33 results about "Quantum authentication" patented technology

The present technology pertains to systems and methods for one-way authentication of quantum channels. A transmitter generates an entangled quantum state comprising a first state and a second state, modulates the second state according to a clock-synchronized pattern, and transmits it through a quantum channel to a receiver. The first state is retained and measured at the transmitter to extract quantum-state information. Authentication is performed based on this information, without requiring feedback from the receiver. The quantum-state information may be derived using quadrature measurements, Gaussian tomography, or other statistical analyses to detect whether the second state underwent irreversible interactions such as eavesdropping or decoherence. The system enables secure unidirectional quantum authentication, reduces protocol complexity, and supports real-time anomaly detection. It is compatible with continuous-variable quantum states, quantum key distribution (QKD), and scalable communication architectures.

The invention relates to the technical field of quantum communication, discloses a quantum key remote security injection method and system based on PQC and zero trust, and aims to solve the problems that post-quantum authentication is high in calculation overhead, difficult in terminal adaptation due to resource limitation and lack of continuous verification capability. The method comprises the following steps: presetting a secret seed; the terminal generates a disturbance public key based on the seed and the basic temporary public key and initiates a request; the server carries out implicit authentication by comparing the disturbance public key and executes key encapsulation to generate a session key; the server encrypts the quantum key and signs and sends the quantum key; and after the terminal verifies the signature, the basic private key is used for de-encapsulation to obtain the quantum key. The system comprises a key injection server, a terminal security agent and a disturbance function module. According to the method, authentication logic is integrated into a cryptographic primitive algebraic structure, so that authentication internal biochemistry and light weight are realized, the terminal power consumption and storage occupation are remarkably reduced, the resource exhaustion attack resistance is enhanced, and the continuous authentication requirement of a zero-trust architecture is met.

The invention discloses a quantum secure power trusted WLAN communication system, method and device, and a storage medium, and the system comprises a quantum wireless terminal QSTA which is used for bearing a power service to access the quantum trusted WLAN communication system; the quantum wireless access point QAP is used for providing wireless communication access service for the QSTA and is connected with the quantum key service platform and the service master station through a wired channel; the quantum authentication server QAS is connected with the quantum random number generator through an Ethernet port to realize certificate management and authentication of the QSTA and the QAP; the quantum random number generator provides quantum random numbers for the QAS for quantum digital certificate signature verification; the quantum key service platform is used for providing a preset charging quantum key and an online key distribution service for the QSTA and the QAP; according to the invention, the random number strength, the key negotiation security and the dynamic service adaptation capability can be improved.

A method for generating a digital signature for a message involves obtaining the message and a signing private key. The signing private key is divided into a plurality of indexed values. A counter value is identified to provide a set of partitions with unique integer interpretations through at least one round of combining the message with the counter value, hashing the combined message and counter value to generate a hash, reducing the hash to a predetermined length to generate a reduced hash, and partitioning the reduced hash into a plurality of partitions. If the partitions are not interpretable as a set of unique integers, the counter value is incremented for the next round. If the partitions are interpretable as a set of unique integers, the counter value is provided. A set of values from the signing key indexed by the unique integers is selected, and the digital signature comprising the selected set of values and the counter is outputted.

A method, system, or apparatus for generating and / or verifying a signature on a message is provided. The method, system, or apparatus at a signer may include receiving a message, generating a security parameter, generating at least two seeds corresponding to at least two servers based on the security parameter, transmitting the at least two seeds to each server of the at least two servers, determine a private key based on the security parameter or the at least two seeds, and generating, on the message, a signature based on the private key. The method, system, or apparatus at a verifier may include receiving, from a signer, a signature on a message, obtaining at least two partial public keys, determining a full public key based on the at least two partial public keys, and authenticating the signature on the message based on the full public key. Other aspects, embodiments, and features are also claimed and described.

The invention discloses an expressway toll collection system based on quantum security communication, and relates to the technical field of expressway toll collection. Comprising a quantum key management module, a quantum authentication and session key management module, a quantum secure data transmission module, a quantum secure storage module, a quantum calculation charging accounting module and a quantum intelligent risk control module. A secret key for charging communication is generated through a quantum random number generator, and an uncracked quantum secret key is transmitted among a charging management center, a road side unit and a vehicle-mounted unit through a quantum secret key distribution technology, so that the absolute security of data transmission is ensured. According to the invention, the QKD technology is adopted to ensure the safety of charging data, and quantum storage and intelligent risk control are combined, so that the anti-attack capability, stability and abnormal transaction prevention capability of the system are improved.

A quantum communication system for enabling secured communications between non-quantum equipped and quantum equipped devices comprises a non-quantum equipped network device configured to transmit a connection request, a quantum authentication server configured to verify a connection between the non-quantum equipped network device and a quantum network gateway, the quantum network gateway enabling communications between the non-quantum equipped network device and the quantum authentication server. The quantum network gateway includes at least one quantum processor, and a quantum application, which when executed by the quantum processor, cause the quantum application to receive, from the non-quantum equipped network device, a request to communicate with an application server, generate a quantum token, transmit the quantum token to the quantum authentication server for authentication of the communication request, and set up, a communication tunnel between the quantum network gateway and the application server for communicating on behalf of the non-quantum equipped network device.

The invention discloses an anti-quantum identity authentication method based on a two-dimensional dynamic primitive, and belongs to the technical field of anti-quantum authentication, and the method comprises the steps: carrying out the dynamic feature collection from the identity feature dimension and behavior feature dimension of an access subject, carrying out the hierarchical processing and mapping index distribution of collected data, and obtaining an associated feature set; performing hierarchical encryption and ciphertext splicing on the associated feature set to obtain a composite authentication packet; respectively extracting an auxiliary layer ciphertext and a core layer ciphertext from the composite authentication packet, firstly performing auxiliary layer verification through the auxiliary layer ciphertext, then performing core layer verification through the core layer ciphertext, and outputting a verification result; and sending a corresponding operation instruction to the access control component according to the verification result, and outputting a final authentication result. Therefore, by implementing the application, the problem that the normal operation of the system is influenced by high authentication delay due to the fact that the existing anti-quantum authentication technology occupies more computing resources in the identity authentication process can be solved.

The invention provides an anti-quantum mobile virtual network protection protocol method and a network security protection system. The method comprises the steps that an MVNO generates an anti-quantum authentication credential of UE and adds an identity label of the UE to a registration list, the MNO generates a first anti-quantum identity credential of a gNB and a second anti-quantum identity credential of a CN and generates credential information, the gNB generates a first message according to the credential information, the UE generates a second message based on the anti-quantum authentication credential and the registration list, and the second message is sent to the registration list. And the gNB signs the second message to generate first signature information and generate a third message, and the CN generates an anti-quantum authentication response based on the second anti-quantum identity certificate and sends the anti-quantum authentication response to the UE, so that the UE decrypts the anti-quantum authentication response to complete identity authentication. According to the application, by introducing an anti-quantum cryptography technology based on a lattice password, the problem of security threats faced by a mobile virtual network in a quantum computing environment is solved.

A server configured to provide a pre-shared key “PSK” with a first user node, to allow a first user node and a second user node to share a PSK, the server comprising:a network interface; an authentication unit; an encryption unit; a key management system and a quantum key distribution unit,the authentication unit being configured to receive a request for authentication, via the network interface, of a first channel between a first user node and the server,the quantum key distribution unit being configured to allow a quantum key to be distributed between the first user node and the server, the quantum key being sifted using communication over the authenticated first channel to establish a first quantum key for the first user and server,the key management system being configured to provide a first PSK for the first user to allow the first user to authenticate with the second user,the encryption unit being configured to encrypt the first PSK with the quantum key to send to the first user node via the network interface.

The application discloses a substation relay protection communication authentication method based on continuous variable quantum key distribution, and belongs to the technical field of wireless communication; the method is: evaluating the physical channel quality of each link, screening a safe link; generating quantum keys by using the safe link, and cutting the generated quantum keys according to the key block granularity; adopting a GQA handshake protocol to establish a complete mapping relationship between the key block and the frame sequence number; performing GQA quantum authentication encapsulation on a GOOSE message; and completing the authentication of a receiving end by adopting a three-layer verification mode. The application establishes the mapping relationship between the key block and the frame sequence number by the handshake protocol, the sending end and the receiving end independently calculate the corresponding key block index according to the frame sequence number, any additional key negotiation or synchronous communication is not needed in the message authentication process, the communication of the key block between the sending end and the receiving end is guaranteed, the communication response time is reduced, and the security is improved.

A method, system, or apparatus for generating and / or verifying a signature on a message is provided. The method, system, or apparatus at a signer may include receiving a message, generating a security parameter, generating at least two seeds corresponding to at least two servers based on the security parameter, transmitting the at least two seeds to each server of the at least two servers, determine a private key based on the security parameter or the at least two seeds, and generating, on the message, a signature based on the private key. The method, system, or apparatus at a verifier may include receiving, from a signer, a signature on a message, obtaining at least two partial public keys, determining a full public key based on the at least two partial public keys, and authenticating the signature on the message based on the full public key. Other aspects, embodiments, and features are also claimed and described.

The present invention discloses a V2C post-quantum authentication and key negotiation method based on RLWE. During system initialization, a master key, public key, hash function, and related parameters are selected. During the registration phase, the vehicle and cloud server CS register with a registration authority RA. During the login phase, the vehicle and CS log in to the local system. During the authentication and key negotiation phase, the vehicle and CS perform identity authentication and key negotiation through the RA, negotiating a session key for subsequent secure communication without revealing their true identity. During the identity and password update phase, users can directly update their identity and password without going through the RA. The present invention is based on ring fault-tolerant learning RLWE and a hash method design, effectively reducing the computational and communication overhead of the AKA process, resisting attacks by quantum adversaries, and ensuring the confidentiality of the true identity of legitimate vehicles. Furthermore, the "fuzzy verifier + honeyword" technology is used in the AKA process to resist signal leakage and key guessing attacks, ensuring key security.

This invention discloses a post-quantum cryptographic encryption communication device for a satellite constellation communication network, belonging to the field of satellite communication security technology. It includes a constellation link management module, a post-quantum authentication module, a post-quantum key negotiation module, a data encryption processing module, a secure key storage module, and a hardware acceleration and power consumption control module. The constellation link management module is communicatively connected to the post-quantum key negotiation module, the post-quantum authentication module, and the data encryption processing module. The post-quantum authentication module is communicatively connected to the post-quantum key negotiation module and the secure key storage module. The post-quantum key negotiation module is communicatively connected to the data encryption processing module, the secure key storage module, and the hardware acceleration and power consumption control module. This invention uses the above device to achieve real-time perception of the satellite communication link status through the constellation link management module, enabling key negotiation to be dynamically triggered according to constellation topology changes, thereby improving communication security.

The present invention belongs to the technical field of quantum secure communication, and discloses a multi-party quantum identity authentication method based on multi-party quantum secure direct communication to verify whether multiple parties actually communicating with the verifier are its legitimate collaborators. The present invention applies the multi-party quantum secure direct communication technology to multi-party quantum identity authentication. Among them, the verifier shares a set of keys with multiple target communicators in advance through quantum key distribution. The verifier prepares a series of multi-photon GHZ states and distributes them to itself and multiple parties to be proved. After the parties to be proved perform encoding operations according to the authentication keys shared with the verifier in advance, they return the photons to the verifier, and the verifier performs GHZ state analysis to realize the simultaneous identity verification of multiple parties to be proved. This method can authenticate the identities of multiple users at the same time, effectively improve the authentication efficiency, and is of great significance for promoting the practical application of quantum secure direct communication in the field of quantum authentication.

The invention provides an intelligent chip equipment security authentication method and system based on a quantum SIM card, and the method comprises the steps: receiving a first challenge initiated by a quantum authentication system, and carrying out the decryption of the first challenge through a quantum key, and obtaining a first challenge plaintext; generating a first response based on the first challenge plaintext; encrypting the first response through the quantum key based on the quantum SIM card, and sending the encrypted first response to the quantum authentication system, so that the quantum authentication system performs identity authentication on the intelligent chip equipment based on the first response; under the condition that the identity authentication is successful, performing key negotiation with a quantum authentication system based on a quantum key distribution protocol to obtain a shared key; and establishing a communication connection with the quantum authentication system by using the shared key. Therefore, according to the method, reliable authentication of the intelligent chip equipment and the quantum authentication system can be realized by fusing the quantum SIM card and the quantum key, so that secure connection is guaranteed.

An access request to allow a requestor process to access a protected resource is received. A qubit authentication state that identifies a desired state of a qubit is sent to the requestor process. It is determined that the requestor process has caused the qubit to have the qubit authentication state. Based at least in part on determining that the requestor process has caused the qubit to have the qubit authentication state, the requestor process is granted access to the protected resource.

The present invention discloses a highway toll collection system based on quantum secure communication, which relates to the field of highway toll collection technology. The system includes a quantum key management module, a quantum authentication and session key management module, a quantum secure data transmission module, a quantum secure storage module, a quantum computing toll accounting module, and a quantum intelligent risk control module. The quantum key management module establishes a quantum key distribution network in the highway network toll collection system, generates keys for toll collection communications through a quantum random number generator, and transmits unbreakable quantum keys between the toll collection management center, roadside units, and on-board units through quantum key distribution technology to ensure absolute security of data transmission. The present invention uses QKD technology to ensure the security of toll collection data, and combines quantum storage with intelligent risk control to enhance the system's anti-attack capabilities, stability, and ability to prevent abnormal transactions.

The embodiment of the invention provides a multi-level anti-quantum authentication method and system for a novel electric power system, and belongs to the field of electric power systems. The method comprises the following steps: constructing a three-level authentication architecture of a physical layer PHY, a quantum layer QKD and a post-quantum layer PQC, taking keys respectively generated by three types of authentication mechanisms as input of a unified key derivation function, deriving a final communication encryption key strongly bound to a device identity, an authentication path and a trust chain, and establishing a key verification cascade chain to verify the legality of the authentication result of the next layer by using the key of the previous layer. According to the method, an authentication system of hierarchical collaboration, key fusion and chained verification is constructed, and the identity authentication strength and the communication key generation security among terminal equipment, edge nodes and a control center in a power system are fundamentally improved.

The present disclosure relates to a quantum communication system. Particularly, the present disclosure relates to a device and a method for performing quantum state modulation based on quantum authentication in a quantum communication system.

The present invention discloses a method and system for access control of a distribution communication network. A quantum access controller is used to access the network through an aggregation port, and the media access control address of a power distribution terminal accessing the network is obtained based on the Address Resolution Protocol. The quantum access controller performs a quantum authentication legality check on the power distribution terminal based on the media access control address and a quantum key. If the result is legal, it indicates that the terminal can access the network, and the media access control address in the Address Resolution Protocol information of other network nodes under the layer-2 switch corresponding to the quantum access controller is updated to the media access control address of the power distribution terminal. If the result is illegal, the media access control address in the Address Resolution Protocol information of other network nodes under the layer-2 switch corresponding to the quantum access controller is updated to the media access control address of the quantum access controller, thereby effectively improving the security of the system.

The invention relates to a microgrid encrypted database access control system. The system comprises a dispatching center used for sending a symmetric key of a micro-grid edge node to a post-quantum authentication center and an encryption database server; the micro-grid edge node is used for generating a Hash-based signature according to request information and sending the Hash-based signature to the post-quantum authentication center under the condition that a database access control request is initiated, encrypting the request information and an access token by using a symmetric key, generating ciphertext information and sending the ciphertext information to the encrypted database server; the post quantum authentication center is used for carrying out signature verification on the Hash-based signature, generating an access token and returning the access token to the micro-grid edge node under the condition that the signature verification is passed; and the encryption database server is used for decrypting the ciphertext information by using the symmetric key and responding to the database access control request under the condition that the access token passes verification. By adopting the system, the security access control of the encrypted database of the micro-grid can be realized.

The invention discloses a remote access handshake method, device and equipment based on dual anti-quantum protection and a medium, which are applied to a client and relate to the field of encrypted communication, and the method comprises the following steps: sending a connection request to a server, and setting a corresponding authentication protocol according to a quantum authentication identifier fed back by the server and an anti-quantum authentication key exchange suite; performing handshake with the server side based on the authentication protocol and the anti-quantum authentication key exchange suite, if handshake succeeds, sending a certificate anti-quantum authentication protocol request to the server side, and analyzing anti-quantum information fed back by the server side; performing anti-quantum verification on a target certificate fed back by the server for the first time through the obtained preset anti-quantum signature algorithm, the server anti-quantum public key and the certificate signature value, and performing subsequent communication after the verification is passed; and if the handshake fails, ending the communication with the server. Therefore, after conventional anti-quantum key exchange handshake is completed, anti-quantum signature verification can be supplemented in a targeted manner, and double anti-quantum protection is realized.

The invention belongs to the field of wireless ad hoc networks, and discloses a wireless ad hoc network quantum security authentication method and a related device, in a master station mode, a quantum protection key is written into equipment offline and is used for encrypting a one-time quantum authentication key, and symmetric challenge-response authentication is realized through ciphertext transmission and decryption; in the independent mode of the device, the device generates quantum random public and private keys and requests for a digital certificate, the server signs with a root certificate and then distributes, and certificate exchange and challenge-response authentication are supported. By adopting the method, the network security is remarkably improved, illegal access and data leakage are effectively prevented, stable operation of the key information infrastructure is ensured, the authentication reliability is enhanced, and different deployment requirements are met.

A post-quantum strong authentication scheme uses a reference PIN code stored in the memory of a personal object 1. A server generates a secret ss and a corresponding cipher ct using a key encapsulation mechanism, KEM, and a public key pk of the user, and then generates a cryptographic key ss' with a one-way function, OWF, applied to the secret. An access terminal 2 receives ss' and ct, and then obtains a PIN entered by the user, encrypts the PIN with ss′, and finally transmits the encrypted PIN cPIN and ct to the personal object 1. The personal object obtains ss through KEM decapsulation of ct and, with its private key sk, generates ss' with OWF, and uses it to decrypt cPIN. Verification thereof validates a first authentication factor. The personal object generates and then sends a confirmation Know(ss) of the secret to the server, validating a second authentication factor.

The invention discloses a data encryption method and device, a channel authentication method and device, equipment and a medium. The specific implementation scheme comprises the steps of determining to-be-transmitted data based on a client; constructing a quantum key encryption channel between the client and the server based on the quantum authentication identifier; and encrypting the to-be-transmitted data according to a quantum key encryption algorithm corresponding to the quantum key encryption channel to obtain ciphertext data. Data transmission between the client and the server is realized based on the quantum key encryption channel, end-to-end data communication is realized, the to-be-transmitted data is encrypted through the quantum key encryption algorithm corresponding to the quantum key encryption channel, the anti-interference capability of ciphertext data is improved, and the security during data transmission is ensured.

The invention relates to the technical field of data security and privacy protection of intelligent networked automobiles, in particular to an Internet of Vehicles anti-quantum authentication and differential privacy lightweight integration method and system, and the method comprises the steps: collecting original trajectory data in real time; performing anti-quantum authentication on the original trajectory data; laplace random noise is added to the original trajectory data passing the anti-quantum authentication, and vehicle data is generated; and through privacy budget, the Laplace scale is adjusted, and the amplitude of adding Laplace random noise is controlled. According to the scheme, quantum attacks can be resisted, privacy protection is carried out, and a complete closed loop from data acquisition to secure transmission is realized.

The invention provides a post-quantum authentication searchable encryption method and system with forward security, discloses effective multi-user authentication searchable encryption, and has forward security of a cloud storage system. The scheme is based on character hardness, is high in efficiency, and supports a multi-user scheme in a quantum environment. The security problems such as secret key leakage and IKGA attack are solved, and complete CI security and complete TI security are met at the same time.

A method for quantum-resistant cryptographic identity authentication is disclosed, comprising the collection of biometric data from a user and the application of a stable bit vector algorithm to generate a stable bit vector. The stable bit vector algorithm combines the user's biometric features with public parameters to deterministically compute the stable bit vector. Cryptographic information, including private, secret, and public information, are deterministically generated from the stable bit vector using a post-quantum cryptographic algorithm. The method includes deleting the biometric data after enrollment, storing public information in a privacy-centric Certificate Authority, and updating and revoking public information as needed. During authentication, a new stable bit vector is computed from newly collected biometric data, and a new set of cryptographic information is generated for identity verification against stored public information. The method provides a secure, scalable, and quantum-resistant authentication system compatible with various devices.

According to various embodiments of the present disclosure, an operation method of a first node in a communication system is provided, the method comprising the steps of: transmitting at least one synchronization signal to a second node; transmitting a control signal to the second node; transmitting, to the second node, a first quantum key packet including a first private key of the first node and a first quantum key based on a key pre-shared between the first node and the second node; receiving, from the second node, a second quantum key packet including a second private key of the second node and a second quantum key based on the pre-shared key; acquiring a first quantum master key based on a first operation and a second operation on the second quantum key, the first operation being on the basis of the first private key and the second operation being related to compensation of the pre-shared key; transmitting, to the second node, a first quantum authenticated secure message in which first message information is encoded on the basis of the first quantum master key; and receiving, from the second node, first feedback related to a first error of the first message information.