentication failure message.

[0153] 05. If the timestamp T is valid and the identifier of verifier B is correct, verify whether A's traditional digital signature certificate and post-quantum digital signature certificate are valid, or obtain A's traditional algorithm public key and post-quantum algorithm public key through other means (e.g., pre-set or obtained from a trusted third party); if the traditional digital signature certificate or post-quantum digital signature certificate is invalid, return an identity authentication failure message.

[0154] 06. If both the traditional digital signature certificate and the post-quantum digital signature certificate are valid, verify signature S1 using A's traditional algorithm public key and signature S2 using A's post-quantum algorithm public key. If either signature verification fails, return an authentication failure message; if both pass, authentication is successful.

[0155] In one optional implementation, referring to Figure 8, the identity authentication method applied to the identity authentication system includes the following steps:

[0156] 01. Claimant A selects an authentication method, i.e., which traditional asymmetric digital signature algorithm or which post-quantum digital signature algorithm, with the corresponding method code C; using the current timestamp T as a time-varying parameter, and combining it with the identifier of verifier B to form signature data M; performing a traditional digital signature on M to obtain signature S1, and performing a post-quantum digital signature on M to obtain signature S2.

[0157] 02. Claimant A sends the authentication string C||M||S1||S2 to verifier B.

[0158] 03. Verifier B receives the authentication string sent by A and determines whether it supports the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm shown in C. If it does not support them, it returns an authentication failure message.

[0159] 04. If supported, verify whether the timestamp T in M ​​is valid and whether the identifier of verifier B is correct. If the timestamp T is invalid or the identifier of verifier B is incorrect, return an authentication failure message.

[0160] 05. If the timestamp T is valid and the identifier of verifier B is correct, verifier B obtains the pre-set traditional algorithm public key and post-quantum algorithm public key of A. If there is no corresponding traditional algorithm public key or post-quantum algorithm public key of A, the authentication failure message is returned.

[0161] 06. Verify signature S1 using A's traditional algorithm public key, and verify signature S2 using A's post-quantum algorithm public key. If either signature verification fails, return an authentication failure message; if both verifications pass, authentication is successful.

[0162] In one optional implementation, referring to Figure 9, the identity authentication method applied to the identity authentication system includes the following steps:

[0163] 01. Claimant A selects an authentication method, i.e., which traditional asymmetric digital signature algorithm or which post-quantum digital signature algorithm, with the corresponding method code C; using the current timestamp T as a time-varying parameter, and combining it with the identifier of verifier B to form signature data M; performing a traditional digital signature on M to obtain signature S1, and performing a post-quantum digital signature on M to obtain signature S2.

[0164] 02. Claimant A sends the authentication string C||M||S1||S2 to verifier B.

[0165] 03. Verifier B receives the authentication string sent by A and determines whether it supports the traditional asymmetric digital signature algorithm and the post-quantum digital signature algorithm shown in C. If it does not support them, it returns an authentication failure message.

[0166] 04. If supported, verify whether the timestamp T in M ​​is valid and whether the identifier of verifier B is correct. If the timestamp T is invalid or the identifier of verifier B is incorrect, return an authentication failure message.

[0167] 05. If the timestamp T is valid and the identifier of verifier B is correct, verifier B obtains A's traditional algorithm public key and post-quantum algorithm public key by querying a trusted third party. If A's corresponding traditional algorithm public key or post-quantum algorithm public key does not exist, an identity authentication failure message is returned.

[0168] 06. Verify signature S1 using A's traditional algorithm public key, and verify signature S2 using A's post-quantum algorithm public key. If either signature verification fails, return an authentication failure message; if both verifications pass, authentication is successful.

[0169] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0170] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the methods described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic resistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0171] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0172] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. An authentication method, the method being applied to a claimant, comprising: The first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are determined; Generate a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; Obtain the first time-varying parameter, and generate the first signature data based on the first time-varying parameter and the identifier of the verifier; The first signature is obtained by signing the first signature data using the first asymmetric digital signature algorithm. The first signature data is signed using the first post-quantum digital signature algorithm to obtain the second signature; A first identity authentication string is generated based on the first algorithm identifier, the first signature data, the first signature, and the second signature. The first authentication string is sent to the authenticator to instruct the authenticator to perform authentication based on the first authentication string.

2. The method according to claim 1, further comprising: Obtain request data from the verification party; The request data includes a random number generated by the verification party; The acquisition of time-varying parameters includes: The random number is used as the first time-varying parameter.

3. The method according to claim 1, further comprising: Receive the second identity authentication string from the verifier; Authentication is performed based on the second authentication string; If the identity authentication based on the second identity authentication string is successful and the identity authentication success information is received from the verification party, then the two-way identity authentication is determined to be successful.

4. The method of claim 3, wherein, The second authentication string includes a second algorithm identifier, second signature data, a third signature, and a fourth signature; The authentication process based on the second authentication string includes: Determine whether the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm indicated by the second algorithm identifier are supported; If the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm are supported, then verify whether the second time-varying parameter carried in the second signature data is valid, and verify whether the claimant's identifier carried in the second signature data is correct; If the second time-varying parameter is valid and the claimant's identifier is correct, then the first public key and the second public key of the verifier are obtained; The third signature is verified using the first public key, and the fourth signature is verified using the second public key; If both the third signature and the fourth signature are successfully verified, then the identity authentication is confirmed to be successful.

5. The method of claim 4, wherein, The steps of obtaining the first public key and the second public key of the verifier include at least one of the following: The verifier receives a digital signature certificate and a post-quantum digital signature certificate. After verifying that both the digital signature certificate and the post-quantum digital signature certificate are valid, the verifier obtains a first public key from the digital signature certificate and a second public key from the post-quantum digital signature certificate. The first and second public keys of the verifier are obtained from a preset storage space, which is used to store the pre-agreed algorithm public key; The first and second public keys of the verifier are retrieved from a trusted third party.

6. The method of claim 1, wherein, The generation of the first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm includes: The preset label corresponding to the first asymmetric digital signature algorithm is used as the low-order value of the first algorithm identifier, and the preset label corresponding to the first post-quantum digital signature algorithm is used as the high-order value of the first algorithm identifier, thereby combining them to form the first algorithm identifier.

7. The method of claim 1, wherein, The first time-varying parameter is a timestamp; the first signature data includes the timestamp and the identifier of the verifier.

8. The method of claim 1, wherein, The first time-varying parameter is a serial number; the first signature data includes the serial number and the identifier of the verifier.

9. An authentication method, the method being applied to a authenticator, comprising: The claimant receives a first authentication string; wherein the first authentication string is generated by the claimant according to the following steps: determining a first asymmetric digital signature algorithm and a first post-quantum digital signature algorithm; generating a first algorithm identifier corresponding to the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm; obtaining a first time-varying parameter, and generating first signature data according to the first time-varying parameter and the verifier's identifier; signing the first signature data using the first asymmetric digital signature algorithm to obtain a first signature; signing the first signature data using the first post-quantum digital signature algorithm to obtain a second signature; and generating a first authentication string according to the first algorithm identifier, the first signature data, the first signature, and the second signature. Authentication is performed based on the first authentication string.

10. The method of claim 9, further comprising: Determine the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; Generate a second algorithm identifier corresponding to the second asymmetric digital signature algorithm and the second post-quantum digital signature algorithm; Obtain the second time-varying parameter, and generate the second signature data based on the second time-varying parameter and the claimant's identifier; The second signature data is signed using the second asymmetric digital signature algorithm to obtain the third signature; The second signature data is signed using the second post-quantum digital signature algorithm to obtain the fourth signature; A second identity authentication string is generated based on the second algorithm identifier, the second signature data, the third signature, and the fourth signature; The second authentication string is sent to the claimant to instruct the claimant to perform authentication based on the second authentication string; If the identity authentication based on the first identity authentication string is successful and the identity authentication success information is received from the claiming party, then the two-way identity authentication is determined to be successful.

11. The method of claim 9, wherein, The step of performing identity authentication based on the first identity authentication string includes: Determine whether the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm indicated by the first algorithm identifier are supported; If the first asymmetric digital signature algorithm and the first post-quantum digital signature algorithm are supported, then verify whether the first time-varying parameter carried in the first signature data is valid, and verify whether the identifier of the verifier carried in the first signature data is correct. If the first time-varying parameter is valid and the verifier's identifier is correct, then the third and fourth public keys of the claimant are obtained. The first signature is verified using the third public key, and the second signature is verified using the fourth public key; If both the first signature and the second signature are successfully verified, then the identity authentication is considered successful.

12. The method of claim 11, further comprising: Before receiving the first authentication string from the claimant, Generate random numbers; The claimant is instructed to send request data to the claimant based on the random number, instructing the claimant to use the random number as a first time-varying parameter. The verification of whether the first time-varying parameter carried in the first signature data is valid includes: Verify whether the first time-varying parameter carried in the first signature data is consistent with the generated random number; If they match, then the first time-varying parameter is determined to be valid.

13. An identity authentication system, comprising a claimant and a verifier; wherein: The claimant is configured to perform the steps of the method as described in any one of claims 1 to 8 when executing a computer program; The verification party is used to implement the steps of the method as described in any one of claims 9 to 12 when executing a computer program.

Images